Function at 0x4059b0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47ca2a
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x1e4
push ebx
push esi
push edi
mov eax, dword [0x49b1b0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x190], 0
mov dword [ebp - 4], 0
mov byte [ebp - 0x11], 1
lea ecx, [ebp - 0x18]
call fcn.0040f570
mov byte [ebp - 4], 1
push 0x481ff4
lea ecx, [ebp - 0x94]
call fcn.00409840
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x190]
or eax, 1
mov dword [ebp - 0x190], eax
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp + 8]
call fcn.00409c30
push eax
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp + 8]
call fcn.00409c60
mov ecx, eax
call fcn.0040aea0
movzx ecx, al
test ecx, ecx
je 0x405aac
push 0x482000
lea ecx, [ebp - 0xc0]
call fcn.00409840
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x190]
or edx, 2
mov dword [ebp - 0x190], edx
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp + 8]
call fcn.004099a0
mov ecx, dword [eax]
call fcn.0041c8a0
movzx ecx, al
test ecx, ecx
je 0x405aac
mov dword [ebp - 0x198], 1
jmp 0x405ab6
mov dword [ebp - 0x198], 0
mov dl, byte [ebp - 0x198]
mov byte [ebp - 0x75], dl
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x190]
and eax, 2
je 0x405ae3
and dword [ebp - 0x190], 0xfffffffd
lea ecx, [ebp - 0xc0]
call fcn.00409880
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x190]
and ecx, 1
je 0x405b07
and dword [ebp - 0x190], 0xfffffffe
lea ecx, [ebp - 0x94]
call fcn.00409880
movzx edx, byte [ebp - 0x75]
test edx, edx
je 0x405b88
push str.name
lea ecx, [ebp - 0xdc]
call fcn.00409840
mov byte [ebp - 4], 4
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea ecx, [ebp + 8]
call fcn.004099a0
mov ecx, dword [eax]
call fcn.0041c940
mov dword [ebp - 0x19c], eax
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1a0]
call fcn.004098a0
push eax
lea ecx, [ebp - 0x18]
call fcn.0040f8f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf8]
call fcn.00409880
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc]
call fcn.00409880
push 0x482018
lea ecx, [ebp - 0x18]
call fcn.00408e50
test eax, eax
jne 0x405dce
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24]
call fcn.00412f70
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0xfc], esp
push str.ApnIC.dll
call fcn.0040f610
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x100], esp
push str.http:__cdn.ibryte.com_bundles_ask_ApnIC.dll
call fcn.0040f610
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.00412fb0
push ecx
mov ecx, esp
mov dword [ebp - 0x104], esp
push str.ApnToolbarInstaller.exe
call fcn.0040f610
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x108], esp
push str.http:__cdn.ibryte.com_bundles_ask_ApnToolbarInstaller.exe
call fcn.0040f610
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.00412fb0
push ecx
mov ecx, esp
mov dword [ebp - 0x10c], esp
push str.ApnStub.exe
call fcn.0040f610
mov dword [ebp - 0x1c0], eax
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], edx
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x110], esp
push str.http:__cdn.ibryte.com_bundles_Ask_ApnStub.exe
call fcn.0040f610
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.00412fb0
push 0x4820f8
lea eax, [ebp - 0x114]
push eax
call fcn.004080c0
add esp, 8
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], ecx
mov byte [ebp - 4], 0xb
push str.ApnStub.exe__tbADK
mov edx, dword [ebp - 0x1d0]
push edx
lea eax, [ebp - 0x20]
push eax
call fcn.00409470
add esp, 0xc
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x114]
call fcn.0040f890
lea ecx, [ebp - 0x19]
call fcn.00423fd0
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x194]
add ecx, 0x334
push ecx
lea ecx, [ebp - 0x20]
call fcn.0040f9b0
push eax
lea ecx, [ebp - 0x19]
call fcn.00424170
push 0xbb8
mov edx, dword [ebp - 0x194]
mov eax, dword [edx + 0x334]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x194]
mov eax, dword [edx + 0x334]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x405d64
mov byte [ebp - 0x11], 0
jmp 0x405d6e
cmp dword [ebp - 0x28], 0xffffffff
jne 0x405d6e
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x334]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 0x338]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x19]
call fcn.00423fe0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x20]
call fcn.0040f890
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24]
call fcn.00412f90
jmp 0x405dc7
mov dword [ebp - 4], 1
push 0x482104
lea ecx, [ebp - 0x134]
call fcn.00409840
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x190]
or edx, 4
mov dword [ebp - 0x190], edx
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp + 8]
call fcn.00409c30
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x13c]
push edx
lea ecx, [ebp + 8]
call fcn.00409c60
mov ecx, eax
call fcn.0040aea0
movzx eax, al
test eax, eax
je 0x405e74
push 0x482118
lea ecx, [ebp - 0x160]
call fcn.00409840
mov dword [ebp - 4], 0x11
mov ecx, dword [ebp - 0x190]
or ecx, 8
mov dword [ebp - 0x190], ecx
lea edx, [ebp - 0x160]
push edx
lea ecx, [ebp + 8]
call fcn.004099a0
mov ecx, dword [eax]
call fcn.0041c900
movzx eax, al
test eax, eax
je 0x405e74
mov dword [ebp - 0x1dc], 1
jmp 0x405e7e
mov dword [ebp - 0x1dc], 0
mov cl, byte [ebp - 0x1dc]
mov byte [ebp - 0x115], cl
mov dword [ebp - 4], 0x10
mov edx, dword [ebp - 0x190]
and edx, 8
je 0x405eae
and dword [ebp - 0x190], 0xfffffff7
lea ecx, [ebp - 0x160]
call fcn.00409880
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x190]
and eax, 4
je 0x405ed2
and dword [ebp - 0x190], 0xfffffffb
lea ecx, [ebp - 0x134]
call fcn.00409880
movzx ecx, byte [ebp - 0x115]
test ecx, ecx
je 0x40630c
push str.criteria
lea ecx, [ebp - 0x17c]
call fcn.00409840
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp + 8]
call fcn.004099a0
mov ecx, dword [eax]
call fcn.0041c9c0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x17c]
call fcn.00409880
mov dword [ebp - 0x44], 0
jmp 0x405f30
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x40]
call fcn.00409920
cmp dword [ebp - 0x44], eax
jae 0x406300
lea edx, [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00409940
mov ecx, dword [eax]
call fcn.0041ca00
mov byte [ebp - 4], 0x15
push str.type
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x180], esp
lea edx, [ebp - 0x68]
push edx
call fcn.004085b0
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x194]
call fcn.004068c0
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 0x16
push 0x48214c
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x184], esp
lea edx, [ebp - 0x68]
push edx
call fcn.004085b0
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x194]
call fcn.004068c0
mov dword [ebp - 0x1ec], eax
mov byte [ebp - 4], 0x17
push 0x482154
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x40602c
push 0
lea ecx, [ebp - 0x48]
call fcn.0040f9b0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004087c0
add esp, 0xc
cmp eax, 1
jne 0x406027
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
jmp 0x4062d7
push str.registry_localmachine
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x40608c
push 0
lea ecx, [ebp - 0x48]
call fcn.0040f9b0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004087c0
add esp, 0xc
cmp eax, 1
jne 0x406087
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
jmp 0x4062d7
push 0x482178
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x4060ec
push 0
lea ecx, [ebp - 0x48]
call fcn.0040f9b0
push eax
push SysReAllocStringLen
call fcn.004087c0
add esp, 0xc
cmp eax, 1
jne 0x4060e7
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
jmp 0x4062d7
push 0x482190
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x40614c
push 0
lea ecx, [ebp - 0x48]
call fcn.0040f9b0
push eax
push SysReAllocStringLen
call fcn.004087c0
add esp, 0xc
cmp eax, 1
jne 0x406147
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
jmp 0x4062d7
push 0x4821a8
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x4061cf
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x194]
call fcn.00401c90
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
lea edx, [ebp - 0x48]
push edx
call fcn.0040f590
mov dword [ebp - 0x1f0], eax
call fcn.004085f0
add esp, 4
mov byte [ebp - 0x1f1], al
movzx eax, byte [ebp - 0x1f1]
test eax, eax
je 0x4061ca
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
jmp 0x4062d7
push str.country
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x406257
push 0x97
lea ecx, [ebp - 0x70]
push ecx
call fcn.00414450
add esp, 8
mov byte [ebp - 4], 0x18
push 0
lea ecx, [ebp - 0x70]
call fcn.0040f9b0
push eax
lea ecx, [ebp - 0x48]
call fcn.00409170
cmp eax, 0xffffffff
jg 0x406246
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x70]
call fcn.0040f890
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x70]
call fcn.0040f890
jmp 0x4062d7
push str.browser
lea ecx, [ebp - 0x6c]
call fcn.00408e50
test eax, eax
jne 0x4062d7
push 0x98
lea edx, [ebp - 0x74]
push edx
call fcn.00414450
add esp, 8
mov byte [ebp - 4], 0x19
push 0
lea ecx, [ebp - 0x74]
call fcn.0040f9b0
push eax
lea ecx, [ebp - 0x48]
call fcn.00409170
cmp eax, 0xffffffff
jg 0x4062cb
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x74]
call fcn.0040f890
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x406300
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x74]
call fcn.0040f890
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x48]
call fcn.0040f890
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6c]
call fcn.0040f890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x68]
call fcn.00408570
jmp 0x405f27
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.004098c0
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x189], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0040f890
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00408570
mov al, byte [ebp - 0x189]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20