Function at 0x4121f0
Capabilities:
Get disk information
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov dword [ebp - 4], 0xae34
mov dword [ebp - 0x20], 0x154e0
mov dword [ebp - 0x34], 0xf457
mov dword [ebp - 0x1c], 0x9cb6
mov dword [ebp - 0x14], 0x11a94
mov dword [ebp - 0x18], 0x45af
mov dword [ebp - 0x50], 0x5f66
mov dword [ebp - 0x30], 0xfa50
mov dword [ebp - 0x28], 0x9482
mov dword [ebp - 8], 0x2850
mov dword [ebp - 0x24], 0x28cb
mov dword [ebp - 0x78], 0x126b2
mov dword [ebp - 0x40], 0x4513
mov dword [ebp - 0x4c], 0x5d3b
mov dword [ebp - 0xb8], 0xe7f0
mov dword [ebp - 0x2c], 0x3dbf
mov dword [ebp - 0x48], 0x1293e
mov dword [ebp - 0x3c], 0x7119
mov dword [ebp - 0x88], 0x71c8
mov dword [ebp - 0xc], 0x15a63
mov dword [ebp - 0x10], 0xa4a0
mov dword [ebp - 0x84], 0x10fef
mov dword [ebp - 0x38], 0
jmp 0x4122ae
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0xf456
cmp dword [ebp - 0x38], ecx
jge 0x4125e5
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0xa4]
jge 0x4122f2
mov dword [ebp - 0x5c], 1
jmp 0x4122f9
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x78]
cmp ecx, dword [ebp - 0x1c]
jge 0x412316
mov dword [ebp - 0x54], 1
jmp 0x41231d
mov dword [ebp - 0x54], 0
mov edx, dword [ebp + 8]
cmp edx, dword [ebp + 0xc]
jge 0x41232e
mov dword [ebp - 0x58], 1
jmp 0x412335
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x54]
and eax, dword [ebp - 0x58]
or eax, dword [ebp - 0x5c]
je 0x4125e0
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x50]
jne 0x4125e0
mov edx, dword [ebp + 0x18]
cmp edx, dword [ebp - 0x84]
jne 0x4125e0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x18]
jne 0x4125e0
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp + 0x1c]
jne 0x4125e0
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp + 0x10]
jne 0x4125e0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jge 0x412394
mov dword [ebp - 0x60], 1
jmp 0x41239b
mov dword [ebp - 0x60], 0
mov ecx, dword [ebp + 0x1c]
cmp ecx, dword [ebp + 0x20]
jge 0x4123ac
mov dword [ebp - 0x64], 1
jmp 0x4123b3
mov dword [ebp - 0x64], 0
mov edx, dword [ebp - 0x60]
or edx, dword [ebp - 0x64]
je 0x4125e0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x4c]
jne 0x4125e0
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x40]
jne 0x4125e0
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x30]
jne 0x4125e0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 4]
jne 0x4125e0
push 0x6f99
push 0x4f6e
push 0x12f30
push 0xfcd9
push 0x112e8
push 0x14af0
push 0x4830
push 0x15fbf
call dword [sym.imp.KERNEL32.dll_GetProfileSectionA]
add esp, 0x20
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x24]
jge 0x412431
mov dword [ebp - 0x68], 1
jmp 0x412438
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xa8], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xa8]
cmp edx, dword [ebp - 0xac]
jge 0x41246a
mov dword [ebp - 0x6c], 1
jmp 0x412471
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 4]
sub eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x68]
or ecx, dword [ebp - 0x6c]
je 0x4125da
mov edx, dword [ebp + 0x14]
xor edx, dword [ebp - 0xc]
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp + 0x14]
add ecx, 1
mov dword [ebp + 0x14], ecx
mov edx, dword [ebp - 0xb0]
cmp edx, dword [ebp - 0xb4]
jge 0x4124c1
mov dword [ebp - 0x70], 1
jmp 0x4124c8
mov dword [ebp - 0x70], 0
mov eax, dword [ebp + 0x1c]
cmp eax, dword [ebp + 0x18]
jge 0x4124d9
mov dword [ebp - 0x74], 1
jmp 0x4124e0
mov dword [ebp - 0x74], 0
mov ecx, dword [ebp + 0x10]
and ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x70]
and edx, dword [ebp - 0x74]
or ecx, edx
je 0x4125da
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 4]
jne 0x4125da
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp - 0x10]
jne 0x4125da
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 4]
jne 0x4125da
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x78]
jne 0x4125da
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp - 0x10]
jne 0x4125da
push 0x2087
push 0x12d1a
push 0x31c7
push 0x129e6
push 0x143c3
push 0x1829b
push 0x175b6
push 0x4945
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
add esp, 0x20
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x28]
jge 0x412572
mov dword [ebp - 0x7c], 1
jmp 0x412579
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp + 0x18]
jge 0x41258a
mov dword [ebp - 0x80], 1
jmp 0x412591
mov dword [ebp - 0x80], 0
mov ecx, dword [ebp - 0x7c]
or ecx, dword [ebp - 0x80]
je 0x4125da
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x48]
jne 0x4125da
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0x20]
jne 0x4125da
mov ecx, dword [ebp + 0x20]
cmp ecx, dword [ebp - 0x88]
jne 0x4125da
mov edx, dword [ebp + 0x10]
add edx, 1
mov dword [ebp + 0x10], edx
push 0x178cf
push 0x1128b
push 0x326d
push 0xc8e5
call dword [sym.imp.KERNEL32.dll_Thread32Next]
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
jmp 0x4122a5
mov dword [ebp - 0x44], 0
jmp 0x4125f7
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x84]
sub ecx, 0x10fee
cmp dword [ebp - 0x44], ecx
jge 0x41279c
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp + 0x10]
jge 0x412797
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x14]
jne 0x412797
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x34]
jne 0x412797
push 0xc3a
push 0x1309b
push 0x125ad
push 0x13c5
push 0x779
push 0x923d
push 0xa5c2
push 0x11af2
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
add esp, 0x20
mov edx, dword [ebp + 0x10]
cmp edx, dword [ebp - 0x48]
jge 0x412675
mov dword [ebp - 0x8c], 1
jmp 0x41267f
mov dword [ebp - 0x8c], 0
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0x88]
jge 0x412696
mov dword [ebp - 0x90], 1
jmp 0x4126a0
mov dword [ebp - 0x90], 0
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x8c]
or ecx, dword [ebp - 0x90]
je 0x41277a
mov edx, dword [ebp - 0x14]
and edx, dword [ebp + 8]
je 0x41277a
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x50]
jge 0x41277a
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp - 0x4c]
jne 0x41277a
mov edx, dword [ebp - 8]
cmp edx, dword [ebp + 8]
jne 0x41277a
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jne 0x41277a
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 8]
jge 0x412711
mov dword [ebp - 0x94], 1
jmp 0x41271b
mov dword [ebp - 0x94], 0
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jge 0x412732
mov dword [ebp - 0x98], 1
jmp 0x41273c
mov dword [ebp - 0x98], 0
mov ecx, dword [ebp - 0x50]
and ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0xc]
jge 0x412753
mov dword [ebp - 0x9c], 1
jmp 0x41275d
mov dword [ebp - 0x9c], 0
mov edx, dword [ebp - 0x94]
and edx, dword [ebp - 0x98]
or edx, dword [ebp - 0x9c]
je 0x41277a
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push 0x1405d
push 0x16bdb
push 0x4d73
push 0x18fa
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
add esp, 0x10
jmp 0x4125ee
mov esp, ebp
pop ebp
ret