Function at 0x401594
Capabilities:
Check for time delay via gettickcount
Get geographical location

Disassembly:
mov eax, 0x8077d4
call fcn.00806a0c
sub esp, 0x868
push ebx
push esi
push edi
mov dword [ebp - 0x18], 0x62743581
mov dword [ebp - 0x24], 0x482b3403
mov dword [ebp - 0x48], 0x799abf97
mov dword [ebp - 0x40], 0x587249d0
mov dword [ebp - 0x1c], 0x49008feb
mov dword [ebp - 0x10], 0xf78b06e
mov dword [ebp - 0x20], 0x7e686b5d
mov dword [ebp - 0x44], 0x5319ace7
mov dword [ebp - 0x34], 0x8f5092c
mov dword [ebp - 0x50], 0x6211028b
mov dword [ebp - 0x3c], 0x26263ee1
mov dword [ebp - 0x2c], 0x723af094
mov dword [ebp - 0x30], 0x2ab6196
mov dword [ebp - 0x28], 0x292f2950
mov dword [ebp - 0x14], 0x52a45a7c
mov dword [ebp - 0x4c], 0x27bb8d43
mov dword [ebp - 0x38], 0x1fc1ee3c
sub dword [ebp - 0x18], 0x841e650
add dword [ebp - 0x24], 0x3dc8ce76
add dword [ebp - 0x24], 0x5c23cfb9
mov eax, 0x64ede229
mul dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x18], 0x7f3c7df0
mov eax, 0x79ad052a
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x5f8bd2ea
mul dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, 0x60b0ca4d
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x3e66f7df
mul dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub dword [ebp - 0x18], 0x556e19ec
mov eax, 0x312753f4
mul dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, 0x17aec75a
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x4811c244
mul dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], 0xce8f412
mov eax, 0x5d1a0033
mul dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sub dword [ebp - 0x24], 0x20b1b711
mov eax, 0x7956041d
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x10], 0x36b9fbc4
mov eax, 0x32935ef5
mul dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x1c], 0x3a942fa1
add dword [ebp - 0x10], 0x11e3ddb
add dword [ebp - 0x40], 0x36cfebeb
mov eax, 0x14b583f
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x20], 0x5dfa09ec
mov eax, 0x48b6864
mul dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, 0x24600f9
mul dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x44], 0x32f2efe3
sub dword [ebp - 0x28], 0x54053970
mov eax, 0x5b7de3f9
mul dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub dword [ebp - 0x34], 0x1e773925
add dword [ebp - 0x14], 0x3ce47a04
sub dword [ebp - 0x18], 0x774185d3
sub dword [ebp - 0x1c], 0x13d5c44b
xor ebx, ebx
cmp dword [0x1dfdf24], 0x400
jne 0x4017fb
push ebx
push ebx
push ebx
lea eax, [ebp - 0x54]
push eax
push ebx
push ebx
push ebx
mov dword [ebp - 0x54], ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
lea eax, [ebp - 0x474]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthW]
push str.rikapuvozinigofomo
push str.jayalodomifomejezujetifiwid
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsA]
push ebx
push str.tojerilidacudajomacevibe
call dword [sym.imp.USER32.dll_LoadKeyboardLayoutA]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], ebx
mov byte [ebp - 0x70], bl
push ebx
mov dword [ebp - 4], ebx
call fcn.00401db2
push ebx
call fcn.00402102
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.004022d0
fstp st(0)
push ebx
call fcn.004025b7
push ebx
call fcn.00402407
push ebx
push ebx
call fcn.00401c57
push ebx
call fcn.00402407
or dword [ebp - 4], 0xffffffff
add esp, 0x1c
cmp dword [ebp - 0x5c], 0x10
jb 0x4017fb
push dword [ebp - 0x70]
call fcn.004022bb
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edi, edi
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp edi, 0x207138
jg 0x401823
inc edi
cmp edi, 0x4f672
jl 0x401803
xor edi, edi
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
cmp edi, 0x2b157b
jg 0x40183d
inc edi
cmp edi, 0x116bd
jl 0x401825
xor edi, edi
push ebx
lea eax, [ebp - 0x474]
push eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetNumberFormatA]
call esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0x58bc14
jle 0x40186a
cmp dword [ebp - 0x54], 0x7a45f535
jne 0x401873
inc edi
cmp edi, 0xe154
jl 0x40183f
mov eax, dword [0x814adc]
mov dword [0x1dfdf24], eax
call fcn.00401255
mov esi, 0x3078f
cmp dword [0x1dfdf24], 0x51f
jne 0x4018a2
push ebx
lea eax, [ebp - 0x874]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointA]
dec esi
jne 0x401887
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10