Function at 0x401b9c
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x4a9450]
push ebx
mov dword [ebp - 8], eax
push esi
lea eax, [ebp - 0x14]
push edi
mov dword [ebp - 0x10], ecx
push eax
call fcn.00401dd6
pop ecx
push eax
lea ecx, [ebp - 8]
call fcn.004065e8
lea ecx, [ebp - 0x14]
call fcn.00401085
mov eax, dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [eax - 8], 0
jne 0x401bf2
mov esi, str.Cannot_detect
mov eax, esi
test eax, eax
je 0x401be8
push esi
call edi
push esi
push eax
lea ecx, [ebp - 8]
call fcn.00406586
push dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
push str.Default_Web_Browser
call fcn.004023ef
mov dword [ebp - 0x1c], eax
call fcn.0042f7ee
test eax, eax
setne bl
sub eax, 0
je 0x401c2e
dec eax
je 0x401c21
dec eax
jne 0x401c42
mov esi, str.ERROR
jmp 0x401c26
mov esi, 0x4a96e8
mov eax, esi
test eax, eax
jne 0x401c35
jmp 0x401c38
mov esi, 0x4a96e0
jmp 0x401c26
push esi
call edi
push esi
push eax
lea ecx, [ebp - 8]
call fcn.00406586
push dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
test bl, bl
push str.Has_Internet_Connection
je 0x401c58
call fcn.00402a2a
jmp 0x401c5d
call fcn.00402a18
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ea43
xor ebx, ebx
pop ecx
cmp dword [ebp - 0x24], ebx
je 0x401c7c
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x401c81
mov eax, 0x4a17ac
jmp 0x401c81
mov eax, str.not_found
push eax
lea ecx, [ebp - 4]
call fcn.004064a9
push str.Computer_Domain_Name
lea ecx, [ebp - 0xc]
call fcn.004064a9
push dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0xc]
call fcn.004023ef
lea ecx, [ebp - 0xc]
call fcn.00401085
lea ecx, [ebp - 4]
call fcn.00401085
push 1
lea ecx, [ebp - 0x2c]
call fcn.00407805
lea eax, [ebp - 0xc]
push eax
call fcn.0044a458
pop ecx
mov ecx, dword [ebp - 0xc]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0xc]
jl 0x401ce0
push eax
mov dword [ebp - 4], ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x401cf1
mov eax, dword [0x4a9450]
push ecx
lea ecx, [ebp - 4]
mov dword [ebp - 4], eax
call fcn.00406638
lea eax, [ebp - 0x18]
push eax
call fcn.0044a46a
pop ecx
push eax
lea ecx, [ebp - 0xc]
call fcn.004065e8
lea ecx, [ebp - 0x18]
call fcn.00401085
mov eax, dword [ebp - 4]
mov esi, 0x4a9668
cmp dword [eax - 8], ebx
je 0x401d43
mov eax, dword [ebp - 0xc]
cmp dword [eax - 8], ebx
je 0x401d43
mov eax, esi
test eax, eax
je 0x401d2a
push esi
call edi
push esi
push eax
lea ecx, [ebp - 4]
call fcn.0040678b
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.0040678b
lea eax, [ebp - 0x18]
push 1
push eax
call fcn.0044a47c
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xc]
call fcn.004065e8
lea ecx, [ebp - 0x18]
call fcn.00401085
mov eax, dword [ebp - 4]
cmp dword [eax - 8], ebx
je 0x401d93
mov eax, dword [ebp - 0xc]
cmp dword [eax - 8], ebx
je 0x401d93
mov eax, esi
test eax, eax
je 0x401d7a
push esi
call edi
push esi
push eax
lea ecx, [ebp - 4]
call fcn.0040678b
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.0040678b
push str.Country
lea ecx, [ebp - 0x14]
call fcn.004064a9
push dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.004023ef
lea ecx, [ebp - 0x14]
call fcn.00401085
lea ecx, [ebp - 4]
call fcn.00401085
lea ecx, [ebp - 0xc]
call fcn.00401085
lea ecx, [ebp - 8]
call fcn.00401085
mov eax, dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
leave
ret