Function at 0x40daa3
Capabilities:
Get geographical location
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1c6c
call fcn.0040c580
mov eax, dword [0x45d090]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
xor eax, eax
cmp eax, 0x180
jne 0x40dad8
mov ecx, dword [0x4620c4]
add ecx, 0xa231
mov dword [0x237aa44], ecx
cmp dword [0x237aa44], 0x141
jne 0x40daf5
or dword [0x463374], 0xffffffff
mov dword [0x463370], 0xec58acac
inc eax
cmp eax, 0x12376ec
jl 0x40dabf
push esi
xor esi, esi
cmp esi, 0x562d05
jne 0x40db12
mov eax, dword [0x45e0b8]
mov dword [0x237aa48], eax
cmp dword [0x237aa44], 0x3c
jne 0x40db28
push str.gafapaweyosikoyak_kozaxoyazexariha_ligupezaxuhutelecema_yabeni
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
inc esi
cmp esi, 0x5f6c74
jl 0x40db00
cmp dword [0x237aa44], 0x7c
push edi
jne 0x40dc24
push ebx
lea eax, [ebp - 0x1404]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x1c5c]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push ebx
lea eax, [ebp - 0x1c58]
push eax
push ebx
lea eax, [ebp - 0x1804]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconW]
push ebx
push ebx
lea eax, [ebp - 0xc04]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push str.lubewadijerizanayufusaruku
call dword [sym.imp.KERNEL32.dll_FindAtomA]
call dword [sym.imp.KERNEL32.dll_SetFileApisToANSI]
xor eax, eax
mov word [ebp - 0x1c50], ax
lea edi, [ebp - 0x1c4e]
stosw word es:[edi], ax
mov word [ebp - 0x1c4c], ax
lea edi, [ebp - 0x1c4a]
stosw word es:[edi], ax
lea eax, [ebp - 0x1c64]
push eax
push dword [ebp - 0x1c4c]
lea eax, [ebp - 0x1c54]
push dword [ebp - 0x1c50]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
push ebx
lea eax, [ebp - 0x404]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExW]
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push str.jasavahuwuyemuxobifagavo_xumadefotonecijafuwoze__s__d__f
push ebx
call fcn.00401eba
push 0x45afd5
push 0x4632e8
call fcn.00401ffc
push ebx
call fcn.00401eed
add esp, 0x14
cmp dword [0x237aa44], 0x110a
jne 0x40dd9d
push ebx
mov dword [0x237a910], ebx
mov dword [0x237a914], ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
push ebx
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x1c54]
push eax
lea eax, [ebp - 0x1c58]
push eax
lea eax, [ebp - 0x1c5c]
push eax
lea eax, [ebp - 0x1c50]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
lea eax, [ebp - 0x1c4c]
push eax
push ebx
push str.icisugonu
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeExA]
push ebx
push ebx
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
xor eax, eax
mov word [ebp - 0x1c6c], ax
lea edi, [ebp - 0x1c6a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp - 0x1404]
push eax
push str.sasabevevemudaboraju
lea eax, [ebp - 0x1c6c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
push ebx
push str.foxitisucenanog_cavomijujobileluvahewekubokoy
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push ebx
push ebx
lea eax, [ebp - 0x1c04]
push eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
push 0x45b040
push str.xubetihumupa__f
push 0x4632e8
call fcn.00401b9f
push ebx
push ebx
call fcn.00401cdb
add esp, 0x14
push 7
pop edi
xor eax, eax
push 1
lea esi, [ebp - 0x1c20]
mov dword [ebp - 0x1c08], edi
mov dword [ebp - 0x1c0c], ebx
mov word [ebp - 0x1c1c], ax
call fcn.00401091
push ebx
push ebx
call fcn.00401cdb
xor eax, eax
push ebx
push ebx
mov dword [ebp - 0x1c24], edi
mov dword [ebp - 0x1c28], ebx
mov word [ebp - 0x1c38], ax
call fcn.00402149
push ebx
push ebx
call fcn.00401cdb
push ebx
call fcn.00401ef8
push ebx
call fcn.00401d6a
push 0x45b058
push 0x4632e8
call fcn.00401eba
add esp, 0x28
push 1
xor ebx, ebx
lea esi, [ebp - 0x1c3c]
call fcn.0040104c
push 1
lea esi, [ebp - 0x1c20]
call fcn.0040104c
push dword [0x237aa44]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
xor ecx, ecx
mov dword [0x237a764], eax
pop edi
cmp dword [0x237aa44], ebx
jbe 0x40ddfd
mov eax, dword [0x237aa48]
mov dword [ebp - 0x1c4c], eax
mov eax, 0xa231
add dword [ebp - 0x1c4c], eax
mov eax, dword [ebp - 0x1c4c]
mov al, byte [eax + ecx]
mov edx, dword [0x237a764]
mov byte [ecx + edx], al
mov eax, dword [0x237aa44]
cmp eax, 0x5ab
jne 0x40ddf8
mov dword [0x237a768], 0x19b0
inc ecx
cmp ecx, eax
jb 0x40ddba
push 0x45b05c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call fcn.0040d7dd
call fcn.0040d7bf
call fcn.0040da5b
xor eax, eax
cmp eax, 0xd606b
jne 0x40de25
call fcn.0040d7b4
inc eax
cmp eax, 0x24e87d
jl 0x40de19
mov esi, 0x1e4165
cmp dword [0x237aa44], 0xcc1
jne 0x40de4c
push str.tegegahejehibisemoh
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoA]
cmp dword [0x237aa44], 0x7c4
mov dword [0x237a76c], 0x8e46a6f0
jne 0x40de6e
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
dec esi
jne 0x40de32
pop esi
cmp ebx, 0x408e
jle 0x40de86
cmp dword [ebp - 0x1c40], 0xf5bed7
jne 0x40de8f
inc ebx
cmp ebx, 0x687ed2
jl 0x40de72
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.00401ab5
leave
ret