Function at 0x4b38d0
Capabilities:
Get file size
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x533219
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x575494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
mov ebx, ecx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov ecx, 1
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], edi
cmp eax, edi
je 0x4b3ada
push edi
push 0x80
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4b3ada
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2c]
xor edx, edx
xor ecx, ecx
add ecx, edi
adc eax, edx
mov esi, ecx
add esi, 0xffffffff
mov edx, eax
adc edx, 0xffffffff
test edx, edx
ja 0x4b399a
jb 0x4b3988
cmp esi, 0x3fe
ja 0x4b399a
push 0x550ad4
lea eax, [ebp - 0x28]
call fcn.005080c0
jmp 0x4b3ad8
mov esi, ecx
shrd ecx, eax, 0xa
shr eax, 0xa
mov ebx, eax
and esi, 0x3ff
mov edi, ecx
test ebx, ebx
ja 0x4b39c2
jb 0x4b39bb
cmp edi, 0x400
jae 0x4b39c2
push 0x559828
jmp 0x4b39fa
mov esi, edi
shrd edi, ebx, 0xa
shr ebx, 0xa
and esi, 0x3ff
test ebx, ebx
ja 0x4b39e6
jb 0x4b39df
cmp edi, 0x400
jae 0x4b39e6
push 0x559830
jmp 0x4b39fa
mov esi, edi
shrd edi, ebx, 0xa
and esi, 0x3ff
shr ebx, 0xa
push 0x559838
lea eax, [ebp - 0x28]
call fcn.005080c0
imul esi, esi, 0x3e8
shr esi, 0xa
mov eax, 0x51eb851f
mul esi
shr edx, 5
imul edx, edx, 0x64
mov eax, esi
sub eax, edx
cmp eax, 0x32
jbe 0x4b3a36
cmp esi, 0x3b6
jae 0x4b3a2e
add esi, 0x32
jmp 0x4b3a36
add edi, 1
adc ebx, 0
xor esi, esi
mov eax, 0x51eb851f
mul esi
xor eax, eax
mov esi, edx
shr esi, 5
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
push edi
lea ecx, [ebp - 0x3c]
push 0x550a58
push ecx
mov byte [ebp - 4], 2
call fcn.005074a0
add esp, 0xc
cmp dword [ebp - 0x38], 1
jne 0x4b3aa2
push 3
lea edx, [ebp - 0x18]
push edx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4b3a88
mov eax, 0x54ee24
mov ecx, dword [ebp - 0x1c]
push eax
push esi
lea eax, [ebp - 0x18]
push eax
push edi
push str._d_s_d_s
push ecx
call fcn.005074a0
add esp, 0x18
jmp 0x4b3ac1
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4b3aae
mov eax, 0x54ee24
mov edx, dword [ebp - 0x1c]
push eax
push edi
push str._d_s
push edx
call fcn.005074a0
add esp, 0x10
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4b3ad5
push eax
call fcn.0051eadb
add esp, 4
mov ebx, dword [ebp - 0x1c]
xor edi, edi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x4b3aee
push eax
call fcn.0051eadb
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051eacc
mov esp, ebp
pop ebp
ret 4