Function at 0x1006f010
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
push 0xc4
mov eax, 0x101218e5
call fcn.101108dc
mov dword [ebp - 0xc8], ecx
mov eax, dword [ebp + 8]
xor ebx, ebx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xc4], ebx
cmp dword [eax + 0x10], ebx
jne 0x1006f046
xor eax, eax
inc eax
jmp 0x1006f95d
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], ebx
push ecx
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x28]
rep stosd dword es:[edi], eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.10082bd8
push 8
pop ecx
xor eax, eax
mov byte [ebp - 4], 1
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x78]
call fcn.100826dd
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 3
call fcn.100859e0
mov ebx, eax
mov dword [ebp - 0xd0], ebx
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x58]
mov esi, dword [ebx]
lea ecx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
mov esi, dword [esi + 4]
push eax
mov eax, dword [ebp - 0x30]
add eax, ecx
push eax
push ecx
mov ecx, esi
call dword [0x1014488c]
mov ecx, ebx
call esi
test al, al
jne 0x1006f22f
push 0x101e2a68
mov dword [ebp - 0xc4], 0xc
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x90]
push edi
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 5
call fcn.1003a3c0
mov eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 6
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0xc0]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.1001524d
test esi, esi
je 0x1006f21f
push edi
lea ecx, [ebp - 0xc0]
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 8
call fcn.1003a3c0
mov eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 9
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.100e1c13
add esp, 0xc
mov esi, dword [eax]
push str.ParseIMSFetchAccessTokenResponse
push str._s_:_Parsing_Failed
push edi
mov ecx, dword [esi + 0x24]
push eax
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x90]
call fcn.1001524d
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 4
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
jmp 0x1006f904
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x90]
push edi
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xb
push eax
push dword [0x101d90cc]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xc
push ecx
mov ecx, eax
call fcn.10083ffb
mov esi, dword [ebp - 0xcc]
mov ecx, esi
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xd
push eax
push dword [0x101d90c8]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xe
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x18]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push 0
lea ecx, [ebp - 0x90]
call fcn.1003a3c0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
push dword [0x101d9128]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.1008412b
lea ecx, [ebp - 0xa8]
mov dword [esi + 0x60], eax
mov dword [esi + 0x64], edx
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x11
push eax
push dword [0x101d912c]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x12
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x48]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x13
push eax
push dword [0x101d9154]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x14
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x30]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x15
push eax
push dword [0x101d9130]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x16
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x68]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x17
push eax
push dword [0x101d9134]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x18
push ecx
mov ecx, eax
call fcn.10083ffb
sub esi, 0xffffff80
push eax
mov ecx, esi
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push esi
lea ecx, [ebp - 0x90]
call fcn.1003a3c0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x19
push eax
push dword [0x101d9138]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, eax
call fcn.10083ffb
mov esi, dword [ebp - 0xcc]
push eax
lea ecx, [esi + 0x98]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1b
push eax
push dword [0x101d9144]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0xe0]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1d
push eax
push dword [0x101d9140]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0xc8]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1f
push eax
push dword [0x101d913c]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x20
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0xb0]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x21
push eax
push dword [0x101d9150]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x22
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x128]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x23
push eax
push dword [0x101d9148]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x24
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0xf8]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x25
push eax
push dword [0x101d914c]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x26
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x110]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x27
push eax
push dword [0x101d9170]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x140]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.10082ec8
push edi
lea ecx, [ebp - 0x90]
call fcn.10082b43
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x29
push eax
push dword [0x101d9174]
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [esi + 0x158]
call fcn.1003a3c0
lea ecx, [ebp - 0xa8]
call fcn.1001524d
lea ecx, [ebp - 0xc0]
call fcn.10082ec8
lea ecx, [ebp - 0x90]
call fcn.10082ec8
push ebx
lea ecx, [ebp - 0xd0]
call fcn.1003a3c0
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x1006f924
inc eax
push eax
push dword [ebp - 0x58]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.10082df3
lea ecx, [ebp - 0x28]
call fcn.10082ec8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1006f957
inc ecx
push ecx
push dword [ebp - 0x40]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0xc4]
call fcn.10110886
ret 8