Function at 0x404bd0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47afd2
mov eax, dword fs:[0]
push eax
sub esp, 0xec
mov eax, dword [0x49a1b0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 4], 0
mov byte [ebp - 0xd], 1
push 0x480f04
lea ecx, [ebp - 0x7c]
call fcn.004083c0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd8]
or eax, 1
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp + 8]
call fcn.004087b0
push eax
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp + 8]
call fcn.004087e0
mov ecx, eax
call fcn.0041c170
movzx ecx, al
test ecx, ecx
je 0x404cb3
push 0x480f18
lea ecx, [ebp - 0xa8]
call fcn.004083c0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0xd8]
or edx, 2
mov dword [ebp - 0xd8], edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp + 8]
call fcn.00408520
mov ecx, dword [eax]
call fcn.0041b0d0
movzx ecx, al
test ecx, ecx
je 0x404cb3
mov dword [ebp - 0xe0], 1
jmp 0x404cbd
mov dword [ebp - 0xe0], 0
mov dl, byte [ebp - 0xe0]
mov byte [ebp - 0x5d], dl
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xd8]
and eax, 2
je 0x404cea
and dword [ebp - 0xd8], 0xfffffffd
lea ecx, [ebp - 0xa8]
call fcn.00408400
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0xd8]
and ecx, 1
je 0x404d0b
and dword [ebp - 0xd8], 0xfffffffe
lea ecx, [ebp - 0x7c]
call fcn.00408400
movzx edx, byte [ebp - 0x5d]
test edx, edx
je 0x4050a5
push str.criteria
lea ecx, [ebp - 0xc4]
call fcn.004083c0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp + 8]
call fcn.00408520
mov ecx, dword [eax]
call fcn.0041b190
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc4]
call fcn.00408400
mov dword [ebp - 0x2c], 0
jmp 0x404d66
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x28]
call fcn.004084a0
cmp dword [ebp - 0x2c], eax
jae 0x405099
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004084c0
mov ecx, dword [eax]
call fcn.0041b1d0
mov byte [ebp - 4], 6
push str.type
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0xc8], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00407140
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xdc]
call fcn.00405650
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 7
push 0x480f4c
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0xcc], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00407140
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xdc]
call fcn.00405650
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 8
push str.registry
lea ecx, [ebp - 0x54]
push ecx
call fcn.00408050
add esp, 8
movzx edx, al
test edx, edx
je 0x404e69
push 0
lea ecx, [ebp - 0x30]
call fcn.0040ed00
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00407350
add esp, 0xc
cmp eax, 1
jne 0x404e64
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x405099
jmp 0x405070
push str.registry_currentuser
lea eax, [ebp - 0x54]
push eax
call fcn.00408050
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x404ed0
push 0
lea ecx, [ebp - 0x30]
call fcn.0040ed00
push eax
push SysReAllocStringLen
call fcn.00407350
add esp, 0xc
cmp eax, 1
jne 0x404ecb
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x405099
jmp 0x405070
push str.directory
lea edx, [ebp - 0x54]
push edx
call fcn.00408050
add esp, 8
movzx eax, al
test eax, eax
je 0x404f5a
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0xdc]
call fcn.00401c30
push ecx
mov ecx, esp
mov dword [ebp - 0xd0], esp
lea edx, [ebp - 0x30]
push edx
call fcn.0040e930
mov dword [ebp - 0xf4], eax
call fcn.00407180
add esp, 4
mov byte [ebp - 0xf5], al
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x404f55
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x405099
jmp 0x405070
push str.country
lea ecx, [ebp - 0x54]
push ecx
call fcn.00408050
add esp, 8
movzx edx, al
test edx, edx
je 0x404fe9
push 0x97
lea eax, [ebp - 0x58]
push eax
call fcn.00412e90
add esp, 8
mov byte [ebp - 4], 9
push 0
lea ecx, [ebp - 0x58]
call fcn.0040ed00
push eax
lea ecx, [ebp - 0x30]
call fcn.00407ca0
cmp eax, 0xffffffff
jg 0x404fd8
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.0040ea40
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x405099
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.0040ea40
jmp 0x405070
push str.browser
lea ecx, [ebp - 0x54]
push ecx
call fcn.00408050
add esp, 8
movzx edx, al
test edx, edx
je 0x405070
push 0x98
lea eax, [ebp - 0x5c]
push eax
call fcn.00412e90
add esp, 8
mov byte [ebp - 4], 0xa
push 0
lea ecx, [ebp - 0x5c]
call fcn.0040ed00
push eax
lea ecx, [ebp - 0x30]
call fcn.00407ca0
cmp eax, 0xffffffff
jg 0x405064
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5c]
call fcn.0040ea40
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x405099
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5c]
call fcn.0040ea40
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
call fcn.0040ea40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0040ea40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.00407100
jmp 0x404d5d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00408440
mov cl, byte [ebp - 0xd]
mov byte [ebp - 0xd1], cl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00407100
mov al, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x20