Function at 0x404b40
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47ab32
mov eax, dword fs:[0]
push eax
sub esp, 0xec
mov eax, dword [0x4991b0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 4], 0
mov byte [ebp - 0xd], 1
push 0x47fef8
lea ecx, [ebp - 0x7c]
call fcn.004081b0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd8]
or eax, 1
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp + 8]
call fcn.004085a0
push eax
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp + 8]
call fcn.004085d0
mov ecx, eax
call fcn.00409830
movzx ecx, al
test ecx, ecx
je 0x404c23
push 0x47ff0c
lea ecx, [ebp - 0xa8]
call fcn.004081b0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0xd8]
or edx, 2
mov dword [ebp - 0xd8], edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp + 8]
call fcn.00408310
mov ecx, dword [eax]
call fcn.0041ae80
movzx ecx, al
test ecx, ecx
je 0x404c23
mov dword [ebp - 0xe0], 1
jmp 0x404c2d
mov dword [ebp - 0xe0], 0
mov dl, byte [ebp - 0xe0]
mov byte [ebp - 0x5d], dl
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xd8]
and eax, 2
je 0x404c5a
and dword [ebp - 0xd8], 0xfffffffd
lea ecx, [ebp - 0xa8]
call fcn.004081f0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0xd8]
and ecx, 1
je 0x404c7b
and dword [ebp - 0xd8], 0xfffffffe
lea ecx, [ebp - 0x7c]
call fcn.004081f0
movzx edx, byte [ebp - 0x5d]
test edx, edx
je 0x404f20
push str.criteria
lea ecx, [ebp - 0xc4]
call fcn.004081b0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp + 8]
call fcn.00408310
mov ecx, dword [eax]
call fcn.0041af40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc4]
call fcn.004081f0
mov dword [ebp - 0x2c], 0
jmp 0x404cd6
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x28]
call fcn.00408290
cmp dword [ebp - 0x2c], eax
jae 0x404f14
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004082b0
mov ecx, dword [eax]
call fcn.0041af80
mov byte [ebp - 4], 6
push str.type
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0xc8], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00406f70
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xdc]
call fcn.004054c0
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 7
push 0x47ff40
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0xcc], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00406f70
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xdc]
call fcn.004054c0
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 8
push str.registry
lea ecx, [ebp - 0x54]
push ecx
call fcn.00407e60
add esp, 8
movzx edx, al
test edx, edx
je 0x404db0
push 0
lea ecx, [ebp - 0x30]
call fcn.0040edb0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00407180
add esp, 0xc
cmp eax, 1
jne 0x404dab
mov byte [ebp - 0xd], 0
jmp 0x404eeb
push str.registry_currentuser
lea eax, [ebp - 0x54]
push eax
call fcn.00407e60
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x404dee
push 0
lea ecx, [ebp - 0x30]
call fcn.0040edb0
push eax
push SysReAllocStringLen
call fcn.00407180
add esp, 0xc
cmp eax, 1
jne 0x404de9
mov byte [ebp - 0xd], 0
jmp 0x404eeb
push str.directory
lea edx, [ebp - 0x54]
push edx
call fcn.00407e60
add esp, 8
movzx eax, al
test eax, eax
je 0x404e4f
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0xdc]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [ebp - 0xd0], esp
lea edx, [ebp - 0x30]
push edx
call fcn.0040e920
mov dword [ebp - 0xf4], eax
call fcn.00406fb0
add esp, 4
mov byte [ebp - 0xf5], al
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x404e4a
mov byte [ebp - 0xd], 0
jmp 0x404eeb
push str.country
lea ecx, [ebp - 0x54]
push ecx
call fcn.00407e60
add esp, 8
movzx edx, al
test edx, edx
je 0x404e9e
push 0x97
lea eax, [ebp - 0x58]
push eax
call fcn.00412ea0
add esp, 8
push 0
lea ecx, [ebp - 0x58]
call fcn.0040edb0
push eax
lea ecx, [ebp - 0x30]
call fcn.00407ab0
cmp eax, 0xffffffff
jg 0x404e94
mov byte [ebp - 0xd], 0
lea ecx, [ebp - 0x58]
call fcn.0040ea70
jmp 0x404eeb
push str.browser
lea ecx, [ebp - 0x54]
push ecx
call fcn.00407e60
add esp, 8
movzx edx, al
test edx, edx
je 0x404eeb
push 0x98
lea eax, [ebp - 0x5c]
push eax
call fcn.00412ea0
add esp, 8
push 0
lea ecx, [ebp - 0x5c]
call fcn.0040edb0
push eax
lea ecx, [ebp - 0x30]
call fcn.00407ab0
cmp eax, 0xffffffff
jg 0x404ee3
mov byte [ebp - 0xd], 0
lea ecx, [ebp - 0x5c]
call fcn.0040ea70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea70
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00406f30
jmp 0x404ccd
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00408230
mov cl, byte [ebp - 0xd]
mov byte [ebp - 0xd1], cl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406f30
mov al, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x20