Function at 0x10092fd1
Capabilities:
Get geographical location

Disassembly:
push 0x8c
mov eax, 0x1016ea5f
call fcn.10004365
mov esi, ecx
mov eax, dword [ebp + 8]
lea edi, [esi + 0x28]
xor ebx, ebx
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x8c], ebx
mov eax, dword [edi]
or eax, dword [edi + 4]
jne 0x100930f6
and dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x28]
push str.Expires
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.10009422
mov ecx, dword [ebp - 0x94]
lea edx, [ebp - 0x28]
and dword [ebp - 4], ebx
push edx
lea edx, [ebp - 0x90]
mov ecx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
call dword [eax + 0x10]
push 4
pop ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.1000860f
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp eax, 2
jne 0x100930d6
mov ecx, dword [ebp - 0x90]
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov edx, edi
mov dword [ebp - 0x8c], 0xc
lea ecx, [ebp - 0x40]
call fcn.1007bcb1
lea ecx, [ebp - 0x40]
mov bl, al
call fcn.1000860f
test bl, bl
je 0x100930b9
mov ecx, dword [esi + 0x2c]
test ecx, ecx
jg 0x1009309f
mov eax, 0xe10
jl 0x100930ab
cmp dword [esi + 0x28], eax
jb 0x100930ab
test ecx, ecx
jl 0x100930af
mov eax, 0x15180
jg 0x100930ab
cmp dword [esi + 0x28], eax
jbe 0x100930af
xor ecx, ecx
jmp 0x100930b2
mov eax, dword [esi + 0x28]
mov dword [edi], eax
mov dword [edi + 4], ecx
jmp 0x100930d0
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add eax, 0xe10
pop ecx
adc edx, 0
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edx
mov ebx, dword [ebp - 0x8c]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x90]
test ecx, ecx
je 0x100930f6
mov dword [ebp - 4], 3
mov eax, dword [ecx]
push 1
call dword [eax + 0x44]
or dword [ebp - 4], 0xffffffff
push 0x101b8a3c
lea ecx, [esi + 0x30]
call fcn.1002a051
test al, al
je 0x10093197
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x14], 7
push str.ETag
mov word [ebp - 0x28], ax
call fcn.10009422
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x28]
mov dword [ebp - 4], 4
push edx
lea edx, [ebp - 0x8c]
mov ecx, dword [eax + 4]
push edx
mov eax, dword [ecx]
call dword [eax + 0x10]
or ebx, 0x10
mov byte [ebp - 4], 5
lea edx, [ebp - 0x70]
mov ecx, dword [ebp - 0x8c]
push edx
mov eax, dword [ecx]
call dword [eax + 0x3c]
lea eax, [ebp - 0x70]
or ebx, 0x20
push eax
lea ecx, [esi + 0x30]
call fcn.1000927f
lea ecx, [ebp - 0x70]
call fcn.1000860f
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
je 0x1009318b
mov byte [ebp - 4], 6
mov eax, dword [ecx]
push 1
call dword [eax + 0x44]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1000860f
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x14], edi
push str.CountryCode
mov word [ebp - 0x28], ax
call fcn.10009422
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x28]
mov dword [ebp - 4], edi
push edx
lea edx, [ebp - 0x98]
mov ecx, dword [eax + 4]
push edx
mov eax, dword [ecx]
call dword [eax + 0x10]
or ebx, 0x40
mov dword [ebp - 0x8c], ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.1000860f
mov ecx, dword [ebp - 0x98]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp eax, 2
jne 0x10093215
mov ecx, dword [ebp - 0x98]
lea edx, [ebp - 0x88]
push edx
mov eax, dword [ecx]
call dword [eax + 0x3c]
lea eax, [ebp - 0x88]
or ebx, 0x81
jmp 0x10093235
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
xor eax, eax
mov dword [ebp - 0x2c], edi
push 0x10197284
mov word [ebp - 0x40], ax
call fcn.10009422
lea eax, [ebp - 0x40]
or ebx, 2
push eax
lea ecx, [ebp - 0x58]
call fcn.100092b6
mov dword [ebp - 4], 0xb
test bl, 2
je 0x10093255
lea ecx, [ebp - 0x40]
and ebx, 0xfffffffd
call fcn.1000860f
mov byte [ebp - 4], 0xc
test bl, 1
je 0x10093269
lea ecx, [ebp - 0x88]
call fcn.1000860f
cmp dword [ebp - 0x48], 0
je 0x1009327b
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x48]
call fcn.1000dd3d
lea ecx, [ebp - 0x58]
call fcn.1000860f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x1009329f
mov dword [ebp - 4], 0xd
mov eax, dword [ecx]
push 1
call dword [eax + 0x44]
call fcn.100045f2
ret 4