Function at 0x18000a278
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x70
xor edi, edi
mov ebx, edx
test edx, edx
je 0x18000a297
mov eax, 0xedc5f240
mov dword [0x18010ecc4], eax
jmp 0x18000a29d
mov eax, dword [0x18010ecc4]
cmp eax, 0xaeae72d6
jne 0x18000a498
xor edx, edx
lea rcx, str.wqJ47CxfBGmbI6D1g31m
call qword [sym.imp.KERNEL32.dll_LoadModule]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CheckTokenCapability]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPagesNuma]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CloseThreadpoolWait]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIdealProcessorEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_DialogBoxParamW]
call qword [sym.imp.USER32.dll_GetMessagePos]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSysColor]
mov qword [rsp + 0x58], rdi
xor r9d, r9d
mov qword [rsp + 0x50], rdi
xor r8d, r8d
mov qword [rsp + 0x48], rdi
xor edx, edx
mov qword [rsp + 0x40], rdi
xor ecx, ecx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_CreateWindowExW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowDC]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetPriorityClipboardFormat]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RemoveVectoredContinueHandler]
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
xor r9d, r9d
lea rcx, str.FOJtyY842du5fYix3k8DZPv
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalLock]
call qword [sym.imp.KERNEL32.dll_GetSystemDEPPolicy]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Wow64SuspendThread]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
xor ecx, ecx
call qword [sym.imp.USER32.dll_DdeFreeDataHandle]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_DdeConnect]
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov dword [rsp + 0x28], edi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor r9d, r9d
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DiscardVirtualMemory]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalReAlloc]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowContextHelpId]
cmp ebx, 1
jne 0x18000a4ca
mov ecx, 0x152
lea rax, [0x180009acc]
mov dword [rsp + 0x68], ecx
add rax, rcx
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call fcn.18000ebd8
mov rbx, qword [rsp + 0x80]
mov eax, 1
add rsp, 0x70
pop rdi
ret