Function at 0x140006720
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x130
mov rax, qword [0x14002f008]
xor rax, rsp
mov qword [rsp + 0x120], rax
call fcn.1400069bc
mov esi, 8
lea r8, [0x1400324b0]
mov r9d, esi
mov ecx, eax
mov ebx, eax
lea edx, [rsi + 0x16]
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x140018298
mov edi, 0x80
lea r8, [rsp + 0x20]
mov r9d, edi
mov ecx, ebx
lea edx, [rdi - 0x5d]
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x1400067ba
movzx eax, word [rsp + 0x20]
cmp ax, word [0x1400285ac]
jne 0x1400069ac
movzx eax, word [rsp + 0x22]
cmp ax, word [0x1400285ae]
jne 0x1400069ac
xor eax, eax
mov dword [0x14002f024], eax
and dword [0x14002f708], 0
lea r8, [rsp + 0x20]
mov r9d, edi
mov edx, 0x21
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
mov edx, 2
test eax, eax
je 0x140006801
movzx ecx, word [rsp + 0x20]
sub ecx, 0x30
jne 0x1400182b4
and dword [0x14002f708], ecx
lea rax, str.MM_dd_yy
mov qword [0x140032540], rax
mov dword [0x1400323e8], edx
lea r8, [rsp + 0x20]
mov edx, 0x24
mov r9d, edi
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
mov ebp, 0x31
test eax, eax
je 0x14000683c
mov eax, dword [0x1400323e8]
lea ecx, [rbp - 0x2d]
cmp word [rsp + 0x20], bp
cmove eax, ecx
mov dword [0x1400323e8], eax
mov r9d, esi
lea r8, [0x140032590]
mov edx, 0x1d
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x1400182ea
mov edi, 0x20
lea r8, [0x140032430]
mov r9d, edi
mov edx, ebp
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x140018306
mov r9d, edi
lea r8, [0x140032470]
mov edx, 0x32
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x140018322
mov r9d, edi
lea r8, [0x1400323f0]
mov edx, 0x33
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x14001833e
mov r9d, edi
lea r8, [0x1400324c0]
mov edx, 0x34
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x14001835a
mov r9d, edi
lea r8, [0x140032550]
mov edx, 0x35
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x140018376
mov r9d, edi
lea r8, [0x140032500]
mov edx, 0x36
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x140018392
mov r9d, edi
lea r8, [0x1400325c0]
mov edx, 0x37
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x1400183ae
mov r9d, esi
lea r8, [0x1400325b0]
mov edx, 0xe
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x1400183ca
mov r9d, esi
lea r8, [0x1400325a0]
mov edx, 0xf
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_GetLocaleInfoW]
test eax, eax
je 0x1400183e6
lea rdx, str..OCP
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_setlocale]
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.1400151c0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
sbb eax, eax
or eax, 1
jmp 0x1400067b4
lea r8, [0x140029188]
mov rdx, rsi
lea rcx, [0x1400324b0]
call fcn.14000dc10
nop
jmp 0x140006772
sub ecx, 1
je 0x1400182d4
cmp ecx, 1
jne 0x140006801
mov dword [0x14002f708], edx
lea rax, str.yy_MM_dd
jmp 0x1400067fa
mov dword [0x14002f708], 1
lea rax, str.dd_MM_yy
jmp 0x1400067fa
lea r8, [0x140029030]
mov rdx, rsi
lea rcx, [0x140032590]
call fcn.14000dc10
nop
jmp 0x14000685b
lea r8, [0x1400291c0]
mov rdx, rdi
lea rcx, [0x140032430]
call fcn.14000dc10
nop
jmp 0x14000687c
lea r8, [0x1400291c8]
mov rdx, rdi
lea rcx, [0x140032470]
call fcn.14000dc10
nop
jmp 0x14000689b
lea r8, [0x1400291d0]
mov rdx, rdi
lea rcx, [0x1400323f0]
call fcn.14000dc10
nop
jmp 0x1400068ba
lea r8, [0x1400291d8]
mov rdx, rdi
lea rcx, [0x1400324c0]
call fcn.14000dc10
nop
jmp 0x1400068d9
lea r8, [0x1400291e0]
mov rdx, rdi
lea rcx, [0x140032550]
call fcn.14000dc10
nop
jmp 0x1400068f8
lea r8, [0x1400291e8]
mov rdx, rdi
lea rcx, [0x140032500]
call fcn.14000dc10
nop
jmp 0x140006917
lea r8, [0x1400291f0]
mov rdx, rdi
lea rcx, [0x1400325c0]
call fcn.14000dc10
nop
jmp 0x140006936
lea r8, [0x140028848]
mov rdx, rsi
lea rcx, [0x1400325b0]
call fcn.14000dc10
nop
jmp 0x140006955
lea r8, [0x1400291f8]
mov rdx, rsi
lea rcx, [0x1400325a0]
call fcn.14000dc10
nop
jmp 0x140006974