Function at 0x1000fc3c
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x10058299
call fcn.100579d8
sub esp, 0x140
mov byte [ebp - 0x50], cl
push ebx
push esi
push edi
test cl, cl
je 0x100102cd
mov dword [ebp - 0x28], 0x4716
cmp dword [ebp - 0x28], 0x4a70
push 0
pop ebx
jle 0x1000fccd
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x10], 0x5c51
mov eax, esi
lea ecx, [ebp - 0x134]
and eax, edi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000fc9a
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.10009a96
dec esi
dec dword [ebp - 0x10]
jne 0x1000fc7e
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6238
jl 0x1000fc74
inc edi
cmp edi, 0x2ff
jl 0x1000fc6f
mov esi, dword [ebp + 0x18]
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x100102ae
lea eax, [ebp - 0x98]
mov dword [ebp - 0x98], ebx
push eax
push 0x1000
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
call fcn.10011388
mov dword [ebp - 4], ebx
mov edi, 0xb224
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x5c]
push dword [ebp - 0x5c]
sar eax, 1
push eax
push edi
push 0xb661
call fcn.100278f9
pop ecx
pop ecx
call eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x7c]
call fcn.100096d4
push 0xdc86
mov byte [ebp - 4], 1
call fcn.10035503
cmp dword [ebp - 0x68], 8
pop ecx
movzx edx, ax
lea ecx, [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], edx
cmp word [ecx + eax*2 - 2], dx
je 0x1000fd6f
push ecx
lea eax, [ebp - 0x18]
mov edx, 0x4465
push eax
lea eax, [ebp - 0x7c]
push eax
push ecx
mov cl, 1
call fcn.1000f6de
add esp, 0x10
push ecx
push 0x4714
lea eax, [ebp - 0x7c]
push eax
push ecx
mov cl, 1
call fcn.1000f23e
add esp, 0x10
lea eax, [ebp - 0x7c]
cmp dword [ebp - 0x68], 8
cmovae eax, dword [ebp - 0x7c]
push ebx
push eax
push edi
push 0xd40c
call fcn.100278f9
pop ecx
pop ecx
call eax
push ecx
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1000f2a2
add esp, 0xc
mov dword [ebp - 0x60], ebx
lea edx, [ebp - 0x60]
push 1
push 0x568e
push ecx
push 0x350a
mov ecx, esi
call fcn.1000f4a2
add esp, 0x10
mov byte [ebp - 0x11], bl
mov eax, ebx
mov dword [ebp - 0x28], ebx
cmp eax, 0x12c
jae 0x100102a3
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.10009699
push 0x10
pop edx
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 2
call fcn.10012016
push ecx
push ecx
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0xb8]
call fcn.1001143c
push 0x2e
pop eax
push 2
mov ecx, ebx
mov byte [ebp - 0x40], bl
mov dword [ebp - 0x3f], 0xa8880233
mov dword [ebp - 0x3b], 0x1d024b01
mov word [ebp - 0x37], 0x1d03
mov word [ebp - 0x94], ax
pop esi
mov dword [ebp - 0x10], ecx
cmp esi, 2
jne 0x1000fe52
push 3
pop ecx
push ecx
mov dword [ebp - 0x10], ecx
pop esi
jmp 0x1000fe9d
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
push 1
movzx eax, byte [ebp + eax - 0x42]
movzx ecx, word [ebp + eax*2 - 0x94]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
add ecx, edx
push ecx
mov word [ebp + eax*2 - 0x94], cx
lea eax, [ebp - 0x10]
push eax
push ecx
push ecx
push 0x22b8
mov ecx, 0x6b43
call fcn.1000f53b
mov ecx, dword [ebp - 0x10]
add esp, 0x18
add esi, 2
cmp esi, 0xb
jb 0x1000fe43
xor eax, eax
mov dword [ebp - 0xd8], 7
mov word [ebp - 0x8c], ax
lea ecx, [ebp - 0xec]
mov word [ebp - 0xec], ax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0xdc], ebx
call fcn.10009b82
push ecx
push ecx
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0xb8]
call fcn.1001143c
push ebx
push 1
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 3
call fcn.10009ca4
xor eax, eax
lea edi, [ebp - 0x94]
cmp dword [ebp - 0xa4], 8
stosd dword es:[edi], eax
push ebx
push 0x80
push 2
stosd dword es:[edi], eax
push ebx
push ebx
push 0x40000000
stosw word es:[edi], ax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov edi, 0xb224
push eax
push edi
push 0xe0c3
call fcn.100278f9
pop ecx
pop ecx
call eax
mov dword [ebp - 0x44], 0x7e3e
mov esi, eax
cmp dword [ebp - 0x44], 0x816a
mov dword [ebp - 0x9c], esi
jle 0x1000ffd8
mov esi, ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x10], 0x5a7c
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x14c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ff8f
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.10009a96
inc edi
cmp edi, 0x2401
jl 0x1000ff71
dec esi
dec dword [ebp - 0x10]
jne 0x1000ff6f
mov esi, dword [ebp - 0x64]
inc esi
mov dword [ebp - 0x64], esi
cmp esi, 0x3c30
jl 0x1000ff62
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, dword [ebp - 0x9c]
mov edi, 0xb224
cmp esi, 0xffffffff
je 0x10010018
push ebx
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x60]
mov eax, dword [ebp + 0x18]
push dword [eax]
push esi
push edi
push 0xc318
call fcn.100278f9
pop ecx
pop ecx
call eax
push esi
test eax, eax
push edi
push 0xed7a
setne bl
call fcn.100278f9
pop ecx
pop ecx
call eax
test bl, bl
jne 0x1001005f
xor ebx, ebx
cmp dword [ebp - 0x44], 0x7aa9
jge 0x1001002c
push str.bai_vollwtqbk_zmb_dgg_oyrbqsqkm_webh_gahpvxd_xuxan_rnmdzjhc_uxxulzd
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 3
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 1
call fcn.10009ca4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
jmp 0x1000fdd6
push 0x22
pop edi
xor ebx, ebx
mov dword [ebp - 0x24], 0x203cd00
push 2
mov ecx, ebx
mov word [ebp - 0x20], 0x796b
mov word [ebp - 0x1c], di
pop esi
mov dword [ebp - 0x4c], ecx
cmp esi, 2
jne 0x1001008c
push 4
pop ecx
push ecx
mov dword [ebp - 0x4c], ecx
pop esi
jmp 0x100100db
movzx edx, byte [ebp + esi - 0x23]
mov eax, esi
sub eax, ecx
push 0xabf
movzx eax, byte [ebp + eax - 0x26]
movzx ecx, word [ebp + eax*2 - 0x1c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x24]
add ecx, edx
push ecx
push 1
push ecx
push 0x2f79
push ecx
mov word [ebp + eax*2 - 0x1c], cx
lea eax, [ebp - 0x4c]
push 0x822
push eax
mov ecx, 0xed7
call fcn.1000f58a
mov ecx, dword [ebp - 0x4c]
add esp, 0x20
add esi, 2
cmp esi, 6
jb 0x1001007d
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0x1a], ax
lea ecx, [ebp - 0xd0]
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0xc0], ebx
call fcn.10009b82
push ebx
push 0x282c
push 0x424
push 0x5317
push 0x1cec
push 0x38c5
push 0x3ebc
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x1c], ebx
push eax
mov dl, 1
push 0x1ea7
mov cl, dl
call fcn.10010359
add esp, 0x28
mov dword [ebp - 0x34], 0xfe024600
mov ecx, ebx
mov dword [ebp - 0x30], 0x202016d
mov word [ebp - 0x2c], 0x30f
mov byte [ebp - 0x2a], 0x7c
push 2
mov word [ebp - 0x88], di
pop esi
mov dword [ebp - 0x48], ecx
cmp esi, 2
jne 0x1001018a
push 3
pop ecx
push ecx
mov dword [ebp - 0x48], ecx
pop esi
jmp 0x100101d5
movzx edx, byte [ebp + esi - 0x33]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x36]
movzx ecx, word [ebp + eax*2 - 0x88]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x34]
add ecx, edx
mov edx, 0x10aa
push ecx
push 0x5209
mov word [ebp + eax*2 - 0x88], cx
lea eax, [ebp - 0x48]
push eax
push ecx
push ecx
mov cl, 1
call fcn.1000f69c
mov ecx, dword [ebp - 0x48]
add esp, 0x14
add esi, 2
cmp esi, 0xb
jb 0x1001017b
xor eax, eax
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x80], ax
lea ecx, [ebp - 0x104]
mov word [ebp - 0x104], ax
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0xf4], ebx
call fcn.10009b82
push ecx
push ecx
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xd0]
call fcn.1001143c
push ebx
push 1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 5
call fcn.10009ca4
xor eax, eax
lea edi, [ebp - 0x88]
stosd dword es:[edi], eax
lea edx, [ebp - 0x11]
push 1
push ecx
push ecx
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.1000f70a
add esp, 0xc
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0xd0]
call fcn.1000dff2
mov ecx, dword [ebp + 0xc]
push ebx
push 1
mov dword [ecx], eax
lea ecx, [ebp - 0xd0]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0x11c]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0x7c]
call fcn.10009ca4
lea ecx, [ebp - 0x5c]
call fcn.10011419
jmp 0x100102e2
mov eax, dword [ebp + 0xc]
mov dword [eax], 2
jmp 0x1001028e
cmp dword [ebp - 0x28], 0x434e
jge 0x100102c2
push str.vthpogheo_qqu_lab_gdpaoll_kusqvueec_zqyan_jkg_mxerp_mtsqmnp_tdvrg_anqlykej_wenxn
call fcn.1003f93c
pop ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
jmp 0x100102e2
cmp byte [edx], 0
je 0x100102e2
push 0x199
xor ebx, ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret