Function at 0x14005dc30
Capabilities:
Get geographical location

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x410
mov qword [rax - 0x1f8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1401cd010]
xor rax, rsp
mov qword [rsp + 0x400], rax
mov r14, rcx
mov qword [rsp + 0x60], rcx
or rsi, 0xffffffffffffffff
mov rbx, rsi
xor edi, edi
inc rbx
cmp word [rcx + rbx*2], di
jne 0x14005dc79
test rbx, rbx
je 0x14005e5ea
mov r15d, 0x40
mov r8d, r15d
xor edx, edx
lea rcx, [rsp + 0x1a0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x1e0], dil
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1c8], rax
mov r9, rbx
mov r8, r14
lea rdx, [0x1401655a8]
lea rcx, [rsp + 0x1a0]
call fcn.140011ce8
mov al, byte [rsp + 0x1e0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x1b8]
and rcx, rax
call fcn.1400102a0
test eax, eax
je 0x14005dd14
mov al, byte [rsp + 0x1e0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x1b8]
and rcx, rax
je 0x14005dd14
call fcn.1400108e8
nop
mov rbx, rsi
inc rbx
cmp word [r14 + rbx*2], di
jne 0x14005dd17
test rbx, rbx
je 0x14005e5fb
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x150]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x190], dil
lea rax, [rsp + 0x150]
mov qword [rsp + 0x178], rax
mov r9, rbx
mov r8, r14
lea rdx, [0x1401653b8]
lea rcx, [rsp + 0x150]
call fcn.140011ce8
mov al, byte [rsp + 0x190]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x168]
and rcx, rax
call fcn.1400102a0
test eax, eax
je 0x14005ddad
mov al, byte [rsp + 0x190]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x168]
and rcx, rax
je 0x14005ddad
call fcn.1400108e8
nop
lea rcx, [rsp + 0x150]
call fcn.140009fe8
lea rcx, [rsp + 0x1a0]
call fcn.140009fe8
mov r12b, dil
mov rbx, rsi
inc rbx
cmp word [r14 + rbx*2], di
jne 0x14005ddcd
test rbx, rbx
je 0x14005e60b
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x2a0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x2e0], dil
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x2c8], rax
mov r9, rbx
mov r8, r14
mov rdx, qword [0x1401cd720]
lea rcx, [rsp + 0x2a0]
call fcn.140011ce8
mov al, byte [rsp + 0x2e0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x2b8]
and rcx, rax
call fcn.1400102a0
test eax, eax
je 0x14005dedd
mov rbx, rsi
inc rbx
cmp word [r14 + rbx*2], di
jne 0x14005de4b
test rbx, rbx
je 0x14005e61d
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x250]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x290], dil
lea rax, [rsp + 0x250]
mov qword [rsp + 0x278], rax
mov r9, rbx
mov r8, r14
mov rdx, qword [0x1401cd708]
lea rcx, [rsp + 0x250]
call fcn.140011ce8
mov al, byte [rsp + 0x290]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x268]
and rcx, rax
call fcn.1400102a0
movzx r12d, r12b
mov r13d, 1
test eax, eax
cmove r12d, r13d
lea rcx, [rsp + 0x250]
call fcn.140009fe8
jmp 0x14005dee3
mov r13d, 1
lea rcx, [rsp + 0x2a0]
call fcn.140009fe8
test r12b, r12b
je 0x14005e5bb
lea r8, str.CountryCode
mov rdx, qword [0x1401cd708]
mov rcx, qword [0x1401cd720]
call fcn.14005c0f8
lea r8, str.PerpetualLicenseInfo
mov rdx, qword [0x1401cd708]
mov rcx, qword [0x1401cd720]
call fcn.14005c0f8
lea r8, str.UserId
mov rdx, qword [0x1401cd708]
mov rcx, qword [0x1401cd720]
call fcn.14005c0f8
mov rbx, rsi
inc rbx
cmp word [r14 + rbx*2], di
jne 0x14005df4a
test rbx, rbx
je 0x14005e62d
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0xb0], dil
lea rax, [rsp + 0x70]
mov qword [rsp + 0x98], rax
mov r9, rbx
mov r8, r14
mov rdx, qword [0x1401cd720]
lea rcx, [rsp + 0x70]
call fcn.140011ce8
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp word [r14 + rbx*2], di
jne 0x14005dfa0
test rbx, rbx
je 0x14005e63d
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xe0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x120], dil
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x108], rax
mov r9, rbx
mov r8, r14
mov rdx, qword [0x1401cd708]
lea rcx, [rsp + 0xe0]
call fcn.140011ce8
mov al, byte [rsp + 0x120]
neg al
sbb rdx, rdx
lea rax, [rsp + 0xf8]
and rdx, rax
mov al, byte [rsp + 0xb0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x88]
and rcx, rax
lea r8, str.ConfigIds
call fcn.14005c0f8
mov al, byte [rsp + 0x120]
neg al
sbb rdx, rdx
lea rax, [rsp + 0xf8]
and rdx, rax
mov al, byte [rsp + 0xb0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x88]
and rcx, rax
lea r8, str.DeferredConfigs
call fcn.14005c0f8
mov al, byte [rsp + 0x120]
neg al
sbb rdx, rdx
lea rax, [rsp + 0xf8]
and rdx, rax
mov al, byte [rsp + 0xb0]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x88]
and rcx, rax
lea r8, str.ETag
call fcn.14005c0f8
mov al, byte [rsp + 0xb0]
neg al
sbb rbx, rbx
lea rax, [rsp + 0x88]
and rbx, rax
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x230], dil
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x218], rax
mov dword [rsp + 0x20], 0xb
mov r12d, 7
mov r9d, r12d
lea r8, str.Expires
mov rdx, rbx
lea rcx, [rsp + 0x1f0]
call fcn.140011df0
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x3b0], xmm0
mov word [rsp + 0x3a0], di
lea rdx, str.Microsoft.Office.Experimentation.Configs.EcsPersistentStore
lea rcx, [rsp + 0x3a0]
call fcn.140007920
lea rdx, [0x1401455d4]
lea rcx, [rsp + 0x3a0]
call fcn.140007648
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x390], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x380], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x390], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
mov word [rax], di
mov rdx, r14
lea rcx, [rsp + 0x380]
call fcn.140007648
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x370], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x360], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x370], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
mov word [rax], di
lea r8, [rsp + 0x360]
mov rdx, qword [0x1401cdc40]
lea rcx, [rsp + 0x40]
call fcn.140055ae0
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x350], xmm0
mov word [rsp + 0x340], di
lea rdx, str.Expires
lea rcx, [rsp + 0x340]
call fcn.140007920
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x3c0]
call fcn.140007a9c
mov qword [rsp + 0x3e0], rdi
mov byte [rsp + 0x3e8], r13b
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3f0], xmm0
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x14005e246
lock add dword [rbx + 8], r13d
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x3f0], rax
mov qword [rsp + 0x3f8], rbx
mov rax, qword [rsp + 0x358]
mov r12d, 0x1000
cmp rax, 8
jb 0x14005e2aa
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x340]
mov rdx, rcx
cmp rax, r12
jb 0x14005e29f
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14005e29f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rsp + 0x48]
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x350], xmm0
mov word [rsp + 0x340], di
test rbx, rbx
je 0x14005e2fe
mov eax, esi
lock xadd dword [rbx + 8], eax
add eax, esi
jne 0x14005e2fe
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x1400ee2b6.0]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
add eax, esi
jne 0x14005e2fe
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x1400ee2b6.0]
nop
mov rax, qword [rsp + 0x378]
cmp rax, 8
jb 0x14005e343
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rdx, rcx
cmp rax, r12
jb 0x14005e33c
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14005e33c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x370], xmm0
mov word [rsp + 0x360], di
mov rax, qword [rsp + 0x398]
cmp rax, 8
jb 0x14005e3b0
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x380]
mov rdx, rcx
cmp rax, r12
jb 0x14005e39a
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14005e39a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
nop dword [rax]
nop word [rax + rax]
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x390], xmm0
mov word [rsp + 0x380], di
mov rax, qword [rsp + 0x3b8]
cmp rax, 8
jb 0x14005e40e
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x3a0]
mov rdx, rcx
cmp rax, r12
jb 0x14005e407
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14005e407
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
movdqa xmm0, xmmword [0x140186810]
movdqu xmmword [rsp + 0x3b0], xmm0
mov word [rsp + 0x3a0], di
mov al, byte [rsp + 0x230]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x208]
and rcx, rax
lea rdx, [rsp + 0x50]
call fcn.14005e8a0
test al, al
je 0x14005e498
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x3c0]
call fcn.140025b40
mov al, byte [rsp + 0x230]
neg al
sbb rcx, rcx
lea rax, [rsp + 0x208]
and rcx, rax
je 0x14005e487
call fcn.1400108e8
nop
jmp 0x14005e498
mov al, byte [rsp + 0xb0]
neg al
sbb r8, r8
lea rax, [rsp + 0x88]
and r8, rax
mov al, byte [rsp + 0x120]
neg al
sbb rdx, rdx
lea rax, [rsp + 0xf8]
and rdx, rax
mov rcx, r14
call fcn.14005d360
nop
inc rsi
cmp word [r14 + rsi*2], di
jne 0x14005e4cf
test rsi, rsi
je 0x14005e64d
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x2f0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x330], dil
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0x318], rax
mov r9, rsi
mov r8, r14
lea rdx, [0x140165318]
lea rcx, [rsp + 0x2f0]
call fcn.140011ce8
mov al, byte [rsp + 0x330]
neg al
sbb rbx, rbx
lea rax, [rsp + 0x308]
and rbx, rax
mov rcx, rbx
call fcn.140010c10
test eax, eax
jne 0x14005e557
test rbx, rbx
je 0x14005e557
mov rcx, rbx
call fcn.140010a84
nop
lea r9, str.Utils.cpp___MigrateLegacyRegistryValues___Success_migrating_app_reg_settings_to_new_version
mov edx, 0x43b
mov ecx, 0x25095c7
mov r8d, 0x32
call fcn.140122aa8
lea rcx, [rsp + 0x2f0]
call fcn.140009fe8
lea rcx, [rsp + 0x3c0]
call fcn.140023e10
lea rcx, [rsp + 0x1f0]
call fcn.140009fe8
lea rcx, [rsp + 0xe0]
call fcn.140009fe8
nop word [rax + rax]
lea rcx, [rsp + 0x70]
call fcn.140009fe8
nop
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.14012aa20
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
nop
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e5fa
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e60a
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e61c
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e62c
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e63c
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e64c
nop
xor edx, edx
mov ecx, 0x178525c
call fcn.14000ad28
nop
jmp 0x14005e65c
nop
nop
nop
nop