Function at 0x1400eba20
Capabilities:
Get geographical location

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x1f0], rbx
mov rax, qword [0x1403eaa10]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov dword [rbp - 0x78], r9d
mov r12, r8
mov qword [rbp - 0x60], r8
mov rbx, rdx
mov qword [rbp - 0x70], rcx
test rcx, rcx
jne 0x1400eba7a
xor al, al
jmp 0x1400ec123
lea rax, [0x140323de0]
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov qword [rsp + 0x58], rcx
lea r8d, [rcx + 1]
lea rdx, [0x140329630]
mov rcx, rbx
call fcn.1401e9310
lea rcx, [rsp + 0x50]
test al, al
je 0x1400ebada
mov edx, 0x13
call fcn.1401e9030
mov eax, dword [rsp + 0x58]
inc eax
movsxd rdx, eax
mov r9d, 0x13
lea r8, str.yyyy_MM_ddTHH:mm:ss
mov rcx, qword [rsp + 0x50]
call fcn.14029b4d8
mov edx, 0x13
jmp 0x1400ebaff
mov edx, dword [rbx + 0xc]
call fcn.1401e9030
movsxd r9, dword [rbx + 0xc]
mov eax, dword [rsp + 0x58]
inc eax
movsxd rdx, eax
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x50]
call fcn.14029b4d8
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x50]
call fcn.1401ea290
or rax, 0xffffffffffffffff
mov rbx, qword [rbp - 0x70]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400ebb11
cmp eax, dword [rsp + 0x5c]
jge 0x1400ebb28
xor bl, bl
jmp 0x1400ec10f
xor edx, edx
mov r13d, edx
mov edi, edx
mov dword [rsp + 0x38], edx
mov r14d, edx
mov dword [rsp + 0x30], edx
mov esi, edx
mov dword [rsp + 0x34], edx
mov eax, edx
mov dword [rsp + 0x68], edx
mov ecx, edx
mov dword [rsp + 0x60], edx
mov r15d, edx
cmp dword [rsp + 0x5c], edx
jle 0x1400ec0c2
mov r12d, edx
nop dword [rax]
test r15d, r15d
js 0x1400ec04f
cmp r15d, dword [rsp + 0x5c]
jge 0x1400ec04f
lea rsi, [r12 + r12]
mov rax, qword [rsp + 0x50]
movzx edi, word [rsi + rax]
mov r14d, edx
mov qword [rsp + 0x48], 0
lea rax, [0x140323de0]
mov qword [rsp + 0x40], rax
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.1401ea290
nop
cmp r15d, dword [rsp + 0x5c]
jge 0x1400ec035
test r12, r12
js 0x1400ebfce
cmp r15d, dword [rsp + 0x5c]
jge 0x1400ebfce
mov rax, qword [rsp + 0x50]
inc r15d
inc r12
cmp di, word [rsi + rax]
jne 0x1400ebc1d
lea rsi, [r12 + r12]
movzx ebx, word [rsi + rbx - 2]
mov edx, dword [rsp + 0x4c]
inc edx
lea rcx, [rsp + 0x40]
call fcn.1401e9030
movsxd rcx, dword [rsp + 0x4c]
mov rax, qword [rsp + 0x40]
mov word [rax + rcx*2], bx
mov edx, dword [rsp + 0x4c]
inc edx
lea rcx, [rsp + 0x40]
call fcn.1401ea290
inc r14d
cmp r15d, dword [rsp + 0x5c]
mov rbx, qword [rbp - 0x70]
jl 0x1400ebbb1
jmp 0x1400ebc23
dec r15d
dec r12
test r14d, r14d
jle 0x1400ec035
cmp di, 0x79
jne 0x1400ebd20
cmp r14d, 1
jl 0x1400ec035
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x40]
mov rcx, rbx
call fcn.14029b2e4
mov r13d, eax
mov rdx, qword [rbp - 0x40]
sub rdx, rbx
sar rdx, 1
movsxd rcx, dword [rsp + 0x4c]
cmp rdx, rcx
jne 0x1400ec035
lea ecx, [rax + 0x7fffffff]
cmp ecx, 0xfffffffd
ja 0x1400ec035
cmp r14d, 2
jne 0x1400ebf9a
xor ecx, ecx
mov dword [rsp + 0x64], ecx
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
mov edx, r14d
mov ecx, 0x409
mov r8d, 0xa0000030
call qword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
cmp eax, r14d
jne 0x1400ebf9a
mov ecx, dword [rsp + 0x64]
lea r8d, [rcx - 0x63]
mov eax, 0x51eb851f
mul r8d
shr edx, 5
imul eax, edx, 0x64
sub r8d, eax
mov eax, 0x51eb851f
mul ecx
shr edx, 5
imul eax, edx, 0x64
mov edx, ecx
sub edx, eax
mov edi, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
mov r14d, dword [rsp + 0x30]
cmp r13d, r8d
jle 0x1400ebd15
sub r13d, r8d
add r13d, 0xffffff9d
add r13d, ecx
jmp 0x1400ebfa7
sub r13d, edx
add r13d, ecx
jmp 0x1400ebfa7
cmp di, 0x4d
jne 0x1400ebde6
cmp r14d, 3
jl 0x1400ebd92
mov edi, 0x38
mov eax, 0x44
cmove edi, eax
xor ecx, ecx
mov ebx, ecx
lea edx, [rbx + rdi]
mov r9d, 0x50
lea r8, [rbp]
mov ecx, 0x409
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
test eax, eax
je 0x1400ec035
mov r8d, 1
lea rdx, [rbp]
lea rcx, [rsp + 0x40]
call fcn.1401e9310
test al, al
jne 0x1400ebd86
inc ebx
cmp ebx, 0xc
jge 0x1400ec035
jmp 0x1400ebd41
lea edi, [rbx + 1]
mov dword [rsp + 0x38], edi
jmp 0x1400ebf9e
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x38]
mov rcx, rbx
call fcn.14029b2e4
mov edi, eax
mov dword [rsp + 0x38], eax
mov rdx, qword [rbp - 0x38]
sub rdx, rbx
sar rdx, 1
movsxd rcx, dword [rsp + 0x4c]
cmp rdx, rcx
jne 0x1400ec035
lea ecx, [rax + 0x7fffffff]
cmp ecx, 0xfffffffd
ja 0x1400ec035
jmp 0x1400ebf9e
cmp di, 0x64
jne 0x1400ebe4f
cmp r14d, 3
jg 0x1400ec035
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x28]
mov rcx, rbx
call fcn.14029b2e4
mov r14d, eax
mov dword [rsp + 0x30], eax
mov rdx, qword [rbp - 0x28]
sub rdx, rbx
sar rdx, 1
movsxd rcx, dword [rsp + 0x4c]
cmp rdx, rcx
jne 0x1400ec035
lea ecx, [rax + 0x7fffffff]
cmp ecx, 0xfffffffd
ja 0x1400ec035
mov edi, dword [rsp + 0x38]
jmp 0x1400ebfa3
cmp di, 0x68
jne 0x1400ebeb2
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x68]
mov rcx, rbx
call fcn.14029b2e4
mov esi, eax
mov dword [rsp + 0x34], eax
mov rdx, qword [rbp - 0x68]
sub rdx, rbx
sar rdx, 1
movsxd rcx, dword [rsp + 0x4c]
cmp rdx, rcx
jne 0x1400ec035
lea ecx, [rax + 0x7fffffff]
cmp ecx, 0xfffffffd
ja 0x1400ec035
mov edi, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x30]
jmp 0x1400ebfa7
cmp di, 0x48
jne 0x1400ebf15
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x48]
mov rcx, rbx
call fcn.14029b2e4
mov esi, eax
mov dword [rsp + 0x34], eax
mov rcx, qword [rbp - 0x48]
sub rcx, rbx
sar rcx, 1
movsxd rax, dword [rsp + 0x4c]
cmp rcx, rax
jne 0x1400ec035
lea eax, [rsi + 0x7fffffff]
cmp eax, 0xfffffffd
ja 0x1400ec035
mov edi, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x30]
jmp 0x1400ebfa7
cmp di, 0x6d
jne 0x1400ebf47
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.14029b2e4
mov dword [rsp + 0x68], eax
mov rdx, qword [rbp - 0x50]
jmp 0x1400ebf77
cmp di, 0x73
jne 0x1400ebf9a
cmp dword [rsp + 0x4c], 0
je 0x1400ec035
mov rbx, qword [rsp + 0x40]
mov r8d, 0xa
lea rdx, [rbp - 0x30]
mov rcx, rbx
call fcn.14029b2e4
mov dword [rsp + 0x60], eax
mov rdx, qword [rbp - 0x30]
sub rdx, rbx
movsxd rcx, dword [rsp + 0x4c]
sar rdx, 1
cmp rdx, rcx
jne 0x1400ec035
lea ecx, [rax + 0x7fffffff]
cmp ecx, 0xfffffffd
ja 0x1400ec035
mov edi, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x30]
mov esi, dword [rsp + 0x34]
cmp dword [rsp + 0x48], 0
jle 0x1400ebfb8
mov rcx, qword [rsp + 0x40]
call fcn.140298600
cmp r15d, dword [rsp + 0x5c]
jge 0x1400ec0b6
mov rbx, qword [rbp - 0x70]
xor edx, edx
jmp 0x1400ebb60
lea rcx, [rsp + 0x70]
call fcn.1401e6d00
nop
lea rax, vtable.Core::IndexOutOfRangeException.0
mov qword [rsp + 0x70], rax
mov edx, 0x2a
lea rcx, [rsp + 0x78]
call fcn.1401e9030
mov eax, dword [rbp - 0x80]
inc eax
movsxd rdx, eax
mov r9d, 0x2a
lea r8, str.Index_was_outside_the_bounds_of_the_array.
mov rcx, qword [rsp + 0x78]
call fcn.14029b4d8
mov edx, 0x2a
lea rcx, [rsp + 0x78]
call fcn.1401ea290
nop
lea rdx, [0x1403e2d68]
lea rcx, [rsp + 0x70]
call fcn.14029f768
nop
cmp dword [rsp + 0x48], 0
jle 0x1400ec0f8
mov rcx, qword [rsp + 0x40]
call fcn.140298600
jmp 0x1400ec0f8
lea rcx, [rsp + 0x70]
call fcn.1401e6d00
nop
lea rax, vtable.Core::IndexOutOfRangeException.0
mov qword [rsp + 0x70], rax
mov edx, 0x2a
lea rcx, [rsp + 0x78]
call fcn.1401e9030
mov eax, dword [rbp - 0x80]
inc eax
movsxd rdx, eax
mov r9d, 0x2a
lea r8, str.Index_was_outside_the_bounds_of_the_array.
mov rcx, qword [rsp + 0x78]
call fcn.14029b4d8
mov edx, 0x2a
lea rcx, [rsp + 0x78]
call fcn.1401ea290
nop
lea rdx, [0x1403e2d68]
lea rcx, [rsp + 0x70]
call fcn.14029f768
int3
mov eax, dword [rsp + 0x68]
mov ecx, dword [rsp + 0x60]
mov r12, qword [rbp - 0x60]
xor edx, edx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rdx
mov word [rbp - 0x18], r13w
mov word [rbp - 0x16], di
mov word [rbp - 0x12], r14w
mov word [rbp - 0x10], si
mov word [rbp - 0xe], ax
mov word [rbp - 0xc], cx
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
jne 0x1400ec0fc
xor bl, bl
jmp 0x1400ec10f
mov rax, qword [rbp - 0x58]
mov qword [r12 + 8], rax
mov eax, dword [rbp - 0x78]
mov dword [r12 + 0x10], eax
mov bl, 1
cmp dword [rsp + 0x58], 0
jle 0x1400ec120
mov rcx, qword [rsp + 0x50]
call fcn.140298600
movzx eax, bl
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.140297ff0
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret