Function at 0x424900
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x42548d
sub rsp, 0xc8
mov qword [rsp + 0xc0], rbp
lea rbp, [rsp + 0xc0]
mov rdx, qword [r14 + 0x30]
cmp dword [rdx + 0xd8], 0
jne 0x424949
cmp dword [rdx + 0xc0], 0
jne 0x424949
mov rsi, r14
nop
cmp qword [rdx], rsi
jne 0x42547b
mov rdx, qword [rax]
test bl, bl
jne 0x424957
mov qword [rax], 0
mov esi, dword [0x011264e8]
mov dword [rsp + 0x20], esi
mov dil, byte [rdx + 0x63]
mov byte [rsp + 0x1b], dil
cmp dil, 1
jne 0x4253f5
lea r8d, [rsi - 1]
nop dword [rax + rax]
cmp dword [rdx + 0x58], r8d
jne 0x4253f5
mov byte [rsp + 0xd8], bl
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x24], r8d
cmp byte [0x011062f0], 0
je 0x4249c7
mov rax, qword [rdx + 0x20]
shl rax, 0xd
call fcn.00456720
mov rdx, qword [rsp + 0x40]
movzx ebx, byte [rsp + 0xd8]
mov esi, dword [rsp + 0x20]
mov r8d, dword [rsp + 0x24]
mov rdi, qword [rdx + 0x20]
lea r9, [0x01126520]
lock xadd qword [r9], rdi
movzx edi, byte [rdx + 0x62]
mov byte [rsp + 0x18], dil
mov r9, qword [rdx + 0x68]
mov qword [rsp + 0x38], r9
mov r10, qword [rdx + 0x80]
mov qword [rsp + 0x28], r10
lea r11, [rdx + 0x80]
mov qword [rsp + 0x80], r11
mov qword [rsp + 0x88], r10
jmp 0x424a1a
mov rdx, r15
mov esi, dword [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
mov r11, qword [rsp + 0x88]
test r11, r11
je 0x424b12
movzx eax, word [r11 + 8]
test r9, r9
je 0x4253f0
mov rcx, rdx
xor edx, edx
div r9
mov rdx, rax
imul rax, r9
mov r12, qword [rcx + 0x18]
add r12, rax
nop
nop
mov r13, rdx
shr rdx, 3
and r13, 7
mov r15, rcx
mov rcx, r13
mov edi, 1
shl edi, cl
nop
add rdx, qword [r15 + 0x50]
movzx esi, byte [rdx]
test sil, dil
je 0x424ae6
cmp byte [r11 + 0xa], 3
je 0x424a96
nop
mov qword [rsp + 0x80], r11
mov rdx, qword [r11]
mov qword [rsp + 0x88], rdx
jmp 0x424a0e
nop
mov rdx, qword [r11]
mov qword [rsp + 0x88], rdx
mov rsi, qword [rsp + 0x80]
mov qword [rsi], rdx
mov byte [r11 + 0x11], 1
mov rax, r11
mov rbx, r12
mov rcx, r9
nop dword [rax + rax]
call fcn.00429380
movzx ebx, byte [rsp + 0xd8]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x28]
mov r15, qword [rsp + 0x40]
jmp 0x424a0e
lea rdi, [rax + r9]
jmp 0x425335
nop
bts esi, ecx
mov byte [rdx], sil
mov eax, 1
jmp 0x424b04
xor eax, eax
nop
jmp 0x424b04
xor eax, eax
mov qword [rsp + 0x60], rdi
mov byte [rsp + 0x19], al
jmp 0x425358
test r10, r10
je 0x424ba9
cmp qword [rdx + 0x80], 0
jne 0x424ba9
nop
nop
mov rax, qword [rdx + 0x18]
movabs r10, 0x800000000000
add r10, rax
mov r11, r10
shr r10, 0x2a
cmp r10, 0x40
jae 0x425325
lea r12, [0x01126558]
mov r10, qword [r12 + r10*8]
test byte [r10], al
shr r11, 0x16
and r11, 0xfffff
mov r10, qword [r10 + r11*8]
test byte [r10], al
shr rax, 0xd
mov rcx, rax
and rax, 0x1ff
shr rax, 3
nop
cmp rax, 0x40
jae 0x42531b
lea r10, [r10 + rax]
lea r10, [r10 + 0x21080]
and rcx, 7
mov r11d, 1
shl r11d, cl
not r11d
lock and byte [r10], r11b
cmp dword [0x011549a0], 0
jne 0x424bbb
cmp dword [0x01154964], 0
je 0x424c05
mov r10, qword [rdx + 0x50]
mov qword [rsp + 0x90], r10
mov byte [rsp + 0x98], 1
mov qword [rsp + 0xa0], 0
mov r10, qword [rdx + 0x48]
mov qword [rsp + 0xa8], r10
mov byte [rsp + 0xb0], 1
mov qword [rsp + 0xb8], 0
xor eax, eax
nop dword [rax]
jmp 0x4251e4
mov rcx, qword [rdx + 0x30]
cmp qword [rdx + 0x38], rcx
jbe 0x424c85
mov r10, qword [rdx + 0x50]
mov r11, rcx
shr rcx, 3
movzx r10d, byte [rcx + r10]
mov r12, qword [rdx + 0x48]
movzx r12d, byte [rcx + r12]
not r12d
and r12d, r10d
and r11, 7
mov rax, rcx
mov rcx, r11
shr r12b, cl
nop dword [rax + rax]
test r12b, r12b
je 0x424c77
mov qword [rsp + 0x78], rax
mov rax, rdx
call fcn.004254c0
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x40]
movzx ebx, byte [rsp + 0xd8]
mov esi, dword [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
lea rcx, [rax + 1]
nop dword [rax + rax]
jmp 0x425170
nop
mov rcx, qword [rdx + 0x38]
add rcx, 7
shr rcx, 3
mov qword [rsp + 0x78], rcx
xor eax, eax
xor r10d, r10d
jmp 0x424ca5
add rax, 8
add r10, r11
mov qword [rsp + 0x68], r10
cmp rax, rcx
jae 0x424d15
mov r11, qword [rdx + 0x50]
mov r11, qword [r11 + rax]
movzx r12, byte [0x01154115]
nop
test r12, r12
je 0x424ccc
popcnt r11, r11
jmp 0x424c9e
mov qword [rsp + 0x50], rax
mov rax, r11
call fcn.00402280
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x40]
movzx ebx, byte [rsp + 0xd8]
mov esi, dword [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x68]
movzx r12, byte [0x01154115]
mov r11, rax
mov rax, qword [rsp + 0x50]
jmp 0x424c9e
movzx ecx, word [rdx + 0x60]
mov r11d, ecx
sub ecx, r10d
mov word [rsp + 0x1c], cx
cmp r10w, r11w
ja 0x4250bb
mov word [rdx + 0x60], r10w
mov qword [rdx + 0x30], 0
cmp byte [0x011062f0], 0
je 0x424d65
mov r11, qword [r14 + 0x30]
mov r11, qword [r11 + 0xa0]
test byte [r11], al
movzx r12d, cx
mov r13, qword [rdx + 0x68]
imul r13, r12
add qword [r11 + 0x1648], r13
mov rcx, qword [rdx + 0x50]
mov qword [rdx + 0x48], rcx
mov rax, qword [rdx + 0x38]
call fcn.004294c0
mov rcx, qword [rsp + 0x40]
mov qword [rcx + 0x50], rax
mov rax, rcx
xor ebx, ebx
call fcn.00414d60
mov rbx, qword [rsp + 0x40]
mov cl, byte [rbx + 0x63]
mov byte [rsp + 0x1b], cl
cmp cl, 1
jne 0x42503b
mov edx, dword [rbx + 0x58]
mov esi, dword [rsp + 0x24]
cmp edx, esi
jne 0x42503b
mov esi, dword [rsp + 0x20]
lea edi, [rsi + 1]
cmp edx, edi
je 0x42502a
lea edi, [rsi + 3]
nop
cmp edx, edi
je 0x42502a
mov edx, esi
xchg dword [rbx + 0x58], esi
movzx eax, byte [rsp + 0x18]
mov esi, eax
shr al, 1
test al, al
je 0x424f1c
movzx edi, word [rsp + 0x1c]
test di, di
ja 0x424df5
movzx edi, byte [rsp + 0xd8]
test dil, dil
jmp 0x424e5d
mov byte [rsp + 0x1a], al
mov byte [rbx + 0x64], 1
lea rax, [0x0115a368]
call fcn.0042fe00
test byte [rax], al
movzx ecx, byte [rsp + 0x1a]
movsx rcx, cl
cmp rcx, 0x44
jae 0x42501d
lea rcx, [rax + rcx*8]
lea rcx, [rcx + 0x278]
movzx edx, word [rsp + 0x1c]
movzx edx, dx
lock xadd qword [rcx], rdx
lea rax, [0x0115a368]
nop dword [rax]
call fcn.0042ff00
movzx ecx, byte [rsp + 0xd8]
test cl, cl
mov edx, dword [rsp + 0x20]
mov rbx, qword [rsp + 0x40]
movzx esi, byte [rsp + 0x18]
nop dword [rax]
jne 0x424fe5
mov rdi, qword [rsp + 0x68]
test di, di
je 0x424efb
movzx edi, di
cmp qword [rbx + 0x38], rdi
jne 0x424ec0
nop dword [rax]
cmp rsi, 0x88
jae 0x425011
lea rcx, [rsi + rsi*2]
shl rcx, 6
lea rsi, [0x01126800]
lea rcx, [rcx + rsi]
lea rcx, [rcx + 0x58]
shr edx, 1
and edx, 1
lea rdx, [rdx + rdx*4]
lea rax, [rcx + rdx*8]
call fcn.0042f7a0
jmp 0x424fe5
cmp rsi, 0x88
jae 0x425005
lea rcx, [rsi + rsi*2]
shl rcx, 6
lea rsi, [0x01126800]
lea rcx, [rsi + rcx]
lea rcx, [rcx + 8]
shr edx, 1
and edx, 1
lea rdx, [rdx + rdx*4]
lea rax, [rcx + rdx*8]
call fcn.0042f7a0
jmp 0x424fe5
lea rax, [0x011163c0]
call fcn.00428400
mov eax, 1
mov rbp, qword [rsp + 0xc0]
add rsp, 0xc8
ret
movzx edi, byte [rsp + 0xd8]
test dil, dil
jne 0x424fe5
movzx edi, word [rsp + 0x1c]
test di, di
je 0x424faf
cmp dword [0x01154968], 0
nop
jle 0x424f5a
mov qword [rbx + 0x70], 0
mov rax, qword [rbx + 0x18]
mov rbx, qword [rsp + 0x38]
call fcn.00419620
jmp 0x424f66
lea rax, [0x011163c0]
call fcn.00428400
lea rax, [0x0115a368]
call fcn.0042fe00
mov ecx, 1
lock xadd qword [rax + 0x270], rcx
mov rcx, qword [rsp + 0x38]
lock xadd qword [rax + 0x268], rcx
lea rax, [0x0115a368]
call fcn.0042ff00
mov eax, 1
mov rbp, qword [rsp + 0xc0]
add rsp, 0xc8
ret
cmp rsi, 0x88
jae 0x424ff7
lea rcx, [rsi + rsi*2]
shl rcx, 6
lea rsi, [0x01126800]
lea rcx, [rcx + rsi]
lea rcx, [rcx + 0x58]
shr edx, 1
and edx, 1
lea rdx, [rdx + rdx*4]
lea rax, [rcx + rdx*8]
nop dword [rax]
call fcn.0042f7a0
xor eax, eax
mov rbp, qword [rsp + 0xc0]
add rsp, 0xc8
ret
mov eax, esi
mov ecx, 0x88
nop
call fcn.00465b60
mov eax, esi
mov ecx, 0x88
call fcn.00465b60
mov eax, esi
mov ecx, 0x88
call fcn.00465b60
mov rax, rcx
mov ecx, 0x44
call fcn.00465b60
lea rax, [0x00ac2da7]
mov ebx, 0x11
call fcn.00437b60
mov eax, dword [rbx + 0x58]
mov qword [rsp + 0x70], rax
call fcn.004392e0
lea rax, [0x00ac447a]
mov ebx, 0x13
call fcn.00439be0
movzx eax, byte [rsp + 0x1b]
movzx eax, al
call fcn.004398e0
lea rax, [0x00abe1f3]
mov ebx, 0xa
call fcn.00439be0
mov rax, qword [rsp + 0x70]
nop dword [rax]
call fcn.004398e0
lea rax, [0x00ac16a1]
mov ebx, 0x10
call fcn.00439be0
mov eax, dword [rsp + 0x20]
call fcn.004398e0
nop
call fcn.00439540
call fcn.00439360
lea rax, [0x00ad6175]
mov ebx, 0x27
call fcn.00437b60
mov word [rsp + 0x1e], r11w
mov rax, qword [rdx + 0x38]
mov qword [rsp + 0x78], rax
call fcn.004392e0
lea rax, [0x00ac2201]
mov ebx, 0x10
nop dword [rax + rax]
call fcn.00439be0
mov rax, qword [rsp + 0x78]
call fcn.004398e0
lea rax, [0x00abd4b2]
mov ebx, 8
nop dword [rax + rax]
call fcn.00439be0
mov rax, qword [rsp + 0x68]
movzx eax, ax
call fcn.004398e0
lea rax, [0x00ac584c]
mov ebx, 0x15
nop
call fcn.00439be0
movzx eax, word [rsp + 0x1e]
call fcn.004398e0
lea rax, [0x00abd4c2]
mov ebx, 8
nop dword [rax + rax]
call fcn.00439be0
movzx eax, word [rsp + 0x1c]
movzx eax, ax
call fcn.004398e0
call fcn.00439540
call fcn.00439360
lea rax, [0x00ad0cee]
mov ebx, 0x20
call fcn.00437b60
inc rcx
mov r10, qword [rdx + 0x38]
add r10, 7
shr r10, 3
nop dword [rax]
cmp rcx, r10
jae 0x424c85
mov r10, qword [rdx + 0x50]
movzx r10d, byte [rcx + r10]
mov r11, qword [rdx + 0x48]
movzx r11d, byte [rcx + r11]
not r11d
nop
test r10b, r11b
je 0x42516d
mov qword [rsp + 0x58], rcx
mov rax, rdx
call fcn.004254c0
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x40]
movzx ebx, byte [rsp + 0xd8]
mov esi, dword [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
jmp 0x42516d
inc qword [rsp + 0xb8]
inc rax
cmp qword [rdx + 0x38], rax
jbe 0x424c05
mov r10, qword [rsp + 0x90]
movzx r11d, byte [rsp + 0x98]
movzx r10d, byte [r10]
test r10b, r11b
jne 0x425295
mov r10, qword [rsp + 0xb8]
cmp qword [rdx + 0x30], r10
ja 0x425234
mov r10, qword [rsp + 0xa8]
movzx r11d, byte [rsp + 0xb0]
movzx r10d, byte [r10]
test r10b, r11b
je 0x425295
mov r10, qword [rdx + 0x68]
imul r10, rax
add r10, qword [rdx + 0x18]
cmp dword [0x011549a0], 0
je 0x425288
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], r10
mov rax, r10
mov rbx, r9
call fcn.0042e760
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
movzx ebx, byte [rsp + 0xd8]
mov esi, dword [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x30]
cmp dword [0x01154964], 0
je 0x425295
xor ecx, ecx
jmp 0x425311
nop
movzx r10d, byte [rsp + 0x98]
nop
cmp r10b, 0x80
jne 0x4252b8
inc qword [rsp + 0x90]
mov byte [rsp + 0x98], 1
jmp 0x4252c3
shl r10d, 1
mov byte [rsp + 0x98], r10b
inc qword [rsp + 0xa0]
nop
movzx r10d, byte [rsp + 0xb0]
cmp r10b, 0x80
jne 0x4252f0
inc qword [rsp + 0xa8]
mov byte [rsp + 0xb0], 1
jmp 0x4251d9
shl r10d, 1
mov byte [rsp + 0xb0], r10b
nop dword [rax + rax]
jmp 0x4251d9
mov dword [r10 + rcx], 0xdeadbeef
add rcx, 4
cmp rcx, r9
jb 0x425305
jmp 0x425295
mov ecx, 0x40
call fcn.00465b80
mov rax, r10
mov ecx, 0x40
call fcn.00465b80
mov r11, qword [r11]
test r11, r11
je 0x424b02
movzx r12d, word [r11 + 8]
cmp r12, rdi
jae 0x424afd
cmp byte [r11 + 0xa], 1
jne 0x425332
jmp 0x424aef
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x424a0e
movzx esi, word [rdx + 8]
cmp rsi, rdi
jae 0x424a0e
mov r11, qword [r15 + 0x18]
add rsi, r11
cmp byte [rdx + 0xa], 1
je 0x42539d
test al, al
je 0x42539d
nop
mov qword [rsp + 0x80], rdx
mov rdx, qword [rdx]
mov qword [rsp + 0x88], rdx
jmp 0x425358
nop
mov rdi, qword [rdx]
mov qword [rsp + 0x88], rdi
mov r8, qword [rsp + 0x80]
mov qword [r8], rdi
mov rax, rdx
mov rbx, rsi
mov rcx, r9
nop dword [rax]
call fcn.00429380
movzx eax, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0xd8]
mov rdi, qword [rsp + 0x60]
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x28]
mov r15, qword [rsp + 0x40]
jmp 0x425358
call fcn.00435420
mov eax, dword [rdx + 0x58]
mov qword [rsp + 0x70], rax
nop dword [rax]
call fcn.004392e0
lea rax, [0x00ac447a]
mov ebx, 0x13
call fcn.00439be0
movzx eax, byte [rsp + 0x1b]
movzx eax, al
nop
call fcn.004398e0
lea rax, [0x00abe1f3]
mov ebx, 0xa
call fcn.00439be0
mov rax, qword [rsp + 0x70]
nop dword [rax + rax]
call fcn.004398e0
lea rax, [0x00ac16a1]
mov ebx, 0x10
call fcn.00439be0
mov eax, dword [rsp + 0x20]
call fcn.004398e0
nop
call fcn.00439540
call fcn.00439360
lea rax, [0x00acc38a]
mov ebx, 0x1b
call fcn.00437b60
lea rax, [0x00acd347]
mov ebx, 0x1c
call fcn.00437b60
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
call fcn.00463440
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
jmp fcn.00424900