Function at 0x413fc0
Capabilities:
Check if file exists
Delete file
Get common file path
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x546a00
mov eax, dword fs:[0]
push eax
mov eax, 0x1328
call fcn.004b8770
mov eax, dword [0x5b2390]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.004b7bc0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00414840
lea eax, [ebp - 0x21c]
push eax
call fcn.004b7b43
add esp, 4
cmp eax, 1
jae 0x414043
xor al, al
jmp 0x4147f3
mov eax, dword [0x556804]
mov dword [ebp - 0x424], eax
mov ecx, dword [0x556808]
mov dword [ebp - 0x420], ecx
push 0x200
push 0
lea eax, [ebp - 0x41c]
push eax
call fcn.004b7bc0
add esp, 0xc
mov eax, dword [str._b_W0W]
mov dword [ebp - 0x62c], eax
mov ecx, dword [0x5567fc]
mov dword [ebp - 0x628], ecx
mov dx, word [0x556800]
mov word [ebp - 0x624], dx
push 0x1fe
push 0
lea eax, [ebp - 0x622]
push eax
call fcn.004b7bc0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x834], ax
push 0x206
push 0
lea eax, [ebp - 0x832]
push eax
call fcn.004b7bc0
add esp, 0xc
xor eax, eax
mov word [ebp - 0xa3c], ax
push 0x206
push 0
lea eax, [ebp - 0xa3a]
push eax
call fcn.004b7bc0
add esp, 0xc
xor eax, eax
mov word [ebp - 0xc44], ax
push 0x206
push 0
lea eax, [ebp - 0xc42]
push eax
call fcn.004b7bc0
add esp, 0xc
xor eax, eax
mov word [ebp - 0xe4c], ax
push 0x206
push 0
lea eax, [ebp - 0xe4a]
push eax
call fcn.004b7bc0
add esp, 0xc
push str.http:__ip.taobao.com_service_getIpInfo.php_ip
lea ecx, [ebp - 0xe50]
call fcn.004048c0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0xe50]
call fcn.004020c0
xor eax, eax
mov word [ebp - 0x1058], ax
push 0x206
push 0
lea eax, [ebp - 0x1056]
push eax
call fcn.004b7bc0
add esp, 0xc
lea eax, [ebp - 0x1058]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x105c]
call fcn.004048c0
mov byte [ebp - 4], 1
push str.netipaddress.json
lea ecx, [ebp - 0x105c]
call fcn.004020c0
lea ecx, [ebp - 0x105c]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4141cf
lea ecx, [ebp - 0x105c]
call fcn.004049e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
mov ecx, esp
mov dword [ebp - 0x1324], esp
lea eax, [ebp - 0x105c]
push eax
call fcn.004048a0
mov dword [ebp - 0x1328], eax
mov ecx, dword [ebp - 0x1328]
mov dword [ebp - 0x132c], ecx
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x1320], esp
lea edx, [ebp - 0xe50]
push edx
call fcn.004048a0
mov dword [ebp - 0x1330], eax
mov byte [ebp - 4], 1
call fcn.0043d900
add esp, 8
mov byte [ebp - 0x1331], al
movzx eax, byte [ebp - 0x1331]
test eax, eax
je 0x4147c5
lea ecx, [ebp - 0x10ec]
call fcn.00422d20
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0x10fc]
call fcn.0041eec0
mov byte [ebp - 4], 4
push 1
lea ecx, [ebp - 0x1188]
call fcn.00414f60
mov byte [ebp - 4], 5
push 0x40
push 0x20
lea ecx, [ebp - 0x105c]
call fcn.00414dd0
push eax
lea ecx, [ebp - 0x131c]
call fcn.00414e90
mov dword [ebp - 0x1328], eax
mov eax, dword [ebp - 0x1328]
mov dword [ebp - 0x132c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x132c]
call fcn.0041ced0
push eax
lea ecx, [ebp - 0x1188]
call fcn.004150f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x131c]
call fcn.00414f30
push 0
lea eax, [ebp - 0x10fc]
push eax
lea ecx, [ebp - 0x1188]
push ecx
lea ecx, [ebp - 0x10ec]
call fcn.00422ec0
movzx edx, al
test edx, edx
je 0x41478d
push str.data
lea ecx, [ebp - 0x10fc]
call fcn.0041fe20
mov ecx, eax
call fcn.00420080
movzx eax, al
test eax, eax
jne 0x41478d
lea ecx, [ebp - 0x11a4]
call fcn.00411230
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x11c0]
call fcn.00411230
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11dc]
call fcn.00411230
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11f8]
call fcn.00411230
mov byte [ebp - 4], 0xa
push 0
lea ecx, [ebp - 0x1208]
call fcn.0041eec0
mov byte [ebp - 4], 0xb
push str.data
lea ecx, [ebp - 0x10fc]
call fcn.0041fe20
push eax
lea ecx, [ebp - 0x1208]
call fcn.0041f5e0
push str.region
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.00420080
movzx eax, al
test eax, eax
jne 0x41456c
push str.region
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.004200e0
movzx eax, al
test eax, eax
je 0x41456c
lea eax, [ebp - 0x1298]
push eax
push str.region
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.0041f730
mov dword [ebp - 0x1328], eax
mov ecx, dword [ebp - 0x1328]
mov dword [ebp - 0x132c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x132c]
push edx
lea ecx, [ebp - 0x11c0]
call fcn.00414e30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1298]
call fcn.00404a70
lea ecx, [ebp - 0x11c0]
call fcn.00410d50
test eax, eax
jbe 0x41456c
lea eax, [ebp - 0xa3c]
push eax
lea ecx, [ebp - 0x11c0]
call fcn.00404a90
push eax
call fcn.0040fc30
add esp, 8
lea eax, [ebp - 0xa3c]
push eax
lea ecx, [ebp - 0x62c]
push ecx
push 0x556754
push 0x104
lea edx, [ebp - 0x62c]
push edx
call fcn.004b7b04
add esp, 0x14
lea eax, [ebp - 0xa3c]
push eax
lea ecx, [ebp - 0x120c]
call fcn.004048c0
mov byte [ebp - 4], 0xd
push 0
push 0x55674c
lea ecx, [ebp - 0x120c]
call fcn.00414d30
mov dword [ebp - 0x1210], eax
cmp dword [ebp - 0x1210], 0xffffffff
jle 0x41455d
lea ecx, [ebp - 0x1188]
call fcn.00415140
mov byte [ebp - 0x1279], 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x120c]
call fcn.00404940
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1208]
call fcn.0041f480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11f8]
call fcn.00404a70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11dc]
call fcn.00404a70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x11c0]
call fcn.00404a70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11a4]
call fcn.00404a70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1188]
call fcn.00414810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10fc]
call fcn.0041f480
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10ec]
call fcn.0040e380
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x105c]
call fcn.00404940
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe50]
call fcn.00404940
mov al, byte [ebp - 0x1279]
jmp 0x4147f3
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x120c]
call fcn.00404940
push str.city
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.00420080
movzx eax, al
test eax, eax
jne 0x414742
push str.city
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.004200e0
movzx eax, al
test eax, eax
je 0x414742
lea eax, [ebp - 0x1278]
push eax
push str.city
lea ecx, [ebp - 0x1208]
call fcn.0041fe20
mov ecx, eax
call fcn.0041f730
mov dword [ebp - 0x1328], eax
mov ecx, dword [ebp - 0x1328]
mov dword [ebp - 0x132c], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x132c]
push edx
lea ecx, [ebp - 0x11dc]
call fcn.00414e30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1278]
call fcn.00404a70
lea ecx, [ebp - 0x11dc]
call fcn.00410d50
test eax, eax
jbe 0x414742
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0x11dc]
call fcn.00404a90
push eax
call fcn.0040fc30
add esp, 8
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0x1214]
call fcn.004048c0
mov byte [ebp - 4], 0xf
push 0
push 0x55674c
lea ecx, [ebp - 0x1214]
call fcn.00414d30
mov dword [ebp - 0x1218], eax
cmp dword [ebp - 0x1218], 0xffffffff
jle 0x414733
lea ecx, [ebp - 0x1188]
call fcn.00415140
mov byte [ebp - 0x125a], 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1214]
call fcn.00404940
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1208]
call fcn.0041f480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11f8]
call fcn.00404a70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11dc]
call fcn.00404a70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x11c0]
call fcn.00404a70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11a4]
call fcn.00404a70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1188]
call fcn.00414810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10fc]
call fcn.0041f480
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10ec]
call fcn.0040e380
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x105c]
call fcn.00404940
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe50]
call fcn.00404940
mov al, byte [ebp - 0x125a]
jmp 0x4147f3
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1214]
call fcn.00404940
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1208]
call fcn.0041f480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11f8]
call fcn.00404a70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11dc]
call fcn.00404a70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x11c0]
call fcn.00404a70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11a4]
call fcn.00404a70
lea ecx, [ebp - 0x1188]
call fcn.00415140
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1188]
call fcn.00414810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10fc]
call fcn.0041f480
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10ec]
call fcn.0040e380
mov byte [ebp - 0x1259], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x105c]
call fcn.00404940
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe50]
call fcn.00404940
mov al, byte [ebp - 0x1259]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b7b5d
mov esp, ebp
pop ebp
ret