Function at 0x40d190
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4486cb
mov eax, dword fs:[0]
push eax
sub esp, 0xcb8
mov eax, dword [0x45ff68]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa98], ecx
push 1
push 0x40
push 0x20
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.00404760
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xc2c]
call fcn.0040b150
movzx ecx, al
test ecx, ecx
jne 0x40d214
mov byte [ebp - 0xa8e], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc2c]
call fcn.004062b0
mov al, byte [ebp - 0xa8e]
jmp 0x40dc0d
push 1
push 2
lea ecx, [ebp - 0xcc4]
call fcn.00404a20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc2c]
call fcn.0040be50
push eax
lea ecx, [ebp - 0xcc4]
call fcn.00405c90
lea edx, [ebp - 0x740]
push edx
lea ecx, [ebp - 0xcc4]
call fcn.0040e310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc2c]
call fcn.00408a20
push str.PCUlJT4
lea ecx, [ebp - 0x7a0]
call fcn.00401130
mov byte [ebp - 4], 3
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0x770]
push ecx
call fcn.00401b60
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7a0]
call fcn.00401240
push str.PC8lJSU
lea ecx, [ebp - 0x7b8]
call fcn.00401130
mov byte [ebp - 4], 6
lea edx, [ebp - 0x7b8]
push edx
lea eax, [ebp - 0x788]
push eax
call fcn.00401b60
add esp, 8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7b8]
call fcn.00401240
push 0
lea ecx, [ebp - 0x770]
push ecx
lea ecx, [ebp - 0x740]
call fcn.004090c0
mov esi, eax
lea ecx, [ebp - 0x770]
call fcn.0040b170
add esi, eax
mov dword [ebp - 0xae8], esi
push 0
lea edx, [ebp - 0x788]
push edx
lea ecx, [ebp - 0x740]
call fcn.004090c0
mov esi, eax
lea ecx, [ebp - 0x788]
call fcn.0040b170
sub esi, eax
mov dword [ebp - 0xab8], esi
mov eax, dword [ebp - 0xab8]
push eax
mov ecx, dword [ebp - 0xae8]
push ecx
lea edx, [ebp - 0x830]
push edx
lea ecx, [ebp - 0x740]
call fcn.0040e490
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x740]
call fcn.00405a50
lea ecx, [ebp - 0x830]
call fcn.00401240
lea ecx, [ebp - 0x740]
push ecx
lea edx, [ebp - 0x920]
push edx
call fcn.00401b60
add esp, 8
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xaec]
push eax
lea ecx, [ebp - 0x740]
call fcn.00405a50
lea ecx, [ebp - 0x920]
call fcn.00401240
mov ecx, dword [0x4613d0]
and ecx, 1
jne 0x40d417
mov edx, dword [0x4613d0]
or edx, 1
mov dword [0x4613d0], edx
mov byte [ebp - 4], 9
push 0x18
call fcn.0042c012
add esp, 4
mov dword [ebp - 0xa9c], eax
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0xa9c], 0
je 0x40d3ed
mov ecx, dword [ebp - 0xa9c]
call fcn.004050f0
mov dword [ebp - 0xaa0], eax
jmp 0x40d3f7
mov dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0xb44], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xb44]
mov dword [0x4613cc], ecx
mov byte [ebp - 4], 8
movzx edx, byte [0x4613d4]
test edx, edx
je 0x40d482
mov byte [ebp - 0xa90], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x788]
call fcn.00401240
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x770]
call fcn.00401240
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x740]
call fcn.00401240
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc4]
call fcn.00406340
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc2c]
call fcn.004062b0
mov al, byte [ebp - 0xa90]
jmp 0x40dc0d
mov byte [0x4613d4], 1
push 0x14
push 0
lea eax, [ebp - 0xb74]
push eax
call fcn.0042e230
add esp, 0xc
mov ecx, 1
imul ecx, ecx, 0
lea edx, [ebp + ecx - 0x318]
push edx
lea ecx, [ebp - 0x740]
call fcn.0040b170
push eax
lea ecx, [ebp - 0x740]
call fcn.004087c0
push eax
lea eax, [ebp - 0xb74]
push eax
call fcn.0041a2e0
add esp, 0x10
mov ecx, dword [ebp - 0xa98]
mov dword [ecx + 0x38], eax
mov edx, dword [ebp - 0xa98]
cmp dword [edx + 0x38], 0
jne 0x40d548
mov byte [ebp - 0xa8f], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x788]
call fcn.00401240
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x770]
call fcn.00401240
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x740]
call fcn.00401240
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc4]
call fcn.00406340
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc2c]
call fcn.004062b0
mov al, byte [ebp - 0xa8f]
jmp 0x40dc0d
call dword [sym.imp.KERNEL32.DLL_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 0xa94], eax
push 0x104
lea ecx, [ebp - 0x520]
push ecx
push 0x59
mov edx, dword [ebp - 0xa94]
push edx
call dword [sym.imp.KERNEL32.DLL_GetLocaleInfoW]
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x5a
mov ecx, dword [ebp - 0xa94]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetLocaleInfoW]
push 0x104
lea edx, [ebp - 0x728]
push edx
push 0x1002
mov eax, dword [ebp - 0xa94]
push eax
call dword [sym.imp.KERNEL32.DLL_GetLocaleInfoW]
lea ecx, [ebp - 0xa8c]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetTimeZoneInformation]
cvtsi2ss xmm0, dword [ebp - 0xa8c]
xorps xmm0, xmmword [0x44c220]
divss xmm0, dword [0x44c214]
movss dword [ebp - 0xad4], xmm0
push 0x44b58c
lea ecx, [ebp - 0x758]
call fcn.00401130
mov byte [ebp - 4], 0xb
push 0x44b630
lea edx, [ebp - 0x740]
push edx
push str._installer__:
lea eax, [ebp - 0x980]
push eax
call fcn.00402750
add esp, 0xc
mov dword [ebp - 0xaf4], eax
mov ecx, dword [ebp - 0xaf4]
mov dword [ebp - 0xb2c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xb2c]
push edx
lea eax, [ebp - 0x860]
push eax
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xafc], eax
mov ecx, dword [ebp - 0xafc]
mov dword [ebp - 0xb54], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0xb54]
push edx
lea ecx, [ebp - 0x758]
call fcn.00406270
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x860]
call fcn.00401240
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x980]
call fcn.00401240
push str._pc__:_
lea ecx, [ebp - 0x758]
call fcn.00406290
push 0x44b650
lea eax, [ebp - 0x8c0]
push eax
call fcn.00409410
mov ecx, eax
call fcn.00427720
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
mov dword [ebp - 0xb34], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xb34]
push edx
lea eax, [ebp - 0x950]
push eax
call fcn.00409410
mov ecx, eax
call fcn.00427530
mov dword [ebp - 0xaa8], eax
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp - 0xaac], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xaac]
push edx
push str._os__:__
lea eax, [ebp - 0x7d0]
push eax
call fcn.00402710
add esp, 0xc
mov dword [ebp - 0xab4], eax
mov ecx, dword [ebp - 0xab4]
mov dword [ebp - 0xabc], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xabc]
push edx
lea eax, [ebp - 0x890]
push eax
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0xacc], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xacc]
push edx
lea ecx, [ebp - 0x758]
call fcn.00406270
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x890]
call fcn.00401240
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x7d0]
call fcn.00401240
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x950]
call fcn.00401240
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x8c0]
call fcn.00405790
push 0x44b660
cvttss2si eax, dword [ebp - 0xad4]
push eax
lea ecx, [ebp - 0x800]
push ecx
call fcn.00409410
mov ecx, eax
call fcn.00425ca0
mov dword [ebp - 0xadc], eax
mov edx, dword [ebp - 0xadc]
mov dword [ebp - 0xaf0], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0xaf0]
push eax
push str._timezone__:__
lea ecx, [ebp - 0x8f0]
push ecx
call fcn.00402710
add esp, 0xc
mov dword [ebp - 0xaf8], eax
mov edx, dword [ebp - 0xaf8]
mov dword [ebp - 0xb00], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0xb00]
push eax
lea ecx, [ebp - 0x9c8]
push ecx
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xb08], eax
mov edx, dword [ebp - 0xb08]
mov dword [ebp - 0xb10], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xb10]
push eax
lea ecx, [ebp - 0x758]
call fcn.00406270
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x9c8]
call fcn.00401240
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8f0]
call fcn.00401240
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x800]
call fcn.00401240
push 0x44b674
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x938]
call fcn.00404d20
mov dword [ebp - 0xb18], eax
mov edx, dword [ebp - 0xb18]
mov dword [ebp - 0xb20], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xb20]
push eax
lea ecx, [ebp - 0x908]
push ecx
call fcn.00409410
mov ecx, eax
call fcn.00427530
mov dword [ebp - 0xb28], eax
mov edx, dword [ebp - 0xb28]
mov dword [ebp - 0xb30], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0xb30]
push eax
push 0x44b678
lea ecx, [ebp - 0x520]
push ecx
lea ecx, [ebp - 0x8d8]
call fcn.00404d20
mov dword [ebp - 0xb38], eax
mov edx, dword [ebp - 0xb38]
mov dword [ebp - 0xb40], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0xb40]
push eax
lea ecx, [ebp - 0x8a8]
push ecx
call fcn.00409410
mov ecx, eax
call fcn.00427530
mov dword [ebp - 0xb48], eax
mov edx, dword [ebp - 0xb48]
mov dword [ebp - 0xb50], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xb50]
push eax
push str._os_language__:__
lea ecx, [ebp - 0x878]
push ecx
call fcn.00402710
add esp, 0xc
mov dword [ebp - 0xb58], eax
mov edx, dword [ebp - 0xb58]
mov dword [ebp - 0xb60], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0xb60]
push eax
lea ecx, [ebp - 0x848]
push ecx
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xae4], eax
mov edx, dword [ebp - 0xae4]
mov dword [ebp - 0xb0c], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xb0c]
push eax
lea ecx, [ebp - 0x818]
push ecx
call fcn.00402620
add esp, 0xc
mov dword [ebp - 0xab0], eax
mov edx, dword [ebp - 0xab0]
mov dword [ebp - 0xb4c], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0xb4c]
push eax
lea ecx, [ebp - 0x7e8]
push ecx
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xaa4], eax
mov edx, dword [ebp - 0xaa4]
mov dword [ebp - 0xb14], edx
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0xb14]
push eax
lea ecx, [ebp - 0x758]
call fcn.00406270
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7e8]
call fcn.00401240
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x818]
call fcn.00401240
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x848]
call fcn.00401240
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x878]
call fcn.00401240
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x8a8]
call fcn.00401240
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x8d8]
call fcn.00405790
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x908]
call fcn.00401240
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x938]
call fcn.00405790
push 0x44b690
lea ecx, [ebp - 0x728]
push ecx
lea ecx, [ebp - 0x998]
call fcn.00404d20
mov dword [ebp - 0xac0], eax
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0xb3c], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0x9e0]
push ecx
call fcn.00409410
mov ecx, eax
call fcn.00427530
mov dword [ebp - 0xac8], eax
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0xb1c], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0xb1c]
push eax
push str._country__:__
lea ecx, [ebp - 0x9b0]
push ecx
call fcn.00402710
add esp, 0xc
mov dword [ebp - 0xad0], eax
mov edx, dword [ebp - 0xad0]
mov dword [ebp - 0xb5c], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0xb5c]
push eax
lea ecx, [ebp - 0x968]
push ecx
call fcn.004026d0
add esp, 0xc
mov dword [ebp - 0xad8], eax
mov edx, dword [ebp - 0xad8]
mov dword [ebp - 0xae0], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0xae0]
push eax
lea ecx, [ebp - 0x758]
call fcn.00406270
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x968]
call fcn.00401240
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x9b0]
call fcn.00401240
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9e0]
call fcn.00401240
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x998]
call fcn.00405790
push 0x44b6a4
lea ecx, [ebp - 0x758]
call fcn.00406290
push 0x44b6a8
lea ecx, [ebp - 0x758]
call fcn.00406290
lea ecx, [ebp - 0x758]
push ecx
mov ecx, dword [ebp - 0xa98]
call fcn.00405b30
mov byte [ebp - 0xa8d], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x758]
call fcn.00401240
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x788]
call fcn.00401240
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x770]
call fcn.00401240
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x740]
call fcn.00401240
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc4]
call fcn.00406340
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc2c]
call fcn.004062b0
mov al, byte [ebp - 0xa8d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042ec10
mov esp, ebp
pop ebp
ret 4