Function at 0x4e31ba
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push ecx
push 2
lea eax, [ebp - 4]
push eax
push 0x20000001
push str._x_sys_default_locale
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
xor ecx, ecx
test eax, eax
jne 0x4e31e1
mov eax, ecx
mov dword [ebp - 4], eax
jmp 0x4e31e4
mov eax, dword [ebp - 4]
push esi
mov esi, dword [ebp + 0xc]
push ecx
push ecx
push esi
push eax
push dword [ebp + 8]
push ecx
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push eax
push dword [esi]
call fcn.004e3196
pop esi
leave
ret 8

Function at 0x4e3f4e
Capabilities:
Parse pe header

Disassembly:
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x4e3f8d
mov ecx, 0x5a4d
cmp word [eax], cx
jne 0x4e3f8d
mov ecx, dword [eax + 0x3c]
add ecx, eax
cmp dword [ecx], 0x4550
jne 0x4e3f8d
mov eax, 0x10b
cmp word [ecx + 0x18], ax
jne 0x4e3f8d
cmp dword [ecx + 0x74], 0xe
jbe 0x4e3f8d
cmp dword [ecx + 0xe8], 0
setne al
ret
xor al, al
ret

Function at 0x1074d058
Capabilities:
Decompress data using aplib

Disassembly:
call fcn.1074d1a8
push ebx
mov ebx, esp
push ebx
mov esi, dword [ebx + 8]
mov edi, dword [ebx + 0x10]
cld
mov dl, 0x80
mov al, byte [esi]
inc esi
mov byte [edi], al
inc edi
mov ebx, 2
add dl, dl
jne 0x1074d07e
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x1074d06a
add dl, dl
jne 0x1074d089
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x1074d0dc
xor eax, eax
add dl, dl
jne 0x1074d096
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x1074d17d
add dl, dl
jne 0x1074d0a5
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1074d0b0
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1074d0bb
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1074d0c6
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
je 0x1074d0d2
push edi
mov eax, eax
sub edi, eax
mov al, byte [edi]
pop edi
mov byte [edi], al
inc edi
mov ebx, 2
jmp 0x1074d075
mov eax, 1
add dl, dl
jne 0x1074d0ea
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1074d0f5
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x1074d0e1
sub eax, ebx
mov ebx, 1
jne 0x1074d128
mov ecx, 1
add dl, dl
jne 0x1074d10e
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x1074d119
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x1074d105
push esi
mov esi, edi
sub esi, ebp
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x1074d075
dec eax
shl eax, 8
mov al, byte [esi]
inc esi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x1074d13f
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x1074d14a
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x1074d136
cmp eax, 0x7d00
jae 0x1074d16d
cmp eax, 0x500
jb 0x1074d168
inc ecx
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x1074d075
cmp eax, 0x7f
ja 0x1074d170
add ecx, 2
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x1074d075
mov al, byte [esi]
inc esi
xor ecx, ecx
shr al, 1
je 0x1074d19e
adc ecx, 2
mov ebp, eax
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
mov ebx, 1
jmp 0x1074d075
pop ebx
sub edi, dword [ebx + 0x10]
mov eax, edi
pop ebx
ret 0x10