Function at 0x45fb00
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xca4
mov eax, dword [0x4af6f0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push edi
push 0x7fe
push eax
mov word [ebp - 0x818], ax
lea eax, [ebp - 0x816]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xa9c], ax
lea eax, [ebp - 0xa9a]
push eax
call fcn.0046f6e0
push esi
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.0046fd12
push 0
push 0x4c9020
push str._WINDOWS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9228
push str._SYSTEM_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x4c
lea eax, [ebp - 0x818]
push 0
push 0x4c9430
push str._SYSTEM16_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9638
push str._SYSTEM32_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ccb08
push str._SENDTO_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9840
push str._CURRENTDIR_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4ca268
push str._PROGRAMFILES_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cb4b0
push str._PROGRAM_FILES_COMMON_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9a48
push str._TEMPPATH_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9a48
push str._TEMP_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4cc0e0
push str._VIDEO_USER_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cbed8
push str._VIDEO_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cc4f0
push str._MUSIC_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cc2e8
push str._MUSIC_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4c9e58
push str._PICTURES_USER_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c9c50
push str._PICTURES_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cbcd0
push str._PROGRAMS_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cbac8
push str._PROGRAMS_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4cb8c0
push str._STARTMENU_USER_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cb6b8
push str._STARTMENU_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4caa88
push str._STARTUP_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ca880
push str._STARTUP_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4ca470
push str._APPDATA_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ca060
push str._COMMON_APPDATA_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ca678
push str._LOCAL_APPDATA_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cae98
push str._DOCUMENTS_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4cac90
push str._DOCUMENTS_ALLUSERS_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cb2a8
push str._DESKTOP_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cb0a0
push str._DESKTOP_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cc6f8
push str._DOWNLOAD_USER_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
push 0
push 0x4cc900
push str._DOWNLOAD_ALLUSERS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cd120
push str._SRCDIR_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cd120
push str._MODULEPATH_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ccd10
push str._MODULEFILE_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4ccf18
push str._MODULEFILENAME_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4cd328
push str._CONFIGFILE_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ce980
push str._TEMPFCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b70fc
push str._TARGETDIR_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4b5540
push str._DISPLAYNAME_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b5540
push str.__P_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
mov ecx, dword [0x4c9010]
xor eax, eax
mov edi, dword [0x4c900c]
xorps xmm0, xmm0
mov word [ebp - 0x18], ax
sub ecx, edi
mov word [ebp - 6], ax
add esp, 0x28
mov eax, 0x2a4b80c9
imul ecx
movdqu xmmword [ebp - 0x16], xmm0
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4600ad
imul eax, dword [0x4bd974], 0x306c
push dword [eax + edi + 0x3058]
lea eax, [ebp - 0x18]
push 0x49c5c0
push 0xa
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0x18]
push eax
push str._LANG_ID_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
add eax, 0x610
push 0
add eax, ecx
push eax
push str._LANG_ISO3_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x38
jmp 0x460115
push dword [0x4bd970]
lea eax, [ebp - 0x18]
push 0x49c5c0
push 0xa
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0x18]
push eax
push str._LANG_ID_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x24
lea eax, [ebp - 0x18]
push 0xa
push eax
push 3
push dword [0x4bd970]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push 0
lea eax, [ebp - 0x18]
push eax
push str._LANG_ISO3_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x14
lea eax, [ebp - 0x818]
push str._EXECUTERETCODE_
push eax
call fcn.0046e870
add esp, 8
test eax, eax
je 0x460183
xor eax, eax
push 0x80
push eax
mov word [ebp - 0x89c], ax
lea eax, [ebp - 0x89a]
push eax
call fcn.0046f6e0
push dword [0x4af524]
lea eax, [ebp - 0x89c]
push 0x49c5c0
push 0x41
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0x89c]
push eax
push str._EXECUTERETCODE_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x30
push 0
push 0x4b5478
push str._FUNCTIONRETCODE_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b6ae4
push str._PRODUCTEXE_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b5750
push str._PRODUCTGUID_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c82d0
push str._PRODUCTNAME_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4c84b6
push str._PRODUCTVERSION_
push 0x400
push eax
call fcn.00440530
push 0
push 0x4c8372
push str._COMPANYNAME_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b771c
push str._PRODUCTPATH_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4bf2e8
push str._PARAMS_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4c3168
push str._PARAMSEXE_
push 0x400
push eax
call fcn.00440530
lea eax, [ebp - 0x818]
push str._CUSTOMEREXP_
push eax
call fcn.0046e870
add esp, 0x1c
test eax, eax
je 0x4602e4
push dword [0x4b68b4]
lea eax, [ebp - 0xa9c]
push 0x48f188
push 0x100
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0xa9c]
push eax
push str._CUSTOMEREXP_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x24
lea eax, [ebp - 0x818]
push str._AVQMSG_
push eax
call fcn.0046e870
add esp, 8
test eax, eax
je 0x46033a
push dword [0x4b68c4]
lea eax, [ebp - 0xa9c]
push 0x48f188
push 0x100
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0xa9c]
push eax
push str._AVQMSG_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x24
lea eax, [ebp - 0x818]
push str._HWND_FCW_
push eax
call fcn.0046e870
add esp, 8
test eax, eax
je 0x4603a1
push dword [0x4b5524]
lea eax, [ebp - 0xa9c]
push 0x49c760
push 0x100
push eax
call fcn.0046ebde
lea eax, [ebp - 0xa9c]
push eax
push str.StrReplaceConst____szTemp:__s
call fcn.00469290
push 0
lea eax, [ebp - 0xa9c]
push eax
push str._HWND_FCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x2c
push 0
push 0x4cd120
push str._PATH_FCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ccd10
push str._FILE_FCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4ccf18
push str._FILENAME_FCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
push 0
push 0x4b5750
push str._GUID_FCW_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x50
lea eax, [ebp - 0x818]
push 0
push 0x4c73e8
push str._NEW_GUID_
push 0x400
push eax
call fcn.00440530
lea eax, [ebp - 0x818]
push str._SETUPAQ_
push eax
call fcn.0046e870
add esp, 0x1c
test eax, eax
je 0x460496
mov eax, dword [0x4b5528]
test eax, eax
mov ecx, dword [0x4b5524]
cmovne ecx, eax
lea eax, [ebp - 0xa9c]
push ecx
push str._SETUPAQ:_u
push 0x100
push eax
call fcn.0046ebde
push 0
lea eax, [ebp - 0xa9c]
push eax
push str._SETUPAQ_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x24
lea eax, [ebp - 0x818]
push str._TRAKING_EXE_ID_
push eax
call fcn.0046e870
add esp, 8
test eax, eax
je 0x460501
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xca4], ax
lea eax, [ebp - 0xca2]
push eax
call fcn.0046f6e0
push 0x104
lea eax, [ebp - 0xca4]
push eax
push 0x4ccf18
call fcn.0043cfd0
push 0
lea eax, [ebp - 0xca4]
push eax
push str._TRAKING_EXE_ID_
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00440530
add esp, 0x2c
lea ecx, [ebp - 0x818]
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x460536
test dx, dx
je 0x460532
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x460536
add eax, 4
add ecx, 4
test dx, dx
jne 0x460510
xor eax, eax
jmp 0x46053b
sbb eax, eax
or eax, 1
test eax, eax
je 0x460567
lea eax, [ebp - 0x818]
push eax
push dword [ebp + 0xc]
push esi
call fcn.0046fd12
add esp, 0xc
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046ebfa
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
xor ecx, ebp
pop esi
call fcn.0046ebfa
mov esp, ebp
pop ebp
ret