Function at 0x427b40
Capabilities:
Get geographical location

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x290
mov rbp, rsp
mov qword [rbp + 0x40], rcx
mov dword [rbp + 0x3c], edx
mov qword [rbp + 0x58], r8
mov dword [rbp + 0x38], r9d
mov qword [rbp + 0x98], 0
nop
mov eax, 0x20
mov dword [rbp + 0x4c], eax
mov ecx, 0x40
call fcn.004051c0
mov qword [rbp + 0x100], rax
cmp qword [rbp + 0x100], 0
je 0x427f3d
mov rax, qword [rbp + 0x58]
mov rcx, rax
mov qword [rbp + 0x50], rcx
mov r13, rax
mov ebx, 1
mov rax, qword [rbp + 0x40]
test rax, rax
jne 0x427bd2
lea rcx, [rbp + 0x24c]
call sub.kernel32.dll_GetSystemTime
lea rcx, [rbp + 0x24c]
lea rdx, [rbp + 0x25c]
call sub.kernel32.dll_SystemTimeToFileTime
jmp 0x427bf9
lea rdi, [rbp + 0x26c]
mov rsi, qword [rbp + 0x40]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsd dword [rdi], dword [rsi]
lea rcx, [rbp + 0x26c]
lea rdx, [rbp + 0x25c]
call fcn.00428fe0
lea rax, [rbp + 0x25c]
mov qword [rbp + 0xf8], rax
mov rcx, qword [rbp + 0xf8]
lea rdx, [rbp + 0x264]
call sub.kernel32.dll_FileTimeToLocalFileTime
lea rax, [rbp + 0x264]
mov qword [rbp + 0xf0], rax
mov rcx, qword [rbp + 0xf0]
lea rdx, [rbp + 0x24c]
call sub.kernel32.dll_FileTimeToSystemTime
mov rax, qword [0x0044d168]
cmp byte [rax], 0
jne 0x427d32
movzx ecx, word [rbp + 0x24e]
movzx r8d, word [rbp + 0x252]
movzx eax, word [rbp + 0x24c]
mov edx, dword [rbp + 0x3c]
test edx, edx
jne 0x427c7e
movzx eax, word [rbp + 0x24c]
mov r9d, 0x64
xor edx, edx
div r9d
mov rax, rdx
cmp dword [0x0045d670], 2
jne 0x427c9a
mov ecx, eax
movzx eax, word [rbp + 0x252]
movzx r8d, word [rbp + 0x24e]
jmp 0x427cb2
cmp dword [0x0045d670], 1
jne 0x427cb2
movzx ecx, word [rbp + 0x252]
movzx r8d, word [rbp + 0x24e]
mov dword [rbp + 0xa0], ecx
mov byte [rbp + 0xa8], 0
lea rcx, [0x0045d650]
mov qword [rbp + 0xb0], rcx
mov byte [rbp + 0xb8], 0xa
mov dword [rbp + 0xc0], r8d
mov byte [rbp + 0xc8], 0
lea rcx, [0x0045d650]
mov qword [rbp + 0xd0], rcx
mov byte [rbp + 0xd8], 0xa
mov dword [rbp + 0xe0], eax
mov byte [rbp + 0xe8], 0
mov rcx, qword [rbp + 0x100]
mov edx, dword [rbp + 0x4c]
lea r8, [0x00428148]
lea r9, [rbp + 0xa0]
mov dword [rsp + 0x20], 4
call fcn.00426dd0
mov qword [rbp + 0x50], r13
jmp 0x427fcf
xor rsi, rsi
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
mov edx, 0x1f
lea r8, [rbp + 0x14a]
mov r9d, 0x80
call sub.kernel32.dll_GetLocaleInfoW_1
test eax, eax
jne 0x427d73
lea rcx, [rbp + 0x14a]
lea rdx, [0x0045d790]
mov r8d, 0x80
call fcn.00426c00
lea rdi, [rbp + 0x14a]
lea rax, [rbp + 0x14a]
test rax, rax
je 0x427ea4
movzx rax, word [rdi]
cmp word [rdi], 0x27
jne 0x427dab
test esi, esi
sete al
test al, al
setne al
movzx rax, al
neg eax
mov esi, eax
jmp 0x427e91
test esi, esi
jne 0x427e91
cmp ax, 0x64
je 0x427dc3
cmp ax, 0x4d
jne 0x427e91
xor rcx, rcx
add ecx, 1
add rdi, 2
cmp word [rdi], ax
je 0x427dc6
mov edx, ecx
movsxd r8, ecx
add r8, r8
neg r8
lea rdi, [rdi + r8]
cmp ecx, 1
jne 0x427e27
mov rax, rdi
movzx rcx, word [rax]
add rax, 2
test cx, cx
jne 0x427de9
mov rcx, rdi
lea r8, [rdi + 2]
mov rdx, rdi
neg rdx
lea rax, [rax + rdx]
mov r9d, 2
cqo
idiv r9
add rax, rax
mov rdx, r8
mov r8, rax
call fcn.00405590
lea rdi, [rdi + 4]
jmp 0x427e95
cmp ax, 0x64
jne 0x427e30
xor rbx, rbx
cmp ecx, 3
jg 0x427e3e
movsxd rdx, edx
lea rdi, [rdi + rdx*2]
jmp 0x427e95
movsxd rax, edx
lea rax, [rdi + rax*2]
movsxd rdx, edx
lea rcx, [rdi + rdx*2]
lea rdx, [rcx + 2]
movzx r8, word [rcx]
add rcx, 2
test r8w, r8w
jne 0x427e50
lea rdi, [rdi + 6]
mov r8, rax
mov r9, rdi
neg rdx
lea rax, [rcx + rdx]
mov ecx, 2
cqo
idiv rcx
lea rax, [rax + 2]
add rax, rax
mov rcx, r8
mov rdx, r9
mov r8, rax
call fcn.00405590
jmp 0x427e95
add rdi, 2
cmp word [rdi], 0
jne 0x427d8a
mov qword [rbp + 0x50], r13
nop
mov esi, dword [rbp + 0x4c]
mov rdi, qword [rbp + 0x100]
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
xor rdx, rdx
lea r8, [rbp + 0x24c]
lea r9, [rbp + 0x14a]
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], esi
call sub.kernel32.dll_GetDateFormatW
test eax, eax
je 0x427ee6
cmp qword [rbp + 0x100], 0
jne 0x427fcf
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
xor rdx, rdx
lea r8, [rbp + 0x24c]
lea r9, [rbp + 0x14a]
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call sub.kernel32.dll_GetDateFormatW
test eax, eax
je 0x427f76
mov esi, eax
add esi, 1
lea rcx, [rbp + 0x100]
mov edx, eax
add edx, 1
add edx, edx
movsxd rdx, edx
call fcn.00405220
cmp qword [rbp + 0x100], 0
je 0x427f45
mov eax, 8
jmp 0x427f8d
mov rdi, qword [rbp + 0x100]
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
xor rdx, rdx
lea r8, [rbp + 0x24c]
lea r9, [rbp + 0x14a]
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], esi
call sub.kernel32.dll_GetDateFormatW
test eax, eax
jne 0x427fcf
call sub.kernel32.dll_GetLastError_2
mov rcx, qword [0x0044d4a8]
mov dword [rcx], eax
mov rax, qword [0x0044d4a8]
mov eax, dword [rax]
lea rcx, [rbp + 0x98]
mov edx, eax
xor r8, r8
call fcn.00420290
mov rcx, qword [rbp + 0x98]
xor rdx, rdx
lea r8, [rbp + 0x98]
or r9d, 0xffffffff
call fcn.00440100
mov rcx, qword [rbp + 0x100]
call fcn.004051f0
xor rax, rax
mov dword [rbp + 0x64], eax
jmp 0x428103
movzx ecx, word [rbp + 0x250]
call fcn.00440cf0
lea rcx, [rbp + 0x108]
mov rdx, rax
mov r8d, 0x20
call fcn.00426c00
mov rax, qword [rbp + 0x50]
test rax, rax
je 0x42808a
test ebx, ebx
je 0x428049
mov eax, dword [rbp + 0x3c]
cmp eax, 1
jne 0x428049
mov rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x108]
mov r8d, dword [rbp + 0x38]
call fcn.00426c00
mov rcx, qword [rbp + 0x50]
mov edx, dword [rbp + 0x38]
lea r8, [0x0042816a]
call fcn.00427b00
mov rax, qword [rbp + 0x100]
mov rcx, qword [rbp + 0x50]
mov edx, dword [rbp + 0x38]
mov r8, rax
call fcn.00427b00
jmp 0x42805d
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x100]
mov r8d, dword [rbp + 0x38]
call fcn.00426c00
mov rax, qword [rbp + 0x50]
movzx rcx, word [rax]
add rax, 2
test cx, cx
jne 0x428061
mov rcx, qword [rbp + 0x50]
neg rcx
lea rax, [rax + rcx - 2]
mov ecx, 2
cqo
idiv rcx
mov dword [rbp + 0x64], eax
jmp 0x4280f6
test ebx, ebx
je 0x4280d1
mov rcx, qword [rbp + 0x100]
lea rax, [rbp + 0x108]
mov qword [rbp + 0x78], rax
mov byte [rbp + 0x80], 0xa
mov qword [rbp + 0x88], rcx
mov byte [rbp + 0x90], 0xa
lea rcx, [0x0042816e]
lea rdx, [rbp + 0x78]
mov r8d, 1
call fcn.0042c130
mov dword [rbp + 0x64], eax
jmp 0x4280f6
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x68], rax
mov byte [rbp + 0x70], 0xa
lea rcx, [0x0042817c]
lea rdx, [rbp + 0x68]
xor r8, r8
call fcn.0042c130
mov dword [rbp + 0x64], eax
mov rcx, qword [rbp + 0x100]
call fcn.004051f0
nop
lea rcx, [rbp + 0x98]
call fcn.00409e30
mov eax, dword [rbp + 0x64]
lea rsp, [rbp + 0x290]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret