Function at 0x140095c20
Capabilities:
Get geographical location
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0xf0
mov rax, qword [0x14021b0e0]
xor rax, rsp
mov qword [rsp + 0xe0], rax
mov rbx, rcx
mov dword [rsp + 0x70], 0
xor ecx, ecx
lea rax, [rsp + 0x98]
mov dword [rsp + 0x84], ecx
lea r8, [rsp + 0x74]
xor esi, esi
xor edi, edi
xor r15d, r15d
mov dword [rsp + 0x78], esi
lea r9d, [rcx + 2]
mov dword [rsp + 0x7c], edi
lea edx, [rcx + 0x21]
mov dword [rsp + 0x8c], r15d
mov ecx, 0x400
mov qword [rbx + 0xb00], rax
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
je 0x140095cc0
movsx ecx, byte [rsp + 0x74]
sub ecx, 0x30
je 0x140095cc0
sub ecx, 1
je 0x140095cb9
cmp ecx, 1
jne 0x140095cc0
lea ebp, [rsi + 2]
jmp 0x140095cc2
mov ebp, 1
jmp 0x140095cc2
xor ebp, ebp
mov r9d, 2
mov dword [rsp + 0x80], ebp
lea r8, [rsp + 0x74]
mov qword [rsp + 0x128], r12
mov ecx, 0x400
lea edx, [r9 + 0x1b]
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov r13d, 1
lea r14, [rbx + 0xf0]
mov rdx, r14
mov dword [rsp + 0x90], r13d
mov rcx, rbx
lea r8d, [r13 + 3]
call fcn.140096b00
test eax, eax
je 0x1400963bf
lea r12d, [r13 + 4]
nop dword [rax + rax]
mov r8d, 4
lea rdx, [0x14021be5c]
mov rcx, r14
call fcn.14015a010
test eax, eax
jne 0x140096288
mov rcx, rbx
call fcn.1400923d0
test eax, eax
jne 0x1400963c4
movzx edx, word [rbx + 0x10ba4]
lea r8d, [rax + 2]
mov rcx, rbx
call fcn.140097cc0
test eax, eax
je 0x140095d74
mov dword [rsp + 0x84], eax
cmp eax, 1
jg 0x1400963c4
mov rcx, qword [rbx + 0x10b60]
test rcx, rcx
je 0x140095d90
call fcn.14014e740
mov qword [rbx + 0x10b60], 0
movzx esi, word [rbx + 0x10ba6]
test esi, esi
je 0x140095e14
mov ecx, esi
call fcn.1401507f8
mov qword [rbx + 0x10b60], rax
mov r8d, esi
test rax, rax
jne 0x140095e01
lea rdx, str.warning:__extra_field_too_long___d_.__Ignoring..._n
lea rcx, [rbx + 0xb08]
call fcn.1400352e0
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov edx, dword [rbx + 0x10b58]
mov rcx, rbx
sub edx, dword [rbx + 0x10b5c]
sub edx, dword [rbx + 0x10b18]
add edx, dword [rbx + 0x10b20]
add edx, esi
call fcn.140096df0
jmp 0x140095e14
mov rdx, rax
mov rcx, rbx
call fcn.140096b00
test eax, eax
je 0x1400963bf
cmp dword [rbx + 0x84], 0
jne 0x140095eb7
mov eax, dword [rbx + 0x7c]
test eax, eax
je 0x140095e69
xor esi, esi
xor edi, edi
mov dword [rsp + 0x70], esi
test eax, eax
je 0x140095ebb
nop dword [rax + rax]
mov rax, qword [rbx + 0xe0]
lea rdx, [rbx + 0x10c5c]
mov r8d, dword [rbx + 0x24]
mov rcx, qword [rax + rdi*8]
call fcn.140095880
cmp eax, 1
je 0x140095e69
inc edi
cmp edi, dword [rbx + 0x7c]
jb 0x140095e40
jmp 0x140095ebb
xor edi, edi
mov esi, 1
mov dword [rsp + 0x70], esi
cmp dword [rbx + 0x80], edi
jbe 0x140095ebb
nop dword [rax]
mov rax, qword [rbx + 0xe8]
lea rdx, [rbx + 0x10c5c]
mov r8d, dword [rbx + 0x24]
mov rcx, qword [rax + rdi*8]
call fcn.140095880
cmp eax, esi
je 0x140095eaf
inc edi
cmp edi, dword [rbx + 0x80]
jb 0x140095e80
mov dword [rsp + 0x70], esi
jmp 0x140095ebb
xor esi, esi
mov dword [rsp + 0x70], esi
jmp 0x140095ebb
mov esi, dword [rsp + 0x70]
cmp dword [rbx + 0x84], 0
jne 0x140095f2e
test esi, esi
jne 0x140095f2e
movzx eax, word [rbx + 0x10ba8]
test ax, ax
je 0x140095ef6
mov edx, dword [rbx + 0x10b58]
mov rcx, rbx
sub edx, dword [rbx + 0x10b5c]
sub edx, dword [rbx + 0x10b18]
add edx, dword [rbx + 0x10b20]
add edx, eax
call fcn.140096df0
mov edi, dword [rsp + 0x7c]
mov esi, dword [rsp + 0x78]
inc r13d
mov r8d, 4
mov rdx, r14
mov dword [rsp + 0x90], r13d
mov rcx, rbx
call fcn.140096b00
test eax, eax
je 0x1400963bf
mov ebp, dword [rsp + 0x80]
jmp 0x140095d20
mov rcx, qword [rbx + 0x10b60]
test rcx, rcx
je 0x140095fb3
movzx edx, word [rbx + 0x10ba6]
lea rax, [rsp + 0xc0]
mov r9d, dword [rbx + 0x10b94]
mov r8d, 1
mov qword [rsp + 0x20], rax
call fcn.1400926f0
test al, 1
je 0x140095fb3
lea rcx, [rsp + 0xc8]
call fcn.140167bd4
mov rcx, rax
test rax, rax
je 0x140095fb3
mov r12d, dword [rax + 0x10]
mov r15d, dword [rax + 0x14]
inc r12d
mov r13d, dword [rax + 0xc]
mov eax, 0x51eb851f
imul r15d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x64
sub r15d, eax
mov eax, dword [rcx + 8]
mov dword [rsp + 0x88], eax
mov eax, dword [rcx + 4]
mov dword [rsp + 0x74], eax
jmp 0x140096009
mov r8d, dword [rbx + 0x10b94]
mov eax, 0x51eb851f
mov r15d, r8d
mov r12d, r8d
shr r15d, 0x19
mov r13d, r8d
add r15d, 0x50
shr r12d, 0x15
mul r15d
shr r13d, 0x10
and r12d, 0xf
shr edx, 5
and r13d, 0x1f
imul eax, edx, 0x64
mov edx, r8d
shr edx, 0xb
and edx, 0x1f
shr r8d, 5
mov dword [rsp + 0x88], edx
sub r15d, eax
and r8d, 0x3f
mov dword [rsp + 0x74], r8d
mov ecx, ebp
sub ecx, 1
je 0x140096020
cmp ecx, 1
jne 0x140096029
mov eax, r12d
mov r12d, r15d
mov r15d, r13d
jmp 0x140096026
mov eax, r12d
mov r12d, r13d
mov r13d, eax
mov eax, dword [rbx + 0x10b9c]
movzx r10d, word [rbx + 0x10b90]
mov ecx, dword [rbx + 0x10ba0]
test r10b, 1
lea r14d, [rax - 0xc]
cmove r14d, eax
test ecx, ecx
jne 0x1400960e1
xor eax, eax
lea ecx, [rax + 5]
movzx r9d, word [rbx + 0x10b92]
mov eax, 0x66666667
imul ecx
mov r8d, r9d
mov ebp, edx
sar ebp, 2
mov eax, ebp
shr eax, 0x1f
add ebp, eax
cmp r9d, 0xd
jb 0x140096080
mov r8d, reloc.WS2_32.dll_listen
mov eax, r8d
lea r11, [0x140000000]
lea rcx, [r11 + 0x1ec6a0]
lea rdx, [rsp + 0xd8]
lea rcx, [rcx + rax*8]
sub rdx, rcx
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400960a0
lea eax, [r8 - 8]
cmp eax, 1
jbe 0x140096160
cmp r8d, 0xd
jb 0x140096177
mov r8d, r9d
lea rdx, str._03u
lea rcx, [rsp + 0xdc]
call fcn.1400352e0
jmp 0x140096177
cmp ecx, 0x1e8480
jbe 0x14009611d
mov eax, 0x10624dd3
mul ecx
mov r9d, edx
xor edx, edx
shr r9d, 6
mov r8d, r9d
shr r8d, 1
cmp ecx, r14d
jb 0x140096110
sub r8d, r14d
lea eax, [rcx + r8]
div r9d
jmp 0x14009614c
mov eax, r14d
sub eax, ecx
add eax, r8d
div r9d
jmp 0x14009614a
mov edx, ecx
shr edx, 1
cmp ecx, r14d
jb 0x140096139
mov eax, ecx
sub eax, r14d
imul eax, eax, 0x3e8
add eax, edx
xor edx, edx
div ecx
jmp 0x14009614c
mov eax, r14d
sub eax, ecx
imul eax, eax, 0x3e8
add eax, edx
xor edx, edx
div ecx
neg eax
test eax, eax
jns 0x140096053
mov ecx, 5
sub ecx, eax
jmp 0x140096056
shr r10, 1
and r10d, 3
movzx eax, byte [r10 + r11 + 0x1ec504]
mov byte [rsp + 0xdd], al
test byte [rbx + 0x10b90], 1
lea rdx, [rbx + 0xb08]
mov rsi, qword [rbx + 0x10e18]
lea rcx, [rbx + 0x10c5c]
mov eax, 0x45
mov edi, 0x20
cmovne edi, eax
call fcn.14009ed90
mov rdx, rax
mov byte [rsp + 0x60], dil
mov rax, qword [rbx + 0xb00]
mov ecx, 0x20
mov r9d, r12d
mov r8d, ebp
test byte [rax + 0x18], 0x10
mov eax, 0x5e
cmovne ecx, eax
mov eax, dword [rbx + 0x10b98]
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0x74]
mov qword [rsp + 0x48], rdx
mov edx, r14d
mov byte [rsp + 0x40], cl
mov ecx, dword [rbx + 0x10ba0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r13d
call qword [rsi + 0x20]
movzx edx, word [rbx + 0x10ba8]
xor r8d, r8d
cmp dword [rbx + 0x44], r8d
mov r12d, 5
mov rcx, rbx
cmove r8d, r12d
call fcn.140097cc0
test eax, eax
je 0x140096248
mov dword [rsp + 0x84], eax
cmp eax, 1
jg 0x1400963c4
mov r15d, dword [rsp + 0x8c]
mov edi, dword [rsp + 0x7c]
add r15d, dword [rbx + 0x10ba0]
add edi, r14d
mov esi, dword [rsp + 0x78]
lea r14, [rbx + 0xf0]
mov r13d, dword [rsp + 0x90]
inc esi
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x8c], r15d
mov dword [rsp + 0x7c], edi
jmp 0x140095efe
lea eax, [r13 - 1]
cmp ax, word [rbx + 0x10bbe]
jne 0x14009635d
cmp dword [rbx + 0x44], 2
jge 0x1400962f7
mov edx, edi
mov ecx, r15d
call fcn.140096860
test eax, eax
jns 0x1400962ba
sub r12d, eax
mov eax, 0x66666667
imul r12d
jmp 0x1400962c4
lea ecx, [rax + 5]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x30], edi
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x34], r15d
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x38], edx
mov rax, qword [rbx + 0x10e18]
mov dword [rax + 0x3c], esi
mov r8d, 4
lea rdx, [0x14021be44]
mov rcx, r14
call fcn.14015a010
test eax, eax
je 0x140096343
lea rdx, str._nnote:__didnt_find_end_of_central_dir_signature_at_end_of_central_dir._n
lea rcx, [rbx + 0xb08]
call fcn.1400352e0
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov edi, 1
jmp 0x14009634a
mov edi, dword [rsp + 0x84]
test esi, esi
jne 0x140096359
cmp edi, 1
mov eax, reloc.WS2_32.dll_inet_addr
cmovle edi, eax
mov eax, edi
jmp 0x1400963c4
mov r8d, r13d
lea rdx, str.error:__expected_central_file_header_signature_not_found__file__lu_._n
lea rcx, [rbx + 0xb08]
call fcn.1400352e0
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
lea rdx, str.___please_check_that_you_have_transferred_or_created_the_zipfile_in_the_n__appropriate_BINARY_mode_and_that_you_have_compiled_UnZip_properly__n
lea rcx, [rbx + 0xb08]
call fcn.1400352e0
mov r8d, eax
lea rdx, [rbx + 0xb08]
mov r9d, 0x401
mov rcx, rbx
call qword [rbx + 0x10df0]
mov eax, 3
jmp 0x1400963c4
mov eax, gethostbyname
mov r12, qword [rsp + 0x128]
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.140147af0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret