Function at 0x40d8ce
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x186c
call fcn.0040cf00
mov eax, dword [0x45f090]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
xor eax, eax
cmp eax, 0x180
jne 0x40d903
mov ecx, dword [0x4640b4]
add ecx, 0xa231
mov dword [0x1bdb82c], ecx
cmp dword [0x1bdb82c], 0x141
jne 0x40d920
or dword [0x46535c], 0xffffffff
mov dword [0x465358], 0xec58acac
inc eax
cmp eax, 0x12376ec
jl 0x40d8ea
push esi
xor esi, esi
cmp esi, 0x562d05
jne 0x40d93d
mov eax, dword [0x4600a8]
mov dword [0x1bdb830], eax
cmp dword [0x1bdb82c], 0x3c
jne 0x40d953
push str.ricusuve_xixiteluma_rexayodedulimopagecox_hebibebud
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
inc esi
cmp esi, 0x5f6c74
jl 0x40d92b
cmp dword [0x1bdb82c], 0x7c
push edi
jne 0x40da4f
push ebx
lea eax, [ebp - 0x1804]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x185c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push ebx
lea eax, [ebp - 0x1858]
push eax
push ebx
lea eax, [ebp - 0x404]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconW]
push ebx
push ebx
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push str.gupomum
call dword [sym.imp.KERNEL32.dll_FindAtomA]
call dword [sym.imp.KERNEL32.dll_SetFileApisToANSI]
xor eax, eax
mov word [ebp - 0x1850], ax
lea edi, [ebp - 0x184e]
stosw word es:[edi], ax
mov word [ebp - 0x184c], ax
lea edi, [ebp - 0x184a]
stosw word es:[edi], ax
lea eax, [ebp - 0x1864]
push eax
push dword [ebp - 0x184c]
lea eax, [ebp - 0x1854]
push dword [ebp - 0x1850]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
push ebx
lea eax, [ebp - 0x804]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExA]
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push str.wihecifoyewuhoxumadehe_soxefacafenopohugojuxefiwig__s__d__f
push ebx
call fcn.00401d09
push 0x45c994
push 0x4652d0
call fcn.00401d47
push ebx
call fcn.00401d3c
add esp, 0x14
cmp dword [0x1bdb82c], 0x110a
jne 0x40dbcb
push ebx
mov dword [0x1bdb6f8], ebx
mov dword [0x1bdb6fc], ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push ebx
lea eax, [ebp - 0x1004]
push eax
lea eax, [ebp - 0x1854]
push eax
lea eax, [ebp - 0x1858]
push eax
lea eax, [ebp - 0x185c]
push eax
lea eax, [ebp - 0x1850]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
lea eax, [ebp - 0x184c]
push eax
push ebx
push str.cujonoreserudicisugonu
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
push ebx
push ebx
lea eax, [ebp - 0x804]
push eax
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
mov word [ebp - 0x186c], ax
lea edi, [ebp - 0x186a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp - 0x404]
push eax
push str.weboxenudajocivonomij
lea eax, [ebp - 0x186c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push str.fucajodif_karerixidud
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push ebx
push ebx
lea eax, [ebp - 0x1404]
push eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
fld qword [0x45cab8]
push 0x50
push ecx
push ecx
fstp qword [esp]
push 0x45c9f8
push str._s__f__c
call fcn.00401d47
push ebx
push ebx
call fcn.00401c43
add esp, 0x1c
push 7
pop edi
mov dword [ebp - 0x1808], edi
mov dword [ebp - 0x180c], ebx
xor eax, eax
push 1
lea esi, [ebp - 0x1820]
mov word [ebp - 0x181c], ax
call fcn.00401091
push ebx
push ebx
call fcn.00401c43
xor eax, eax
push ebx
push ebx
mov dword [ebp - 0x1824], edi
mov dword [ebp - 0x1828], ebx
mov word [ebp - 0x1838], ax
call fcn.00401e94
push ebx
push ebx
call fcn.00401c43
push ebx
push ebx
call fcn.00401e94
push 0x45ca0c
push 0x4652d0
call fcn.00401d09
add esp, 0x28
push 1
xor ebx, ebx
lea esi, [ebp - 0x183c]
call fcn.0040104c
push 1
lea esi, [ebp - 0x1820]
call fcn.0040104c
push dword [0x1bdb82c]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
xor ecx, ecx
mov dword [0x1bdb54c], eax
pop edi
cmp dword [0x1bdb82c], ebx
jbe 0x40dc2b
mov eax, dword [0x1bdb830]
mov dword [ebp - 0x184c], eax
mov eax, 0xa231
add dword [ebp - 0x184c], eax
mov eax, dword [ebp - 0x184c]
mov al, byte [eax + ecx]
mov edx, dword [0x1bdb54c]
mov byte [ecx + edx], al
mov eax, dword [0x1bdb82c]
cmp eax, 0x5ab
jne 0x40dc26
mov dword [0x1bdb550], 0x19b0
inc ecx
cmp ecx, eax
jb 0x40dbe8
push 0x45ca10
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040d61d
call fcn.0040d5ff
call fcn.0040d888
xor eax, eax
cmp eax, 0xd606b
jne 0x40dc53
call fcn.0040d5f4
inc eax
cmp eax, 0x24e87d
jl 0x40dc47
mov esi, 0x1e4165
cmp dword [0x1bdb82c], 0xcc1
jne 0x40dc7a
push str.mugobesoteninanalaciyovi
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
cmp dword [0x1bdb82c], 0x7c4
mov dword [0x1bdb554], 0x8e46a6f0
jne 0x40dc9c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
dec esi
jne 0x40dc60
pop esi
cmp ebx, 0x408e
jle 0x40dcb4
cmp dword [ebp - 0x1840], 0xf5bed7
jne 0x40dcbd
inc ebx
cmp ebx, 0x687ed2
jl 0x40dca0
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.00401ab5
leave
ret