Function at 0x1400020c8
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x14002f008]
xor rax, rsp
mov qword [rbp + 0xb0], rax
xor r13d, r13d
movsxd r12, r9d
mov rsi, r8
mov ebx, edx
test rcx, rcx
jne 0x14001d914
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetSystemTime]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_SystemTimeToFileTime]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_FileTimeToLocalFileTime]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_core_timezone_l1_1_0.dll_FileTimeToSystemTime]
cmp ebx, 1
jne 0x14001d963
movzx ecx, word [rsp + 0x6e]
mov eax, 0x66666667
imul ecx
mov ecx, edx
sar ecx, 2
mov eax, ecx
shr eax, 0x1f
add ecx, eax
movzx eax, word [rsp + 0x6c]
test rsi, rsi
je 0x14001d924
movzx r8d, word [rsp + 0x6a]
mov rdx, r12
movzx r9d, word [rsp + 0x68]
mov dword [rsp + 0x48], ecx
lea rcx, [0x1400325b0]
mov qword [rsp + 0x40], rcx
mov rcx, rsi
mov dword [rsp + 0x38], eax
lea rax, [0x1400324b0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r8d
lea r8, str._2d_s_02d_s_02d_s_02d
mov qword [rsp + 0x20], rax
call fcn.140011b7c
or rdi, 0xffffffffffffffff
inc rdi
cmp word [rsi + rdi*2], r13w
jne 0x1400021c2
mov eax, edi
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.1400151c0
mov rbx, qword [rsp + 0x208]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rsp + 0x50]
call fcn.14001f53c
nop
jmp 0x140002127
movzx r9d, word [rsp + 0x6a]
movzx edx, word [rsp + 0x68]
mov dword [rsp + 0x38], ecx
lea rcx, [0x1400325b0]
mov qword [rsp + 0x30], rcx
lea rcx, str._2d_s_02d_s_02d_s_02d
mov dword [rsp + 0x28], eax
lea rax, [0x1400324b0]
mov r8, rax
mov qword [rsp + 0x20], rax
call fcn.14000ed0c
jmp 0x14001db16
or rdi, 0xffffffffffffffff
cmp byte [0x140046d39], r13b
je 0x14001da86
mov r15d, r13d
call fcn.1400069bc
mov ebx, 0x80
lea r8, [rbp - 0x50]
mov r9d, ebx
mov ecx, eax
mov edx, 0x1003
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
jne 0x14001d9ab
lea r8, str.HH:mm:ss_t
mov edx, ebx
lea rcx, [rbp - 0x50]
call fcn.14000dc10
lea rbx, [rbp - 0x50]
cmp word [rbp - 0x50], r13w
je 0x14001da4d
movzx r14d, word [rbx]
cmp r14w, 0x27
jne 0x14001d9d3
test r15d, r15d
mov eax, r13d
sete al
mov r15d, eax
jmp 0x14001da3b
test r15d, r15d
jne 0x14001da3b
lea eax, [r14 - 0x48]
cmp ax, 0x25
ja 0x14001da3f
movzx eax, ax
movabs rcx, 0x2100000001
bt rcx, rax
jae 0x14001da3f
mov rcx, r13
inc rcx
lea rbx, [rbx + 2]
cmp word [rbx], r14w
je 0x14001d9f8
mov rax, rcx
neg rax
lea rbx, [rbx + rax*2]
cmp rcx, 1
jne 0x14001da3b
mov r8, rdi
inc r8
cmp word [rbx + r8*2], r13w
jne 0x14001da18
lea r8, [r8*2 + 2]
mov rdx, rbx
lea rcx, [rbx + 2]
call qword [sym.imp.msvcrt.dll_memmove]
mov word [rbx], r14w
add rbx, 2
add rbx, 2
cmp word [rbx], r13w
jne 0x14001d9ba
call fcn.1400069bc
mov ecx, eax
mov dword [rsp + 0x28], 0x20
lea rax, [rsp + 0x70]
mov edx, 2
lea r9, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_datetime_l1_1_1.dll_GetTimeFormatW]
test eax, eax
jne 0x14001daf5
mov word [rsp + 0x70], r13w
jmp 0x14001daf5
cmp dword [0x14002f024], r13d
lea rcx, [0x140029218]
movzx r9d, word [rsp + 0x68]
je 0x14001dabe
cmp r9d, 0xc
jb 0x14001dab1
jbe 0x14001daa8
add r9d, 0xfffffff4
lea rcx, [0x14002921c]
jmp 0x14001dac5
test r9d, r9d
jne 0x14001dac5
mov r9d, 0xc
jmp 0x14001dac5
lea rcx, [0x1400287dc]
movzx eax, word [rsp + 0x6a]
lea r8, str._02d_s_02d_s
mov qword [rsp + 0x30], rcx
mov edx, 0x20
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x70]
lea rax, [0x1400324b0]
mov qword [rsp + 0x20], rax
call fcn.140011b7c
test rsi, rsi
jne 0x14001db1d
lea rax, [rsp + 0x70]
inc rdi
cmp word [rax + rdi*2], r13w
jne 0x14001daff
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.14000ed80
mov edi, eax
jmp 0x1400021cc
mov rdx, r12
lea r8, [rsp + 0x70]
mov rcx, rsi
call fcn.14000dc10
inc rdi
cmp word [rsi + rdi*2], r13w
jne 0x14001db2d
jmp 0x1400021cc