Function at 0x42d0d0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d515b
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x63a800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call sub.KERNEL32.dll_GetSystemDefaultLCID
nop
cmp eax, 0x801
ja 0x42d12e
je case.0x42d362.263
sub eax, 0x401
cmp eax, 0x91
ja case.0x42d232.12290
movzx eax, byte [eax + 0x42dd94]
jmp dword [eax*4 + 0x42dd8c]
cmp eax, 0xc01
ja 0x42d157
je case.0x42d362.263
sub eax, 0x820
cmp eax, 0x53
ja case.0x42d232.12290
movzx ecx, byte [eax + 0x42de30]
jmp dword [ecx*4 + 0x42de28]
cmp eax, 0x3401
ja 0x42d239
je case.0x42d362.263
cmp eax, 0x240a
ja 0x42d1d3
cmp eax, 0x2409
jae case.0x42d362.263
cmp eax, 0x1801
ja 0x42d1b3
je case.0x42d362.263
cmp eax, 0x105f
ja 0x42d1a9
je case.0x42d362.263
cmp eax, 0xc6b
je case.0x42d362.263
cmp eax, 0x1001
jmp 0x42d306
cmp eax, 0x1401
jmp 0x42d306
cmp eax, 0x1c01
je case.0x42d362.263
cmp eax, 0x2001
je case.0x42d362.263
cmp eax, 0x2401
jmp 0x42d306
cmp eax, 0x2c0c
ja 0x42d21d
je case.0x42d362.263
cmp eax, 0x2c01
ja 0x42d202
je case.0x42d362.263
cmp eax, 0x240c
je case.0x42d362.263
cmp eax, 0x2801
jmp 0x42d306
cmp eax, 0x2c09
jb case.0x42d232.12290
cmp eax, 0x2c0a
jbe case.0x42d362.263
jmp case.0x42d232.12290
sub eax, 0x3001
cmp eax, 0xb
ja case.0x42d232.12290
movzx edx, byte [eax + 0x42de8c]
jmp dword [edx*4 + 0x42de84]
cmp eax, 0x4001
ja 0x42d2b1
je case.0x42d362.263
cmp eax, 0x380c
ja 0x42d298
je case.0x42d362.263
cmp eax, 0x3801
ja 0x42d280
je case.0x42d362.263
cmp eax, 0x3409
jb case.0x42d232.12290
cmp eax, 0x340a
jbe case.0x42d362.263
cmp eax, 0x340c
jmp 0x42d306
cmp eax, 0x3809
jb case.0x42d232.12290
cmp eax, 0x380a
jbe case.0x42d362.263
jmp case.0x42d232.12290
sub eax, 0x3c01
je case.0x42d362.263
sub eax, 9
je case.0x42d362.263
sub eax, 2
jmp 0x42d306
cmp eax, 0x4c0a
ja 0x42d2eb
je case.0x42d362.263
cmp eax, 0x440a
ja 0x42d2e4
cmp eax, 0x4409
jae case.0x42d362.263
cmp eax, 0x4009
jb case.0x42d232.12290
cmp eax, 0x400a
jbe case.0x42d362.263
jmp case.0x42d232.12290
cmp eax, 0x480a
jmp 0x42d306
cmp eax, 0x500a
je case.0x42d362.263
cmp eax, 0x580a
je case.0x42d362.263
cmp eax, 0xe40c
je case.0x42d362.263
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov esi, eax
cmp esi, 0x105
jg 0x42d342
cmp esi, 0x101
jge case.0x42d362.263
lea eax, [esi - 2]
cmp eax, 0xfc
ja case.0x42d362.265
movzx eax, byte [eax + 0x42dea0]
jmp dword [eax*4 + 0x42de98]
cmp esi, 0x3b16
jg 0x42d369
je case.0x42d362.263
lea eax, [esi - 0x107]
cmp eax, 0x59
ja case.0x42d362.265
movzx ecx, byte [eax + 0x42dfa8]
jmp dword [ecx*4 + 0x42dfa0]
cmp esi, 0x9906f5
jg 0x42d38b
je case.0x42d362.263
cmp esi, 0x4ca2
je case.0x42d362.263
cmp esi, 0x6f60e7
jmp 0x42d39d
cmp esi, 0x9a55c4f
je case.0x42d362.263
cmp esi, 0x9a55d42
je case.0x42d362.263
cmp esi, 0xf2
je 0x42d3b7
cmp esi, 0xf4
jne 0x42dd50
lea edx, [ebp - 0xbc]
push edx
call sub.KERNEL32.dll_GetTimeZoneInformation
nop
cmp eax, 1
je 0x42d3d6
test eax, eax
je 0x42d3d6
cmp eax, 2
jne 0x42dd50
lea eax, [ebp - 0xc4]
push eax
lea edi, [ebp - 0xb8]
call fcn.00431e30
lea eax, [ebp - 0xc4]
mov dword [ebp - 4], 0
call fcn.0044fdd0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004325e0
lea ecx, [ebp - 0xc0]
push 0x60b1e8
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b1fc
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b214
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b22c
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b24c
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b26c
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b288
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b2a8
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b2bc
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b2d4
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b2ec
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b300
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b318
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b330
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b344
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b35c
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b374
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b3ac
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b3c8
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b3e0
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b3f4
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b408
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b424
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b43c
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea ecx, [ebp - 0xc0]
push 0x60b45c
push ecx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea edx, [ebp - 0xc0]
push 0x60b474
push edx
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
lea eax, [ebp - 0xc0]
push 0x60b48c
push eax
call fcn.00432080
add esp, 8
test al, al
jne 0x42dd54
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4a8
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d72d
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4b0
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d75a
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4b8
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d787
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4c8
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d7b4
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4d8
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d7e1
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4e4
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d80e
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4f4
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d83b
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b4fc
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d868
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b504
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d895
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b50c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d8c2
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b514
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d8ef
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b51c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d91c
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b524
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d949
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b52c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d976
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b534
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d9a3
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b540
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d9d0
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b54c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42d9fd
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b55c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42da2a
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b568
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42da57
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b570
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42da84
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b578
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dab1
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b588
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dade
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b594
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42db0b
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b59c
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42db38
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5a4
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42db65
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5ac
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42db92
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5b8
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dbbf
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5c0
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dbec
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5cc
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dc19
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5d4
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dc46
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5dc
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dc73
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5e4
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dca0
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5f0
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dccd
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b5fc
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dcf2
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b604
push ecx
call fcn.005ae17f
mov ecx, dword [ebp - 0xc0]
add esp, 8
test eax, eax
je 0x42dd17
sub eax, ecx
cmp eax, 0xffffffff
jne 0x42dd54
cmp dword [ecx - 0xc], 0
jl 0x42dd3a
push 0x60b60c
push ecx
call fcn.005ae17f
add esp, 8
test eax, eax
je 0x42dd3a
sub eax, dword [ebp - 0xc0]
cmp eax, 0xffffffff
jne 0x42dd54
lea ecx, [ebp - 0xc0]
call fcn.00432bf0
lea edi, [ebp - 0xc4]
call fcn.00431de0
mov eax, esi
jmp 0x42dd6f
lea ecx, [ebp - 0xc0]
call fcn.00432bf0
lea edi, [ebp - 0xc4]
call fcn.00431de0
mov eax, 0x32
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005ac396
mov esp, ebp
pop ebp
ret