Function at 0x4b3860
Capabilities:
Get file size
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5332e9
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x575494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
mov ebx, ecx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov ecx, 1
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], edi
cmp eax, edi
je 0x4b3a6a
push edi
push 0x80
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4b3a6a
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2c]
xor edx, edx
xor ecx, ecx
add ecx, edi
adc eax, edx
mov esi, ecx
add esi, 0xffffffff
mov edx, eax
adc edx, 0xffffffff
test edx, edx
ja 0x4b392a
jb 0x4b3918
cmp esi, 0x3fe
ja 0x4b392a
push 0x550adc
lea eax, [ebp - 0x28]
call fcn.005080c0
jmp 0x4b3a68
mov esi, ecx
shrd ecx, eax, 0xa
shr eax, 0xa
mov ebx, eax
and esi, 0x3ff
mov edi, ecx
test ebx, ebx
ja 0x4b3952
jb 0x4b394b
cmp edi, 0x400
jae 0x4b3952
push 0x559820
jmp 0x4b398a
mov esi, edi
shrd edi, ebx, 0xa
shr ebx, 0xa
and esi, 0x3ff
test ebx, ebx
ja 0x4b3976
jb 0x4b396f
cmp edi, 0x400
jae 0x4b3976
push 0x559828
jmp 0x4b398a
mov esi, edi
shrd edi, ebx, 0xa
and esi, 0x3ff
shr ebx, 0xa
push 0x559830
lea eax, [ebp - 0x28]
call fcn.005080c0
imul esi, esi, 0x3e8
shr esi, 0xa
mov eax, 0x51eb851f
mul esi
shr edx, 5
imul edx, edx, 0x64
mov eax, esi
sub eax, edx
cmp eax, 0x32
jbe 0x4b39c6
cmp esi, 0x3b6
jae 0x4b39be
add esi, 0x32
jmp 0x4b39c6
add edi, 1
adc ebx, 0
xor esi, esi
mov eax, 0x51eb851f
mul esi
xor eax, eax
mov esi, edx
shr esi, 5
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
push edi
lea ecx, [ebp - 0x3c]
push 0x550a60
push ecx
mov byte [ebp - 4], 2
call fcn.005074a0
add esp, 0xc
cmp dword [ebp - 0x38], 1
jne 0x4b3a32
push 3
lea edx, [ebp - 0x18]
push edx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4b3a18
mov eax, 0x54ee24
mov ecx, dword [ebp - 0x1c]
push eax
push esi
lea eax, [ebp - 0x18]
push eax
push edi
push str._d_s_d_s
push ecx
call fcn.005074a0
add esp, 0x18
jmp 0x4b3a51
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4b3a3e
mov eax, 0x54ee24
mov edx, dword [ebp - 0x1c]
push eax
push edi
push str._d_s
push edx
call fcn.005074a0
add esp, 0x10
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4b3a65
push eax
call fcn.0051ebab
add esp, 4
mov ebx, dword [ebp - 0x1c]
xor edi, edi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x4b3a7e
push eax
call fcn.0051ebab
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051eb9c
mov esp, ebp
pop ebp
ret 4