Function at 0x571e17
Capabilities:
Get geographical location
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push 0x950
mov eax, 0x58b325
call fcn.00531c83
sub esp, 0x18
xor ebx, ebx
mov ecx, esp
mov dword [ebp - 0x81c], esp
inc ebx
push str.uninstall
call fcn.004036c4
and dword [ebp - 4], 0
xor ecx, ecx
call fcn.005786e9
or esi, 0xffffffff
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.00578528
test al, al
je 0x571e5f
push 2
pop edi
jmp 0x571e92
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.reinstall
call fcn.004036c4
xor ecx, ecx
mov dword [ebp - 4], ebx
call fcn.005786e9
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.00578578
cmp eax, ebx
mov edi, ebx
push 5
pop eax
cmovne edi, eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.usersettings
call fcn.004036c4
xor ecx, ecx
mov dword [ebp - 4], 2
call fcn.005786e9
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.00578578
sub esp, 0x18
mov dword [ebp - 0x820], eax
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.sessioncode
call fcn.004036c4
xor ecx, ecx
mov dword [ebp - 4], 3
call fcn.005786e9
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.00578578
cmp byte [0x5fb34c], 0
push 0xb
pop ebx
push 0x10
pop ecx
cmovne ebx, ecx
push 0x800
or ebx, eax
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.0054ae60
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.source
call fcn.004036c4
lea eax, [ebp - 0x95c]
mov dword [ebp - 4], 4
push eax
xor ecx, ecx
call fcn.005786e9
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.005785fa
mov edx, eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x944]
call fcn.0057890c
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
jb 0x571f6b
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.trafficsourceid
call fcn.004036c4
lea eax, [ebp - 0x92c]
mov byte [ebp - 4], 7
push eax
xor ecx, ecx
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.005785fa
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x914]
call fcn.0057890c
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
jb 0x571fbb
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.mydistributionoption
call fcn.004036c4
xor ecx, ecx
mov byte [ebp - 4], 0xa
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00578578
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.distribution
call fcn.004036c4
xor ecx, ecx
mov byte [ebp - 4], 0xb
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00578578
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.configurationfields
call fcn.004036c4
xor ecx, ecx
mov byte [ebp - 4], 0xc
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00578578
push eax
lea eax, [ebp - 0x8fc]
xor ecx, ecx
push eax
call fcn.005786e9
mov ecx, eax
call fcn.00405315
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x8e4]
call fcn.0057890c
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x572072
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.refererid
call fcn.004036c4
xor ecx, ecx
mov byte [ebp - 4], 0xf
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00578578
push eax
lea ecx, [ebp - 0x8cc]
call fcn.0057a010
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8b4]
call fcn.0057890c
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 8
jb 0x5720c7
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x89c]
call fcn.004052b8
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x884]
call fcn.0057890c
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
jb 0x5720f0
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.countrycode
call fcn.004036c4
lea eax, [ebp - 0x86c]
mov byte [ebp - 4], 0x14
push eax
xor ecx, ecx
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.005785fa
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x57212f
mov eax, dword [eax]
push eax
push 0x5c2d2c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.birthdate
call fcn.004036c4
xor ecx, ecx
mov byte [ebp - 4], 0x16
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.00578578
push 0
mov esi, eax
call fcn.00554f4c
pop ecx
sub eax, esi
push eax
push ebx
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push str.package
call fcn.004036c4
push esi
xor ecx, ecx
mov byte [ebp - 4], 0x17
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.005785fa
lea ecx, [ebp - 0x854]
call fcn.00576e8b
add esp, 0x18
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
jb 0x5721b9
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0x5c3148
call fcn.004036c4
lea eax, [ebp - 0x83c]
mov byte [ebp - 4], 0x19
push eax
xor ecx, ecx
call fcn.005786e9
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.005785fa
cmp dword [eax + 0x14], 8
jb 0x5721f4
mov eax, dword [eax]
push eax
push dword [ebp - 0x820]
lea eax, [ebp - 0x810]
push edi
push str.6ae76ba4_7119_45c8_94ed_52f23abece69
push str._s_json_RaiseInstallEventMethod__InstallFlags_dUserSettings_dAppInstanceId_sVersion_sSessionCode_dDuration_dSlot1OperatingSystem_sCDNCountryCode_sErrorCode_sBrowserSettings0DefaultBrowser_sMonetisationOption1RefId_dClientTypeMCC_ASYNCCommandLine_sConfigurationFields_dDistribution_dmydistributionoption_dsourceid_saffiliatesource_s
push 0x400
push eax
call fcn.0040533a
add esp, 0x54
lea ecx, [ebp - 0x83c]
xor ebx, ebx
xor esi, esi
inc esi
push ebx
push esi
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x854]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x86c]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x884]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x89c]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x8b4]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x8cc]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x8e4]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x8fc]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x914]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x92c]
call fcn.00403a16
push ebx
push esi
lea ecx, [ebp - 0x944]
call fcn.00403a16
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x95c]
push ebx
push esi
call fcn.00403a16
push ebx
push ebx
push ebx
push ebx
push str.Mozilla_4.0__compatible__MSIE_7.0__Trident_5.0___IM_CustomChannel_
mov esi, ebx
mov dword [ebp - 0x818], ebx
mov dword [ebp - 0x814], ebx
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x81c], eax
test eax, eax
jne 0x572300
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x57241d
push ebx
push 0x50
push str.data.bd_pl.com
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov ebx, eax
mov dword [ebp - 0x820], ebx
test ebx, ebx
jne 0x572328
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x57240f
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x810]
push eax
push 0x5c30a0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
jne 0x572354
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x572408
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
cmp eax, 1
je 0x572375
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x572401
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x572368
and dword [ebp - 0x818], esi
lea eax, [ebp - 0x818]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x5723eb
mov eax, dword [ebp - 0x818]
inc eax
push eax
call fcn.0041559f
mov ebx, eax
pop ecx
test ebx, ebx
je 0x5723f5
mov ecx, dword [ebp - 0x818]
inc ecx
push ecx
push 0
push ebx
call fcn.0054ae60
add esp, 0xc
lea eax, [ebp - 0x814]
push eax
push dword [ebp - 0x818]
push ebx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x5723eb
push ebx
call fcn.004155a8
pop ecx
cmp dword [ebp - 0x818], esi
ja 0x572382
jmp 0x5723fb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x5723fb
and dword [ebp - 0x818], esi
mov ebx, dword [ebp - 0x820]
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push dword [ebp - 0x81c]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor ebx, ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0x5c2fd4
call fcn.004036c4
sub esp, 0x18
mov dword [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x820], esp
push 0x5c2d2e
call fcn.004036c4
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
push str.SendInstallEvent
call fcn.004036c4
or dword [ebp - 4], 0xffffffff
mov dl, bl
mov ecx, esi
call fcn.00571a9e
xor eax, eax
add esp, 0x48
test esi, esi
sete al
call fcn.00531c2d
ret