Function at 0x422abf
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
push 0x18
mov eax, 0x503dc2
call fcn.004df3ad
mov esi, ecx
push str.USER
lea ecx, [ebp - 0x10]
call fcn.004014b0
xor ebx, ebx
mov dword [ebp - 4], ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004037f2
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.UserId
call fcn.004014b0
mov byte [ebp - 4], 2
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 4
push eax
mov ecx, esi
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 4]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.FirstName
call fcn.004014b0
mov byte [ebp - 4], 6
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 7
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 8
push eax
lea ecx, [esi + 4]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 8]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.LastName
call fcn.004014b0
mov byte [ebp - 4], 0xa
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0xc
push eax
lea ecx, [esi + 8]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x10]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Email
call fcn.004014b0
mov byte [ebp - 4], 0xe
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x10
push eax
lea ecx, [esi + 0x10]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x14]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.ZipCode
call fcn.004014b0
mov byte [ebp - 4], 0x12
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x14
push eax
lea ecx, [esi + 0x14]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x18]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.State
call fcn.004014b0
mov byte [ebp - 4], 0x16
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x18
push eax
lea ecx, [esi + 0x18]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x5b14a4
call fcn.004014b0
mov byte [ebp - 4], 0x1a
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [esi + 0x1c]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Country
call fcn.004014b0
mov byte [ebp - 4], 0x1e
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x20
push eax
lea ecx, [esi + 0x20]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
lea eax, [esi + 0x24]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x21
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.CountryA2
call fcn.004014b0
mov byte [ebp - 4], 0x22
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x24
push eax
lea ecx, [esi + 0x24]
call fcn.004038a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x18]
call fcn.004010f8
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x5af400
call fcn.004014b0
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Gender
call fcn.004014b0
mov byte [ebp - 4], 0x26
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x14]
push eax
push edi
mov byte [ebp - 4], bl
call fcn.00439663
mov byte [ebp - 4], 0x28
push 0x5b0240
lea ecx, [ebp - 0x14]
call fcn.004036be
test eax, eax
jne 0x422e98
mov dword [esi + 0xc], 1
jmp 0x422eb1
push 0x5b4488
lea ecx, [ebp - 0x14]
call fcn.004036be
neg eax
sbb eax, eax
and eax, 0xfffffffe
inc eax
inc eax
mov dword [esi + 0xc], eax
push ecx
add esi, 0x28
mov ecx, esp
mov dword [ebp - 0x24], esp
push esi
call fcn.004037f2
mov byte [ebp - 4], 0x29
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.VersionID
call fcn.004014b0
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.DOWNLOAD
call fcn.004014b0
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], 0x28
call fcn.00439663
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.004038a3
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x18]
call fcn.004010f8
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.004010f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004010f8
xor eax, eax
inc eax
call fcn.004df44c
ret