Function at 0x69461c
Capabilities:
Get geographical location

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x21c
mov edi, dword [esp + 0x234]
test edi, edi
je 0x69463d
mov dword [esp], edi
call fcn.0068de88
mov esi, eax
jmp 0x69463f
xor esi, esi
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_EnterCriticalSection
sub esp, 4
mov eax, dword [0x6d4204]
test eax, eax
je 0x694661
xor ebx, ebx
cmp eax, 0x6d41d8
jne 0x694694
xor ebx, ebx
cmp eax, 0x6d41d8
sete byte [esp + 0x18]
mov dword [esp + 4], 0x2c
mov dword [esp], 1
call fcn.0068d850
mov dword [0x6d4204], eax
test eax, eax
je 0x694743
mov cl, byte [esp + 0x18]
mov bl, cl
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x6946af
mov dword [esp], ecx
call fcn.0068d87c
mov eax, dword [0x6d4204]
mov dword [eax + 0x24], 0
movzx ebp, word [esp + 0x230]
test esi, esi
je 0x6946e3
cmp byte [esi], 0
je 0x6946f2
mov dword [esp], edi
mov dword [esp + 4], str.en_US
call fcn.0068e044
test eax, eax
je 0x69475f
mov dword [esi], 0x554e45
jmp 0x694842
test ebx, ebx
je 0x694782
mov ecx, eax
jmp 0x694a12
call sub.KERNEL32.DLL_GetUserDefaultLCID
mov edi, eax
lea ebp, [esp + 0x11c]
mov dword [esp + 8], ebp
mov dword [esp], edi
mov dword [esp + 0xc], 7
mov dword [esp + 4], 0xb
call sub.KERNEL32.DLL_GetLocaleInfoA
sub esp, 0x10
mov dword [esp], ebp
movzx ebp, word [esp + 0x230]
call fcn.00697dbc
mov ecx, dword [0x6d4204]
mov dword [ecx], eax
mov dword [ecx + 8], 0
jmp 0x694a35
mov dword [esp], 0xe
call sub.KERNEL32.DLL_SetLastError
sub esp, 4
mov dword [esp], esi
call fcn.0068d87c
jmp 0x694b3e
mov dword [esp], edi
mov dword [esp + 4], str.en_GB
call fcn.0068e044
test eax, eax
je 0x69480c
mov dword [esi], 0x474e45
jmp 0x694842
movsx ebx, bp
test bl, 4
jne 0x6947a3
test bl, 0x10
jne 0x6947b4
test bl, 0x20
jne 0x6947c9
test bl, 1
jne 0x6947de
test bl, 2
jne 0x6947f7
jmp 0x694a92
mov edx, str.LC_MONETARY
mov ecx, eax
call fcn.0069503c
test bl, 0x10
je 0x69478f
mov ecx, dword [0x6d4204]
mov edx, str.LC_NUMERIC
call fcn.0069503c
test bl, 0x20
je 0x694794
mov ecx, dword [0x6d4204]
mov edx, str.LC_TIME
call fcn.0069503c
test bl, 1
je 0x694799
mov ecx, dword [0x6d4204]
mov edx, str.LC_COLLATE
call fcn.0069503c
test bl, 2
je 0x694a92
mov ecx, dword [0x6d4204]
mov edx, str.LC_CTYPE
call fcn.0069503c
jmp 0x694a92
mov dword [esp], edi
mov dword [esp + 4], str.fr_FR
call fcn.0068e044
test eax, eax
je 0x694828
mov dword [esi], 0x415246
jmp 0x694842
mov dword [esp], edi
mov dword [esp + 4], str.de_DE
call fcn.0068e044
test eax, eax
je 0x694865
mov dword [esi], 0x554544
mov dword [esp], edi
mov dword [esp + 4], 0x2e
call fcn.0068e4a8
test eax, eax
je 0x694865
lea ecx, [esi + 3]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0068e548
mov dword [esp], edi
mov dword [esp + 4], 0x6d3fb3
call fcn.0068e4f8
test eax, eax
je 0x694a0c
cmp byte [esi], 0x4c
jne 0x6949e6
cmp byte [esi + 1], 0x43
jne 0x6949e6
cmp byte [esi + 2], 0x5f
jne 0x6949e6
mov dword [esp], esi
call fcn.0068d87c
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_LeaveCriticalSection
sub esp, 4
mov eax, dword [0x6d4204]
mov dword [esp + 0x18], eax
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_EnterCriticalSection
sub esp, 4
lea esi, [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0
call fcn.0068e42f
xor eax, eax
xor ebx, ebx
jmp 0x69493c
mov dword [esp], esi
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0
call fcn.0068e42f
xor eax, eax
inc edi
jmp 0x69493c
mov dword [esp + 4], esi
lea eax, [esp + 0x11c]
mov dword [esp], eax
call fcn.0068e548
jmp 0x6948fc
movzx ecx, byte [edi]
cmp cl, 0xa
je 0x69491c
cmp cl, 0x3d
je 0x69495c
test cl, cl
je 0x694bc2
mov byte [esp + eax + 0x1c], cl
inc eax
inc edi
jmp 0x69493c
mov dword [esp], esi
mov dword [esp + 4], str.LC_CTYPE
call fcn.0068e4f8
mov ecx, ebx
or ebx, 2
test eax, eax
cmovne bx, cx
mov dword [esp], esi
mov dword [esp + 4], str.LC_TIME
call fcn.0068e4f8
mov ebp, ebx
or ebp, 0x20
test eax, eax
cmovne bp, bx
mov dword [esp], esi
mov dword [esp + 4], str.LC_NUMERIC
call fcn.0068e4f8
mov ebx, ebp
or ebx, 0x10
test eax, eax
cmovne bx, bp
mov dword [esp], esi
mov dword [esp + 4], str.LC_MONETARY
call fcn.0068e4f8
mov ebp, ebx
or ebp, 4
test eax, eax
cmovne bp, bx
mov dword [esp], esi
mov dword [esp + 4], str.LC_COLLATE
call fcn.0068e4f8
xor ebx, ebx
test eax, eax
sete bl
or ebx, ebp
jmp 0x6948fc
mov ecx, dword [0x6d4204]
mov dword [ecx + 8], 0
mov edx, esi
call fcn.006951dc
mov edi, eax
test edi, edi
je 0x694b5d
mov ecx, dword [0x6d4204]
jmp 0x694a35
mov ecx, dword [0x6d4204]
call fcn.00694c6c
mov eax, dword [0x6d4204]
mov dword [esp], eax
call fcn.0068d87c
mov dword [0x6d4204], 0x6d41d8
xor edi, edi
mov ecx, 0x6d41d8
mov dword [ecx + 4], edi
mov dword [esp], esi
call fcn.0068d87c
mov eax, dword [0x6d4204]
mov eax, dword [eax + 4]
mov dword [esp], eax
mov dword [esp + 4], 1
call sub.KERNEL32.DLL_IsValidLocale
sub esp, 8
test eax, eax
mov eax, dword [0x6d4204]
jne 0x694a6e
cmp dword [eax + 8], 0
je 0x694b00
mov eax, dword [eax + 4]
mov dword [esp], eax
call sub.KERNEL32.DLL_SetThreadLocale
sub esp, 4
mov ecx, dword [0x6d4204]
cmp dword [ecx + 8], 0
je 0x694ab4
mov dword [0x6d3f64], 1
call fcn.00696dd0
mov eax, dword [0x6d4204]
mov esi, dword [eax + 0x24]
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_LeaveCriticalSection
sub esp, 4
jmp 0x694b50
call fcn.00694c6c
mov ecx, dword [0x6d4204]
movsx edx, bp
call fcn.006954ac
test eax, eax
je 0x694b09
mov eax, dword [0x6d4204]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.0069a0f0
test eax, eax
je 0x694b92
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_LeaveCriticalSection
sub esp, 4
mov dword [esp], 0x20000106
call sub.KERNEL32.DLL_SetLastError
jmp 0x694b4b
mov dword [esp], 0x20000103
jmp 0x694b10
mov dword [esp], 0x20000102
call sub.KERNEL32.DLL_SetLastError
sub esp, 4
test ebx, ebx
je 0x694b3e
mov ecx, dword [0x6d4204]
call fcn.00694c6c
mov eax, dword [0x6d4204]
mov dword [esp], eax
call fcn.0068d87c
mov dword [0x6d4204], 0x6d41d8
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_LeaveCriticalSection
sub esp, 4
xor esi, esi
mov eax, esi
add esp, 0x21c
pop esi
pop edi
pop ebx
pop ebp
ret
test ebx, ebx
je 0x694b78
mov eax, dword [0x6d4204]
mov dword [esp], eax
call fcn.0068d87c
mov dword [0x6d4204], 0x6d41d8
mov eax, dword [0x6de350]
mov dword [esp], eax
call sub.KERNEL32.DLL_LeaveCriticalSection
sub esp, 4
mov dword [esp], esi
call fcn.0068d87c
jmp 0x694b4e
mov eax, dword [0x6d4204]
mov eax, dword [eax]
lea ecx, [esp + 0x1c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.KERNEL32.DLL_GetCPInfo
sub esp, 8
test eax, eax
je 0x694ae2
mov eax, dword [esp + 0x1c]
mov dword [0x6d3f64], eax
jmp 0x694a92
lea edx, [esp + 0x11c]
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.006951dc
mov dword [esi + 4], eax
mov dword [esp], eax
mov dword [esp + 4], 1
call sub.KERNEL32.DLL_IsValidLocale
sub esp, 8
test eax, eax
jne 0x694bf4
cmp dword [esi + 8], 0
je 0x694c31
mov eax, dword [0x6d4204]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sub.KERNEL32.DLL_SetThreadLocale
sub esp, 4
mov ecx, dword [0x6d4204]
call fcn.00694c6c
mov ecx, dword [0x6d4204]
movsx edx, bx
call fcn.006954ac
test eax, eax
jne 0x694a92
mov dword [esp], 0x20000102
jmp 0x694c38
mov dword [esp], 0x20000103
call sub.KERNEL32.DLL_SetLastError
sub esp, 4
jmp 0x694b3e