Function at 0x418a90
Capabilities:
Get geographical location

Disassembly:
push 0x220
mov eax, 0x57c4e2
call fcn.00550e3c
xor ebx, ebx
mov ecx, ebx
mov dword [ebp - 0x220], ecx
mov dword [ebp - 4], 3
mov eax, dword [0x5ff51c]
cmp eax, dword [0x5f8804]
jl 0x418add
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401d18
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x20]
call fcn.00401d18
mov byte [ebp - 4], bl
jmp 0x419413
push str._msg_:__
lea ecx, [ebp - 0x1fc]
call fcn.004014cd
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x200]
call fcn.00401515
mov byte [ebp - 4], 6
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
cmovae eax, dword [ebp + 8]
push eax
mov esi, 0x5931c4
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov eax, dword [ebp - 0x200]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___url_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
lea eax, [ebp + 0x20]
cmp dword [ebp + 0x34], 0x10
cmovae eax, dword [ebp + 0x20]
push eax
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov eax, dword [ebp - 0x200]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___WaitCreateFile_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
mov eax, dword [0x5ff538]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___MethodTrace_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
mov eax, dword [0x5ff524]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
mov byte [ebp - 4], 7
push 0x28
lea eax, [ebp - 0x3c]
push eax
push 0x1001
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push str.___Language_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00402688
mov dword [ebp - 4], 6
jmp 0x418c19
push str.___jscript_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push ebx
push str.api_JSON.parse
mov edi, 0x5ff530
mov ecx, edi
call fcn.00407234
test eax, eax
jle 0x418c49
push str.api_JSON.parse
jmp 0x418d32
push ebx
push str.Error_Script
mov ecx, edi
call fcn.00407234
test eax, eax
jle 0x418c64
push str.Error_Script
jmp 0x418d32
push ebx
push 0x5959b8
mov ecx, edi
call fcn.00407234
test eax, eax
jle 0x418c7f
push 0x5959b8
jmp 0x418d32
mov eax, dword [0x5ff530]
cmp dword [eax - 0xc], 0
jle 0x418cbf
push 0x19
lea eax, [ebp - 0x210]
push eax
mov ecx, edi
call fcn.00418821
mov byte [ebp - 4], 9
xor ecx, ecx
inc ecx
mov dword [ebp - 0x220], ecx
push str.DocumentCompleteExplorer1
push eax
call fcn.00418797
pop ecx
pop ecx
test al, al
mov byte [ebp - 0x201], 1
jne 0x418cc5
mov byte [ebp - 0x201], bl
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x220]
test al, 1
je 0x418cf5
and eax, 0xfffffffe
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x210]
lea ecx, [ecx - 0x10]
call fcn.004032e4
cmp byte [ebp - 0x201], 0
je 0x418d05
push 0x595968
jmp 0x418d32
push ebx
push str.addLog..onExit
mov ecx, edi
call fcn.00407234
lea ecx, [ebp - 0x1fc]
test eax, eax
jle 0x418d23
push str.onExit
jmp 0x418d38
push str.___jscript_:_
call fcn.00402688
push str.Not_find
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push str.___lno_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
lea eax, [ebp + 0x38]
cmp dword [ebp + 0x4c], 0x10
cmovae eax, dword [ebp + 0x38]
push eax
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov eax, dword [ebp - 0x200]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___version_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
mov eax, dword [0x5ff534]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___ieversion_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push ecx
mov ecx, esp
mov dword [ebp - 0x208], esp
push str.Version
call fcn.00401485
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.SOFTWAREMicrosoftInternet_Explorer
call fcn.00401485
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push str.HKEY_LOCAL_MACHINE
call fcn.00401485
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xc
call fcn.00429d9b
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], 6
call fcn.00428137
add esp, 0x10
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x218]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___trace_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push 0xbb8
lea eax, [ebp - 0x210]
push eax
mov ecx, edi
call fcn.00418821
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1f8], ecx
push 3
push eax
lea ecx, [ebp - 0x1f8]
call fcn.004029c2
mov byte [ebp - 4], 0x10
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x6c]
call fcn.004016bb
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 0x10
jb 0x418e8f
mov eax, dword [eax]
push eax
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6c]
call fcn.00401d18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x1f4]
cmp dword [ebp - 0x1f8], eax
je 0x418eca
push dword [ebp - 0x1f8]
call fcn.00550ad6
pop ecx
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x210]
add ecx, 0xfffffff0
call fcn.004032e4
push ecx
mov ecx, esp
mov dword [ebp - 0x208], esp
lea eax, [ebp - 0x200]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0xe
call fcn.00405f35
pop ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.004016bb
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x54]
cmp dword [ebp - 0x40], 0x10
cmovae eax, dword [ebp - 0x54]
push dword [ebp - 0x44]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00406492
add esp, 0xc
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 0x10
jb 0x418f37
mov eax, dword [eax]
push eax
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6c]
call fcn.00401d18
mov eax, dword [ebp - 0x200]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push str.___osname_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push 0x59664c
call fcn.00401485
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x208]
push eax
mov byte [ebp - 4], 0x14
call fcn.0042bebc
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
push eax
mov edi, 0x595c74
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push 0x595374
call fcn.00401485
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x21c]
push eax
mov byte [ebp - 4], 0x17
call fcn.0042bebc
pop ecx
pop ecx
mov byte [ebp - 4], 0x19
push eax
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.osname
call fcn.00401485
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x214]
push eax
mov byte [ebp - 4], 0x19
call fcn.0042bebc
pop ecx
pop ecx
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00409a62
add esp, 0xc
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.00409a0d
add esp, 0xc
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00409a62
add esp, 0xc
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.00409a0d
add esp, 0xc
mov byte [ebp - 4], 0x1f
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x210]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x22c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x21c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x208]
lea ecx, [ecx - 0x10]
call fcn.004032e4
push str.___av_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push 0x596664
call fcn.00401485
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x208]
push eax
mov byte [ebp - 4], 0x14
call fcn.0042bebc
pop ecx
pop ecx
mov byte [ebp - 4], 0x28
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x208]
lea ecx, [ecx - 0x10]
call fcn.004032e4
push str.___method_:_
lea ecx, [ebp - 0x1fc]
call fcn.00402688
lea eax, [ebp + 0x50]
cmp dword [ebp + 0x64], 0x10
cmovae eax, dword [ebp + 0x50]
push eax
push esi
lea eax, [ebp - 0x200]
push eax
call fcn.00402933
add esp, 0xc
mov eax, dword [ebp - 0x200]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.004026b1
push 0x596698
lea ecx, [ebp - 0x1fc]
call fcn.00402688
push dword [0x5ff54c]
lea ecx, [ebp - 0x1fc]
call fcn.004071d7
test eax, eax
jne 0x419221
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x54]
call fcn.00401d18
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x200]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1fc]
lea ecx, [ecx - 0x10]
call fcn.004032e4
jmp 0x418abd
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 0x5ff54c
call fcn.004070db
push 0x18
call fcn.0042cfde
pop ecx
mov dword [ebp - 0x20c], eax
mov byte [ebp - 4], 0x2d
test eax, eax
je 0x419253
mov ecx, eax
call fcn.00423ddc
mov esi, eax
jmp 0x419255
mov esi, ebx
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xec]
mov dword [ebp - 0xf0], eax
push 3
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xf0]
call fcn.004029c2
mov byte [ebp - 4], 0x2e
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x2c]
call fcn.004016bb
mov byte [ebp - 4], 0x2f
cmp dword [eax + 0x14], 0x10
jb 0x419296
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x20c], esp
push eax
call fcn.004016bb
mov byte [ebp - 4], 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x208], esp
push str.data
call fcn.004016bb
mov byte [ebp - 4], 0x31
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.___dmp___
call fcn.004016bb
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x170]
mov dword [ebp - 0x174], eax
push 3
push dword [0x5ff528]
lea ecx, [ebp - 0x174]
call fcn.004029c2
mov byte [ebp - 4], 0x33
push dword [ebp - 0x174]
lea ecx, [ebp - 0x6c]
call fcn.004016bb
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x14], 0x10
jb 0x41931a
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.004016bb
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x37
mov ecx, esi
call fcn.0042679c
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x6c]
call fcn.00401d18
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x170]
cmp dword [ebp - 0x174], eax
je 0x419364
push dword [ebp - 0x174]
call fcn.00550ad6
pop ecx
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2c]
call fcn.00401d18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xec]
cmp dword [ebp - 0xf0], eax
je 0x41938e
push dword [ebp - 0xf0]
call fcn.00550ad6
pop ecx
test esi, esi
je 0x41939b
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x54]
call fcn.00401d18
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x200]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x3a
jmp 0x41920a
lea ecx, [ebp + 0x38]
call fcn.00401d18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x50]
call fcn.00401d18
call fcn.00550d8e
ret