Function at 0x1001620
Capabilities:
Get file version info
Get geographical location

Disassembly:
push ebp
mov eax, 0x1458
lea ebp, [esp - 0x13d8]
call fcn.01006c90
mov eax, dword [0x1008008]
push ebx
push esi
push edi
mov dword [ebp + 0x13d4], eax
xor eax, eax
xor ebx, ebx
push 0x7e
pop edx
mov ecx, edx
mov dword [ebp + 0xbe4], ebx
lea edi, [ebp + 0xbe8]
rep stosd dword es:[edi], eax
mov word [ebp - 4], bx
mov ecx, edx
lea edi, [ebp - 2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp + 0xde0], bx
mov ecx, edx
lea edi, [ebp + 0xde2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp + 0xfdc], bx
mov ecx, edx
lea edi, [ebp + 0xfde]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp + 0x11d8], bx
mov ecx, edx
lea edi, [ebp + 0x11da]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp + 0x5f0], bx
mov ecx, edx
lea edi, [ebp + 0x5f2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0x13e4]
xor esi, esi
inc esi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 8], esi
call sub.VERSION.dll_GetFileVersionInfoSizeW
cmp eax, ebx
jne 0x1001705
mov dword [ebp - 8], ebx
cmp dword [ebp + 0x13e8], esi
jne 0x1001749
push 0xd1
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
push 0xfb
jmp 0x100174e
lea ecx, [ebp + 0xbe4]
push ecx
push eax
push dword [ebp - 0x34]
push dword [ebp + 0x13e4]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x100173d
lea eax, [ebp - 0x30]
push eax
push 0x1008018
push 0x10012e8
lea eax, [ebp + 0xbe4]
push eax
call sub.VERSION.dll_VerQueryValueW
test eax, eax
jne 0x10016dd
call fcn.01002d77
mov eax, esi
jmp 0x1001dc1
push 0xfc
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
push dword [ebp + 0x13e4]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov edi, 0x10012e4
push edi
add eax, 0x20
push eax
call fcn.01004834
cmp dword [ebp - 8], 1
mov esi, 0xfe
jne 0x100187c
mov eax, dword [0x1008018]
movzx ecx, word [eax + 2]
movzx eax, word [eax]
push ecx
push eax
push 0x1001298
lea eax, [ebp - 4]
push esi
push eax
call fcn.010036c1
add esp, 0x14
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0xbe4]
push eax
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x1001d5b
push 0xfd
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
push dword [ebp - 0x2c]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push edi
push eax
call fcn.01004834
push ebx
push 0x80
push 3
push ebx
push 1
push ebx
push dword [ebp + 0x13e0]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov word [ebp - 0x1c], bx
mov word [ebp - 0x1a], bx
mov word [ebp - 0x18], bx
mov word [ebp - 0x16], bx
mov word [ebp - 0x14], bx
mov word [ebp - 0x12], bx
mov word [ebp - 0x10], bx
mov word [ebp - 0xe], bx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 8], eax
je 0x1001d5b
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
push dword [ebp - 8]
jne 0x10018c7
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1001d5b
cmp dword [ebp - 8], ebx
jne 0x10017d9
mov esi, 0xfe
push esi
push 0x102
call fcn.01004b9e
push eax
lea eax, [ebp + 0xde0]
push eax
call fcn.01003668
push 0xfd
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp + 0xde0]
push eax
jmp 0x10017f5
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x1001d5b
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x1001d5b
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x1001d5b
lea eax, [ebp - 0xc]
push eax
call fcn.01002f3d
cmp eax, ebx
mov dword [ebp + 0x13e4], eax
je 0x1001d5b
push esi
lea ecx, [ebp + 0xfdc]
push ecx
mov ecx, dword [ebp - 0xc]
dec ecx
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0x100127c
push ecx
lea ecx, [ebp - 0x1c]
push ecx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
test eax, eax
je 0x1001d5b
push esi
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [ebp - 0xc]
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x1001268
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
test eax, eax
je 0x1001d5b
push esi
push 0x1001260
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push esi
lea eax, [ebp + 0xfdc]
push eax
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push esi
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
push edi
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x1001d5b
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x1001d5b
push esi
lea eax, [ebp + 0xfdc]
push eax
mov eax, dword [ebp - 0xc]
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x100127c
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
test eax, eax
je 0x1001d5b
push esi
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [ebp - 0xc]
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x1001268
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
test eax, eax
je 0x1001d5b
push esi
push 0x1001260
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push esi
lea eax, [ebp + 0xfdc]
push eax
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push 0xff
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
push edi
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x1001d5b
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x1001d5b
push esi
lea eax, [ebp + 0xfdc]
push eax
mov eax, dword [ebp - 0xc]
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x100127c
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
test eax, eax
je 0x1001d5b
push esi
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [ebp - 0xc]
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x1001268
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
test eax, eax
je 0x1001d5b
push esi
push 0x1001260
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push esi
lea eax, [ebp + 0xfdc]
push eax
lea eax, [ebp + 0x11d8]
push eax
call fcn.01003b09
push 0x100
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp + 0x11d8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
push edi
add eax, 0x20
push eax
call fcn.01004834
push 0x7e
pop edx
xor eax, eax
mov ecx, edx
mov dword [ebp + 0x1f8], ebx
lea edi, [ebp + 0x1fc]
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [ebp + 0x9e8], ebx
lea edi, [ebp + 0x9ec]
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [ebp + 0x7ec], ebx
lea edi, [ebp + 0x7f0]
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [ebp + 0x3f4], ebx
lea edi, [ebp + 0x3f8]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push esi
lea eax, [ebp + 0x9e8]
push eax
push 0xe
push dword [ebp + 0x13e4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call edi
test eax, eax
jne 0x1001c33
push esi
push 0x100125c
lea eax, [ebp + 0x9e8]
push eax
call fcn.01003668
lea eax, [ebp + 0x9e8]
push esi
mov dword [ebp - 0x40], eax
lea eax, [ebp + 0x7ec]
push eax
push 0xf
push dword [ebp + 0x13e4]
call edi
test eax, eax
jne 0x1001c64
push esi
push 0x100125c
lea eax, [ebp + 0x7ec]
push eax
call fcn.01003668
lea eax, [ebp + 0x7ec]
push esi
mov dword [ebp - 0x3c], eax
lea eax, [ebp + 0x1f8]
push eax
push 0x10
push dword [ebp + 0x13e4]
call edi
test eax, eax
je 0x1001d12
mov edi, dword [sym.imp.msvcrt.dll_wcstok]
lea eax, [ebp + 0x1f8]
push 0x1001258
push eax
call edi
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 8], eax
je 0x1001d5b
push esi
push dword [ebp - 8]
lea eax, [ebp + 0x3f4]
push eax
call fcn.01003b09
push 0x1001258
push ebx
call edi
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 8], eax
je 0x1001cdb
push ebx
push 1
push 0x1001254
push eax
call fcn.01002fbc
test eax, eax
jne 0x1001ca8
push 0xa
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0x3f4]
push eax
call dword [sym.imp.msvcrt.dll_wcstol]
add esp, 0xc
mov edi, eax
call dword [sym.imp.msvcrt.dll__errno]
cmp dword [eax], 0x22
je 0x1001d5b
cmp dword [ebp - 0x20], ebx
je 0x1001d15
push ebx
push dword [ebp - 0x20]
call fcn.01002fa4
test eax, eax
je 0x1001d15
jmp 0x1001d5b
push 0x21
pop edi
push dword [ebp - 0x5c]
lea eax, [ebp + 0x5f0]
push 0x100124c
push esi
push eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x38], 2
call fcn.010036c1
add esp, 0x10
push esi
lea eax, [ebp + 0xde0]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp + 0x5f0]
push eax
push ebx
push dword [ebp + 0x13e4]
call dword [sym.imp.KERNEL32.dll_GetNumberFormatW]
test eax, eax
jne 0x1001d65
call fcn.01002d77
xor eax, eax
inc eax
jmp 0x1001dc1
push 0x101
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
lea eax, [ebp + 0xde0]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
push 0x103
call fcn.01004b9e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01004834
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x1001244
add eax, 0x20
push eax
call fcn.01004834
xor eax, eax
mov ecx, dword [ebp + 0x13d4]
pop edi
pop esi
pop ebx
call fcn.01006d7a
add ebp, 0x13d8
leave
ret 0xc