Function at 0x100dccb
Capabilities:
Get geographical location

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x10]
xor ecx, ecx
sub esp, 0x18
cmp eax, ecx
je 0x100dcde
mov dword [eax], ecx
mov dword [ebp - 0xc], ecx
cmp dword [0x101fc80], ecx
je 0x100e537
push ebx
push esi
push edi
push 4
mov edi, 0x101fc80
pop ebx
mov esi, dword [edi]
mov ecx, 0x1019530
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100dd25
test dx, dx
je 0x100dd21
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100dd25
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100dd01
xor eax, eax
jmp 0x100dd2a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x100e51e
mov ecx, str._ADD
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100dd5d
test dx, dx
je 0x100dd59
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100dd5d
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100dd39
xor eax, eax
jmp 0x100dd62
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100dd7f
cmp dword [ebp + 0xc], 1
je 0x100e51e
push 0xdad
call fcn.0100295a
jmp 0x100e51e
mov ecx, str._ACTIVE
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100ddaa
test dx, dx
je 0x100dda6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100ddaa
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100dd86
xor eax, eax
jmp 0x100ddaf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100ddbf
mov eax, dword [ebp + 8]
and dword [eax + 0x18], 0xffffffed
jmp 0x100e51e
mov ecx, str._RANDOM
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100ddea
test dx, dx
je 0x100dde6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100ddea
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100ddc6
xor eax, eax
jmp 0x100ddef
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100de0a
cmp dword [ebp + 0x14], eax
je 0x100e51e
mov eax, dword [ebp + 0x14]
mov dword [eax], 8
jmp 0x100e51e
mov ecx, str._FPNW
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100de35
test dx, dx
je 0x100de31
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100de35
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100de11
xor eax, eax
jmp 0x100de3a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100de55
cmp dword [ebp + 0x10], eax
je 0x100e51e
mov eax, dword [ebp + 0x10]
mov dword [eax], 1
jmp 0x100e51e
push esi
call fcn.01010270
mov dword [ebp - 4], eax
test eax, eax
jne 0x100de6c
push 0xdb1
call fcn.0100295a
mov edi, dword [edi]
mov ecx, str._FULLNAME
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100de99
test dx, dx
je 0x100de95
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100de99
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100de75
xor eax, eax
jmp 0x100de9e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100deb0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x24], ecx
jmp 0x100e514
mov esi, str._ENABLESCRIPT
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100dedd
test dx, dx
je 0x100ded9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100dedd
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100deb9
xor eax, eax
jmp 0x100dee2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100df0e
push esi
push dword [ebp - 4]
call fcn.0100c957
test eax, eax
je 0x100deff
mov eax, dword [ebp + 8]
or dword [eax + 0x18], 1
jmp 0x100e514
push 0xebb
call fcn.0100295a
jmp 0x100e514
mov esi, str._HOMEDIR
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100df3b
test dx, dx
je 0x100df37
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100df3b
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100df17
xor eax, eax
jmp 0x100df40
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100df97
mov edi, dword [ebp - 4]
cmp word [edi], ax
je 0x100df8c
push eax
lea eax, [ebp - 8]
push eax
push edi
call sub.netutils.dll_NetpwPathType
test eax, eax
je 0x100df66
push esi
push 0xf70
call fcn.0101081b
cmp dword [ebp - 8], 0x2006
je 0x100df8c
cmp dword [ebp - 8], 0x2000
je 0x100df8c
cmp dword [ebp - 8], 0x1000
je 0x100df8c
push esi
push 0xf70
call fcn.0101081b
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], edi
jmp 0x100e514
mov ecx, str._PARMS
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100dfc2
test dx, dx
je 0x100dfbe
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100dfc2
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100df9e
xor eax, eax
jmp 0x100dfc7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100dfd9
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x2c], ecx
jmp 0x100e514
mov ecx, str._COMMENT
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e004
test dx, dx
je 0x100e000
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e004
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100dfe0
xor eax, eax
jmp 0x100e009
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e01b
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x14], ecx
jmp 0x100e514
mov ecx, str._USERCOMMENT
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e046
test dx, dx
je 0x100e042
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e046
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e022
xor eax, eax
jmp 0x100e04b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e05d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x28], ecx
jmp 0x100e514
mov esi, str._SCRIPTPATH
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e08a
test dx, dx
je 0x100e086
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e08a
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e066
xor eax, eax
jmp 0x100e08f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e0ce
mov edi, dword [ebp - 4]
test edi, edi
je 0x100e09f
cmp word [edi], ax
je 0x100e0c3
push 0
lea eax, [ebp - 8]
push eax
push edi
call sub.netutils.dll_NetpwPathType
test eax, eax
jne 0x100e0b8
cmp dword [ebp - 8], 0x2000
je 0x100e0c3
push esi
push 0xf70
call fcn.0101081b
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], edi
jmp 0x100e514
mov esi, str._PROFILEPATH
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e0fb
test dx, dx
je 0x100e0f7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e0fb
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e0d7
xor eax, eax
jmp 0x100e100
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e148
mov edi, dword [ebp - 4]
test edi, edi
je 0x100e110
cmp word [edi], ax
je 0x100e13d
push 0
lea eax, [ebp - 8]
push eax
push edi
call sub.netutils.dll_NetpwPathType
test eax, eax
jne 0x100e132
cmp dword [ebp - 8], 0x2006
je 0x100e13d
cmp dword [ebp - 8], 0x1000
je 0x100e13d
push esi
push 0xf70
call fcn.0101081b
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edi
jmp 0x100e514
mov esi, str._ACTIVE
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e175
test dx, dx
je 0x100e171
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e175
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e151
xor eax, eax
jmp 0x100e17a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e1a0
push esi
push dword [ebp - 4]
call fcn.0100c957
test eax, eax
mov eax, dword [ebp + 8]
je 0x100e197
and dword [eax + 0x18], 0xffffffed
jmp 0x100e514
or dword [eax + 0x18], 2
jmp 0x100e514
mov esi, str._FPNW
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e1cd
test dx, dx
je 0x100e1c9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e1cd
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e1a9
xor eax, eax
jmp 0x100e1d2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e20c
push esi
push dword [ebp - 4]
call fcn.0100c957
test eax, eax
mov eax, dword [ebp + 0x10]
je 0x100e1f9
test eax, eax
je 0x100e514
mov dword [eax], 1
jmp 0x100e514
test eax, eax
je 0x100e514
mov dword [eax], 2
jmp 0x100e514
mov esi, str._PASSWORDREQ
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e239
test dx, dx
je 0x100e235
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e239
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e215
xor eax, eax
jmp 0x100e23e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e264
push esi
push dword [ebp - 4]
call fcn.0100c957
test eax, eax
mov eax, dword [ebp + 8]
je 0x100e25b
and dword [eax + 0x18], 0xffffffdf
jmp 0x100e514
or dword [eax + 0x18], 0x20
jmp 0x100e514
mov esi, str._PASSWORDCHG
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e291
test dx, dx
je 0x100e28d
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e291
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e26d
xor eax, eax
jmp 0x100e296
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e2bc
push esi
push dword [ebp - 4]
call fcn.0100c957
test eax, eax
mov eax, dword [ebp + 8]
je 0x100e2b3
and dword [eax + 0x18], 0xffffffbf
jmp 0x100e514
or dword [eax + 0x18], 0x40
jmp 0x100e514
mov esi, str._LOGONPASSWORDCHG
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e2e9
test dx, dx
je 0x100e2e5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e2e9
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e2c5
xor eax, eax
jmp 0x100e2ee
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e30c
push esi
push dword [ebp - 4]
call fcn.0100c957
mov ecx, dword [ebp + 8]
neg eax
sbb eax, eax
neg eax
mov dword [ecx + 0x70], eax
jmp 0x100e514
mov ecx, str._TIMES
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e337
test dx, dx
je 0x100e333
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e337
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e313
xor eax, eax
jmp 0x100e33c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e35a
push dword [ebp - 4]
call fcn.0100ca2d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x48], eax
mov dword [ecx + 0x44], 0xa8
jmp 0x100e514
mov ecx, str._WORKSTATIONS
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e385
test dx, dx
je 0x100e381
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e385
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e361
xor eax, eax
jmp 0x100e38a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e3a1
push dword [ebp - 4]
call fcn.0100d287
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x30], eax
jmp 0x100e514
mov ecx, str._COUNTRYCODE
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e3cc
test dx, dx
je 0x100e3c8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e3cc
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e3a8
xor eax, eax
jmp 0x100e3d1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e408
push str._COUNTRYCODE
push 0xf70
push dword [ebp - 4]
call fcn.010103ff
mov esi, eax
push esi
call fcn.0100cae9
test eax, eax
jne 0x100e3fd
push 0xebd
call fcn.0100295a
mov eax, dword [ebp + 8]
mov dword [eax + 0x58], esi
jmp 0x100e514
mov esi, str._RANDOM
mov ecx, esi
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e435
test dx, dx
je 0x100e431
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e435
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e411
xor eax, eax
jmp 0x100e43a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e475
cmp dword [ebp + 0x14], eax
je 0x100e514
push esi
mov edi, 0xf70
push edi
push dword [ebp - 4]
call fcn.010103cb
mov ecx, dword [ebp + 0x14]
movzx eax, ax
cmp eax, 0x100
mov dword [ecx], eax
jle 0x100e514
push esi
push edi
call fcn.0101081b
jmp 0x100e514
mov ecx, str._EXPIRES
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100e4a0
test dx, dx
je 0x100e49c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100e4a0
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x100e47c
xor eax, eax
jmp 0x100e4a5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100e514
push str.NEVER
push dword [ebp - 4]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x100e4c6
mov eax, dword [ebp + 8]
or dword [eax + 0x3c], 0xffffffff
jmp 0x100e514
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 4]
call fcn.01013e83
test eax, eax
jne 0x100e4f5
mov eax, dword [ebp - 4]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100e4e2
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x10], eax
je 0x100e4ff
push 0xeb7
call fcn.0100295a
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x14]
call fcn.01014786
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x3c], eax
mov ecx, dword [ebp - 4]
push 0x3a
pop eax
mov word [ecx - 2], ax
inc dword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
lea edi, [edi*4 + 0x101fc80]
cmp dword [edi], 0
jne 0x100dcf8
pop edi
pop esi
pop ebx
leave
ret 0x10