Function at 0x140005cbc
Capabilities:
Get geographical location

Disassembly:
mov rax, rsp
push rsi
push rdi
push r13
sub rsp, 0x540
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov rax, qword [0x140023108]
xor rax, rsp
mov qword [rsp + 0x530], rax
mov rbx, rcx
xor ebp, ebp
mov qword [0x140023db8], rbp
mov qword [0x140023da8], rbp
mov byte [0x140023dc0], 1
mov byte [0x140023dc1], bpl
mov word [0x140023dc2], bp
mov dword [0x140023dc4], ebp
lea rax, [0x140001b50]
mov qword [0x140023dc8], rax
lea rdi, [0x140023da8]
mov qword [0x140023130], rdi
lea rsi, [0x140023dc8]
mov r8, qword [rsi]
add rsi, 8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], rbp
lea rax, [rdi + 8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rdx, rdi
lea rcx, [0x140005a84]
call qword [sym.imp.ADVAPI32.dll_RegisterTraceGuidsW]
mov rdi, qword [rdi]
cmp rdi, rbp
jne 0x140005d41
mov dword [rsp + 0x44], ebp
lea r8, [rsp + 0x44]
lea rdx, [0x140001f28]
lea rcx, [rsp + 0x80]
call fcn.140012f88
nop
mov edi, ebp
lea rcx, [rbx + 0x90]
call fcn.140016e9c
lea rcx, [rsp + 0xa0]
call fcn.140006540
lea rax, [0x140002680]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x40], ebp
lea r8, [rsp + 0x40]
lea rdx, [0x1400023f8]
lea rcx, [rsp + 0x58]
call fcn.140012f88
mov sil, 4
lea r13, [0x140023130]
cmp rbx, rbp
jne 0x140005e33
mov dword [rsp + 0x40], 0x80004003
mov rcx, qword [0x140023130]
cmp rcx, r13
je 0x140005e33
test byte [rcx + 0x1c], sil
je 0x140005e33
mov edx, 0xa
mov r9d, 0x80004003
lea r8, [0x140001ea8]
mov rcx, qword [rcx + 0x10]
call fcn.140005a48
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0x108], rbp
lea rcx, [rsp + 0x58]
call fcn.140012fdc
nop
lea rcx, [rsp + 0x200]
call fcn.140006540
lea r11, [0x140002af0]
mov qword [rsp + 0x200], r11
lea rcx, [rsp + 0x288]
call fcn.140015de8
mov dword [rsp + 0x40], ebp
lea r8, [rsp + 0x40]
lea rdx, [0x140002780]
lea rcx, [rsp + 0x58]
call fcn.140012f88
mov qword [rsp + 0x2f8], rbp
mov qword [rsp + 0x300], rbp
mov qword [rsp + 0x308], rbp
mov dword [rsp + 0x310], ebp
cmp rbx, rbp
jne 0x140005eea
mov dword [rsp + 0x40], 0x80004003
mov rcx, qword [0x140023130]
cmp rcx, r13
je 0x140005eea
test byte [rcx + 0x1c], sil
je 0x140005eea
mov edx, 0xa
mov r9d, 0x80004003
lea r8, [0x140001e98]
mov rcx, qword [rcx + 0x10]
call fcn.140005a48
mov qword [rsp + 0x250], rbx
mov qword [rsp + 0x280], rbp
mov qword [rsp + 0x318], rbp
mov dword [rsp + 0x278], ebp
mov ecx, 0x34
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rsp + 0x268], rax
or dword [rsp + 0x2f0], 0xffffffff
mov qword [rsp + 0x520], rbp
mov qword [rsp + 0x270], rbp
mov dword [rsp + 0x48], ebp
mov r9d, 2
lea r8, [rsp + 0x48]
mov edx, 0x2000000d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
mov r11d, ebp
cmp dword [rsp + 0x48], ebp
sete r11b
mov dword [rsp + 0x528], r11d
lea rcx, [rsp + 0x58]
call fcn.140012fdc
nop
lea rcx, [rsp + 0x110]
call fcn.140006540
lea rax, [0x140002e80]
mov qword [rsp + 0x110], rax
lea rcx, [rsp + 0x180]
call fcn.140015de8
mov dword [rsp + 0x48], ebp
lea r8, [rsp + 0x48]
lea rdx, [0x140002bc0]
lea rcx, [rsp + 0x58]
call fcn.140012f88
cmp rbx, rbp
jne 0x140005ff7
mov dword [rsp + 0x48], 0x80004003
mov rcx, qword [0x140023130]
cmp rcx, r13
je 0x140005feb
test byte [rcx + 0x1c], sil
je 0x140005feb
mov edx, 0xa
mov r9d, 0x80004003
lea r8, [0x140001e88]
mov rcx, qword [rcx + 0x10]
call fcn.140005a48
lea rcx, [rsp + 0x58]
call fcn.140012fdc
jmp 0x140006020
mov dword [rsp + 0x1f8], ebp
mov qword [rsp + 0x178], rbp
mov qword [rsp + 0x160], rbx
mov dword [rsp + 0x1fc], ebp
lea rcx, [rsp + 0x58]
call fcn.140012fdc
nop
lea rax, [rsp + 0xa0]
mov qword [rbx + 0x78], rax
lea rax, [rsp + 0x200]
mov qword [rbx + 0x80], rax
lea rax, [rsp + 0x110]
mov qword [rbx + 0x88], rax
lea rcx, [rsp + 0xa0]
call fcn.1400065ec
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x200]
call fcn.1400065ec
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x110]
call fcn.1400065ec
mov r11, rax
mov qword [rsp + 0x78], rax
lea rcx, [rbx + 0x18]
mov dword [rcx], 0x60
mov rax, qword [rbx + 8]
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x20], rbp
lea rax, [rsp + 0x68]
mov qword [rbx + 0x50], rax
mov dword [rbx + 0x1c], 0x4024
mov qword [rbx + 0x38], 0x67
mov qword [rbx + 0x30], 0x6b
mov dword [rbx + 0x48], ebp
mov dword [rbx + 0x40], 3
cmp qword [rsp + 0x68], rbp
je 0x1400060e5
cmp qword [rsp + 0x70], rbp
je 0x1400060e5
cmp r11, rbp
je 0x1400060e5
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov edi, ebp
cmp rax, rbp
setg dil
cmp dword [rbx + 0x10], ebp
je 0x140006139
mov qword [rsp + 0x48], rbp
mov edx, 1
lea rcx, [rsp + 0x48]
call fcn.140015694
mov dword [rsp + 0x44], eax
cmp eax, ebp
jl 0x140006139
lea rdx, [rsp + 0x44]
lea rcx, [0x140001f40]
call fcn.140014f90
cmp dword [rsp + 0x44], ebp
jl 0x140006139
lea rcx, [rsp + 0x44]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
mov edx, eax
mov rcx, qword [rsp + 0x48]
call fcn.1400140e0
mov qword [rbx + 0x78], rbp
mov qword [rbx + 0x80], rbp
mov qword [rbx + 0x88], rbp
lea rax, [0x140002e80]
mov qword [rsp + 0x110], rax
mov rbx, qword [rsp + 0x178]
cmp rbx, rbp
je 0x14000617f
mov rcx, rbx
call fcn.140018bbc
mov rcx, rbx
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x178], rbp
lea rcx, [rsp + 0x180]
call fcn.140015eb4
nop
lea rcx, [rsp + 0x110]
call fcn.1400065a4
nop
lea rcx, [rsp + 0x288]
call fcn.140015eb4
nop
lea rcx, [rsp + 0x200]
call fcn.1400065a4
nop
lea rax, [0x140002680]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
lea rdx, [0x140002428]
lea rcx, [rsp + 0x58]
call fcn.140012f88
lea rcx, [rsp + 0xa0]
call fcn.1400081c0
lea rcx, [rsp + 0x58]
call fcn.140012fdc
lea rcx, [rsp + 0xa0]
call fcn.1400065a4
nop
lea rcx, [rsp + 0x80]
call fcn.140012fdc
mov eax, edi
mov rcx, qword [rsp + 0x530]
xor rcx, rsp
call fcn.14001d950
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop rdi
pop rsi
ret