Function at 0x10000c6f0
Capabilities:
Get geographical location

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r14
sub rsp, 0x1a0
mov rax, qword [0x100012110]
xor rax, rsp
mov qword [rsp + 0x190], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edi, 0x800
xor edx, edx
mov rcx, rax
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r13d, r13d
mov r12, rax
cmp rax, r13
jne 0x10000c750
mov edi, 0x8007000e
jmp 0x10000c93d
mov word [rax], r13w
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbp, rax
cmp rax, r13
je 0x10000cabb
mov word [rax], r13w
mov rbx, qword [0x100012b58]
lea rax, [0x100012b58]
cmp rbx, rax
je 0x10000c90d
mov r14d, 0x400
mov ecx, dword [rbx + 0x10]
mov r8, r14
mov rdx, r12
call fcn.10000c670
cmp eax, r13d
mov edi, eax
jl 0x10000c910
lea rdx, [0x100005b8c]
mov rcx, r12
call qword [sym.imp.msvcrt.dll_wcstok]
cmp rax, r13
je 0x10000cac5
mov rcx, rax
call fcn.10000c5f0
mov qword [rbx + 0x30], rax
cmp rax, r13
je 0x10000cabb
lea rdx, [0x100005b8c]
xor ecx, ecx
mov dword [rbx + 0x24], r13d
call qword [sym.imp.msvcrt.dll_wcstok]
mov rdi, rax
cmp rax, r13
je 0x10000cac5
cmp r13w, word [rax]
je 0x10000c83d
lea rdx, [0x100005b90]
mov rcx, rax
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, r13d
je 0x10000c83d
mov rcx, rdi
call fcn.10000c5f0
mov qword [rbx + 0x38], rax
cmp rax, r13
je 0x10000cabb
mov eax, dword [rbx + 0x2c]
and eax, 0x40
cmp al, r13b
jne 0x10000c83d
mov dword [rbx + 0x24], 1
lea rdx, [0x100005b8c]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_wcstok]
cmp rax, r13
je 0x10000cac5
lea rdi, [0x100005b90]
mov rsi, rax
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x10000c86e
mov rcx, rax
jmp 0x10000c8bb
mov eax, dword [rbx + 0x28]
cmp eax, r13d
jle 0x10000c8cd
cmp eax, 2
jle 0x10000c896
cmp eax, 3
je 0x10000caab
mov edi, 4
cmp eax, edi
je 0x10000c971
cmp eax, 5
jne 0x10000c8cd
test byte [rbx + 0x2c], 0x80
mov r8, r14
mov rdx, rbp
mov ecx, 0x3bc5
jne 0x10000c8ac
mov ecx, 0x3bc4
call fcn.10000c670
cmp eax, r13d
mov edi, eax
jl 0x10000c910
mov rcx, rbp
call fcn.10000c5f0
mov qword [rbx + 0x40], rax
cmp rax, r13
je 0x10000cabb
lea rdx, [0x100005b8c]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_wcstok]
cmp rax, r13
je 0x10000cac5
mov rcx, rax
call fcn.10000c5f0
mov qword [rbx + 0x48], rax
cmp rax, r13
je 0x10000cabb
mov rbx, qword [rbx]
lea rax, [0x100012b58]
cmp rbx, rax
jne 0x10000c795
mov edi, r13d
cmp rbp, r13
je 0x10000c929
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, edi
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.10000f610
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
ret
mov r9d, 0x50
lea r8, [rsp + 0xf0]
mov ecx, r14d
lea edx, [r9 - 0x31]
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, r13d
jne 0x10000c99a
mov word [rsp + 0xf0], r13w
lea r8, [rsp + 0x50]
mov r9d, 0x50
mov edx, 0x1003
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, r13d
jne 0x10000c9be
mov word [rsp + 0x50], r13w
lea r8, [rsp + 0x40]
mov r9d, edi
mov edx, 0x28
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, r13d
jne 0x10000c9df
mov word [rsp + 0x40], r13w
lea r8, [rsp + 0x48]
mov r9d, edi
mov edx, 0x29
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, r13d
jne 0x10000ca00
mov word [rsp + 0x48], r13w
lea rcx, [rsp + 0x50]
mov edx, 0x20
call qword [sym.imp.msvcrt.dll_wcsrchr]
cmp rax, r13
je 0x10000ca19
mov word [rax], r13w
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x10000ca82
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x48]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x10000ca82
lea rax, [rsp + 0x48]
lea r9, [rsp + 0xf0]
lea r8, [0x100005b98]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov rdx, r14
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.100007e94
jmp 0x10000c8b1
lea rax, [rsp + 0x50]
lea r9, [rsp + 0xf0]
lea r8, [0x100005bb8]
mov rdx, r14
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.100007e94
jmp 0x10000c8b1
mov r8, r14
mov rdx, rbp
mov ecx, 0x3bc6
jmp 0x10000c8ac
mov edi, 0x8007000e
jmp 0x10000c910
mov edi, 0x8000ffff
jmp 0x10000c910