Function at 0x14020077f
Capabilities:
Get geographical location

Disassembly:
push rax
pushf
mov eax, 0xb8688586
pushf
not eax
add eax, 0x82c47ef8
xor eax, 0x91c25a6f
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xe45d959b
xor eax, 0xf180c882
rol eax, 0x87
popf
cmp eax, 4
jne 0x1402007bc
popf
pop rax
jmp 0x140200ae0
cmp eax, 0
jne 0x1402007cb
popf
pop rax
jmp 0x140200825
cmp eax, 3
jne 0x1402007da
popf
pop rax
jmp 0x1402009db
cmp eax, 1
jne 0x1402007e9
popf
pop rax
jmp 0x140200973
cmp eax, 5
jne 0x1402007f8
popf
pop rax
jmp 0x140200b4b
cmp eax, 7
jne 0x140200807
popf
pop rax
jmp 0x140200c61
cmp eax, 6
jne 0x140200816
popf
pop rax
jmp 0x140200bdf
cmp eax, 2
jne 0x140200825
popf
pop rax
jmp 0x1402009d6
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rbx, rdx
lea r8, [rsp + 0x60]
mov edi, ecx
mov edx, 0x71cbefd
pushf
not edx
add edx, 0x8752a639
xor edx, 0x9b6fca96
rol edx, 0xa1
popf
pushf
not edx
add edx, 0x95aedc48
xor edx, 0xd79e998a
rol edx, 0xd4
popf
pushf
not edx
add edx, 0xa7f0068e
xor edx, 0xce8ec14e
rol edx, 0x69
popf
pushf
not edx
add edx, 0xb5e2f762
xor edx, 0xc0c0f1a2
rol edx, 0xc7
popf
lea rcx, [0x18b8be9c8]
pushf
sub rcx, 0x4b73c208
popf
mov r9d, 0x298e6506
pushf
not r9d
add r9d, 0xedcf2cb7
xor r9d, 0x8c3bfdcd
rol r9d, 0x1e
popf
pushf
not r9d
add r9d, 0xfec6c50b
xor r9d, 0xaca7f67b
rol r9d, 0x9d
popf
jmp 0x1402008dd
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
jne 0x14020091a
push rax
pushf
mov eax, 0x4bc3f701
pushf
not eax
add eax, 0x933a8983
xor eax, 0xb88d8932
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xaf2a7e8d
xor eax, 0xc3bbae8d
rol eax, 0x28
popf
jmp 0x1402007ad
push rax
pushf
mov eax, 0xee8d0ac9
pushf
not eax
add eax, 0xd129d1a8
xor eax, 0xae447677
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbca8c68d
xor eax, 0xb0da465f
rol eax, 0x91
popf
pushf
not eax
add eax, 0x85961c93
xor eax, 0xd5039d4e
rol eax, 0x48
popf
pushf
not eax
add eax, 0xdca95875
xor eax, 0xbf420932
rol eax, 0x68
popf
jmp 0x1402007ad
xor r9d, r9d
mov dword [rsp + 0x60], r9d
jmp 0x1402009db
mov r9d, dword [rsp + 0x60]
and qword [rsp + 0x30], 0
mov r8d, edi
and dword [rsp + 0x28], 0
xor edx, edx
mov ecx, 0x5ebd7ee
pushf
not ecx
add ecx, 0xf784141b
xor ecx, 0xf6d6699a
rol ecx, 0xc3
popf
pushf
not ecx
add ecx, 0xc243f89f
xor ecx, 0xe9e3d2fb
rol ecx, 0x91
popf
pushf
not ecx
add ecx, 0xc6c35367
xor ecx, 0x96987712
rol ecx, 0x68
popf
mov qword [rsp + 0x20], rbx
jmp 0x140200a35
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, eax
test eax, eax
je 0x140200a9a
push rax
pushf
mov eax, 0x6cfcf6a7
pushf
not eax
add eax, 0xfa972f1e
xor eax, 0x8db97075
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc54ddf09
xor eax, 0xbc2236b1
rol eax, 0x17
popf
pushf
not eax
add eax, 0xc3c8319c
xor eax, 0xab8f1d70
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xab63f83b
xor eax, 0x9d5e4e90
rol eax, 0x10
popf
jmp 0x1402007ad
push rax
pushf
mov eax, 0x3558b68b
pushf
not eax
add eax, 0xc2cbca91
xor eax, 0x9829f32e
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8cecb29e
xor eax, 0xd3942126
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc9be9e9f
xor eax, 0xfa15fe70
rol eax, 0x7b
popf
jmp 0x1402007ad
mov r8, qword [rbx]
dec r8
push rdx
not rdx
sub r8, rdx
pop rdx
sub r8, 1
push rax
pushf
mov eax, 0xa2e0b19f
pushf
not eax
add eax, 0xc54fa29c
xor eax, 0xe9d5cbbd
rol eax, 0x55
popf
pushf
not eax
add eax, 0xa270897e
xor eax, 0xd1f0b156
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x8bea8822
xor eax, 0xb1181aca
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe94f36f0
xor eax, 0xf271f8d2
rol eax, 0x84
popf
jmp 0x1402007ad
movzx ecx, byte [r8]
lea rax, [0x198f3e895]
pushf
sub rax, 0x58dcae25
popf
cmp byte [rcx + rax], 0
je 0x140200b99
push rax
pushf
mov eax, 0x997e63b6
pushf
not eax
add eax, 0xf276fcb6
xor eax, 0x91992953
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xbb61dc76
xor eax, 0x89097009
rol eax, 0x41
popf
jmp 0x1402007ad
push rax
pushf
mov eax, 0x26a78a3d
pushf
not eax
add eax, 0xa861043d
xor eax, 0xa6000420
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x9dd93df0
xor eax, 0xf5e4e136
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xb58991f8
xor eax, 0xd01b9e5e
rol eax, 0x46
popf
jmp 0x1402007ad
dec r8
sub rdx, 1
jne 0x140200c1b
push rax
pushf
mov eax, 0x18b115e4
pushf
not eax
add eax, 0xb7b28608
xor eax, 0xb76cb1d4
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb9d87e20
xor eax, 0xd91ce9e9
rol eax, 0x2a
popf
jmp 0x1402007ad
push rax
pushf
mov eax, 0xdce4e248
pushf
not eax
add eax, 0xda6830be
xor eax, 0xb98235d5
rol eax, 0x11
popf
pushf
not eax
add eax, 0xd568d43e
xor eax, 0xe95b6a6a
rol eax, 0xd
popf
pushf
not eax
add eax, 0xff268e7f
xor eax, 0x9a5c4f90
rol eax, 0xd5
popf
jmp 0x1402007ad
mov rbx, qword [rsp + 0x50]
mov rax, rdx
add rsp, 0x40
pop rdi
ret