Function at 0x43c940
Capabilities:
Get geographical location
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xf335f8]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43cfe8
sub esp, 0x50
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x43c967
mov eax, ecx
mov ecx, dword [esp + 0x58]
jmp 0x43c9a0
lea eax, [0xf33ebc]
mov dword [esp], eax
call fcn.00406600
cmp dword [esp + 4], 1
je 0x43c98a
lea eax, [0x9b31a0]
lea ecx, [0xf33400]
jmp 0x43c9a0
mov eax, dword [0xefbc54]
mov dword [esp], eax
call fcn.0044d910
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x18], eax
mov edx, dword [0xf335f8]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
cmp dword [ebx + 0x50], edx
jne 0x43cf8e
mov ebp, dword [ebx + 0x6c]
test ebp, ebp
jne 0x43cf35
mov dword [esp + 0x24], edx
mov ebp, dword [ebx + 0x78]
test ebp, ebp
jne 0x43ce7a
mov ebx, dword [ebx + 0x7c]
test ebx, ebx
jne 0x43ce21
lea edi, [esp + 0x34]
mov ebx, eax
xor eax, eax
call fcn.0046d989
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x3c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x40], ecx
mov ecx, dword [0xf339d0]
test ecx, ecx
je 0x43ca1f
call fcn.0046d700
lea eax, [esp + 0x34]
mov dword [edi], eax
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
lea eax, [esp + 0x34]
mov dword [edx + 0x10], eax
nop
lea eax, [0xf334bc]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00406690
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0043c220
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x43cc9c
movzx edx, byte [ecx]
test dl, dl
je 0x43cae6
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x43ca7a
mov byte [edx + 0x19], 1
mov edx, dword [0xf339d0]
test edx, edx
je 0x43ca8e
mov edx, dword [ecx + 0x10]
call fcn.0046d6f0
mov dword [edi], edx
mov dword [ecx + 0x10], 0
movzx edx, byte [ecx + 2]
test dl, dl
jne 0x43cae6
mov edx, dword [0xf339d0]
test edx, edx
je 0x43cab1
mov edx, dword [ecx + 0xc]
call fcn.0046d6f0
mov dword [edi], edx
mov dword [ecx + 0xc], 0
mov edx, dword [0xf339d0]
mov ebx, dword [ecx + 0x14]
test edx, edx
je 0x43cad2
call fcn.0046d700
mov dword [edi], ebx
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ebx
mov dword [esp], ecx
call fcn.0043bb90
mov edx, dword [esp + 0x24]
jmp 0x43ca59
mov byte [ecx], 1
mov edx, dword [0xf339d0]
test edx, edx
je 0x43cb04
call fcn.0046d700
lea edx, [esp + 0x34]
mov dword [edi], edx
mov ebx, dword [ecx + 0x10]
mov dword [edi + 4], ebx
mov dword [esp + 0x2c], ecx
lea edx, [esp + 0x34]
mov dword [ecx + 0x10], edx
movzx edx, byte [ecx + 2]
test dl, dl
je 0x43cb68
mov dword [esp], ecx
call fcn.0043c560
movzx eax, byte [esp + 4]
test al, al
je 0x43cb62
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x10]
movzx edx, byte [edx + 0x18]
test dl, dl
jne 0x43cb88
mov byte [esp + 0xe], al
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0043c220
movzx eax, byte [esp + 0xe]
mov ecx, dword [esp + 0x2c]
jmp 0x43cb88
mov ecx, dword [esp + 0x2c]
jmp 0x43cb88
call fcn.0043d000
mov eax, dword [esp]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
call ecx
mov ecx, dword [esp + 0x2c]
mov eax, 1
mov dword [esp + 0x34], 0
mov edx, dword [esp + 0x24]
cmp dword [edx + 0x14], ecx
jne 0x43ce0b
mov ebx, dword [0xf339d0]
test ebx, ebx
je 0x43cbb1
mov ebx, dword [ecx + 0x10]
call fcn.0046d6f0
mov dword [edi], ebx
mov byte [esp + 0xf], al
mov dword [ecx + 0x10], 0
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], ebx
test al, al
je 0x43cc23
mov esi, dword [0xf339d0]
test esi, esi
je 0x43cbe2
mov esi, dword [ecx + 0xc]
call fcn.0046d6f0
mov dword [edi], esi
mov dword [ecx + 0xc], 0
mov esi, dword [0xf339d0]
mov edi, dword [ecx + 0x14]
test esi, esi
je 0x43cc07
mov esi, edi
call fcn.0046d700
mov dword [edi], esi
mov ebp, dword [edx + 0x14]
mov dword [edi + 4], ebp
mov edi, esi
mov dword [edx + 0x14], edi
mov dword [esp], ecx
call fcn.0043bb90
movzx eax, byte [esp + 0xf]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x10]
movzx ecx, byte [esp + 0x4c]
test cl, cl
je 0x43ca59
mov ecx, dword [0xf339d0]
mov esi, dword [esp + 0x40]
test ecx, ecx
je 0x43cc4b
call fcn.0046d700
mov dword [edi], esi
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
mov dword [edx + 0x10], esi
test esi, esi
je 0x43cc66
movzx ecx, byte [esi + 0x1a]
test cl, cl
je 0x43cc66
movzx ecx, byte [esi + 0x19]
test cl, cl
jne 0x43cdd5
nop
lea eax, [0xf334bc]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00406690
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
movzx edx, byte [esp + 0xf]
test dl, dl
je 0x43cc91
xor edx, edx
jmp 0x43ccc6
mov edx, dword [ecx + 0x14]
mov ebx, ecx
mov ecx, edx
mov edx, ebx
jmp 0x43ccc6
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
call fcn.0043bfc0
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call fcn.0043d430
xor eax, eax
mov dword [eax], 0
add esp, 0x50
ret
mov edx, ecx
mov ecx, ebx
test ecx, ecx
je 0x43cd3f
movzx ebx, byte [ecx]
test bl, bl
jne 0x43cd3f
movzx ebx, byte [ecx + 2]
test bl, bl
jne 0x43ccde
mov ebx, dword [ecx + 0x14]
jmp 0x43ccc2
mov dword [esp + 0x20], edx
test edx, edx
je 0x43cd05
mov ebx, dword [0xf339d0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x43cd00
call fcn.0046d700
mov dword [edi], ebp
mov ebx, dword [edx + 0x14]
mov dword [edi + 4], ebx
mov dword [edx + 0x14], ebp
jmp 0x43cd22
mov ebx, dword [0xf339d0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x43cd1f
call fcn.0046d700
mov dword [edi], ebp
mov ebx, dword [eax + 0x14]
mov dword [edi + 4], ebx
mov dword [eax + 0x14], ebp
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x28], eax
mov dword [esp], ecx
call fcn.0043bb90
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
jmp 0x43ccc2
mov ecx, dword [0xf339d0]
mov edx, dword [esp + 0x40]
test ecx, ecx
je 0x43cd5a
call fcn.0046d700
mov dword [edi], edx
mov ecx, dword [eax + 0x10]
mov dword [edi + 4], ecx
mov dword [eax + 0x10], edx
jmp 0x43cd62
mov dword [eax + 0x10], ecx
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x43cdc9
movzx edx, byte [ecx + 0x19]
test dl, dl
je 0x43cd8d
mov edx, dword [0xf339d0]
mov ecx, dword [ecx + 0xc]
test edx, edx
je 0x43cd5f
call fcn.0046d700
mov dword [edi], ecx
mov edx, dword [eax + 0x10]
mov dword [edi + 4], edx
jmp 0x43cd5f
test ecx, ecx
je 0x43cdc9
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x98], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x9c], ecx
lea eax, [0xa807ec]
mov dword [esp], eax
call fcn.0046c1a0
lea eax, [0xa229e8]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0043d060
mov dword [eax + 0x88], 0
jmp 0x43cd91
mov eax, dword [esi + 0x14]
mov dword [edx + 0x98], eax
mov eax, dword [esi + 0x10]
mov dword [edx + 0x9c], eax
lea eax, [0xa807ec]
mov dword [esp], eax
call fcn.0046c1a0
lea eax, [0xa2ae36]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0043d060
lea eax, str.bad_defer_entry_in_panicbypassed_recovery_failedstack_trace_unavailable_nbindm_in_unexpected_GOOSrunqsteal:_runq_overflowdouble_traceGCSweepStart116415321826934814453125582076609134674072265625reflect.StructOf:_field_reflect.MapIter.SetValuereflect.Value.SetComplexreflect.Value.UnsafeAddrx509:_malformed_validityexec:_Stdout_already_setexec:_Stderr_already_setAllocateAndInitializeSidBuildSecurityDescriptorWAssignProcessToJobObjectGenerateConsoleCtrlEventGetMaximumProcessorCountGetNamedPipeHandleStateWSetConsoleCursorPositionSetDefaultDllDirectoriesNtQuerySystemInformationSetupDiCreateDeviceInfoWSetupDiGetSelectedDeviceSetupDiSetSelectedDeviceGetWindowThreadProcessId_is_not_a_struct_or_map_present_on_parameter_Failed_to_fire_hook:__v_ne__dm_se_0m__04d____44s_unexpected_buffer_len_vinvalid_pseudo_header__qframe_headers_prio_shortinvalid_request_:path__qread_frame_conn_error__sapplication_octet_streamRequest_Entity_Too_Largehttp:_nil_Request.Headerapplication_x_javascriptflate:_maxBits_too_largeinvalid_pattern_syntax:_error_decrypting_messagecertificate_unobtainableidna:_disallowed_rune__Ucould_not_resolve__q:__vunable_to_resolve__s:__vunable_to_resolve__v:__qgoogle.protobuf.Durationaddress_string_too_shortresource_length_too_longunpacking_Question.Class__1_0_2__2_9__d2___969_67_d_____d4___9695_012______d4___duplicate__TAG_directiveread_handler_must_be_setexceeded_max_depth_of__dwhile_scanning_an_anchorstreamSafe_was_not_resetinvalid_field_number:__dmismatching_enum_lengthsmissing_likely_tags_dataapplication_mspowerpointapplication_vnd.ms_excelapplication_x_executableapplication_x_bittorrentchacha20:_wrong_key_sizeencodeArray:_nil_elementresource_deadlock_avoidedoperation_now_in_progressno_buffer_space_availableno_such_device_or_addresssocket_type_not_supportedinvalid_cross_device_linkGetFinalPathNameByHandleWGetQueuedCompletionStatusUpdateProcThreadAttribute2006_01_02T15:04:05Z07:00South_Sudan_Standard_TimeUS_Mountain_Standard_TimeMiddle_East_Standard_TimeTransbaikal_Standard_TimeW._Mongolia_Standard_TimeAfghanistan_Standard_TimeNorth_Korea_Standard_TimeUlaanbaatar_Standard_TimeVladivostok_Standard_TimeAUS_Central_Standard_TimeAUS_Eastern_Standard_TimeKaliningrad_Standard_TimeNew_Zealand_Standard_Timenumber_of_sections_is_10array_index_out_of_bounds__________.____ARM_Thumb_2_little_endianMIPS_little_endian_WCE_v2Chinese__Simplified___zh_Mongolian__Cyrillic___mn_Bangla_Bangladesh__bn_BD_Bosnian__Latin___bs_Latn_Central_Kurdish__ku_Arab_Dari_Afghanistan__prs_AF_Dutch_Netherlands__nl_NL_English_Australia__en_AU_English_Hong_Kong__en_HK_English_Singapore__en_SG_French_Caribbean__fr_029_French_Congo__Drc__fr_CD_French_Luxembourg__fr_LU_German_Luxembourg__de_LU_Hungarian_Hungary__hu_HU_Icelandic_Iceland__is_IS_Kazakh_Kazakhstan__kk_KZ_Kyrgyz_Kyrgyzstan__ky_KG_Maori_New_Zealand__mi_NZ_Mapudungun_Chile__arn_CL_Portuguese_Brazil__pt_BR_Serbian__Latin___sr_Latn_Setswana_Botswana__tn_BW_Sinhala_Sri_Lanka__si_LK_Spanish_Argentina__es_AR_Spanish_Guatemala__es_GT_Spanish_Nicaragua__es_NI_Tigrinya_Ethiopia__ti_ET_Ukrainian_Ukraine__uk_UA_Zulu_South_Africa__zu_ZA___Contents_are_null_bytesLPSAFEARRAY_UserUnmarshalGetRecordInfoFromTypeInfogoroutine_profile_cleanupchansend:_spurious_wakeupruntimelock:_lock_countbad_system_huge_page_sizearena_already_initialized_to_unused_region_of_span_bytes_failed_with_errnoruntime:_VirtualAlloc_of__sched_gomaxprocs:threadsremaining_pointer_buffersslice_bounds_out_of_range_cgo_thread_start_missingallgadd:_bad_status_Gidleruntime:_program_exceeds_startm:_p_has_runnable_gsstoplockedm:_not_runnablereleasep:_invalid_p_statecheckdead:_no_p_for_timercheckdead:_no_m_for_timerunknown_sigtramp_callbackunexpected_fault_address_missing_stack_in_newstackbad_status_in_shrinkstackmissing_traceGCSweepStartno_hex_data_for__x_string2910383045673370361328125reflect:_Bits_of_nil_Typereflect.StructOf:_field__reflect.Value.OverflowIntreflect.Value.SetMapIndexinconsistent_poll.fdMutexunexpected_key_value_typeExpandEnvironmentStringsWx509:_invalid_RDNSequencex509:_invalid_RSA_modulusx509:
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0043d060
call fcn.0043ed90
lea eax, [0xa1ca21]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043f610
call fcn.0043edf0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0040ae00
call fcn.0043ed90
call fcn.0043efa0
call fcn.0043edf0
lea eax, [0xa25e0b]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0043d060
call fcn.0043ed90
lea eax, [0xa1ca21]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043f610
call fcn.0043edf0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0040ae00
call fcn.0043ed90
call fcn.0043efa0
call fcn.0043edf0
call fcn.0043ed90
lea eax, [0xa26e2f]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0043f610
call fcn.0043edf0
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x74]
mov dword [esp + 0x30], ecx
mov eax, dword [eax + 0x78]
mov dword [esp + 0x14], eax
call fcn.0043ed90
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.0043f610
call fcn.0043edf0
call fcn.0043ed90
call fcn.0043efa0
call fcn.0043edf0
lea eax, str.panic_during_preemptoffnanotime_returning_zerofatal:_morestack_on_g0_nthe_current_g_is_not_g0schedule:_holding_locksinvalid_m__lockedInt__procresize:_invalid_argspan_has_no_free_stacksstack_growth_after_forkshrinkstack_at_bad_timereflect.methodValueCall_invalid_reflect.Value_0123456789aAbBcCdDeEfF_23283064365386962890625reflect.Value.Interfacereflect.Value.NumMethodDestroyEnvironmentBlockinvalid_PrintableStringx509:_malformed_UTCTimex509:_invalid_key_usagex509:_malformed_versionasn1:_structure_error:_truncated_tag_or_lengthexec:_Stdin_already_setGetSidSubAuthorityCountQueryServiceLockStatusWRegNotifyChangeKeyValueSetKernelObjectSecurityDeleteVolumeMountPointWGetActiveProcessorCountGetLogicalDriveStringsWSetInformationJobObjectSetNamedPipeHandleStateSetProcessPriorityBoostNtSetInformationProcessGetFileVersionInfoSizeWunknown_error_code_0x_xframe_goaway_has_streamframe_headers_pad_shortframe_rststream_bad_lenmalformed_HTTP_responsenon_zero_reserved_fieldnetwork_not_implementedcommand_not_implementedVariant_Also_Negotiatesmissing_protocol_schemeinvalid_URI_for_requestmultipart:_NextPart:__wunexpected_address_typemissing_port_in_addressinvalid_HTTP_trailer__sxml:_unsupported_type:_expected_element_type_____missing_CPU_support_nflate:_internal_error:_pattern_bits_too_long:_CLIENT_TRAFFIC_SECRET_0SERVER_TRAFFIC_SECRET_0QUICEncryptionLevel__v_unsupported_certificateno_application_protocolvarint_integer_overflowmessage_set_wire_formatrepeated_field_encodingToken_is_not_a_Name:__vToken_is_not_a_Bool:__v_v_has_unknown_kind:__vduplicate___type__fieldduplicate__value__fieldtoo_many_pointers___10_segment_length_too_longunpacking_Question.Nameunpacking_Question.Typeskipping_Question_Class_948_5_9___949_0_7____d3_A_Z_2d3___Decoder_not_initializedEncoder_not_initializedunknown_character_widthwhile_scanning_an_alias0123456789abcdefABCDEF_function__q_not_definednon_function_of_type__sinvalid_escape_sequenceunknown_empty_width_argP224_point_not_on_curveP256_point_not_on_curveP384_point_not_on_curveP521_point_not_on_curveinvalid_scalar_encodingmismatching_cardinalityunsupported_edition:__vinvalid_Message.Get_on_invalid_Message.Set_on_multiple_files_named__qinvalid_UTF_8_in_stringapplication_vnd.ms_wordapplication_x_xliffxmlapplication_x_sharedlibapplication_x_ms_readerapplication_vnd.sqlite3application_autocad_dwgunknown_accessor:__v._sbad__s_slice_length:__dfloating_point_exceptionconnection_reset_by_peerlevel_2_not_synchronizedlink_number_out_of_rangeout_of_streams_resourcesfunction_not_implementedstructure_needs_cleaningnot_supported_by_windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid_argument_to_IntnSA_Pacific_Standard_TimeSA_Eastern_Standard_TimeUS_Eastern_Standard_TimeSA_Western_Standard_TimeMontevideo_Standard_TimeMagallanes_Standard_TimePacific_SA_Standard_TimeAzerbaijan_Standard_TimeBangladesh_Standard_TimeNorth_Asia_Standard_TimeCape_Verde_Standard_Time_06X__04X__04X__04X__XWindows_boot_applicationAzerbaijani__Latin___az_Norwegian__Nynorsk___nn_Albanian_Albania__sq_AL_Alsatian_France__gsw_FR_Amharic_Ethiopia__am_ET_Armenian_Armenia__hy_AM_Croatian_Croatia__hr_HR_English_Malaysia__en_MY_English_Zimbabwe__en_ZW_Estonian_Estonia__et_EE_Georgian_Georgia__ka_GE_Guarani_Paraguay__gn_PY_Quechua_Bolivia__quz_BO_Quechua_Ecuador__quz_EC_Romanian_Moldova__ro_MD_Romanian_Romania__ro_RO_Spanish_Colombia__es_CO_Spanish_Honduras__es_HN_Spanish_Paraguay__es_PY_Tigrinya_Eritrea__ti_ER_WSAWaitForMultipleEventsWSAAsyncGetProtoByNumberVariantTimeToDosDateTimeDosDateTimeToVariantTimeSafeArrayAllocDescriptorOleCreatePictureIndirectUnRegisterTypeLibForUserGetUserDefaultLocaleNamehash_of_unhashable_type_span_has_no_free_objectsruntime:_found_obj_at__runtime:_VirtualFree_of__cgo_go_to_c_calls:calls_gc_heap_objects:objects_sched_latencies:secondsqueuefinalizer_during_GCupdate_during_transitionruntime:_markroot_index_cant_scan_our_own_stackgcDrainN_phase_incorrectpageAlloc:_out_of_memoryruntime:_p.searchAddr__range_partially_overlapsGetSystemTimeAsFileTime
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0043d060
call fcn.0043ed90
lea eax, [0xa1ca21]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043f610
call fcn.0043edf0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0040ae00
call fcn.0043ed90
call fcn.0043efa0
call fcn.0043edf0
lea eax, [0xa25df8]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0043d060
call fcn.0043ed90
lea eax, [0xa1ca21]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043f610
call fcn.0043edf0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0040ae00
call fcn.0043ed90
call fcn.0043efa0
call fcn.0043edf0
lea eax, [0xa27dd4]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0043d060
nop
call fcn.0046c2f0
jmp fcn.0043c940