Function at 0x10003895c
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r13d, r13d
mov rdi, rdx
mov rsi, rcx
mov r12d, r13d
cmp rdx, r13
jne 0x100038990
xor eax, eax
jmp 0x100038e5c
movabs r15, 0x2000000000000000
cmp dword [0x1000817d4], r13d
je 0x1000389e0
mov al, byte [0x1000817d8]
cmp al, 4
jae 0x1000389b2
cmp al, r13b
jne 0x1000389e0
test qword [0x1000817c0], r15
je 0x1000389e0
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r15
cmp rax, rcx
jne 0x1000389e0
mov rcx, qword [0x1000817a8]
lea rdx, [0x1000021b0]
call fcn.10002c494
lea rdx, [rsi + 0xa88]
mov rcx, rdi
call fcn.10003230c
cmp eax, r13d
mov ebx, eax
jl 0x100038e14
mov r15d, 2
cmp word [rdi], r13w
je 0x100038a38
cmp word [rdi], 0x2d
je 0x100038a12
cmp word [rdi], 0x2f
jne 0x100038a2f
movzx ecx, word [rdi + 2]
call qword [sym.imp.msvcrt.dll_tolower]
cmp eax, 0x73
jne 0x100038a2f
cmp word [rdi + 4], 0x20
je 0x100038a34
cmp word [rdi + 4], r13w
je 0x100038a34
add rdi, r15
jmp 0x100038a00
mov dword [rsi + 0x14], r13d
mov rdi, qword [rsi + 0xa88]
or rcx, 0xffffffffffffffff
xor eax, eax
repne scasw ax, word [rdi]
lea r8, [rsi + 0xa98]
not rcx
mov rdx, rcx
mov rcx, qword [rsi + 0xa88]
call fcn.1000372f0
mov rdx, qword [rsi + 0xa88]
mov ebp, 1
mov qword [rsi + 0xa90], rdx
mov edx, ebp
mov rcx, rsi
call fcn.100039824
mov rdi, rax
cmp rax, r13
je 0x100038d1b
movabs r14, 0x8000000000000000
cmp word [rdi], 0x2d
je 0x100038aa4
cmp word [rdi], 0x2f
jne 0x100038dbb
movzx ecx, word [rdi + 2]
cmp cx, r13w
je 0x100038dbb
cmp word [rdi + 4], r13w
jne 0x100038dbb
call qword [sym.imp.msvcrt.dll_towlower]
movzx r11d, ax
cmp r11d, 0x69
jg 0x100038ba7
je 0x100038b31
cmp r11d, 0x3f
je 0x100038af5
cmp r11d, 0x61
je 0x100038b29
cmp r11d, 0x63
je 0x100038b09
cmp r11d, 0x66
je 0x100038b01
cmp r11d, 0x68
jne 0x100038eeb
mov dword [rsi + 0x10], 4
jmp 0x100038d05
mov dword [rsi + 0x1c], ebp
jmp 0x100038d05
cmp dword [rsi + 0x10], r13d
jne 0x100038e79
mov dword [rsi + 0x10], 5
mov dword [rsi + 0x18], ebp
lea rax, [0x1000092d8]
jmp 0x100038be9
mov dword [rsi + 0x20], ebp
jmp 0x100038d05
cmp dword [rsi + 0x10], r13d
je 0x100038b43
cmp r12d, r13d
je 0x100038e79
mov r12d, r13d
mov dword [rsi + 0x10], ebp
mov dword [rsi + 0xc], ebp
jmp 0x100038b8b
xor r9d, r9d
xor r8d, r8d
mov edx, ebp
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
cmp eax, r13d
jg 0x100038b7a
lea rcx, [0x100007f14]
mov rdx, rdi
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, r13d
jne 0x100038e8d
lea rcx, [rsi + 0xaa0]
lea rdx, [rsp + 0x58]
call fcn.1000140c4
xor edx, edx
mov rcx, rsi
call fcn.100039824
mov qword [rsp + 0x58], rax
mov rdi, rax
cmp rax, r13
jne 0x100038b4b
jmp 0x100038d05
sub r11d, 0x70
je 0x100038c6a
sub r11d, r15d
je 0x100038c62
sub r11d, ebp
je 0x100038d05
sub r11d, r15d
je 0x100038c08
cmp r11d, ebp
jne 0x100038eeb
cmp dword [rsi + 0x10], r13d
jne 0x100038e79
mov dword [rsi + 0x10], 3
lea rax, [0x1000092c8]
lea rcx, [rsi + 0xaa0]
lea rdx, [rsp + 0x58]
mov dword [rsi + 0x14], r13d
mov qword [rsp + 0x58], rax
call fcn.1000140c4
jmp 0x100038d05
cmp dword [rsi + 0x10], r13d
jne 0x100038e79
mov dword [rsi + 0x10], r15d
mov dword [rsi + 0xc], ebp
jmp 0x100038c46
xor r9d, r9d
xor r8d, r8d
mov edx, ebp
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
cmp eax, r13d
jle 0x100038e8d
lea rcx, [rsi + 0xaa0]
lea rdx, [rsp + 0x58]
call fcn.1000140c4
xor edx, edx
mov rcx, rsi
call fcn.100039824
mov qword [rsp + 0x58], rax
mov rdi, rax
cmp rax, r13
jne 0x100038c1b
jmp 0x100038d05
mov dword [rsi + 0x18], ebp
jmp 0x100038d05
lea rax, [rsi + 0x24]
cmp word [rax], r13w
je 0x100038c7d
cmp rax, r13
jne 0x100038ef4
xor edx, edx
mov rcx, rsi
call fcn.100039824
mov rbp, rax
cmp rax, r13
je 0x100038f05
mov rdx, rax
mov rcx, rsi
call fcn.100039898
cmp eax, r13d
je 0x100038d45
cmp dword [0x1000817d4], r13d
je 0x100038cf1
mov al, byte [0x1000817d8]
cmp al, r15b
jae 0x100038cc0
cmp al, r13b
jne 0x100038cf1
test qword [0x1000817c0], r14
je 0x100038cf1
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r14
cmp rax, rcx
jne 0x100038cf1
mov rcx, qword [0x1000817a8]
lea rdx, [0x100001f70]
mov r8, rbp
call fcn.100011898
lea rcx, [0x100009420]
mov rdx, rbp
call fcn.1000250f8
mov ebp, 1
mov edx, ebp
mov rcx, rsi
call fcn.100039824
mov rdi, rax
cmp rax, r13
jne 0x100038a94
mov eax, dword [rsi + 0x14]
cmp eax, r13d
jne 0x100038f64
cmp qword [rsi + 0xab0], r13
jne 0x100038f71
lea rcx, [0x100009530]
call fcn.1000250f8
jmp 0x100038e05
mov rcx, rbp
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
cmp eax, r13d
jne 0x100038d00
mov ecx, dword [rsi + 0x10]
cmp ecx, r13d
je 0x100038da8
cmp ecx, 1
je 0x100038d00
cmp dword [0x1000817d4], r13d
je 0x100038e05
mov al, byte [0x1000817d8]
cmp al, r15b
jae 0x100038d81
cmp al, r13b
jne 0x100038e05
test qword [0x1000817c0], r14
je 0x100038e05
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r14
cmp rax, rcx
jne 0x100038e05
mov r8, rbp
lea rdx, [0x100001f70]
jmp 0x100038df9
mov ebp, 1
mov dword [rsi + 0x10], ebp
mov dword [rsi + 0xc], ebp
mov r12d, ebp
jmp 0x100038d05
cmp dword [0x1000817d4], r13d
je 0x100038e05
mov al, byte [0x1000817d8]
cmp al, r15b
jae 0x100038dd4
cmp al, r13b
jne 0x100038e05
test qword [0x1000817c0], r14
je 0x100038e05
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r14
cmp rax, rcx
jne 0x100038e05
lea rdx, [0x100001f40]
mov r8, rdi
mov rcx, qword [0x1000817a8]
call fcn.100011898
mov ebx, 0x80070032
movabs r15, 0x2000000000000000
cmp dword [0x1000817d4], r13d
je 0x100038e5a
mov al, byte [0x1000817d8]
cmp al, 4
jae 0x100038e2c
cmp al, r13b
jne 0x100038e5a
test qword [0x1000817c0], r15
je 0x100038e5a
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r15
cmp rax, rcx
jne 0x100038e5a
mov rcx, qword [0x1000817a8]
lea rdx, [0x1000021c0]
call fcn.10002c494
mov eax, ebx
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x100009230]
mov rdx, rdi
call fcn.1000250f8
jmp 0x100038dbb
cmp dword [0x1000817d4], r13d
je 0x100038ed7
mov al, byte [0x1000817d8]
cmp al, r15b
jae 0x100038ea6
cmp al, r13b
jne 0x100038ed7
test qword [0x1000817c0], r14
je 0x100038ed7
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r14
cmp rax, rcx
jne 0x100038ed7
mov rcx, qword [0x1000817a8]
lea rdx, [0x100001f60]
mov r8, rdi
call fcn.100011898
lea rcx, [0x1000092f0]
mov rdx, rdi
call fcn.1000250f8
jmp 0x100038e05
lea rcx, [0x1000094c0]
jmp 0x100038ede
lea rcx, [0x100009350]
call fcn.1000250f8
jmp 0x100038dbb
lea rcx, [0x1000093b0]
mov rdx, rdi
call fcn.1000250f8
cmp dword [0x1000817d4], r13d
je 0x100038e05
mov al, byte [0x1000817d8]
cmp al, r15b
jae 0x100038f35
cmp al, r13b
jne 0x100038e05
test qword [0x1000817c0], r14
je 0x100038e05
mov rcx, qword [0x1000817c8]
mov rax, rcx
and rax, r14
cmp rax, rcx
jne 0x100038e05
lea rdx, [0x100001f50]
jmp 0x100038df6
cmp qword [rsi + 0xab0], r13
je 0x100038e0a
movabs r15, 0x2000000000000000
cmp eax, r13d
je 0x100038e14
mov dword [rsi + 0x14], ebp
jmp 0x100038e14