Function at 0x43bde0
Capabilities:
Get geographical location
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43c116
sub esp, 0x38
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x18]
cmp dword [ecx + 0x50], eax
jne 0x43c0e4
mov edx, dword [ecx + 0x58]
test edx, edx
je 0x43c0d3
mov ebx, dword [ecx + 0x7c]
test ebx, ebx
jne 0x43c0d3
mov ebx, dword [ecx + 0x6c]
test ebx, ebx
jne 0x43c0d3
mov ecx, dword [ecx + 0x78]
test ecx, ecx
jne 0x43c0d3
cmp dword [edx + 4], 1
jne 0x43c0d3
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jb 0x43be51
sub ecx, eax
cmp dword [0x1545d2c], ecx
jbe 0x43be62
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004734a0
mov eax, dword [esp + 4]
test eax, eax
je 0x43c0c2
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x2c], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc], edx
call fcn.00473720
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp eax, 0xfffffffe
je 0x43c0b1
mov edx, dword [esp + 0x30]
cmp byte [edx + 0x2b], 1
ja 0x43bec5
mov ebp, dword [esp + 0x2c]
xor esi, esi
jmp 0x43bee9
lea ebx, [edx + 0x2b]
mov ebp, dword [esp + 0x2c]
mov esi, dword [ebp + 0xa0]
mov edi, dword [edx + 0x1c]
lea ebx, [ebx + edi*4 + 5]
mov ebx, dword [ebx]
add esi, ebx
cmp ebx, 0xffffffff
sete bl
movzx ebx, bl
dec ebx
and esi, ebx
test esi, esi
je 0x43c0a0
movzx ebx, byte [edx + 0x29]
test bl, 4
jne 0x43c0a0
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x40]
mov dword [esp + 8], eax
call fcn.00473930
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
test eax, eax
jge 0x43bf39
mov eax, dword [esp + 0xc]
test eax, eax
je 0x43bf33
mov eax, dword [eax + 4]
jmp 0x43bf51
xor eax, eax
xor ecx, ecx
jmp 0x43bf51
cmp eax, 0x100000
jae 0x43c10b
mov edx, dword [esp + 0x14]
test byte [edx], al
shl eax, 4
mov eax, dword [edx + eax + 4]
test ecx, ecx
jne 0x43bf5b
xor ecx, ecx
xor eax, eax
jmp 0x43bf6f
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00456aa0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], eax
cmp ecx, 8
jge 0x43bf80
xor edx, edx
jmp 0x43bfa9
mov dword [esp], eax
lea ecx, [0xd7184e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
call fcn.004066c0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x20]
mov edx, eax
mov eax, dword [esp + 0x34]
test dl, dl
je 0x43bfb4
mov edx, 1
jmp 0x43bfe6
cmp ecx, 0x11
jge 0x43bfbd
xor edx, edx
jmp 0x43bfe6
mov dword [esp], eax
lea ecx, [0xd7b95b]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x11
call fcn.004066c0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x20]
mov edx, eax
mov eax, dword [esp + 0x34]
test dl, dl
jne 0x43c016
cmp ecx, 8
jge 0x43bff3
xor eax, eax
jmp 0x43c012
mov dword [esp], eax
lea eax, [0xd7185e]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004066c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x43c027
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov eax, dword [esp + 0x24]
cmp eax, 0xfffffffb
je 0x43c079
add eax, 4
cmp eax, 1
ja 0x43c068
mov eax, dword [esp + 0x28]
test eax, eax
je 0x43c0f5
mov ecx, dword [esp + 0x40]
cmp ecx, eax
jb 0x43c0f5
sub ecx, eax
cmp ecx, 0x14
ja 0x43c0f5
mov byte [esp + 0x4c], 1
mov dword [esp + 0x50], eax
add esp, 0x38
ret
mov byte [esp + 0x4c], 1
mov eax, dword [esp + 0x40]
mov dword [esp + 0x50], eax
add esp, 0x38
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00456970
mov eax, dword [esp + 8]
mov byte [esp + 0x4c], 1
mov dword [esp + 0x50], eax
add esp, 0x38
ret
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
mov byte [esp + 0x4c], 0
mov dword [esp + 0x50], 0
add esp, 0x38
ret
lea eax, str.bad_restart_PC_thread_limit_nstopm_spinning_nmidlelocked_needspinningrandinit_twicestore64_failedmemprofileratesemaRoot_queuebad_allocCountbad_span_statestack_overflow_untyped_args__out_of_range_no_module_data_in_goroutine_runtime:_seq1runtime:_goidinvalid_syntax1907348632812595367431640625unsafe.Pointer_on_zero_Valuereflect.Value.unknown_methodreflect.SelectRegSetValueExW.WithoutCancel.WithDeadline_bad_record_MACinternal_errorboringcrypto:_unknown_mode:_Accept_CharsetContent_LengthDkim_Signatureadd_dir_headerGetSystemTimesControlServiceCreateServiceWIsWellKnownSidMakeAbsoluteSDOpenSCManagerWSetThreadTokenClearCommBreakClearCommErrorCreateEventExWCreateMutexExWGetTickCount64IsWow64ProcessLoadLibraryExWModule32FirstWSetConsoleModeSizeofResourceVirtualQueryExCoInitializeExCoUninitializeGetShellWindowVerQueryValueWMAX_FRAME_SIZEPROTOCOL_ERRORINTERNAL_ERRORREFUSED_STREAM__SameSiteLaxERR_UNKNOWN__daccept_charsetcontent_lengthread_frame_eofunknown_error_unknown_code:_Not_Acceptable.______CLICOLOR_FORCESetWindowLongW_log_filter.go_log_helper.godata_truncated_n..._omitting_StaticProviderRequestTimeoutRequestExpireddatetime_local_a_f0_9_64__a_f0_9_96_scan_argumentsbinary_literal_has_no_digitsvault.azure.cnRegDeleteTreeWDwmEnableMMCSSDwmShowContactGetStockObjectGetPixelFormatSetPixelFormatGdiplusStartupwglMakeCurrentDragQueryFileWDragQueryPointDefWindowProcWSetWindowTextWGetWindowTextWScreenToClientGetWindowLongWInvalidateRectReleaseCaptureClientToScreenCloseClipboardEmptyClipboardCallNextHookExRegisterHotKeyunreachable:__mime_multipartzero_parameterprefix_length_not_an_ip:portinvalid_PrefixRCodeNameErrorResourceHeaderneed_more_dataREQUEST_METHOD_a_zA_Z0_9___0_9a_f_32__0_9a_f_64__0_9a_f_96__0_9a_f_40__0_9a_f_48__02d:_02d:_02ddocument_startsequence_startunknown_node:_len_of_type__sInstEmptyWidthGetMessageTimeMapVirtualKeyW_v_not_numeric__out_of_rangecloud.adc_e.ukcsp.hci.ic.govap_northeast_1ap_northeast_2ap_northeast_3ap_southeast_1ap_southeast_2ap_southeast_3ap_southeast_4Europe__Milan_Europe__Spain_Europe__Paris_US_East__Ohio_fips_ca_west_1fips_us_east_1fips_us_east_2fips_us_west_1fips_us_west_2ca_west_1_fipsus_east_1_fipsus_east_2_fipsus_west_1_fipsus_west_2_fipsamplifybackendapi.ecr_publicbackup_gatewayclouddirectorycloudformationlocalhost:8000edge.sagemakerfips_ap_east_1fips_eu_west_1fips_eu_west_2fips_eu_west_3fips_sa_east_1emr_containersemr_serverlessprod_ca_west_1prod_us_east_1prod_us_east_2prod_us_west_1prod_us_west_2identity_chimeiotthingsgraphapi_ap_south_1data_eu_west_1data_us_east_1data_us_west_2kendra_rankingap_east_1_fipseu_west_1_fipseu_west_2_fipseu_west_3_fipssa_east_1_fipslookoutmetricsmediapackagev2meetings_chimenetworkmanagerroute53domainsruntime_v2_lexsecretsmanagerserverlessreposervicecatalogsimspaceweaverstoragegatewayworkspaces_webcn_northwest_1api_cn_north_1aws_iso_globalus_isob_east_1eu_isoe_west_1cn_w_d_reserved_rangefield_presence_OUT_OF_RANGE_ALREADY_EXISTSresourceGroupsmissing_quotesObjectItem:__simage_x_ms_bmpaudio_musepackaudio_vnd.wavevideo_x_ms_asfvideo_x_ms_wmvimage_vnd.djvuprotobuf_errorexpected_infexpected_naninvalid_sourceExpressionListQualifiedIdentParamDeclOrNilparameter_list_term_or_typekey_is_invalidxl_worksheets___DOCTYPE_HTML_usr_bin_tclsh_MultiPolygon_MessageOptionsServiceOptionsinvalid_kind:_protobuf_oneofXXX_OneofFuncsXXX_extensions_line__d:_d_:_invalid__v:__villegal_char:_ReservedRangesadvertise_errorkey_has_expirednetwork_is_downno_medium_foundno_such_processGetAdaptersInfoCreateHardLinkWDeviceIoControlDuplicateHandleFlushViewOfFileGetCommandLineWGetProcessTimesGetStartupInfoWProcess32FirstWUnmapViewOfFileFailed_to_load_Failed_to_find_:_cannot_parse__M3.2.0_M11.1.0_a_zA_Z0_9___X_Forwarded_Forxsd:unsignedInt__no_semicolon__s__:digit:__image_base_is_0WSAGetQOSByNameWSAGetLastErrorWSASetLastErrorSafeArrayCreateSafeArrayGetDimSafeArrayUnlockGetActiveObjectSafeArraySetIIDSafeArrayGetIIDVarDateFromDispVarDateFromBoolVarFormatNumberVarBstrFromDateVarBstrFromDispVarBstrFromBoolVarBoolFromDateVarBoolFromDispDllCanUnloadNowRegisterTypeL
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00470130
mov ecx, 0x100000
call fcn.00477340
nop
call fcn.00475ec0
jmp fcn.0043bde0