Function at 0x411ef5
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x4797bd
call fcn.00457fe8
sub esp, 0x1a4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor edi, edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 4], 3
mov eax, dword [0x4a8dac]
cmp eax, dword [0x4a573c]
jl 0x411f5c
mov byte [ebp - 4], 2
xor esi, esi
inc esi
push edi
push esi
lea ecx, [ebp + 8]
call fcn.004014ab
mov byte [ebp - 4], 1
push edi
push esi
lea ecx, [ebp + 0x24]
call fcn.004014ab
mov byte [ebp - 4], 0
push edi
push esi
lea ecx, [ebp + 0x40]
call fcn.004014ab
or dword [ebp - 4], 0xffffffff
push edi
push esi
jmp 0x41275a
push str._msg_:__
lea ecx, [ebp - 0x14]
call fcn.0040e1f5
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00401407
mov byte [ebp - 4], 6
cmp dword [ebp + 0x20], 0x10
mov eax, dword [ebp + 0xc]
jae 0x411f89
lea eax, [ebp + 0xc]
push eax
mov ebx, 0x48231c
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___url_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
cmp dword [ebp + 0x3c], 0x10
mov eax, dword [ebp + 0x28]
jae 0x411fc4
lea eax, [ebp + 0x28]
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___WaitCreateFile_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov eax, dword [0x4a8f58]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___MethodTrace_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov eax, dword [0x4a8db0]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
mov byte [ebp - 4], 7
push 0x28
lea eax, [ebp - 0xa8]
push eax
push 0x1001
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push str.___Language_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov dword [ebp - 4], 6
jmp 0x412073
push str.___jscript_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push edi
mov esi, str.api_JSON.parse
push esi
mov edi, 0x4a8db4
mov ecx, edi
call fcn.0040b7cc
test eax, eax
jle 0x41209d
push esi
jmp 0x412150
push 0
mov esi, str.Error_Script
push esi
mov ecx, edi
call fcn.0040b7cc
test eax, eax
jg 0x412097
push 0
mov esi, 0x483d08
push esi
mov ecx, edi
call fcn.0040b7cc
test eax, eax
jg 0x412097
mov eax, dword [0x4a8db4]
cmp dword [eax - 0xc], 0
jle 0x4120fa
push 0x19
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.00412dfc
mov byte [ebp - 4], 9
xor esi, esi
inc esi
mov dword [ebp - 0x2c], esi
push 0x482f34
push eax
call fcn.0040bcb2
pop ecx
pop ecx
test al, al
je 0x4120fa
mov eax, esi
jmp 0x4120fc
xor eax, eax
mov byte [ebp - 0x1d], al
mov dword [ebp - 4], 6
test byte [ebp - 0x2c], 1
je 0x412118
and dword [ebp - 0x2c], 0xfffffffe
lea ecx, [ebp - 0x1c]
call fcn.00401436
cmp byte [ebp - 0x1d], 0
je 0x412125
push str.DocumentCompleteExplorer1
jmp 0x412150
push 0
push str.addLog..onExit
mov ecx, edi
call fcn.0040b7cc
lea ecx, [ebp - 0x14]
test eax, eax
jle 0x412141
push str.onExit
jmp 0x412153
push str.___jscript_:_
call fcn.0040dbff
push str.Not_find
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.___lno_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
cmp dword [ebp + 0x58], 0x10
mov eax, dword [ebp + 0x44]
jae 0x412171
lea eax, [ebp + 0x44]
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___version_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov eax, dword [0x4a8f54]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___ieversion_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x483b08
call fcn.0040bc4e
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x483ae0
call fcn.0040bc4e
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.HKEY_LOCAL_MACHINE
call fcn.0040bc4e
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xb
mov esi, 0x4a8dc4
mov ecx, esi
call fcn.0042fecb
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.0043082d
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x38]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.___trace_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push 0xbb8
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.00412dfc
mov byte [ebp - 4], 0xe
push dword [eax]
lea ecx, [ebp - 0x12c]
call fcn.0040ba08
mov byte [ebp - 4], 0xf
push dword [eax]
lea ecx, [ebp - 0x80]
call fcn.00401a69
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 0x10
jb 0x412273
mov eax, dword [eax + 4]
jmp 0x412276
add eax, 4
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov byte [ebp - 4], 0xf
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x80]
call fcn.004014ab
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x128]
cmp dword [ebp - 0x12c], eax
je 0x4122b3
push dword [ebp - 0x12c]
call fcn.00459a97
pop ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1c]
call fcn.00401436
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
lea eax, [ebp - 0x18]
push eax
call fcn.004017f7
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0xd
call fcn.00407e3f
pop ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00401a69
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x4c], 0x10
mov eax, dword [ebp - 0x60]
jae 0x4122f5
lea eax, [ebp - 0x60]
push dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00407eb8
add esp, 0xc
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x18], 0x10
jb 0x412314
mov eax, dword [eax + 4]
jmp 0x412317
add eax, 4
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov byte [ebp - 4], 0x12
push edi
push 1
lea ecx, [ebp - 0x80]
call fcn.004014ab
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
call fcn.00432e2f
mov byte [ebp - 4], 0x15
push str.___osname_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x483a48
call fcn.0040bc4e
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c]
call fcn.00432e7d
mov byte [ebp - 4], 0x17
push eax
mov esi, 0x482ca4
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x483a84
call fcn.0040bc4e
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
call fcn.00432e7d
mov byte [ebp - 4], 0x19
push eax
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.osname
call fcn.0040bc4e
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1c]
call fcn.00432e7d
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00412ebd
add esp, 0xc
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00412e5f
add esp, 0xc
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00412ebd
add esp, 0xc
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00412e5f
add esp, 0xc
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x14]
call fcn.00409279
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x40]
call fcn.00401436
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x48]
call fcn.00401436
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x44]
call fcn.00401436
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x3c]
call fcn.00401436
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x34]
call fcn.00401436
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x30]
call fcn.00401436
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x24]
call fcn.00401436
push str.___av_:_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x483a30
call fcn.0040bc4e
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c]
call fcn.00432e7d
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x14]
call fcn.00409279
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x24]
call fcn.00401436
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
call fcn.00432e38
mov dword [ebp - 4], 0x12
jmp 0x4124f5
cmp dword [ebp + 0x74], 0x10
mov eax, dword [ebp + 0x60]
jae 0x412501
lea eax, [ebp + 0x60]
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.004091a7
add esp, 0xc
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], edi
jge 0x412521
push 0x80070057
call fcn.00401000
movzx eax, word [eax]
lea ecx, [ebp - 0x14]
cmp ax, 0x7b
jne 0x412534
push str.___method_:_
jmp 0x412539
push 0x483c60
call fcn.0040dbff
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push 0x4839f8
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push dword [0x4a8dd0]
lea ecx, [ebp - 0x14]
call fcn.0040b657
test eax, eax
jne 0x4125aa
mov byte [ebp - 4], 0xd
xor esi, esi
inc esi
push edi
push esi
lea ecx, [ebp - 0x64]
call fcn.004014ab
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x38]
call fcn.00401436
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00401436
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00401436
mov byte [ebp - 4], 2
jmp 0x411f2b
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4a8dd0
call fcn.0040bbb4
push 0x18
call fcn.00434379
pop ecx
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x23
cmp eax, edi
je 0x4125d6
mov ecx, eax
call fcn.00427eea
mov ebx, eax
jmp 0x4125d8
xor ebx, ebx
mov byte [ebp - 4], 0x12
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1b0]
call fcn.0040ba08
mov byte [ebp - 4], 0x24
push dword [eax]
lea ecx, [ebp - 0x9c]
call fcn.00401a69
mov byte [ebp - 4], 0x25
cmp dword [eax + 0x18], 0x10
jb 0x41260a
mov eax, dword [eax + 4]
jmp 0x41260d
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00401a69
mov byte [ebp - 4], 0x26
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.data
call fcn.00401a69
mov byte [ebp - 4], 0x27
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.___dmp___
call fcn.00401a69
mov byte [ebp - 4], 0x28
push dword [0x4a8f48]
lea ecx, [ebp - 0x12c]
call fcn.0040ba08
mov byte [ebp - 4], 0x29
push dword [eax]
lea ecx, [ebp - 0x80]
call fcn.00401a69
mov byte [ebp - 4], 0x2a
cmp dword [eax + 0x18], 0x10
jb 0x412679
mov eax, dword [eax + 4]
jmp 0x41267c
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00401a69
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2d
mov ecx, ebx
call fcn.004281a6
mov byte [ebp - 4], 0x2c
push edi
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x80]
call fcn.004014ab
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x128]
cmp dword [ebp - 0x12c], eax
je 0x4126c8
push dword [ebp - 0x12c]
call fcn.00459a97
pop ecx
mov byte [ebp - 4], 0x24
push edi
push esi
lea ecx, [ebp - 0x9c]
call fcn.004014ab
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x1ac]
cmp dword [ebp - 0x1b0], eax
je 0x4126f7
push dword [ebp - 0x1b0]
call fcn.00459a97
pop ecx
cmp ebx, edi
je 0x412703
mov eax, dword [ebx]
push esi
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0xd
jmp 0x412573
lea ecx, [ebp + 0x5c]
call fcn.004014ab
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret