Function at 0x492970
Capabilities:
Get geographical location

Disassembly:
push 0xffffffffffffffff
push 0x615ca8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
mov eax, dword [esp + 0x7c]
lea edx, [esp + 0x2c]
push esi
mov dword [esp + 0x34], eax
mov eax, dword [ecx + 0x210]
push edx
push 0xffffffffffffffff
push 0x100d
push eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x40], 2
call dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
mov dword [esp + 0x10], eax
cmp eax, esi
jl 0x492c44
push ebx
push ebp
push edi
mov word [esp + 0x28], si
mov dword [esp + 0x24], 0x633bf0
mov edi, dword [esp + 0x90]
mov dword [esp + 0x84], esi
cmp edi, esi
je 0x492bdb
push esi
push 0x400
push esi
push edi
call fcn.005e0090
mov dword [esp + 0x10], eax
mov ecx, edi
cdq
mov ebp, eax
mov eax, esi
sub ecx, ebp
push esi
sbb eax, edx
push 0x400
push eax
push ecx
mov dword [esp + 0x28], edx
call fcn.005dffe0
mov ebx, eax
and ebx, 0x800003ff
jns 0x492a29
dec ebx
or ebx, 0xfffffc00
inc ebx
mov eax, ebx
mov ecx, edi
shl eax, 0xa
cdq
sub ecx, eax
mov eax, esi
sbb eax, edx
sub ecx, ebp
mov ebp, dword [esp + 0x18]
push 0
sbb eax, ebp
push 0x100000
push eax
push ecx
call fcn.005dffe0
mov ebp, eax
and ebp, 0x800003ff
jns 0x492a5f
dec ebp
or ebp, 0xfffffc00
inc ebp
push 0
push 0x40000000
push esi
push edi
call fcn.005dffe0
lea ecx, [esp + 0x8c]
push 3
push ecx
mov esi, eax
push 0xe
push 0x400
mov dword [esp + 0x24], esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x492ab9
mov edi, 0x6bfed4
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x8c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x14]
test esi, esi
jne 0x492b8b
cmp ebp, 0x3e7
jg 0x492b8b
test ebp, ebp
jne 0x492b44
cmp ebx, 0x3e7
jg 0x492b44
test ebx, ebx
je 0x492b22
mov eax, dword [esp + 0x10]
mov ecx, dword [0x6ed364]
push ecx
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
cdq
and edx, 0x3ff
add eax, edx
mov ecx, eax
mov eax, 0x66666667
sar ecx, 0xa
imul ecx
sar edx, 2
mov eax, edx
lea ecx, [esp + 0x90]
shr eax, 0x1f
add edx, eax
push edx
push ecx
push ebx
jmp 0x492bc9
mov eax, dword [0x6ed360]
mov ecx, dword [esp + 0x10]
push eax
push ecx
lea edx, [esp + 0x30]
push 0x6bfecc
push edx
call fcn.005deb38
add esp, 0x10
jmp 0x492bdb
mov eax, dword [0x6ed368]
push eax
lea eax, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
cdq
and edx, 0x3ff
add eax, edx
mov ecx, eax
mov eax, 0x66666667
sar ecx, 0xa
imul ecx
sar edx, 2
mov ecx, edx
lea eax, [esp + 0x2c]
shr ecx, 0x1f
add edx, ecx
push edx
lea edx, [esp + 0x94]
push edx
push ebp
push 0x6bfebc
push eax
jmp 0x492bd3
lea ebp, [ebp + ebp*4]
mov ecx, dword [0x6ed36c]
push ecx
lea eax, [ebp + ebp*4]
lea eax, [eax + eax*4]
shl eax, 3
cdq
and edx, 0x3ff
add eax, edx
mov ecx, eax
mov eax, 0x66666667
sar ecx, 0xa
imul ecx
sar edx, 2
mov eax, edx
lea ecx, [esp + 0x90]
shr eax, 0x1f
add edx, eax
push edx
push ecx
push esi
lea edx, [esp + 0x38]
push 0x6bfebc
push edx
call fcn.005deb38
add esp, 0x18
mov esi, dword [esp + 0x1c]
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x58]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x20]
mov eax, 1
lea edx, [esp + 0x54]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x54], eax
mov eax, dword [edi + 0x210]
push edx
push esi
lea ecx, [esp + 0x30]
push 0x102e
push eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x78], ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x90]
push ecx
push 0
push 0
push 0
push 0
push 4
push 0
push esi
lea ecx, [edi + 0x1f4]
call fcn.005f4a79
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
pop esi
mov dword fs:[0], ecx
add esp, 0x78
ret 8