Function at 0x1400976d0
Capabilities:
Get geographical location
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov rax, qword [0x1401b5030]
xor rax, rsp
mov qword [rsp + 0xe0], rax
xor ebp, ebp
lea rax, [r11 - 0x80]
mov rbx, rcx
mov qword [rcx + 0xb00], rax
lea r8, [rsp + 0x74]
mov dword [rsp + 0x70], ebp
mov ecx, 0x400
mov dword [rsp + 0x84], ebp
lea r9d, [rbp + 2]
mov dword [rsp + 0x8c], ebp
lea edx, [rbp + 0x21]
mov dword [rsp + 0x7c], ebp
mov r15d, ebp
mov dword [rsp + 0x78], ebp
mov esi, ebp
mov edi, ebp
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
je 0x14009776f
movsx ecx, byte [rsp + 0x74]
sub ecx, 0x30
je 0x14009776f
sub ecx, 1
je 0x140097767
cmp ecx, 1
jne 0x14009776f
lea r14d, [rbp + 2]
jmp 0x140097772
mov r14d, 1
jmp 0x140097772
mov r14d, ebp
mov r9d, 2
mov dword [rsp + 0x80], r14d
lea r8, [rsp + 0x74]
mov ecx, 0x400
lea edx, [r9 + 0x1b]
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov r13d, 1
lea r12, [rbx + 0xf0]
mov rdx, r12
mov dword [rsp + 0x90], r13d
mov rcx, rbx
lea r8d, [r13 + 3]
call fcn.1400985a0
test eax, eax
je 0x140097ec4
mov r8d, 4
lea rdx, [0x1402b8324]
mov rcx, r12
call fcn.14012b3c0
test eax, eax
jne 0x140097d38
mov rcx, rbx
call fcn.140093d20
test eax, eax
jne 0x140097ec9
movzx edx, word [rbx + 0x10ba4]
lea r8d, [rax + 2]
mov rcx, rbx
call fcn.140099750
test eax, eax
je 0x140097814
mov dword [rsp + 0x84], eax
cmp eax, 1
jg 0x140097ec9
mov rcx, qword [rbx + 0x10b60]
test rcx, rcx
je 0x14009782f
call fcn.140122088
mov rcx, rbp
mov qword [rbx + 0x10b60], rbp
movzx esi, word [rbx + 0x10ba6]
test esi, esi
je 0x1400978c2
test rcx, rcx
je 0x140097848
call fcn.140122088
mov rcx, rsi
call fcn.14012d1e8
mov qword [rbx + 0x10b60], rax
mov r8d, esi
test rax, rax
jne 0x1400978af
lea rdx, str.warning:__extra_field_too_long___d_.__Ignoring..._n
lea rcx, [rbx + 0xb08]
call fcn.140092700
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov edx, dword [rbx + 0x10b58]
mov rcx, rbx
sub edx, dword [rbx + 0x10b5c]
sub edx, dword [rbx + 0x10b18]
add edx, dword [rbx + 0x10b20]
add edx, esi
call fcn.140098880
jmp 0x1400978c2
mov rdx, rax
mov rcx, rbx
call fcn.1400985a0
test eax, eax
je 0x140097ec4
cmp dword [rbx + 0x84], 0
jne 0x140097959
mov eax, dword [rbx + 0x7c]
test eax, eax
je 0x14009790b
mov esi, ebp
mov dword [rsp + 0x70], ebp
mov edi, ebp
nop
mov rax, qword [rbx + 0xe0]
lea rdx, [rbx + 0x10c5c]
mov r8d, dword [rbx + 0x24]
mov ecx, edi
mov rcx, qword [rax + rcx*8]
call fcn.140097320
cmp eax, 1
je 0x14009790b
inc edi
cmp edi, dword [rbx + 0x7c]
jb 0x1400978e0
jmp 0x14009795d
cmp dword [rbx + 0x80], 0
mov esi, 1
mov dword [rsp + 0x70], esi
mov edi, ebp
jbe 0x14009795d
nop
mov rax, qword [rbx + 0xe8]
lea rdx, [rbx + 0x10c5c]
mov r8d, dword [rbx + 0x24]
mov ecx, edi
mov rcx, qword [rax + rcx*8]
call fcn.140097320
cmp eax, esi
je 0x140097951
inc edi
cmp edi, dword [rbx + 0x80]
jb 0x140097920
mov dword [rsp + 0x70], esi
jmp 0x14009795d
mov esi, ebp
mov dword [rsp + 0x70], ebp
jmp 0x14009795d
mov esi, dword [rsp + 0x70]
cmp dword [rbx + 0x84], 0
jne 0x1400979d5
test esi, esi
jne 0x1400979d5
movzx eax, word [rbx + 0x10ba8]
test ax, ax
je 0x14009799c
test eax, eax
je 0x14009799c
mov edx, dword [rbx + 0x10b58]
mov rcx, rbx
sub edx, dword [rbx + 0x10b5c]
sub edx, dword [rbx + 0x10b18]
add edx, dword [rbx + 0x10b20]
add edx, eax
call fcn.140098880
mov edi, dword [rsp + 0x78]
mov esi, dword [rsp + 0x7c]
inc r13d
mov r8d, 4
mov rdx, r12
mov dword [rsp + 0x90], r13d
mov rcx, rbx
call fcn.1400985a0
test eax, eax
je 0x140097ec4
mov r14d, dword [rsp + 0x80]
jmp 0x1400977c0
mov rcx, qword [rbx + 0x10b60]
test rcx, rcx
je 0x140097a5a
movzx edx, word [rbx + 0x10ba6]
lea rax, [rsp + 0xc0]
mov r9d, dword [rbx + 0x10b94]
mov r8d, 1
mov qword [rsp + 0x20], rax
call fcn.140094360
test al, 1
je 0x140097a5a
lea rcx, [rsp + 0xc8]
call fcn.14012f4a8
mov rcx, rax
test rax, rax
je 0x140097a5a
mov r12d, dword [rax + 0x10]
mov r15d, dword [rax + 0x14]
inc r12d
mov r13d, dword [rax + 0xc]
mov eax, 0x51eb851f
imul r15d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x64
sub r15d, eax
mov eax, dword [rcx + 8]
mov dword [rsp + 0x88], eax
mov eax, dword [rcx + 4]
mov dword [rsp + 0x74], eax
jmp 0x140097ab0
mov r8d, dword [rbx + 0x10b94]
mov eax, 0x51eb851f
mov r15d, r8d
mov r12d, r8d
shr r15d, 0x19
mov r13d, r8d
add r15d, 0x50
shr r12d, 0x15
mul r15d
shr r13d, 0x10
and r12d, 0xf
shr edx, 5
and r13d, 0x1f
imul eax, edx, 0x64
mov edx, r8d
shr edx, 0xb
and edx, 0x1f
shr r8d, 5
mov dword [rsp + 0x88], edx
sub r15d, eax
and r8d, 0x3f
mov dword [rsp + 0x74], r8d
mov ecx, r14d
sub ecx, 1
je 0x140097ac8
cmp ecx, 1
jne 0x140097ad1
mov eax, r12d
mov r12d, r15d
mov r15d, r13d
jmp 0x140097ace
mov eax, r12d
mov r12d, r13d
mov r13d, eax
mov eax, dword [rbx + 0x10b9c]
movzx r10d, word [rbx + 0x10b90]
mov ecx, dword [rbx + 0x10ba0]
test r10b, 1
lea r14d, [rax - 0xc]
cmove r14d, eax
test ecx, ecx
jne 0x140097b91
mov eax, ebp
lea ecx, [rax + 5]
movzx r9d, word [rbx + 0x10b92]
mov eax, 0x66666667
imul ecx
mov r8d, r9d
mov ebp, edx
sar ebp, 2
mov eax, ebp
shr eax, 0x1f
add ebp, eax
cmp r9d, 0xd
jb 0x140097b28
mov r8d, reloc.WS2_32.dll_listen
mov eax, r8d
lea r11, [0x140000000]
lea rcx, [r11 + 0x18b8c0]
lea rdx, [rsp + 0xd8]
lea rcx, [rcx + rax*8]
sub rdx, rcx
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140097b50
lea eax, [r8 - 8]
cmp eax, 1
jbe 0x140097c10
cmp r8d, 0xd
jb 0x140097c27
mov r8d, r9d
lea rdx, str._03u
lea rcx, [rsp + 0xdc]
call fcn.140092700
jmp 0x140097c27
cmp ecx, 0x1e8480
jbe 0x140097bcd
mov eax, 0x10624dd3
mul ecx
mov r9d, edx
xor edx, edx
shr r9d, 6
mov r8d, r9d
shr r8d, 1
cmp ecx, r14d
jb 0x140097bc0
sub r8d, r14d
lea eax, [rcx + r8]
div r9d
jmp 0x140097bfc
mov eax, r14d
sub eax, ecx
add eax, r8d
div r9d
jmp 0x140097bfa
mov edx, ecx
shr edx, 1
cmp ecx, r14d
jb 0x140097be9
mov eax, ecx
sub eax, r14d
imul eax, eax, 0x3e8
add eax, edx
xor edx, edx
div ecx
jmp 0x140097bfc
mov eax, r14d
sub eax, ecx
imul eax, eax, 0x3e8
add eax, edx
xor edx, edx
div ecx
neg eax
test eax, eax
jns 0x140097afb
mov ecx, 5
sub ecx, eax
jmp 0x140097afe
shr r10, 1
and r10d, 3
movzx eax, byte [r10 + r11 + 0x18a424]
mov byte [rsp + 0xdd], al
test byte [rbx + 0x10b90], 1
lea rdx, [rbx + 0xb08]
mov rsi, qword [rbx + 0x10e18]
lea rcx, [rbx + 0x10c5c]
mov eax, 0x45
mov edi, 0x20
cmovne edi, eax
call fcn.1400a0870
mov rdx, rax
mov byte [rsp + 0x60], dil
mov rax, qword [rbx + 0xb00]
mov ecx, 0x20
mov r9d, r12d
mov r8d, ebp
test byte [rax + 0x18], 0x10
mov eax, 0x5e
cmovne ecx, eax
mov eax, dword [rbx + 0x10b98]
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0x74]
mov qword [rsp + 0x48], rdx
mov edx, r14d
mov byte [rsp + 0x40], cl
mov ecx, dword [rbx + 0x10ba0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r13d
call qword [rsi + 0x20]
movzx edx, word [rbx + 0x10ba8]
xor ebp, ebp
cmp dword [rbx + 0x44], ebp
mov r8d, ebp
mov eax, 5
mov rcx, rbx
cmove r8d, eax
call fcn.140099750
test eax, eax
je 0x140097cf8
mov dword [rsp + 0x84], eax
cmp eax, 1
jg 0x140097ec9
mov edi, dword [rsp + 0x78]
lea r12, [rbx + 0xf0]
mov esi, dword [rsp + 0x7c]
add edi, dword [rbx + 0x10ba0]
add esi, r14d
mov r15d, dword [rsp + 0x8c]
mov r13d, dword [rsp + 0x90]
inc r15d
mov dword [rsp + 0x8c], r15d
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x7c], esi
jmp 0x1400979a4
lea eax, [r13 - 1]
cmp ax, word [rbx + 0x10bbe]
jne 0x140097e62
cmp dword [rbx + 0x44], 2
jge 0x140097dfb
test edi, edi
je 0x140097dbe
cmp edi, 0x1e8480
jbe 0x140097d85
mov eax, 0x10624dd3
mul edi
mov ecx, edx
xor edx, edx
shr ecx, 6
mov eax, ecx
shr eax, 1
cmp edi, esi
jb 0x140097d7d
sub eax, esi
add eax, edi
div ecx
jmp 0x140097daf
sub eax, edi
add eax, esi
div ecx
jmp 0x140097dad
mov ecx, edi
xor edx, edx
shr ecx, 1
cmp edi, esi
jb 0x140097d9f
mov eax, edi
sub eax, esi
imul eax, eax, 0x3e8
add eax, ecx
div edi
jmp 0x140097daf
mov eax, esi
sub eax, edi
imul eax, eax, 0x3e8
add eax, ecx
div edi
neg eax
mov ebp, eax
test eax, eax
jns 0x140097dbe
mov ecx, 5
sub ecx, eax
jmp 0x140097dc1
lea ecx, [rbp + 5]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x30], esi
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x34], edi
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x38], edx
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x3c], r15d
mov r8d, 4
lea rdx, [0x1402b5cec]
mov rcx, r12
call fcn.14012b3c0
test eax, eax
je 0x140097e47
lea rdx, str._nnote:__didnt_find_end_of_central_dir_signature_at_end_of_central_dir._n
lea rcx, [rbx + 0xb08]
call fcn.140092700
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov esi, 1
jmp 0x140097e4e
mov esi, dword [rsp + 0x84]
test r15d, r15d
jne 0x140097e5e
cmp esi, 1
mov eax, reloc.WS2_32.dll_inet_addr
cmovle esi, eax
mov eax, esi
jmp 0x140097ec9
mov r8d, r13d
lea rdx, str.error:__expected_central_file_header_signature_not_found__file__lu_._n
lea rcx, [rbx + 0xb08]
call fcn.140092700
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
lea rdx, str.___please_check_that_you_have_transferred_or_created_the_zipfile_in_the_n__appropriate_BINARY_mode_and_that_you_have_compiled_UnZip_properly__n
lea rcx, [rbx + 0xb08]
call fcn.140092700
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov eax, 3
jmp 0x140097ec9
mov eax, gethostbyname
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.14011b0c0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret