Function at 0x450a50
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x450bfe
sub esp, 0x30
mov eax, dword [esp + 0x40]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x1c], ecx
call fcn.00432510
lea eax, [0x7f3081]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.00432db0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 4], eax
call fcn.00432bf0
lea eax, str._:_nadxaesageallavxcspdirendfmaftpgc_gp_infintip4ip6keylogmapmaxnannewnilobjpcptrsetsshtcpu00udpurlviaxmlss______as__at__fp_is__lr:_of__on__pc_sp:_sp_x_r_ngt_lt______mInfinf__n____s_Inf_inf.bat.cmd.com.css.exe.gif.htm.jpg.mjs.pdf.png.svg.xml0x_x10803125:_p:443ACDTACSTAEDTAESTAKDTAKSTAWSTAhomAtoiCESTChamCopyDATADashDateEESTEtagExitFindFontFromGET_GOGCGoneHelpHighHomeHostInfoJulyJuneKeyAKeyBKeyCKeyDKeyEKeyFKeyGKeyHKeyIKeyJKeyKKeyLKeyMKeyNKeyOKeyPKeyQKeyRKeySKeyTKeyUKeyVKeyWKeyXKeyYKeyZLisuMetaMiaoModiNZDTNZSTNewaNoneOpenPINGPOSTPingRedoSASTSaveStatTextThaiUndou00_n_tme_0m_____nasn1avx2basebindbmi1bmi2boolbusycallcas1cas2cas3cas4cas5cas6chancorsdatedeaddialermsetagevalfilefromftpsfuncgziphosthourhttpicmpidleigmpinfoint8jpegjsonkindlinklivenodenonenullopenownspathpipepop3quitreadrolerootsbrksmtpsrgbsse2sse3tag:tcp4tcp6trueudp4uintunixvarywebpwithxn______s_..._n_H_T_H_a_H_g_MB___W_a_and__h_a_h_g_h_t_max_ptr__siz_tab_top_u_a_u_g_s__q_s_d34_39_amp_033004300530054506300845103012451345__...__fp:__x_:__y_:__0_0930____s.html.jpeg.wasm.webp1562578125:path____s_nil_AbortAdlamAgainAprilBamumBatakBuhidCDATAClearCloseCommaDograECDSAEjectEnterEqualErrorFetchFoundGreekGuideHTTP_HyperImageKhmerLang1Lang2Lang3Lang4Lang5LatinLimbuLocalLstatMarchMediaMinusNushuOghamOriyaOsageOtherP_224P_256P_384P_521PastePausePowerPrintPropsProxyQuoteRangeReadyRealmRunicSTermShiftSlashSpaceSuperTakriTamilTypeAu202____afteralertallowarraybad_nbasicblockcatchchdirchmodclearclosecountdebugerrorfalsefaultfloatgcinghttpsidrefimap2imap3imapsint16int32int64labellevellocalmkdirmodalmonthntohsotherpanicparsepop3sprotoproxyrangescav_sleepslicesockssse41sse42ssse3styletabletext_titletls:_tokentracetypeduint8usageutf_8valuewrite_Value_addr_base__code_ctxt:_curg_goid__jobs_list_m__p_next_p__m_prev_span__util_...__n__i____not___val___id_:390625:_13_r_n__chanAcceptAnswerArabicAugustBasic_BrahmiCANCELCancelCarianChakmaCommonCookieCopticDeleteDigit0Digit1Digit2Digit3Digit4Digit5Digit6Digit7Digit8Digit9EntityEscapeExpectFailedFnLockFormatFridayGOAWAYGOROOTGetACPGothicHangulHatranHebrewHyphenInsertKaithiKhojkiLepchaLockedLogOffLycianLydianMediumMondayPADDEDPageUpPeriodPragmaRejangSCHED_STREETScriptSelectServerStrictStringSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC12UTC13UTC_02UTC_08UTC_09UTC_11WakeUpWanchoZoomIn__byteufffd_n_____ta_rateacceptactiveassertatomicbeforebigintchan__chromeclosedcookiedirxmldomainefenceexec:_expectflowtoglobalgopherhangupheaderhiddenipnetk_ratekilledlegendlistenmarkerminutemodulenormalnumberobjectoriginoutputparserpopcntpromptregexpreloadremovereturnscriptsecondsecureselectserversilentsocketsocks_socks5statusstringstructsweep_symboltelnetuint16uint32uint64unusedwebsqlworkeryuv420yuv422yuv444__v_v___conn___scan___scan__MB_in__Value__dying_flags_len_d_locks_m__g0_nmsys_snil_n_s___d___goid__j0____eof_:__get_:__gpu_:__key_:__low_:__mac_:__set_:__src_:__sum_:__top_:__url_:___s_s19531252.5.4.32.5.4.52.5.4.62.5.4.72.5.4.82.5.4.99765625:method:scheme:statusAbortedAltLeftArrowUpAvestanBengaliBrailleCONNECTChanDirCommentControlConvertCopySidCreatedCypriotDeseretERROR:_Ed25519ElbasanElementElymaicExpiresGODEBUGGranthaHEADERSHanunooIM_UsedIO_waitIntlYenJanuaryKannadaLoadingMD2_RSAMD5_RSAMUI_DltMUI_StdMakasarMandaicMarchenMultaniMyanmarNumLockOctoberOsmanyaPATHEXTRadicalReaddirSharadaShavianSiddhamSinhalaSogdianSoyomboSubjectSwapperTagalogTibetanTirhutaTrailerTuesdayTypeALLTypeOPTTypePTRTypeSOATypeSRVTypeTXTTypeWKSUpgradeUsage:_nVeryLowVisibleWSARecvWSASendZoomOut_ttypes__tvalueabortedanchorZbooleancharsetcheckedchunkedclosureconfirmconnectconsolecookiesdefaultderiveddetailsexpiresfloat32float64focusedgctracehttp:__integerinvalidkeywordlookup_networkneutralnil_keynumber_offlinepanic:_preloadpressedprofilepromiserefererrefreshregularresizerrunningserial:signal_stoppedstoragesyscalltimeEndtimeouttraileruintptrunknownupgradeverbosewaitingwarningweakmapweaksetwsarecvwsasend_data_q_etypes__goal_incr_v_is_not__mcount_minutes_nalloc_newval_nfreed_ping_q_pointer
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00432db0
call fcn.00432580
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x2c], ecx
xor edx, edx
jmp 0x450ae6
mov ebx, dword [esp + 0x14]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
cmp edx, eax
jge 0x450b54
mov dword [esp + 0x14], edx
mov eax, dword [ecx + edx*4]
mov dword [esp + 0x10], eax
mov dword [esp], eax
call fcn.00448f60
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x24], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x14]
test edx, edx
sete bl
mov byte [esp + 8], bl
mov word [esp + 9], 0
call fcn.00451060
movzx eax, byte [esp + 0xc]
test al, al
je 0x450ad7
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 8], eax
call fcn.00450c10
jmp 0x450ad7
cmp dword [esp + 0x38], 0x64
je 0x450bd9
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00448f60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
jne 0x450baa
xor edx, edx
test dl, dl
je 0x450b90
mov edx, dword [esp + 0x44]
test edx, edx
setne dl
cmp dword [esp + 0x40], 1
setne bl
or edx, ebx
test dl, dl
jne 0x450b94
add esp, 0x30
ret
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.00450500
jmp 0x450b90
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
call fcn.00451060
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
jmp 0x450b75
call fcn.00432510
lea eax, [0x7f4b83]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.00432db0
call fcn.00432580
jmp 0x450b5b
call fcn.00457de0
jmp fcn.00450a50