Function at 0x405b88
Capabilities:
Get geographical location
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push 0x924
mov eax, 0x5622c3
call fcn.00531cbc
sub esp, 0x18
xor esi, esi
mov ecx, esp
mov dword [ebp - 0x820], esp
inc esi
push str.uninstall
call fcn.00402387
xor edi, edi
xor ecx, ecx
mov dword [ebp - 4], edi
call fcn.0040ad5d
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.0040b497
test al, al
je 0x405bcf
push 2
pop ebx
jmp 0x405c03
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.reinstall
call fcn.00402387
xor ecx, ecx
mov dword [ebp - 4], esi
call fcn.0040ad5d
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.0040b415
cmp eax, esi
mov ebx, esi
push 5
pop eax
cmovne ebx, eax
cmp byte [0x5dda04], 0
push 0xb
pop eax
push 0x10
pop ecx
cmovne eax, ecx
push 0x800
mov dword [ebp - 0x824], eax
lea eax, [ebp - 0x814]
push edi
push eax
call fcn.00532330
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.distribution
call fcn.00402387
xor ecx, ecx
mov dword [ebp - 4], 2
call fcn.0040ad5d
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.0040b415
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.configurationfields
call fcn.00402387
xor ecx, ecx
mov dword [ebp - 4], 3
call fcn.0040ad5d
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.0040b415
push eax
lea eax, [ebp - 0x900]
push eax
push ecx
xor ecx, ecx
call fcn.0040ad5d
pop ecx
mov ecx, eax
call fcn.00406770
mov edx, eax
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x8d0]
call fcn.0040c342
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
jb 0x405cc0
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.refererid
call fcn.00402387
xor ecx, ecx
mov byte [ebp - 4], 6
call fcn.0040ad5d
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0040b415
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0040da7e
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x870]
call fcn.0040c342
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
jb 0x405d15
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x858]
call fcn.00406718
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8b8]
call fcn.0040c342
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
jb 0x405d3e
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.countrycode
call fcn.00402387
lea eax, [ebp - 0x8e8]
mov byte [ebp - 4], 0xb
push eax
push ecx
xor ecx, ecx
call fcn.0040ad5d
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0040b4e7
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 8
jb 0x405d7f
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x840]
call fcn.0040d8e3
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x918]
call fcn.0040c342
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x405da8
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push str.birthdate
call fcn.00402387
xor ecx, ecx
mov byte [ebp - 4], 0xf
call fcn.0040ad5d
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0040b415
push edi
mov esi, eax
call fcn.005304cc
pop ecx
sub eax, esi
lea ecx, [ebp - 0x930]
push eax
push dword [ebp - 0x824]
call fcn.0040d793
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 8
jb 0x405dfd
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push 0x5a7870
call fcn.00402387
lea eax, [ebp - 0x888]
mov byte [ebp - 4], 0x11
push eax
push ecx
xor ecx, ecx
call fcn.0040ad5d
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.0040b4e7
cmp dword [eax + 0x14], 8
jb 0x405e3a
mov eax, dword [eax]
push eax
push ebx
push str.6ae76ba4_7119_45c8_94ed_52f23abece69
push str._s_json_RaiseInstallEventMethod__InstallFlags_dUserSettings0AppInstanceId_sVersion_sSessionCode_dDuration_dSlot1OperatingSystem_sCDNCountryCode_sErrorCode_sBrowserSettings0DefaultBrowser_sMonetisationOption1RefId_dClientTypeMCC_ASYNCCommandLine_sConfigurationFields_dDistribution_d
lea eax, [ebp - 0x814]
push 0x400
push eax
call fcn.0053012d
add esp, 0x44
lea ecx, [ebp - 0x888]
xor ebx, ebx
inc ebx
push edi
push ebx
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x930]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x918]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x840]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x8e8]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x8b8]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x858]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x870]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x8a0]
call fcn.004034f0
push edi
push ebx
lea ecx, [ebp - 0x8d0]
call fcn.004034f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x900]
push edi
push ebx
call fcn.004034f0
push edi
push edi
push edi
push edi
push str.Mozilla_4.0__compatible__MSIE_7.0__Trident_5.0___IM_CustomChannel_
mov dword [ebp - 0x81c], edi
mov dword [ebp - 0x818], edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x820], eax
test eax, eax
jne 0x405f22
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x406038
push edi
push 0x50
push str.data.bd_pl.com
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov ebx, eax
mov dword [ebp - 0x824], ebx
test ebx, ebx
jne 0x405f4a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x40602c
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x814]
push eax
push 0x5a77c0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov esi, eax
test esi, esi
jne 0x405f74
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x406025
push edi
push edi
push edi
push edi
push edi
push edi
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
cmp eax, 1
je 0x405f93
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x40601e
push edi
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x405f86
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x81c], edi
push eax
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x406008
mov eax, dword [ebp - 0x81c]
inc eax
push eax
call fcn.00418fad
mov ebx, eax
pop ecx
test ebx, ebx
je 0x406012
mov ecx, dword [ebp - 0x81c]
inc ecx
push ecx
push edi
push ebx
call fcn.00532330
add esp, 0xc
lea eax, [ebp - 0x818]
push eax
push dword [ebp - 0x81c]
push ebx
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x406008
push ebx
call fcn.00418fa8
cmp dword [ebp - 0x81c], 0
pop ecx
ja 0x405f9f
jmp 0x406018
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x406018
mov dword [ebp - 0x81c], edi
mov ebx, dword [ebp - 0x824]
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push dword [ebp - 0x820]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x820], esp
push 0x5a76f4
call fcn.00402387
sub esp, 0x18
mov dword [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x824], esp
push 0x5a77de
call fcn.00402387
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str.SendInstallEvent
call fcn.00402387
or dword [ebp - 4], 0xffffffff
xor dl, dl
mov ecx, edi
call fcn.0040516a
xor eax, eax
add esp, 0x48
test edi, edi
sete al
call fcn.00531c6b
ret