Function at 0x4e00b0
Capabilities:
Get geographical location
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2fc
mov eax, dword [0x544af0]
xor eax, ebp
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0x2c]
call fcn.00408de0
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x58]
imul ecx, ecx, 0x3c
movzx edx, word [ebp - 0x56]
add ecx, edx
mov dword [ebp - 0x44], ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x244], esp
push 0x512924
call fcn.00403ca0
lea eax, [ebp - 0x50]
push eax
call fcn.004d7880
add esp, 8
lea ecx, [ebp - 0x50]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0
push 0x512934
lea ecx, [ebp + 8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
lea ecx, [ebp - 0x48]
push ecx
call fcn.004b8af3
add esp, 0xc
cmp dword [ebp - 0x48], 0
jne 0x4e015f
lea ecx, [ebp - 0x50]
call fcn.004079a0
lea ecx, [ebp - 0x2c]
call fcn.00408810
lea ecx, [ebp + 8]
call fcn.004079a0
jmp 0x4e0ceb
mov edx, dword [ebp - 0x48]
push edx
lea ecx, [ebp - 0x40]
call fcn.004a4f9f
lea ecx, [ebp - 8]
call fcn.004032e0
mov dword [ebp - 0xc], 1
mov dword [ebp - 4], 0
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x40]
call fcn.004a54ed
test eax, eax
je 0x4e0a33
push 0
push str._item
lea ecx, [ebp - 8]
call fcn.00404850
cmp eax, 0xffffffff
je 0x4e0a2e
push 0
push str.LimitCitys
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 0xc
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 8]
call fcn.00407240
push 0
push 0x512970
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea edx, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x68]
call fcn.00404a60
lea ecx, [ebp - 0x64]
call fcn.00404ce0
movzx eax, al
test eax, eax
jne 0x4e0594
lea ecx, [ebp - 0x50]
call fcn.00404ce0
movzx ecx, al
test ecx, ecx
je 0x4e021f
lea ecx, [ebp - 0x64]
call fcn.004079a0
lea ecx, [ebp - 0x68]
call fcn.004079a0
jmp 0x4e0181
mov byte [ebp - 0xa1], 1
lea ecx, [ebp - 0xa0]
call fcn.004a4c17
lea edx, [ebp - 0xa0]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x248], esp
push 0x512974
call fcn.00403ca0
lea eax, [ebp - 0x64]
push eax
call fcn.004d9480
add esp, 0xc
mov dword [ebp - 0xa8], 0
jmp 0x4e0272
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0xa0]
call fcn.00423ec0
cmp dword [ebp - 0xa8], eax
jge 0x4e055e
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 0xa8]
push edx
lea ecx, [ebp - 0xa0]
call fcn.0040d2b0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00402580
push 0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.00408be0
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xffffffff
je 0x4e0510
mov eax, dword [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x24c]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.00404a60
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x24c]
call fcn.004079a0
mov edx, dword [ebp - 0xac]
cmp edx, dword [ebp - 0x4c]
je 0x4e0328
lea ecx, [ebp - 0xb4]
call fcn.004079a0
jmp 0x4e0263
mov eax, dword [ebp - 0xb0]
add eax, 1
push eax
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.00407240
push 0
push 0x2d
lea ecx, [ebp - 0xd0]
call fcn.00408be0
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
push edx
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00404a60
mov ecx, dword [ebp - 0xe0]
add ecx, 1
push ecx
lea edx, [ebp - 0xe4]
push edx
lea ecx, [ebp - 0xd0]
call fcn.00407240
push 0
push 0x3a
lea ecx, [ebp - 0xd4]
call fcn.00408be0
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x250]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00404a60
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xcc], eax
lea ecx, [ebp - 0x250]
call fcn.004079a0
mov edx, dword [ebp - 0xbc]
add edx, 1
push edx
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00407240
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xc8], eax
lea ecx, [ebp - 0x254]
call fcn.004079a0
push 0
push 0x3a
lea ecx, [ebp - 0xe4]
call fcn.00408be0
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
push ecx
lea edx, [ebp - 0x258]
push edx
lea ecx, [ebp - 0xe4]
call fcn.00404a60
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x258]
call fcn.004079a0
mov eax, dword [ebp - 0xdc]
add eax, 1
push eax
lea ecx, [ebp - 0x25c]
push ecx
lea ecx, [ebp - 0xe4]
call fcn.00407240
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0x25c]
call fcn.004079a0
mov edx, dword [ebp - 0xcc]
imul edx, edx, 0x3c
add edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0xc4]
imul eax, eax, 0x3c
add eax, dword [ebp - 0xc0]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp - 0xb8]
jl 0x4e04e6
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0xd8]
jle 0x4e04ed
mov byte [ebp - 0xa1], 0
lea ecx, [ebp - 0xe4]
call fcn.004079a0
lea ecx, [ebp - 0xd4]
call fcn.004079a0
lea ecx, [ebp - 0xd0]
call fcn.004079a0
jmp 0x4e054c
lea ecx, [ebp - 0xb4]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x4c]
je 0x4e0545
lea ecx, [ebp - 0xb4]
call fcn.004079a0
jmp 0x4e0263
mov byte [ebp - 0xa1], 0
lea ecx, [ebp - 0xb4]
call fcn.004079a0
jmp 0x4e055e
movzx ecx, byte [ebp - 0xa1]
test ecx, ecx
jne 0x4e0589
lea ecx, [ebp - 0xa0]
call fcn.004a4dce
lea ecx, [ebp - 0x64]
call fcn.004079a0
lea ecx, [ebp - 0x68]
call fcn.004079a0
jmp 0x4e0181
lea ecx, [ebp - 0xa0]
call fcn.004a4dce
lea ecx, [ebp - 0x8c]
call fcn.00408830
push 0
push 0x512978
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 0x12
push eax
lea edx, [ebp - 0x260]
push edx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x260]
call fcn.004079a0
push 0
push 0x51299c
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x68]
call fcn.00404a60
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0x6c], eax
lea ecx, [ebp - 0x264]
call fcn.004079a0
push 0
push 0x5129a0
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 0x12
push eax
lea ecx, [ebp - 0x268]
push ecx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x268]
call fcn.004079a0
push 0
push 0x5129c4
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea edx, [ebp - 0x26c]
push edx
lea ecx, [ebp - 0x68]
call fcn.00404a60
mov ecx, eax
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.004b8592
add esp, 4
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x26c]
call fcn.004079a0
push 0
push 0x5129c8
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 6
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x270]
call fcn.004079a0
push 0
push 0x5129d4
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea ecx, [ebp - 0x274]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x88]
call fcn.004032c0
lea ecx, [ebp - 0x274]
call fcn.004079a0
push 0
push 0x5129d8
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 0xc
push eax
lea edx, [ebp - 0x278]
push edx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x278]
call fcn.004079a0
push 0
push 0x5129f0
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x84]
call fcn.004032c0
lea ecx, [ebp - 0x27c]
call fcn.004079a0
push 0
push 0x5129f4
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 9
push eax
lea ecx, [ebp - 0x280]
push ecx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x280]
call fcn.004079a0
push 0
push 0x512a08
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea edx, [ebp - 0x284]
push edx
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x80]
call fcn.004032c0
lea ecx, [ebp - 0x284]
call fcn.004079a0
push 0
push 0x512a0c
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 9
push eax
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x288]
call fcn.004079a0
push 0
push 0x512a20
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea ecx, [ebp - 0x28c]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x7c]
call fcn.004032c0
lea ecx, [ebp - 0x28c]
call fcn.004079a0
push 0
push 0x512a24
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 9
push eax
lea edx, [ebp - 0x290]
push edx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x290]
call fcn.004079a0
push 0
push 0x512a38
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x78]
call fcn.004032c0
lea ecx, [ebp - 0x294]
call fcn.004079a0
push 0
push 0x512a3c
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 8
push eax
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x298]
call fcn.004079a0
push 0
push 0x512a4c
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea edx, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x74]
call fcn.004032c0
lea ecx, [ebp - 0x29c]
call fcn.004079a0
push 0
push 0x512a50
lea ecx, [ebp - 8]
call fcn.00404850
add eax, 5
push eax
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 8]
call fcn.00407240
push eax
lea ecx, [ebp - 0x68]
call fcn.004032c0
lea ecx, [ebp - 0x2a0]
call fcn.004079a0
push 0
push 0x512a5c
lea ecx, [ebp - 0x68]
call fcn.00404850
push eax
lea ecx, [ebp - 0x2a4]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00404a60
push eax
lea ecx, [ebp - 0x70]
call fcn.004032c0
lea ecx, [ebp - 0x2a4]
call fcn.004079a0
lea edx, [ebp - 0x2b4]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00408f90
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00409190
mov ecx, eax
call fcn.00409440
movzx edx, al
test edx, edx
je 0x4e09ba
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00408e10
mov ecx, eax
call fcn.00409350
jmp 0x4e0a13
lea ecx, [ebp - 0xfc]
call fcn.00409270
lea edx, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0xfc]
call fcn.00409350
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.004093d0
push eax
lea edx, [ebp - 0x2dc]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00408fc0
lea ecx, [ebp - 0x2d0]
call fcn.004088f0
lea ecx, [ebp - 0xfc]
call fcn.004092e0
lea ecx, [ebp - 0x8c]
call fcn.00408890
lea ecx, [ebp - 0x64]
call fcn.004079a0
lea ecx, [ebp - 0x68]
call fcn.004079a0
jmp 0x4e0181
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8bbd
add esp, 4
lea ecx, [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.004750c0
jmp 0x4e0a64
push 0
lea edx, [ebp - 0x2e4]
push edx
lea ecx, [ebp - 0x104]
call fcn.00409230
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00408f90
push eax
lea ecx, [ebp - 0x104]
call fcn.00409440
movzx ecx, al
test ecx, ecx
je 0x4e0cc3
lea ecx, [ebp - 0x104]
call fcn.00488b30
add eax, 4
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
call fcn.00409300
mov dword [ebp - 0x10c], eax
push 0x4d7270
push 0x20
mov edx, dword [ebp - 0x10c]
push edx
push 0
mov ecx, dword [ebp - 0x108]
call fcn.00409320
push eax
call fcn.004b8d00
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x108]
call fcn.004012b0
jmp 0x4e0afb
push 0
lea ecx, [ebp - 0x2f4]
push ecx
lea ecx, [ebp - 0x114]
call fcn.00409400
lea edx, [ebp - 0x2fc]
push edx
mov ecx, dword [ebp - 0x108]
call fcn.00495890
push eax
lea ecx, [ebp - 0x114]
call fcn.00409440
movzx eax, al
test eax, eax
je 0x4e0caf
lea ecx, [ebp - 0x114]
call fcn.00407980
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], reloc.OLEAUT32.dll_SysReAllocString
push 0x512a60
mov ecx, dword [ebp - 0x120]
add ecx, 0x10
push ecx
call fcn.00404c60
add esp, 8
movzx edx, al
test edx, edx
je 0x4e0b69
mov dword [ebp - 0x11c], VariantInit
jmp 0x4e0b91
push str.HKCT
mov eax, dword [ebp - 0x120]
add eax, 0x10
push eax
call fcn.00404c60
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4e0b91
mov dword [ebp - 0x11c], VariantInit
mov byte [ebp - 0x115], 0
push 0x512a78
mov edx, dword [ebp - 0x120]
add edx, 8
push edx
call fcn.00404c60
add esp, 8
movzx eax, al
test eax, eax
je 0x4e0be7
lea ecx, [ebp - 0x124]
call fcn.004f3070
lea ecx, [ebp - 0x124]
call fcn.004f3090
test eax, eax
je 0x4e0bd7
mov byte [ebp - 0x115], 1
lea ecx, [ebp - 0x124]
call fcn.004f3050
jmp 0x4e0c8e
lea ecx, [ebp - 0x128]
push ecx
push 1
push 0
mov ecx, dword [ebp - 0x120]
add ecx, 0x14
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
mov edx, dword [ebp - 0x11c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4e0c8e
mov dword [ebp - 0x130], 0x104
mov dword [ebp - 0x12c], 1
mov byte [ebp - 0x240], 0
push 0x103
push 0
lea eax, [ebp - 0x23f]
push eax
call fcn.004b5f20
add esp, 0xc
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x240]
push edx
lea eax, [ebp - 0x12c]
push eax
push 0
mov ecx, dword [ebp - 0x120]
add ecx, 0x18
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
mov ecx, dword [ebp - 0x128]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4e0c81
mov byte [ebp - 0x115], 1
mov edx, dword [ebp - 0x128]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx eax, byte [ebp - 0x115]
test eax, eax
jne 0x4e0caa
mov ecx, dword [ebp - 0x120]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00409350
jmp 0x4e0caf
jmp 0x4e0ae7
mov ecx, dword [ebp + 0xc]
call fcn.00409300
cmp eax, 3
jb 0x4e0cbe
jmp 0x4e0cc3
jmp 0x4e0a50
lea ecx, [ebp - 8]
call fcn.004079a0
lea ecx, [ebp - 0x40]
call fcn.004a53d2
lea ecx, [ebp - 0x50]
call fcn.004079a0
lea ecx, [ebp - 0x2c]
call fcn.00408810
lea ecx, [ebp + 8]
call fcn.004079a0
mov ecx, dword [ebp - 0x134]
xor ecx, ebp
call fcn.004b5e12
mov esp, ebp
pop ebp
ret