Function at 0x423183
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
push 0x18
mov eax, 0x5c58b6
call fcn.00595e20
push str.USER
lea ecx, [ebp - 0x10]
call fcn.004015a6
xor ebx, ebx
mov dword [ebp - 4], ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004049a2
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.UserID
call fcn.004015a6
mov byte [ebp - 4], 2
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 4
push eax
mov ecx, esi
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 4]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.FirstName
call fcn.004015a6
mov byte [ebp - 4], 6
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 7
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 8
push eax
lea ecx, [esi + 4]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 8]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.LastName
call fcn.004015a6
mov byte [ebp - 4], 0xa
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0xc
push eax
lea ecx, [esi + 8]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x10]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Email
call fcn.004015a6
mov byte [ebp - 4], 0xe
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x10
push eax
lea ecx, [esi + 0x10]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x14]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.ZipCode
call fcn.004015a6
mov byte [ebp - 4], 0x12
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x14
push eax
lea ecx, [esi + 0x14]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x18]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.State
call fcn.004015a6
mov byte [ebp - 4], 0x16
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x18
push eax
lea ecx, [esi + 0x18]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x61f2f8
call fcn.004015a6
mov byte [ebp - 4], 0x1a
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [esi + 0x1c]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Country
call fcn.004015a6
mov byte [ebp - 4], 0x1e
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x20
push eax
lea ecx, [esi + 0x20]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
lea eax, [esi + 0x24]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x21
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.CountryA2
call fcn.004015a6
mov byte [ebp - 4], 0x22
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x24
push eax
lea ecx, [esi + 0x24]
call fcn.004048fa
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.00401752
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x61b5f4
call fcn.004015a6
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Gender
call fcn.004015a6
mov byte [ebp - 4], 0x26
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x14]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.0046f643
mov byte [ebp - 4], 0x28
push 0x61ca7c
lea ecx, [ebp - 0x14]
call fcn.004047b4
test eax, eax
jne 0x42355a
mov dword [esi + 0xc], 1
jmp 0x423573
push 0x620f04
lea ecx, [ebp - 0x14]
call fcn.004047b4
neg eax
sbb eax, eax
and eax, 0xfffffffe
inc eax
inc eax
mov dword [esi + 0xc], eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00401752
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00401752
xor eax, eax
inc eax
call fcn.00595ef8
ret