Function at 0x4801a0
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3c8
push esi
push edi
mov edi, ecx
mov dword [esp + 0x70], 0xf
push 0x80
mov dword [esp + 0xa4], edi
mov dword [esp + 0x70], 0
mov byte [esp + 0x60], 0
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], 0
mov byte [esp + 0x8c], 0
call fcn.00418d68
xor ecx, ecx
mov dword [esp + 0x50], eax
add esp, 4
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 7
push ecx
push 0x148bf0c7
mov word [eax + 0x18], cx
mov dword [eax + 0x40], ecx
mov dword [eax + 0x44], 7
mov word [eax + 0x30], cx
mov dword [eax + 0x58], ecx
mov dword [eax + 0x5c], 0xf
mov byte [eax + 0x48], cl
mov dword [eax + 0x70], ecx
mov dword [eax + 0x74], 0xf
mov byte [eax + 0x60], cl
mov dword [eax + 0xc], str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_74.0.3729.169_Safari_537.36
call fcn.0048fc50
mov dword [esp + 0x38], 0x89b2
add esp, 8
mov ecx, dword [esp + 0x30]
xor ecx, 0x17
mov dword [esp + 0x34], 0
mov edx, dword [esp + 0x34]
mov dword [esp + 0x28], ecx
xor edx, 0
mov dword [esp + 0x2c], edx
mov dword [esp + 0x78], 0x17
mov dword [esp + 0x7c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x40], 0x88b5
mov dword [esp + 0x44], 0
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x78]
add edx, eax
mov ecx, dword [esp + 0x7c]
adc esi, ecx
add edx, 1
mov dword [esp + 0x30], edx
adc esi, 0
mov dword [esp + 0x34], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
sub edx, eax
mov dword [esp + 0x28], edx
sbb esi, ecx
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x28], 0x9b62
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
xor eax, 0x17
mov dword [esp + 0x10], eax
xor ecx, 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x40], 0x17
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0x88b5
mov dword [esp + 0x34], 0
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
add edx, eax
mov ecx, dword [esp + 0x44]
adc esi, ecx
add edx, 1
mov dword [esp + 0x28], edx
adc esi, 0
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
sub edx, eax
mov dword [esp + 0x10], edx
sbb esi, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
sub esp, 0x18
mov dword [esp + 0x28], eax
mov ecx, esp
mov dword [esp + 0x2c], edx
xor eax, eax
push eax
push 0x4aa41c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.0040e360
sub esp, 0x18
mov dword [esp + 0x2a0], 0x7f37b908
mov eax, esp
mov dword [esp + 0x2a4], 0xa228ddfd
mov dword [esp + 0x2a8], 0xe02c7a9
sub esp, 0x18
mov dword [esp + 0x2c4], 0x8a39c0e2
mov edx, esp
mov dword [esp + 0x128], 0x115ec961
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov byte [eax], 0
movaps xmm1, xmmword [esp + 0x2b8]
mov dword [esp + 0x12c], 0xcb06b29b
mov dword [esp + 0x130], 0x6775e8c6
mov dword [esp + 0x134], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x128]
mov dword [esp + 0x2c8], 0xdd1c80e3
mov dword [esp + 0x2cc], 0xde93bbd
mov dword [esp + 0x2d0], 0x6cbbc608
mov dword [esp + 0x2d4], 0xc37e98b8
movaps xmmword [esp + 0x2b8], xmm1
movaps xmm1, xmmword [esp + 0x2c8]
mov dword [esp + 0x138], 0xdd1c80e3
mov dword [esp + 0x13c], 0xde93bbd
mov dword [esp + 0x140], 0x6cbbc608
mov dword [esp + 0x144], 0xc37e98b8
pxor xmm1, xmmword [esp + 0x138]
movaps xmmword [esp + 0x2c8], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
lea ecx, [esp + 0x2b8]
mov byte [edx], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x480501
sub ecx, esi
lea eax, [esp + 0x2b8]
push ecx
push eax
mov ecx, edx
call fcn.004072f0
mov ecx, dword [esp + 0x94]
lea eax, [esp + 0xd0]
push str.https:__ipinfo.io_
push eax
push dword [esp + 0xc4]
push dword [esp + 0xcc]
call fcn.004908e0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cdq
cmp eax, ecx
jne 0x480700
cmp edx, esi
jne 0x480700
sub esp, 0x28
lea edx, [esp + 0xb0]
mov eax, esp
lea ecx, [esp + 0x360]
sub esp, 8
mov dword [eax + 0x24], 0
call fcn.0040f510
add esp, 0x30
cmp byte [esp + 0x338], 1
jne 0x4806ed
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x4bcf3c]
cmp eax, dword [ecx + 4]
jg 0x481f2c
mov ecx, dword [0x4bcf34]
mov eax, ecx
mov edx, dword [0x4bcf30]
sub eax, edx
sar eax, 2
cmp eax, 0x28
jae 0x4805e8
mov dword [esp + 0x15c], eax
cmp ecx, dword [0x4bcf38]
je 0x4805d8
mov dword [ecx], eax
add dword [0x4bcf34], 4
jmp 0x4805ee
lea eax, [esp + 0x15c]
push eax
push ecx
call fcn.00410340
jmp 0x4805ee
mov dword [0x4bcf34], edx
mov dword [esp + 0x220], 0x7f2ba602
lea eax, [esp + 0x220]
mov dword [esp + 0x224], 0xcb7fc0ef
lea ecx, [esp + 0x338]
mov dword [esp + 0x228], 0x6775e8c6
mov dword [esp + 0x22c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x220]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x224], xmm1
call fcn.0040f7b0
cmp byte [eax], 0
je 0x4806ed
mov dword [esp + 0x230], 0x7f2ba602
lea eax, [esp + 0x230]
mov dword [esp + 0x234], 0xcb7fc0ef
lea ecx, [esp + 0x338]
mov dword [esp + 0x238], 0x6775e8c6
mov dword [esp + 0x23c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x230]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x234], xmm1
call fcn.0040f7b0
push eax
lea ecx, [esp + 0x60]
call fcn.0040f850
push dword [esp + 0x338]
lea ecx, [esp + 0x344]
call fcn.0040da90
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x480748
mov eax, dword [esp + 0x5c]
mov dword [edi], eax
mov eax, dword [esp + 0x60]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x68]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x70]
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], eax
mov eax, 0xf
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], eax
mov byte [esp + 0x5c], 0
jmp 0x480f2f
push 0x80
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
call fcn.00418d68
mov esi, eax
add esp, 4
xor eax, eax
push eax
push 0x148bf0c7
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 7
mov word [esi + 0x18], ax
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], 7
mov word [esi + 0x30], ax
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], 0xf
mov byte [esi + 0x48], al
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], 0xf
mov byte [esi + 0x60], al
mov dword [esi + 0xc], str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_74.0.3729.169_Safari_537.36
call fcn.0048fc50
push 0
push 0x1488ab05
mov dword [esp + 0x88], eax
call fcn.0048fc50
sub esp, 8
mov dword [esp + 0x8c], eax
mov ecx, esp
xor eax, eax
push 0x31
push 0x4aa680
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.0040e360
sub esp, 0x18
mov dword [esp + 0x190], 0x7873ab05
mov eax, esp
mov dword [esp + 0x194], 0xa4659ceb
sub esp, 0x18
mov dword [esp + 0x1b0], 0x6775e8ab
mov edx, esp
mov dword [esp + 0x1b4], 0xfe5ca786
mov dword [esp + 0x58], 0x115ec961
lea ecx, [esp + 0x1a8]
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov byte [eax], 0
lea eax, [ecx + 1]
movaps xmm1, xmmword [esp + 0x1a8]
mov dword [esp + 0x5c], 0xcb06b29b
mov dword [esp + 0x60], 0x6775e8c6
mov dword [esp + 0x64], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x58]
movaps xmmword [esp + 0x1a8], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov dword [esp + 0x94], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4808a0
sub ecx, dword [esp + 0x94]
lea eax, [esp + 0x1a8]
push ecx
push eax
mov ecx, edx
call fcn.004072f0
push 0
lea eax, [esp + 0x114]
mov ecx, esi
push eax
push dword [esp + 0xc8]
push dword [esp + 0xc8]
call fcn.004908e0
push 0x1b
push 0x9e2f0fc3
mov esi, eax
call fcn.0048fcf0
mov ecx, eax
mov dword [esp + 0x54], edx
mov eax, esi
add esp, 8
cdq
cmp eax, ecx
jne 0x480ea7
cmp edx, dword [esp + 0x4c]
jne 0x480ea7
cmp dword [esp + 0xdc], 0x10
lea edx, [esp + 0xc8]
mov dword [esp + 0x240], 0x702aa805
mov dword [esp + 0x244], 0xa276d3b6
mov dword [esp + 0x248], 0x1e1083eb
mov dword [esp + 0x24c], 0xfe5c85bb
movaps xmm1, xmmword [esp + 0x240]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
movaps xmmword [esp + 0x240], xmm1
jb 0x480983
mov edx, dword [esp + 0xc8]
lea eax, [esp + 0x240]
push 0x22
push eax
lea ecx, [esp + 0x360]
call fcn.0048ba60
add esp, 8
cmp dword [esp + 0x368], 0
je 0x480e6c
push 0x80
mov dword [esp + 0x2d0], 0xf
mov dword [esp + 0x2cc], 0
mov byte [esp + 0x2bc], 0
call fcn.00418d68
add esp, 4
mov ecx, eax
call fcn.0040b1f0
mov dword [esp + 0x250], 0x7d3bba4e
mov dword [esp + 0x254], 0xcb06b2fd
mov dword [esp + 0x258], 0x6775e8c6
mov dword [esp + 0x25c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x250]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
movaps xmmword [esp + 0x250], xmm1
mov dword [esp + 0x74], eax
lea eax, [esp + 0x358]
mov dword [esp + 0x2d0], 0x3f37b900
mov dword [esp + 0x2d4], 0xa22bd0ff
mov dword [esp + 0x2d8], 0x816c6b6
mov dword [esp + 0x2dc], 0xcc2a88eb
movaps xmm1, xmmword [esp + 0x2d0]
push eax
mov dword [esp + 0xe4], 0x115ec961
lea eax, [esp + 0x2d4]
mov dword [esp + 0xe8], 0xcb06b29b
mov dword [esp + 0xec], 0x6775e8c6
mov dword [esp + 0xf0], 0xfe5ca786
pxor xmm1, xmmword [esp + 0xe4]
mov dword [esp + 0x2e4], 0xdd1c80cc
mov dword [esp + 0x2e8], 0xde93bbd
mov dword [esp + 0x2ec], 0x6cbbc608
mov dword [esp + 0x2f0], 0xc37e98b8
movaps xmmword [esp + 0x2d4], xmm1
movaps xmm1, xmmword [esp + 0x2e4]
push eax
mov dword [esp + 0xf8], 0xdd1c80e3
lea eax, [esp + 0x3a8]
mov dword [esp + 0xfc], 0xde93bbd
mov dword [esp + 0x100], 0x6cbbc608
mov dword [esp + 0x104], 0xc37e98b8
pxor xmm1, xmmword [esp + 0xf8]
push eax
movaps xmmword [esp + 0x2ec], xmm1
call fcn.00407c40
add esp, 0xc
mov dword [esp + 0x4c], eax
push 0
push 0x148bf0c7
call fcn.0048fc50
push 0x1b
push 0x9e2eb2bd
mov dword [esp + 0x88], eax
call fcn.0048fcf0
mov dword [esp + 0x20], 0x9b62
add esp, 0x10
mov ecx, dword [esp + 0x10]
mov edi, eax
mov dword [esp + 0x14], 0
xor ecx, 0x17
mov edx, dword [esp + 0x14]
mov dword [esp + 0x30], ecx
xor edx, 0
mov dword [esp + 0x34], edx
mov dword [esp + 0x10], 0x17
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x40], 0x88b5
mov dword [esp + 0x44], 0
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
add edx, eax
mov ecx, dword [esp + 0x2c]
adc esi, ecx
add edx, 1
mov dword [esp + 0x28], edx
adc esi, 0
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
sub edx, eax
mov dword [esp + 0x10], edx
sbb esi, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
sub esp, 0x18
mov dword [esp + 0x28], eax
mov ecx, esp
mov dword [esp + 0x2c], edx
push 0x4aa484
call fcn.0040c990
sub esp, 0x18
lea ecx, [esp + 0x280]
mov eax, esp
sub esp, 0x18
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov byte [eax], 0
mov eax, esp
push ecx
push dword [esp + 0x98]
push eax
call fcn.00407bd0
mov ecx, dword [esp + 0xc8]
lea eax, [esp + 0x30c]
add esp, 0xc
push str.https:__db_ip.com_
push eax
push dword [esp + 0xc8]
push edi
call fcn.004908e0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cdq
cmp eax, ecx
jne 0x480c9a
mov byte [esp + 0x3f], 1
cmp edx, esi
je 0x480c9f
mov byte [esp + 0x3f], 0
mov eax, dword [esp + 0x3b4]
cmp eax, 0x10
jb 0x480cbc
inc eax
push eax
push dword [esp + 0x3a4]
call fcn.00409000
add esp, 8
cmp byte [esp + 0x3f], 0
mov dword [esp + 0x3b0], 0
mov dword [esp + 0x3b4], 0xf
mov byte [esp + 0x3a0], 0
je 0x480e2a
sub esp, 0x28
lea edx, [esp + 0x2e0]
mov eax, esp
lea ecx, [esp + 0xd8]
sub esp, 8
mov dword [eax + 0x24], 0
call fcn.0040f510
add esp, 0x30
cmp byte [esp + 0xb0], 1
jne 0x480e17
mov dword [esp + 0x260], 0x7f2ba602
lea eax, [esp + 0x260]
mov dword [esp + 0x264], 0x887fc0ef
lea ecx, [esp + 0xb0]
mov dword [esp + 0x268], 0x67108ca9
mov dword [esp + 0x26c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x260]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x264], xmm1
call fcn.0040f7b0
cmp byte [eax], 0
je 0x480e17
mov dword [esp + 0x290], 0x7f2ba602
lea eax, [esp + 0x290]
mov dword [esp + 0x294], 0x887fc0ef
lea ecx, [esp + 0xb0]
mov dword [esp + 0x298], 0x67108ca9
mov dword [esp + 0x29c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x290]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x294], xmm1
call fcn.0040f7b0
push eax
lea ecx, [esp + 0x60]
call fcn.0040f850
push dword [esp + 0xb0]
lea ecx, [esp + 0xbc]
call fcn.0040da90
mov eax, dword [esp + 0x2cc]
cmp eax, 0x10
jb 0x480e47
inc eax
push eax
push dword [esp + 0x2bc]
call fcn.00409000
add esp, 8
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x2c8], 0
mov dword [esp + 0x2cc], 0xf
mov byte [esp + 0x2b8], 0
mov eax, dword [esp + 0x36c]
cmp eax, 0x10
jb 0x480e89
inc eax
push eax
push dword [esp + 0x35c]
call fcn.00409000
add esp, 8
mov dword [esp + 0x368], 0
mov dword [esp + 0x36c], 0xf
mov byte [esp + 0x358], 0
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x480f8b
mov eax, dword [esp + 0x5c]
mov dword [edi], eax
mov eax, dword [esp + 0x60]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x68]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x70]
mov dword [edi + 0x10], ecx
mov ecx, dword [esp + 0xdc]
mov dword [edi + 0x14], eax
mov eax, 0xf
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], eax
mov byte [esp + 0x5c], 0
cmp ecx, 0x10
jb 0x480f11
lea eax, [ecx + 1]
push eax
push dword [esp + 0xcc]
call fcn.00409000
mov eax, dword [esp + 0x78]
add esp, 8
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0xf
mov byte [esp + 0xc8], 0
mov ecx, dword [esp + 0x9c]
cmp ecx, 0x10
jb 0x480f52
lea eax, [ecx + 1]
push eax
push dword [esp + 0x8c]
call fcn.00409000
mov eax, dword [esp + 0x78]
add esp, 8
mov byte [esp + 0x88], 0
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], 0
cmp eax, 0x10
jb 0x480f83
inc eax
push eax
push dword [esp + 0x60]
call fcn.00409000
add esp, 8
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x80
mov dword [esp + 0x15c], 0xf
mov dword [esp + 0x158], 0
mov byte [esp + 0x148], 0
call fcn.00418d68
add esp, 4
mov ecx, eax
call fcn.0040b1f0
push 0
push 0x1488ab05
mov dword [esp + 0x80], eax
call fcn.0048fc50
push 0x1b
push 0x9e2eb23f
mov dword [esp + 0x5c], eax
call fcn.0048fcf0
mov dword [esp + 0x20], 0x9b62
add esp, 0x10
mov ecx, dword [esp + 0x10]
mov edi, eax
xor ecx, 0x17
mov dword [esp + 0x14], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x30], ecx
xor edx, 0
mov dword [esp + 0x34], edx
mov dword [esp + 0x10], 0x17
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x40], 0x88b5
mov dword [esp + 0x44], 0
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
add edx, eax
mov ecx, dword [esp + 0x2c]
adc esi, ecx
add edx, 1
mov dword [esp + 0x28], edx
adc esi, 0
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
sub edx, eax
mov dword [esp + 0x10], edx
sbb esi, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
sub esp, 0x18
mov dword [esp + 0x28], eax
mov ecx, esp
mov dword [esp + 0x2c], edx
xor eax, eax
push eax
push 0x4aa4ec
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.0040e360
sub esp, 0x18
mov dword [esp + 0x140], 0x3f29be16
mov eax, esp
mov dword [esp + 0x144], 0xa67ed3f6
mov dword [esp + 0x148], 0x491186af
mov dword [esp + 0x14c], 0xd131c8e5
mov dword [esp + 0x150], 0xb473e584
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov byte [eax], 0
mov dword [esp + 0x154], 0x3f9f14cd
movaps xmm1, xmmword [esp + 0x140]
lea eax, [esp + 0x140]
mov dword [esp + 0x110], 0x115ec961
sub esp, 0x18
mov dword [esp + 0x12c], 0xcb06b29b
mov ecx, esp
mov dword [esp + 0x130], 0x6775e8c6
mov dword [esp + 0x134], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x128]
movaps xmmword [esp + 0x158], xmm1
mov dword [esp + 0x170], 0xf94f726
mov dword [esp + 0x174], 0xec07ecd1
movaps xmm1, xmmword [esp + 0x168]
mov dword [esp + 0x138], 0xdd1c80e3
mov dword [esp + 0x13c], 0xde93bbd
mov dword [esp + 0x140], 0x6cbbc608
mov dword [esp + 0x144], 0xc37e98b8
pxor xmm1, xmmword [esp + 0x138]
mov dword [esp + 0x178], 0x7a001c78
mov dword [esp + 0x17c], 0x3123fe0f
mov dword [esp + 0x180], 0x300d9d0a
mov dword [esp + 0x184], 0xa2341b7a
movaps xmmword [esp + 0x168], xmm1
movaps xmm1, xmmword [esp + 0x178]
mov dword [esp + 0x148], 0x7a007915
mov dword [esp + 0x14c], 0x3123fe0f
mov dword [esp + 0x150], 0x300d9d0a
mov dword [esp + 0x154], 0xa2341b7a
pxor xmm1, xmmword [esp + 0x148]
push eax
movaps xmmword [esp + 0x17c], xmm1
call fcn.004061e0
mov ecx, dword [esp + 0xc0]
lea eax, [esp + 0x18c]
push str.https:__www.maxmind.com_en_locate_my_ip_address
push eax
push dword [esp + 0x9c]
push edi
call fcn.004908e0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cdq
cmp eax, ecx
jne 0x481597
cmp edx, esi
jne 0x481597
sub esp, 0x28
lea edx, [esp + 0x16c]
mov eax, esp
lea ecx, [esp + 0x198]
sub esp, 8
mov dword [eax + 0x24], 0
call fcn.0040f510
add esp, 0x30
cmp byte [esp + 0x170], 1
jne 0x481584
mov dword [esp + 0x2a0], 0x7f2ba602
lea eax, [esp + 0x2a0]
mov dword [esp + 0x2a4], 0xcb7fc0ef
lea ecx, [esp + 0x170]
mov dword [esp + 0x2a8], 0x6775e8c6
mov dword [esp + 0x2ac], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x2a0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x2a4], xmm1
call fcn.0040f7b0
cmp byte [eax], 0
je 0x481584
mov dword [esp + 0x180], 0x7f2ba602
lea eax, [esp + 0x180]
mov dword [esp + 0x184], 0xcb7fc0ef
lea ecx, [esp + 0x170]
mov dword [esp + 0x188], 0x6775e8c6
mov dword [esp + 0x18c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x180]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x184], xmm1
call fcn.0040f7b0
cmp byte [eax], 1
jne 0x481584
mov dword [esp + 0x190], 0x7f2ba602
lea eax, [esp + 0x190]
mov dword [esp + 0x194], 0xcb7fc0ef
lea ecx, [esp + 0x170]
mov dword [esp + 0x198], 0x6775e8c6
mov dword [esp + 0x19c], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x190]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x194], xmm1
call fcn.0040f7b0
mov dword [esp + 0x1a0], 0x4e31ba08
lea ecx, [esp + 0x1a0]
mov dword [esp + 0x1a4], 0xae62ddf8
mov dword [esp + 0x1a8], 0x6775e8c6
mov dword [esp + 0x1ac], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1a0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push ecx
mov ecx, eax
movaps xmmword [esp + 0x1a4], xmm1
call fcn.0040f7b0
cmp byte [eax], 0
je 0x481584
mov dword [esp + 0x1b0], 0x7f2ba602
lea eax, [esp + 0x1b0]
mov dword [esp + 0x1b4], 0xcb7fc0ef
lea ecx, [esp + 0x170]
mov dword [esp + 0x1b8], 0x6775e8c6
mov dword [esp + 0x1bc], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1b0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0x1b4], xmm1
call fcn.0040f7b0
mov dword [esp + 0x1c0], 0x4e31ba08
lea ecx, [esp + 0x1c0]
mov dword [esp + 0x1c4], 0xae62ddf8
mov dword [esp + 0x1c8], 0x6775e8c6
mov dword [esp + 0x1cc], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1c0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
push ecx
mov ecx, eax
movaps xmmword [esp + 0x1c4], xmm1
call fcn.0040f7b0
push eax
lea ecx, [esp + 0x60]
call fcn.0040f850
push dword [esp + 0x170]
lea ecx, [esp + 0x17c]
call fcn.0040da90
lea ecx, [esp + 0x50]
call fcn.0040c750
lea eax, [esp + 0xac]
mov dword [esp + 0xac], 0xe4
push eax
lea ecx, [esp + 0x54]
call fcn.0040c650
lea ecx, [esp + 0x50]
cmp dword [eax], 5
jne 0x4815e6
mov esi, dword [esp + 0x50]
mov eax, ecx
push dword [esi + 4]
push eax
call fcn.004102f0
mov dword [esi + 4], esi
mov dword [esi], esi
mov dword [esi + 8], esi
mov dword [esp + 0x54], 0
jmp 0x481604
mov eax, dword [esp + 0x54]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0xa4]
push eax
call fcn.0040c650
mov dword [eax], 5
mov eax, dword [esp + 0x50]
push dword [eax + 4]
lea eax, [esp + 0x54]
push eax
mov ecx, eax
call fcn.004102f0
push 0x18
push dword [esp + 0x54]
call fcn.00409000
add esp, 8
cmp dword [esp + 0x6c], 0
je 0x481644
mov esi, dword [esp + 0xa0]
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.00406190
jmp 0x481e5c
push 0
push 0x4aa3e2
lea ecx, [esp + 0x328]
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0xf
mov byte [esp + 0x328], 0
call fcn.004072f0
sub esp, 0x18
mov dword [esp + 0x1e8], 0x582aac26
mov dword [esp + 0x1ec], 0xcb06b2cb
lea eax, [esp + 0x1e8]
mov dword [esp + 0x1f0], 0x6775e8c6
mov ecx, esp
mov dword [esp + 0x1f4], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1e8]
mov dword [esp + 0x28], 0x115ec961
mov dword [esp + 0x2c], 0xcb06b29b
mov dword [esp + 0x30], 0x6775e8c6
mov dword [esp + 0x34], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x28]
push eax
movaps xmmword [esp + 0x1ec], xmm1
call fcn.004061e0
lea ecx, [esp + 0x3a0]
call fcn.00484680
mov dword [esp + 0x1f8], 0x11649928
lea eax, [esp + 0x3a0]
mov dword [esp + 0x1fc], 0xcb06b29b
add esp, 0x18
cmp dword [esp + 0x39c], 0x10
mov dword [esp + 0x1e8], 0x6775e8c6
mov dword [esp + 0x1ec], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1e0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
movaps xmmword [esp + 0x1e0], xmm1
jb 0x481772
mov eax, dword [esp + 0x388]
lea ecx, [esp + 0x1e0]
push ecx
push eax
call fcn.0043beb0
add esp, 8
test eax, eax
je 0x481837
cmp dword [esp + 0x39c], 0x10
lea edx, [esp + 0x388]
mov dword [esp + 0x1f0], 0x11649928
mov dword [esp + 0x1f4], 0xcb06b29b
mov dword [esp + 0x1f8], 0x6775e8c6
mov dword [esp + 0x1fc], 0xfe5ca786
movaps xmm1, xmmword [esp + 0x1f0]
mov dword [esp + 0x10], 0x115ec961
mov dword [esp + 0x14], 0xcb06b29b
mov dword [esp + 0x18], 0x6775e8c6
mov dword [esp + 0x1c], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x10]
movaps xmmword [esp + 0x1f0], xmm1
jb 0x481805
mov edx, dword [esp + 0x388]
lea eax, [esp + 0x1f0]
push 0x20
push eax
lea ecx, [esp + 0x3c0]
call fcn.0048ba60
add esp, 8
lea ecx, [esp + 0x320]
push eax
call fcn.004093a0
lea ecx, [esp + 0x3b8]
call fcn.00406160
cmp dword [esp + 0x330], 0
je 0x481e20
push 0
push 0x4aa3e3
lea ecx, [esp + 0x378]
mov dword [esp + 0x388], 0
mov dword [esp + 0x38c], 0xf
mov byte [esp + 0x378], 0
call fcn.004072f0
push 0x80
call fcn.00418d68
add esp, 4
mov ecx, eax
call fcn.0040b1f0
mov dword [esp + 0xac], eax
mov dword [esp + 0x10], 0x89aa
mov ecx, dword [esp + 0x10]
xor ecx, 0x17
mov dword [esp + 0x14], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
xor edx, 0
mov dword [esp + 0x54], edx
mov dword [esp + 0x10], 0x17
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x40], 0x88b5
mov dword [esp + 0x44], 0
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
add edx, eax
mov ecx, dword [esp + 0x2c]
adc esi, ecx
add edx, 1
mov dword [esp + 0x28], edx
adc esi, 0
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
sub edx, eax
mov dword [esp + 0x10], edx
sbb esi, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x14]
push 0x1b
push 0x9e2eb23f
call fcn.0048fcf0
mov dword [esp + 0x18], 0x9b62
add esp, 8
mov ecx, dword [esp + 0x10]
mov edi, eax
mov dword [esp + 0x14], 0
xor ecx, 0x17
mov edx, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
xor edx, 0
mov dword [esp + 0x54], edx
mov dword [esp + 0x28], 0x17
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x40], 0x88b5
mov dword [esp + 0x44], 0
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
add edx, eax
adc esi, ecx
add edx, 1
mov dword [esp + 0x28], edx
adc esi, 0
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
sub edx, eax
mov dword [esp + 0x10], edx
sbb esi, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push eax
push ecx
push edx
push esi
call fcn.00460cc0
sub esp, 0x18
mov dword [esp + 0x28], eax
mov ecx, esp
mov dword [esp + 0x2c], edx
push 0x4aa5ec
call fcn.0040c990
sub esp, 0x18
mov ecx, esp
push 0
push 0x4aa3fe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.004072f0
mov dword [esp + 0x320], 0x3f37b900
lea ecx, [esp + 0x350]
mov dword [esp + 0x324], 0xae61c2f2
sub esp, 0x18
mov dword [esp + 0x340], 0x41a84a9
mov eax, esp
mov dword [esp + 0x344], 0x9135d3e7
movaps xmm1, xmmword [esp + 0x338]
mov dword [esp + 0x158], 0x115ec961
mov dword [esp + 0x15c], 0xcb06b29b
mov dword [esp + 0x160], 0x6775e8c6
mov dword [esp + 0x164], 0xfe5ca786
pxor xmm1, xmmword [esp + 0x158]
movaps xmmword [esp + 0x338], xmm1
mov dword [esp + 0x348], 0xb275ae8d
mov dword [esp + 0x34c], 0x6a995292
mov dword [esp + 0x350], 0x584a96d
mov dword [esp + 0x354], 0xb612fbd6
movaps xmm1, xmmword [esp + 0x348]
push ecx
mov dword [esp + 0x16c], 0xdd1c80e3
lea ecx, [esp + 0x33c]
mov dword [esp + 0x170], 0xde93bbd
mov dword [esp + 0x174], 0x6cbbc608
mov dword [esp + 0x178], 0xc37e98b8
pxor xmm1, xmmword [esp + 0x16c]
mov dword [esp + 0x35c], 0x123d1c71
mov dword [esp + 0x360], 0x5f578d60
mov dword [esp + 0x364], 0x1668f06b
mov dword [esp + 0x368], 0xa2096b13
movaps xmmword [esp + 0x34c], xmm1
movaps xmm1, xmmword [esp + 0x35c]
push ecx
mov dword [esp + 0x180], 0x7a007915
mov dword [esp + 0x184], 0x3123fe0f
mov dword [esp + 0x188], 0x300d9d0a
mov dword [esp + 0x18c], 0xa2341b7a
pxor xmm1, xmmword [esp + 0x180]
push eax
movaps xmmword [esp + 0x364], xmm1
call fcn.00407c40
add esp, 0xc
push str.https:__ipgeolocation.io_
mov ecx, dword [esp + 0xf8]
lea eax, [esp + 0x3bc]
push eax
push dword [esp + 0xf4]
push edi
call fcn.004908e0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cdq
cmp eax, ecx
jne 0x481e03
cmp edx, esi
jne 0x481e03
sub esp, 0x28
lea edx, [esp + 0x398]
mov eax, esp
lea ecx, [esp + 0x370]
sub esp, 8
mov dword [eax + 0x24], 0
call fcn.0040f510
add esp, 0x30
cmp byte [esp + 0x348], 1
jne 0x481df0
lea ecx, [esp + 0x80]
call fcn.0040c750
lea eax, [esp + 0xa8]
mov dword [esp + 0xa8], 0xe4
push eax
lea ecx, [esp + 0x84]
call fcn.0040c650
lea ecx, [esp + 0x80]
cmp dword [eax], 5
jne 0x481c88
mov esi, dword [esp + 0x80]
mov eax, ecx
push dword [esi + 4]
push eax
call fcn.004102f0
mov dword [esi + 4], esi
mov dword [esi], esi
mov dword [esi + 8], esi
mov dword [esp + 0x84], 0
jmp 0x481ca9
mov eax, dword [esp + 0x84]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa8]
push eax
call fcn.0040c650
mov dword [eax], 5
mov eax, dword [esp + 0x80]
push dword [eax + 4]
lea eax, [esp + 0x84]
push eax
mov ecx, eax
call fcn.004102f0
push 0x18
push dword [esp + 0x84]
call fcn.00409000
add esp, 8
mov dword [esp + 0x200], 0x7f2ba602
mov dword [esp + 0x204], 0x947fc0ef
lea eax, [esp + 0x200]
mov dword [esp + 0x208], 0x21187a5
lea ecx, [esp + 0x348]
mov dword [esp + 0x20c], 0xfe5ca7b4
movaps xmm1, xmmword [esp + 0x200]
mov dword [esp + 0xb0], 0x115ec961
mov dword [esp + 0xb4], 0xcb06b29b
mov dword [esp + 0xb8], 0x6775e8c6
mov dword [esp + 0xbc], 0xfe5ca786
pxor xmm1, xmmword [esp + 0xb0]
push eax
movaps xmmword [esp + 0x204], xmm1
call fcn.0040f7b0
cmp byte [eax], 0
je 0x481df0
mov dword [esp + 0x210], 0x7f2ba602
lea eax, [esp + 0x210]
mov dword [esp + 0x214], 0x947fc0ef
lea ecx, [esp + 0x348]
mov dword [esp + 0x218], 0x21187a5
mov dword [esp + 0x21c], 0xfe5ca7b4
movaps xmm1, xmmword [esp + 0x210]
mov dword [esp + 0xb0], 0x115ec961
mov dword [esp + 0xb4], 0xcb06b29b
mov dword [esp + 0xb8], 0x6775e8c6
mov dword [esp + 0xbc], 0xfe5ca786
pxor xmm1, xmmword [esp + 0xb0]
push eax
movaps xmmword [esp + 0x214], xmm1
call fcn.0040f7b0
push eax
lea ecx, [esp + 0x60]
call fcn.0040f850
push dword [esp + 0x348]
lea ecx, [esp + 0x354]
call fcn.0040da90
mov eax, dword [esp + 0x384]
cmp eax, 0x10
jb 0x481e20
inc eax
push eax
push dword [esp + 0x374]
call fcn.00409000
add esp, 8
mov esi, dword [esp + 0xa0]
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.00406190
lea ecx, [esp + 0x388]
call fcn.00406160
mov eax, dword [esp + 0x334]
cmp eax, 0x10
jb 0x481e5c
inc eax
push eax
push dword [esp + 0x324]
call fcn.00409000
add esp, 8
mov eax, dword [esp + 0x158]
cmp eax, 0x10
jb 0x481e79
inc eax
push eax
push dword [esp + 0x148]
call fcn.00409000
add esp, 8
mov eax, dword [esp + 0xdc]
mov byte [esp + 0x144], 0
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], 0
cmp eax, 0x10
jb 0x481eb4
inc eax
push eax
push dword [esp + 0xcc]
call fcn.00409000
add esp, 8
mov eax, dword [esp + 0x9c]
mov byte [esp + 0xc8], 0
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], 0
cmp eax, 0x10
jb 0x481eef
inc eax
push eax
push dword [esp + 0x8c]
call fcn.00409000
add esp, 8
mov eax, dword [esp + 0x70]
mov byte [esp + 0x88], 0
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], 0
cmp eax, 0x10
jb 0x481f24
inc eax
push eax
push dword [esp + 0x60]
call fcn.00409000
add esp, 8
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
push 0x4bcf3c
call fcn.00419156
add esp, 4
cmp dword [0x4bcf3c], 0xffffffff
jne 0x4805a6
push 0x4934b0
mov dword [0x4bcf30], 0
mov dword [0x4bcf34], 0
mov dword [0x4bcf38], 0
call fcn.00418fd4
add esp, 4
push 0x4bcf3c
call fcn.0041910c
add esp, 4
jmp 0x4805a6