Function at 0x404890
Capabilities:
Create http request
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x417da2
mov eax, dword fs:[0]
push eax
sub esp, 0xff8
mov eax, dword [0x42100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00401340
mov ecx, eax
test ecx, ecx
je 0x404ca7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xfb8], eax
mov eax, 0x41e2d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfb8]
test eax, 0xffff0000
jne 0x4048ff
movzx eax, ax
push eax
call fcn.004057d0
jmp 0x40490b
push 0
push 0x41e2d0
call fcn.00405990
push 0x10
mov dword [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov ebx, dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
push 0
push 0
push 0
push 4
push eax
mov dword [ebp - 0xfc4], eax
call ebx
xor ecx, ecx
mov edi, eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00406eef
add esp, 4
mov esi, eax
push 0
push edi
push esi
push 4
push dword [ebp - 0xfc4]
call ebx
push esi
lea eax, [ebp - 0xfb8]
push 0x41ebd8
push eax
call fcn.00405b80
add esp, 0xc
call fcn.00401340
mov ecx, eax
test ecx, ecx
je 0x404cb1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xfc0], eax
mov eax, str.2.0.0.28
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfc0]
test eax, 0xffff0000
jne 0x4049af
movzx eax, ax
push eax
call fcn.004057d0
jmp 0x4049bb
push 8
push str.2.0.0.28
call fcn.00405990
mov byte [ebp - 4], 3
call fcn.00401340
mov ecx, eax
test ecx, ecx
je 0x404cbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xfc4], eax
mov eax, str.BGAUpdate.exe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xfc4]
test eax, 0xffff0000
jne 0x4049fd
movzx eax, ax
push eax
call fcn.004057d0
jmp 0x404a09
push 0xd
push str.BGAUpdate.exe
call fcn.00405990
mov byte [ebp - 4], 5
call fcn.00401340
mov ecx, eax
test ecx, ecx
je 0x404cc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xfbc], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0xfbc]
push dword [ebp - 0xfc0]
mov edi, dword [ebp - 0xfc4]
push dword [ebp - 0xfb8]
push dword [0x4225e8]
push edi
push dword [0x4225ec]
push str.bgaupMachineId_sbinaryName_serrorDetails_scountryCode_sversion_s
push eax
call fcn.00405b80
push 0xfa2
lea eax, [ebp - 0xfb4]
push 0
push eax
call fcn.00408610
push 0x38
lea eax, [ebp - 0x1000]
mov dword [ebp - 0xfc8], 0x7d1
push 0
push eax
mov dword [ebp - 0x1004], 0x3c
call fcn.00408610
mov esi, dword [ebp - 0xfbc]
mov eax, 0x50
add esp, 0x34
mov dword [ebp - 0xff8], 3
mov word [ebp - 0xfec], ax
mov dword [ebp - 0xff4], str.go.microsoft.com
mov dword [ebp - 0xfd8], str.fwlink__linkid2226097
cmp dword [esi - 4], 1
jle 0x404ae2
push dword [esi - 0xc]
lea ecx, [ebp - 0xfbc]
call fcn.004056c0
mov esi, dword [ebp - 0xfbc]
lea eax, [ebp - 0xfc8]
mov dword [ebp - 0xfd0], esi
push eax
lea eax, [ebp - 0xfb4]
push eax
push 0
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.WININET.dll_InternetCreateUrlW]
push dword [esi - 8]
push esi
call fcn.0040a290
add esp, 8
test eax, eax
js 0x404c9d
cmp eax, dword [esi - 8]
jg 0x404c9d
mov dword [esi - 0xc], eax
xor ecx, ecx
mov word [esi + eax*2], cx
xor eax, eax
push eax
push eax
push eax
push eax
push str.BGAUpdatePack
mov word [ebp - 0x14], ax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0xfbc], eax
test eax, eax
je 0x404c1a
push 0
push 0x4080300
push 0
push 0
lea ecx, [ebp - 0xfb4]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
test eax, eax
je 0x404c1a
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
push eax
call ebx
push dword [ebp - 0xfbc]
call ebx
lea edx, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404b9e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x404bb9
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, esi
mov edx, dword [ebp - 0xfc0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404bda
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xfb8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x404bfc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00406958
mov esp, ebp
pop ebp
ret
lea edx, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404c38
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x404c53
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, esi
mov edx, dword [ebp - 0xfc0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404c74
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xfb8]
lea edx, [eax - 0x10]
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x404c96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
jmp 0x404bfe
push 0x80070057
call fcn.00401170
push 0x80004005
call fcn.00401170
push 0x80004005
call fcn.00401170
push 0x80004005
call fcn.00401170
push 0x80004005
call fcn.00401170
int3