Function at 0x4136f0
Capabilities:
Get geographical location
Reference sql statements

Disassembly:
push ebx
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4136f6
call fcn.004ac4d0
mov edx, dword [esp + 0x3c]
lea ecx, [esp]
call fcn.0043d000
mov edx, dword [esp + 0x40]
lea ecx, [esp + 4]
call fcn.0043d000
mov edx, dword [esp + 0x44]
lea ecx, [esp + 8]
call fcn.0043d000
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
push 0x3e7
call fcn.004a9b30
lea eax, [esp + 0x14]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push 0x3e7
push dword [esp + 0x18]
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x55fbea
push eax
push dword [esp + 0x18]
call fcn.004aa0a0
call fcn.0043d6c2
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameW
call fcn.0043d6e0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.004aa400
call fcn.004ac460
mov edx, 0x55faf4
pop ecx
push ecx
call fcn.0043d6f0
mov ecx, eax
call fcn.0043d670
jne 0x4137e8
mov edx, dword [esp + 0x10]
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac370
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x573c48
push eax
mov eax, 0x55fc28
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x5744aa
push eax
mov eax, 0x56065c
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x573ce4
push eax
mov eax, 0x55fcf8
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x573da8
push eax
mov eax, 0x55fdae
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x575f52
push eax
mov eax, 0x56218c
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
mov eax, 0x575fa4
push eax
mov eax, 0x562244
push eax
push dword [esp + 0x10]
call fcn.004aa810
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
mov eax, 0x55faf4
push eax
push dword [esp + 4]
call fcn.004a9c40
mov ebx, eax
and ebx, ebx
jle 0x41395f
mov eax, 0x55fbea
push eax
push dword [esp + 4]
call fcn.004a9c40
mov ebx, eax
cmp ebx, 1
je 0x41395f
push edx
call fcn.004ac330
pop edx
push eax
mov edx, 0x55fbea
push edx
call fcn.004ac370
mov edx, dword [esp + 4]
push edx
call fcn.004ac370
mov edx, 0x55fbea
push edx
call fcn.004ac370
lea eax, [esp + 4]
push eax
call fcn.004ac3d0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov edx, 0x55f0cc
lea ecx, [esp + 0x1c]
call fcn.0043d008
mov edx, 0x55f0cc
lea ecx, [esp + 0x20]
call fcn.0043d008
push edx
call fcn.004ac330
pop edx
push eax
push 0xe
push dword [esp + 0x10]
push edx
call fcn.004ac330
pop edx
push eax
mov edx, 0x55faf8
push edx
call fcn.004ac370
mov edx, dword [esp + 0x10]
push edx
call fcn.004ac370
mov edx, 0x55faf4
push edx
call fcn.004ac370
mov edx, dword [esp + 0x14]
push edx
call fcn.004ac370
call fcn.004ac460
mov edx, dword [0xc06600]
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac370
mov edx, str.cmd.exe
push edx
call fcn.004ac370
call fcn.0043d6c2
add dword [esp], edx
call fcn.0043d6c2
add dword [esp + 4], edx
call fcn.0045954c
call fcn.0043d6e0
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0
je 0x413bb2
push 0x9c40
call fcn.004ab170
mov dword [esp + 0x24], eax
push dword [esp + 0xc]
call fcn.00459ab1
and eax, eax
je 0x413b93
push dword [esp + 0xc]
call fcn.00459af8
mov dword [esp + 0x28], eax
cmp dword [esp + 0x28], 0
je 0x413b8e
push dword [esp + 0x28]
push dword [esp + 0x28]
push dword [esp + 0x14]
call fcn.00459b1e
mov dword [esp + 0x28], eax
cmp dword [esp + 0x28], 0
je 0x413b8e
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac330
pop edx
push eax
push 0x18
push dword [esp + 0x34]
push dword [esp + 0x34]
call fcn.004ab190
lea eax, [esp + 0x30]
push eax
call fcn.004ac3d0
movsx ebx, byte [esp + 0x48]
cmp ebx, 1
jne 0x413b17
movsx ebx, byte [esp + 0x4c]
cmp ebx, 1
jne 0x413ae5
push edx
call fcn.004ac330
pop edx
push eax
push 1
push edx
call fcn.004ac330
pop edx
push eax
push dword [esp + 0x38]
call fcn.00412a15
call fcn.0043d6c2
add dword [esp], edx
call fcn.0042789e
call fcn.0043d6e0
jmp 0x413b15
push edx
call fcn.004ac330
pop edx
push eax
push 0
push edx
call fcn.004ac330
pop edx
push eax
push dword [esp + 0x38]
call fcn.00412a15
call fcn.0043d6c2
add dword [esp], edx
call fcn.0042789e
call fcn.0043d6e0
jmp 0x413b8e
movsx ebx, byte [esp + 0x48]
cmp ebx, 0x3e7
jne 0x413b53
mov edx, 0x55f0cc
lea ecx, [0xc0661c]
call fcn.0043d008
push edx
call fcn.004ac330
pop edx
push eax
push dword [esp + 0x30]
call fcn.00412a15
lea eax, [0xc0661c]
push eax
call fcn.004ac3d0
jmp 0x413b8e
movsx ebx, byte [esp + 0x48]
and ebx, ebx
jne 0x413b8e
mov edx, dword [0xc0661c]
push edx
call fcn.004ac330
pop edx
push eax
push edx
call fcn.004ac370
push edx
call fcn.004ac330
pop edx
push eax
push dword [esp + 0x34]
call fcn.00412a15
pop eax
lea eax, [0xc0661c]
push eax
call fcn.004ac3d0
jmp 0x413a2a
push dword [esp + 0x24]
call fcn.004ab110
push dword [esp + 0xc]
call fcn.00459b78
mov dword [esp + 0x30], eax
push dword [esp + 0xc]
call fcn.00459b98
mov eax, dword [esp + 0x30]
jmp 0x413bba
push dword [esp + 0x20]
call fcn.004ac530
push dword [esp + 4]
call fcn.004ac530
push dword [esp]
call fcn.004ac530
push dword [esp + 0x1c]
call fcn.004ac530
push dword [esp + 0x2c]
call fcn.004ac530
push dword [esp + 8]
call fcn.004ac530
push dword [esp + 0x10]
call fcn.004ac530
add esp, 0x34
pop ebx
ret 0x18