Function at 0x415630
Capabilities:
Get geographical location
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov dword [esp + 8], ecx
mov eax, dword [0x520014]
xor eax, ebp
mov dword [esp + 0xc0], eax
xor eax, eax
dec eax
lea ebx, [esp + 0x38]
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0x140
push ebx
call fcn.00429ed0
add esp, 8
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x41567a
mov eax, dword [esp + 0x3c]
mov edi, dword [ebp + 8]
test eax, eax
jne 0x4156ba
lea esi, [esp + 0x78]
mov ecx, esi
push 0x153
push str.GetInfoFromResources
push 2
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505ab6
push str.Partner_package_is_empty.
call fcn.004b9460
mov ecx, esi
call fcn.0043a3d0
jmp 0x4157c8
lea ecx, [esp + 0x78]
push 0x14e
push str.GetInfoFromResources
push 0
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505a80
push str.Extract_Partner_package:
call fcn.004b9460
mov eax, dword [esp + 8]
lea edi, [eax + 0x98]
movzx eax, byte [eax + 0xa3]
mov ecx, edi
test al, al
jns 0x41570c
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x98]
mov eax, dword [eax + 0x9c]
lea esi, [esp + 0x68]
push eax
push ecx
push esi
call fcn.0046fb00
add esp, 0xc
movzx eax, byte [esi + 0xb]
test al, al
jns 0x41572b
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
lea ecx, [esp + 0xb4]
push eax
push esi
call fcn.0046ab40
cmp byte [esp + 0x73], 0
jns 0x41574c
push dword [esp + 0x68]
call fcn.0048e90d
add esp, 4
lea ecx, [esp + 0x80]
push 0x505a82
call fcn.004b9bc0
movzx edx, byte [esp + 0x43]
test dl, dl
jns 0x41576a
mov edx, dword [esp + 0x3c]
mov ecx, eax
push edx
call fcn.004b9c40
mov ecx, eax
push 0x505a88
call fcn.004b9bc0
lea esi, [esp + 0x78]
mov ecx, esi
call fcn.0043a3d0
push ebx
push edi
call fcn.0042abb0
add esp, 8
mov edi, dword [esp + 8]
mov byte [edi + 0x115], 1
mov ecx, esi
push str.partner_config
call fcn.004b9300
mov ecx, edi
push esi
push ebx
call fcn.004162a0
cmp byte [esi + 0xb], 0
jns 0x4157c5
push dword [esp + 0x78]
call fcn.0048e90d
add esp, 4
mov edi, dword [ebp + 8]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], eax
mov cl, byte [edi + 0xb]
test cl, cl
mov eax, dword [edi + 4]
movzx edx, cl
mov esi, edx
cmovs esi, eax
cmp esi, 4
jne 0x415848
mov ecx, edi
push 4
push str.auto
push 0xffffffffffffffff
push 0
call fcn.0046b330
test eax, eax
jne 0x41583f
xor esi, esi
dec esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
cmp eax, esi
jne 0x4159b6
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], eax
jmp 0x4159fe
mov cl, byte [edi + 0xb]
mov eax, dword [edi + 4]
movzx edx, cl
test cl, cl
cmovs edx, eax
test edx, edx
je 0x415ea0
xor edx, edx
dec edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], edx
test cl, cl
jns 0x415876
lea ecx, [esp + 0x68]
push eax
push dword [edi]
call fcn.0046a6f0
jmp 0x415887
mov eax, dword [edi + 8]
mov dword [esp + 0x70], eax
movsd xmm0, qword [edi]
movsd qword [esp + 0x68], xmm0
movzx eax, byte [esp + 0x73]
test al, al
jns 0x41589a
mov esi, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
jmp 0x41589e
lea esi, [esp + 0x68]
xor ebx, ebx
test eax, eax
je 0x4158c7
mov edi, eax
movsx eax, byte [esi + ebx]
push eax
call fcn.004a3fe5
add esp, 4
mov byte [esi + ebx], al
mov eax, edi
inc ebx
cmp edi, ebx
jne 0x4158a4
mov bl, byte [esp + 0x33]
shr bl, 7
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x78]
push 0x166
push str.GetInfoFromResources
push 0
call fcn.0043a1a0
lea esi, [esp + 0xb4]
mov ecx, esi
push 0x505af3
push str.Fetching_defined
call fcn.004b9460
movzx eax, byte [edi + 0xb]
test al, al
jns 0x415901
mov eax, dword [edi + 4]
mov edi, dword [edi]
add eax, edi
mov ecx, esi
push eax
push edi
call fcn.004b9460
mov ecx, esi
push 0x505adb
push str._package
call fcn.004b9460
lea esi, [esp + 0x78]
mov ecx, esi
call fcn.0043a3d0
lea edi, [esp + 0x5c]
mov ecx, edi
push str.BRAND_
call fcn.004b9300
lea edx, [esp + 0x68]
movzx eax, byte [edx + 0xb]
test al, al
cmovs eax, dword [edx + 4]
cmovs edx, dword [edx]
mov ecx, edi
push eax
push edx
call fcn.0046ab40
push eax
push esi
call fcn.00429ef0
add esp, 8
test bl, bl
je 0x41596c
push dword [esp + 0x28]
call fcn.0048e90d
add esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp + 0x30], eax
movsd xmm0, qword [esp + 0x78]
movsd qword [esp + 0x28], xmm0
xor eax, eax
mov byte [esp + 0x83], al
mov byte [esp + 0x78], al
cmp byte [esp + 0x67], al
jns 0x4159a2
push dword [esp + 0x5c]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x415ea0
push dword [esp + 0x68]
jmp 0x415e98
xor esi, esi
lea ecx, [esp + 0x78]
mov dword [ecx], esi
mov word [ecx + 4], 0
push esi
push 3
push ecx
push 4
push eax
call dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
cmp eax, 3
jne 0x4159f2
mov byte [esp + 0x73], 2
mov al, byte [esp + 0x78]
mov cl, byte [esp + 0x7a]
mov byte [esp + 0x68], al
mov byte [esp + 0x69], cl
mov byte [esp + 0x6a], 0
jmp 0x4159fe
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], esi
mov dword [esp + 0x70], esi
mov eax, str.AutodetectBrandName
xor esi, esi
lea ebx, [esp + 0x78]
mov ecx, ebx
push 0x65
push eax
push esi
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505e25
push str.User_region:
call fcn.004b9460
movzx eax, byte [esp + 0x73]
mov edi, str.AutodetectBrandName
test al, al
jns 0x415a42
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
jmp 0x415a46
lea edx, [esp + 0x68]
lea ecx, [esp + 0xb4]
add eax, edx
push eax
push edx
call fcn.004b9460
mov ecx, ebx
call fcn.0043a3d0
lea ebx, [esp + 0x5c]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
call fcn.0042a320
add esp, 4
lea ecx, [esp + 0x78]
push 0x67
push edi
push esi
call fcn.0043a1a0
lea edi, [esp + 0xb4]
mov ecx, edi
push 0x505e33
push str.User_locale:
call fcn.004b9460
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x415aaa
mov ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
add eax, ebx
mov ecx, edi
push eax
push ebx
call fcn.004b9460
lea ecx, [esp + 0x78]
call fcn.0043a3d0
lea edi, [esp + 0x1c]
xor eax, eax
dec eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
lea eax, [esi + esi*2]
lea ecx, [esp + 0x50]
mov dword [esp + 0x18], eax
push dword [eax*4 + 0x505e34]
call fcn.004b9300
mov al, byte [esp + 0x5b]
movzx ecx, al
mov edx, ecx
test al, al
jns 0x415af9
mov edx, dword [esp + 0x54]
test edx, edx
jne 0x415baa
xor eax, eax
dec eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x44]
mov eax, dword [esp + 0x18]
push dword [eax*4 + 0x505e38]
call fcn.004b9300
mov al, byte [esp + 0x4f]
movzx ecx, al
mov edx, ecx
test al, al
jns 0x415b35
mov edx, dword [esp + 0x48]
test edx, edx
jne 0x415c17
lea ecx, [esp + 0x78]
push 0x75
push str.AutodetectBrandName
push 0
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505ea9
push str.Detected_brand_name:
call fcn.004b9460
mov eax, dword [esp + 0x18]
mov ebx, dword [eax*4 + 0x505e3c]
push ebx
call fcn.004a7b10
add esp, 4
add eax, ebx
lea ecx, [esp + 0xb4]
push eax
push ebx
call fcn.004b9460
lea ecx, [esp + 0x78]
call fcn.0043a3d0
mov ecx, edi
push ebx
call fcn.004b9300
mov al, byte [esp + 0x4f]
xor ecx, ecx
inc ecx
mov dword [esp + 0x10], ecx
jmp 0x415c7f
mov dword [esp + 0xc], esi
movzx ebx, byte [esp + 0x73]
mov esi, ebx
mov dword [esp + 0x14], ebx
test bl, bl
jns 0x415bc1
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x10], 4
cmp edx, esi
jne 0x415c75
mov byte [esp + 7], al
lea ebx, [esp + 0x68]
cmp byte [esp + 0x14], 0
jns 0x415be4
mov ebx, dword [esp + 0x68]
mov al, byte [esp + 7]
test al, al
mov esi, dword [esp + 0xc]
jns 0x415cba
push edx
push ebx
push dword [esp + 0x58]
call fcn.00490c9d
add esp, 0xc
mov dword [esp + 0x10], 4
test eax, eax
je 0x415b01
jmp 0x415c97
mov dword [esp + 0xc], esi
movzx ebx, byte [esp + 0x67]
mov esi, ebx
mov dword [esp + 0x14], ebx
test bl, bl
jns 0x415c2e
mov esi, dword [esp + 0x60]
mov dword [esp + 0x10], 4
cmp edx, esi
jne 0x415c7b
lea ebx, [esp + 0x5c]
cmp byte [esp + 0x14], 0
mov esi, dword [esp + 0xc]
jns 0x415c4d
mov ebx, dword [esp + 0x5c]
test al, al
jns 0x415cd5
push edx
push ebx
push dword [esp + 0x4c]
call fcn.00490c9d
add esp, 0xc
mov dword [esp + 0x10], 4
test eax, eax
je 0x415b3d
jmp 0x415c83
mov esi, dword [esp + 0xc]
jmp 0x415c93
mov esi, dword [esp + 0xc]
test al, al
jns 0x415c8f
push dword [esp + 0x44]
call fcn.0048e90d
add esp, 4
mov al, byte [esp + 0x5b]
test al, al
jns 0x415ca3
push dword [esp + 0x50]
call fcn.0048e90d
add esp, 4
cmp dword [esp + 0x10], 4
jne 0x415d4a
inc esi
cmp esi, 8
jne 0x415ac2
jmp 0x415cf0
je 0x415b01
xor edx, edx
mov ah, byte [esp + edx + 0x50]
cmp ah, byte [ebx + edx]
jne 0x415c93
inc edx
cmp ecx, edx
jne 0x415cc2
jmp 0x415b01
je 0x415b3d
xor edx, edx
mov ah, byte [esp + edx + 0x44]
cmp ah, byte [ebx + edx]
jne 0x415c7f
inc edx
cmp ecx, edx
jne 0x415cdd
jmp 0x415b3d
lea ecx, [esp + 0x78]
push 0x79
push str.AutodetectBrandName
push 0
call fcn.0043a1a0
lea ebx, [esp + 0xb4]
mov ecx, ebx
push 0x505ed0
push str.Didnt_found_brand_name._Use_default:
call fcn.004b9460
mov esi, str.yandex
push esi
call fcn.004a7b10
add esp, 4
lea eax, [eax + str.yandex]
mov ecx, ebx
push eax
push esi
call fcn.004b9460
lea ecx, [esp + 0x78]
call fcn.0043a3d0
lea ecx, [esp + 0x1c]
push esi
call fcn.004b9300
cmp byte [esp + 0x67], 0
jns 0x415d5d
push dword [esp + 0x5c]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x415d70
push dword [esp + 0x68]
call fcn.0048e90d
add esp, 4
movzx eax, byte [esp + 0x27]
test al, al
jns 0x415d81
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
xor ebx, ebx
test eax, eax
je 0x415da7
mov esi, eax
movsx eax, byte [edi + ebx]
push eax
call fcn.004a3fe5
add esp, 4
mov byte [edi + ebx], al
mov eax, esi
inc ebx
cmp esi, ebx
jne 0x415d87
mov bl, byte [esp + 0x33]
shr bl, 7
lea ecx, [esp + 0x78]
push 0x15d
push str.GetInfoFromResources
push 0
call fcn.0043a1a0
lea edi, [esp + 0xb4]
mov ecx, edi
push 0x505ad2
push str.Fetching_autodetected
call fcn.004b9460
lea esi, [esp + 0x1c]
movzx eax, byte [esi + 0xb]
mov edx, esi
test al, al
jns 0x415dea
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
add eax, edx
mov ecx, edi
push eax
push edx
call fcn.004b9460
mov ecx, edi
push 0x505adb
push str._package
call fcn.004b9460
lea ecx, [esp + 0x78]
call fcn.0043a3d0
lea edi, [esp + 0x68]
mov ecx, edi
push str.BRAND_
call fcn.004b9300
movzx eax, byte [esp + 0x27]
test al, al
jns 0x415e30
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov ecx, edi
push eax
push esi
call fcn.0046ab40
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00429ef0
add esp, 8
test bl, bl
je 0x415e57
push dword [esp + 0x28]
call fcn.0048e90d
add esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp + 0x30], eax
movsd xmm0, qword [esp + 0x78]
movsd qword [esp + 0x28], xmm0
xor eax, eax
mov byte [esp + 0x83], al
mov byte [esp + 0x78], al
cmp byte [esp + 0x73], al
jns 0x415e8d
push dword [esp + 0x68]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x27], 0
jns 0x415ea0
push dword [esp + 0x1c]
call fcn.0048e90d
add esp, 4
mov bl, byte [esp + 0x33]
test bl, bl
mov eax, dword [esp + 0x2c]
movzx esi, bl
mov ecx, esi
cmovs ecx, eax
test ecx, ecx
jne 0x415f2a
lea esi, [esp + 0x78]
mov ecx, esi
push 0x16b
push str.GetInfoFromResources
push 0
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505b0c
push str.Fetching_default_package
call fcn.004b9460
mov ecx, esi
call fcn.0043a3d0
push 0x13f
push esi
call fcn.00429ed0
add esp, 8
test bl, bl
jns 0x415f08
push dword [esp + 0x28]
call fcn.0048e90d
add esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp + 0x30], eax
movsd xmm0, qword [esp + 0x78]
movsd qword [esp + 0x28], xmm0
mov bl, byte [esp + 0x33]
mov eax, dword [esp + 0x2c]
movzx esi, bl
test bl, bl
cmovs esi, eax
test esi, esi
jne 0x415f6c
lea esi, [esp + 0x78]
mov ecx, esi
push 0x176
push str.GetInfoFromResources
push 2
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505b49
push str.Brand_package_is_empty.
call fcn.004b9460
mov ecx, esi
call fcn.0043a3d0
jmp 0x416072
lea ecx, [esp + 0x78]
push 0x171
push str.GetInfoFromResources
push 0
call fcn.0043a1a0
lea ecx, [esp + 0xb4]
push 0x505b24
push str.Extract_Brand_package:
call fcn.004b9460
mov eax, dword [esp + 8]
lea ebx, [eax + 0x8c]
movzx eax, byte [eax + 0x97]
mov ecx, ebx
test al, al
jns 0x415fbe
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x8c]
mov eax, dword [eax + 0x90]
lea edi, [esp + 0x68]
push eax
push ecx
push edi
call fcn.0046fb00
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x415fdd
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x68]
lea ecx, [esp + 0xb4]
push eax
push edi
call fcn.0046ab40
cmp byte [esp + 0x73], 0
jns 0x415ffe
push dword [esp + 0x68]
call fcn.0048e90d
add esp, 4
lea ecx, [esp + 0x80]
push 0x505a82
call fcn.004b9bc0
mov ecx, eax
push esi
call fcn.004b9c40
mov ecx, eax
push 0x505a88
call fcn.004b9bc0
lea esi, [esp + 0x78]
mov ecx, esi
call fcn.0043a3d0
lea edi, [esp + 0x28]
push edi
push ebx
call fcn.0042abb0
add esp, 8
mov ebx, dword [esp + 8]
mov byte [ebx + 0x114], 1
mov ecx, esi
push 0x505b25
call fcn.004b9300
mov ecx, ebx
push esi
push edi
call fcn.004162a0
cmp byte [esi + 0xb], 0
jns 0x41606e
push dword [esp + 0x78]
call fcn.0048e90d
add esp, 4
mov bl, byte [esp + 0x33]
test bl, bl
jns 0x416082
push dword [esp + 0x28]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x43], 0
jns 0x416095
push dword [esp + 0x38]
call fcn.0048e90d
add esp, 4
mov ecx, dword [esp + 0xc0]
xor ecx, ebp
call fcn.0048f468
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4