Function at 0x41c6d0
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x4e49a8
call fcn.004afe60
sub esp, 0x34
mov eax, dword [0x518e38]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x41c9a0
push esi
push edi
xor eax, eax
mov dword [ebp - 0x40], 0x363339
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x18
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push 0xb
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
or esi, 0xffffffff
push esi
push esi
push 0x4ec037
mov ecx, 0x518e38
call fcn.00446330
push 0x105
lea ecx, [ebp - 0x10]
mov dword [0x518e3c], ebx
call fcn.00446280
mov eax, dword [ebp - 0x10]
push 0x104
push eax
mov word [eax], bx
push dword [0x51907c]
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push 0x4efd44
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.00457470
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.004462e0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0043f290
push esi
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x18]
call fcn.00457470
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.004462e0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0043f290
push esi
mov esi, str..lang
push esi
lea ecx, [ebp - 0x18]
call fcn.00457470
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.004462e0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0043f290
lea ecx, [ebp - 0x28]
call fcn.00446060
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 4
push ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call fcn.00422d0f
add esp, 0xc
cmp eax, 0xfffffffe
jne 0x41c838
mov eax, dword [ebp - 0x10]
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x1c]
mov word [eax + edi*2], bx
call fcn.00457470
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.004462e0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0043f290
push ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call fcn.00422d0f
add esp, 0xc
cmp eax, 1
jge 0x41c844
xor esi, esi
jmp 0x41c985
mov edi, dword [ebp - 0x28]
shr dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x24]
push 6
push edi
push 0x4efd34
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], edi
call fcn.00440450
add esp, 0xc
test al, al
je 0x41c89f
lea eax, [ebp - 0x14]
call fcn.004226e8
mov edi, dword [ebp - 0x14]
cmp edi, ebx
je 0x41c89f
xor eax, eax
mov ax, word [edi]
push eax
call fcn.0041d376
add esp, 4
test al, al
je 0x41c89f
inc edi
xor eax, eax
inc edi
mov ax, word [edi]
push eax
call fcn.0041d376
add esp, 4
test al, al
jne 0x41c888
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov esi, edi
jmp 0x41c95b
push 5
push edi
push str.str:
call fcn.00440450
add esp, 0xc
test al, al
je 0x41c964
lea eax, [ebp - 0x14]
call fcn.004226e8
lea eax, [edi + 0xa]
mov cx, word [eax]
cmp cx, 0x30
mov edi, dword [ebp - 0x14]
jb 0x41c92f
cmp cx, 0x39
ja 0x41c92f
jmp 0x41c926
mov cx, word [eax]
cmp cx, 0x5c
jne 0x41c91f
lea ecx, [eax + 2]
mov dx, word [ecx]
cmp dx, 0x72
jne 0x41c901
mov word [esi], 0xd
inc esi
inc esi
add eax, 4
jmp 0x41c926
cmp dx, 0x6e
jne 0x41c90e
mov word [esi], 0xa
jmp 0x41c8fa
mov word [esi], 0x5c
inc esi
inc esi
cmp dx, 0x5c
je 0x41c8fc
mov eax, ecx
jmp 0x41c926
mov word [esi], cx
inc esi
inc esi
inc eax
inc eax
cmp eax, edi
jb 0x41c8e0
mov word [esi], bx
inc esi
inc esi
xor eax, eax
mov ax, word [edi]
push eax
call fcn.0041d376
add esp, 4
test al, al
je 0x41c95b
mov word [edi], bx
inc edi
xor eax, eax
inc edi
mov ax, word [edi]
push eax
call fcn.0041d376
add esp, 4
test al, al
jne 0x41c941
mov dword [ebp - 0x14], edi
cmp word [edi], bx
jne 0x41c8a9
sub esi, dword [ebp - 0x18]
mov ecx, 0x518e38
sar esi, 1
push esi
push dword [ebp - 0x18]
call fcn.004463d0
lea eax, [esi + esi]
mov esi, dword [0x518e38]
mov dword [0x518e3c], eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0043f290
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0043f290
pop edi
mov eax, esi
pop esi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret