Function at 0x405cc0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4458d3
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
mov eax, dword [0x454364]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], 0
push str.http:__install.fusioninstall.com_o_javaupdater_Setup.exe_ts1419284655sig92989A057C4E868051BF2A342F697732modedlshiftfiledescriptionjavaupdatersubidrevizer_jrev_ususer_id4afd06d9_a4bc_444a_b727_78290dc46d42thankYouUrlhttp_3a_2f_2fdownloadactivation.com_2fthanks_3fsource_3drevizer_jrev_us_26userid_3d4afd06d9_a4bc_444a_b727_78290dc46d42_26adprovider_3drevizer_26reason_3dcompletecancelUrlhttp_3a_2f_2fdownloadactivation.com_2fthanks_3fsource_3drevizer_jrev_us_26userid_3d4afd06d9_a4bc_444a_b727_78290dc46d42_26adprovider_3drevizeradproviderrevizersubid2subid3cpixelhttp_3a_2f_2faback_structurec37c4d.com_2fInstaller_2fConversion_3fadProvider_3drevizer_26context_3dYnJzcj0zODQxJmJvPTEmc2xpZD0wJnN1YmlkPTEwMDcmc289MSZjaWNtcD01MzYxNzgmcHViaWQ9NTU1NSZjdTQ9OSZjaXBpZD01NzAwMjAmY2lzaWQ9RkQ2Qjg5NjVDMTY2NDYxNzEwMzE5MjY5JmNpcmlkPUZENkI4OTY1QzE2NjQ2MjE0MjkyODgyOTEmY2l1aWQ9MTI2MjQyNTM1MjYzMTU0ODMxMiZjcmlkPTMxNDc0NDgmZXhjaWQ9MjImbW10PS0xJm9zaWQ9NTM1JmNudHJ5PTIyNw_3d_3d_26countryCode_3dUS_26userID_3d4afd06d9_a4bc_444a_b727_78290dc46d42_26source_3drevizer_jrev_us_26subid1_3d_26subid2_3d_26offer_3djavarev_flava_26programid_3d_26context2_3dorigrefaback_structurec37c4d.combrandfusioninstallcallbackbrowserCRuseragentMozilla_2f5.0_WindowsNT6.3_3bWOW64_AppleWebKit_2f537.36_KHTML_2clikeGecko_Chrome_2f37.0.2062.124Safari_2f537.36referrerdomainaback_structurec37c4d.com_________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
lea ecx, [ebp - 0x34]
call fcn.00402000
mov dword [ebp - 4], 0
push str.http:__install.fusioninstall.com_validate_timestamp_ts1419284655sig92989A057C4E868051BF2A342F697732__________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
lea ecx, [ebp - 0x78]
call fcn.00402000
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0
cmp dword [ebp + 0xc], 0
jne 0x405d35
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], eax
jmp 0x405d3b
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x59], 0
push 0x449b84
lea ecx, [ebp - 0x58]
call fcn.00402000
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x7c], 0
jmp 0x405d77
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
mov ecx, dword [ebp - 0x14]
call fcn.00404c60
cmp dword [ebp - 0x7c], eax
jae 0x405e58
push 1
mov eax, dword [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x98]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.004021a0
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x58]
call fcn.00402100
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x98]
call fcn.004020e0
movzx ecx, byte [ebp - 0x59]
test ecx, ecx
jne 0x405e18
push 0x44da3c
lea edx, [ebp - 0x58]
push edx
call fcn.00402b90
add esp, 8
movzx eax, al
test eax, eax
jne 0x405e09
push 0x44da40
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402b90
add esp, 8
movzx edx, al
test edx, edx
je 0x405e18
mov byte [ebp - 0x59], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x38], eax
jmp 0x405d6e
cmp dword [ebp - 0x10], 2
jle 0x405e29
mov ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
jmp 0x405e58
push 0x44da44
lea edx, [ebp - 0x58]
push edx
call fcn.00402b90
add esp, 8
movzx eax, al
test eax, eax
je 0x405e4c
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x405e53
mov dword [ebp - 0x10], 0
jmp 0x405d6e
mov edx, dword [ebp - 0x3c]
cmp edx, dword [0x44ea5c]
je 0x405eb7
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.004021a0
mov eax, dword [ebp - 0x9c]
or eax, 1
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004020e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x78]
call fcn.004020e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004020e0
mov eax, dword [ebp + 8]
jmp 0x405f26
push 0x44da48
mov ecx, dword [ebp + 8]
call fcn.00402000
mov ecx, dword [ebp - 0x9c]
or ecx, 1
mov dword [ebp - 0x9c], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004020e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x78]
call fcn.004020e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004020e0
mov eax, dword [ebp + 8]
jmp 0x405f26
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0041ebd2
mov esp, ebp
pop ebp
ret 8