Function at 0x140018e37
Capabilities:
Get geographical location

Disassembly:
push rax
pushf
mov eax, 0x5de43964
pushf
not eax
add eax, 0xd8f3190c
xor eax, 0xa546db54
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb243e9b2
xor eax, 0xed849619
rol eax, 9
popf
pushf
not eax
add eax, 0x901679dd
xor eax, 0xf3576bbe
rol eax, 0x90
popf
cmp eax, 4
jne 0x140018e87
popf
pop rax
jmp 0x14001918d
cmp eax, 0
jne 0x140018e96
popf
pop rax
jmp 0x140018ef0
cmp eax, 3
jne 0x140018ea5
popf
pop rax
jmp 0x140019088
cmp eax, 1
jne 0x140018eb4
popf
pop rax
jmp 0x140019033
cmp eax, 5
jne 0x140018ec3
popf
pop rax
jmp 0x1400191f8
cmp eax, 7
jne 0x140018ed2
popf
pop rax
jmp 0x14001935a
cmp eax, 6
jne 0x140018ee1
popf
pop rax
jmp 0x14001929f
cmp eax, 2
jne 0x140018ef0
popf
pop rax
jmp 0x140019083
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rbx, rdx
lea r8, [rsp + 0x60]
mov edi, ecx
mov edx, 0x4c58a55d
pushf
not edx
add edx, 0xbcab3a57
xor edx, 0x8ce9608e
rol edx, 0xf1
popf
pushf
not edx
add edx, 0xc08714d3
xor edx, 0xd7971bcb
rol edx, 0x39
popf
lea rcx, [0x1a9fd5bb0]
pushf
sub rcx, 0x69fce5a0
popf
mov r9d, 0xf7f6cb9a
pushf
not r9d
add r9d, 0xb20c8150
xor r9d, 0xbdb0f167
rol r9d, 0x6e
popf
pushf
not r9d
add r9d, 0x995aa3bd
xor r9d, 0xdb3a4d93
rol r9d, 0xda
popf
pushf
not r9d
add r9d, 0x845037b8
xor r9d, 0xa6c686ab
rol r9d, 0x8e
popf
pushf
not r9d
add r9d, 0xfcf27b48
xor r9d, 0xacc73236
rol r9d, 0x3c
popf
jmp 0x140018fb0
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
jne 0x140019000
push rax
pushf
mov eax, 0x9f79da16
pushf
not eax
add eax, 0xeb28c454
xor eax, 0xebaef368
rol eax, 0x22
popf
pushf
not eax
add eax, 0xe3e9bb07
xor eax, 0x95b8c824
rol eax, 7
popf
pushf
not eax
add eax, 0xae4a223a
xor eax, 0x857b77be
rol eax, 0x53
popf
jmp 0x140018e78
push rax
pushf
mov eax, 0x8247a441
pushf
not eax
add eax, 0xefc3d7ba
xor eax, 0xb0a1a23a
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd50bb6b6
xor eax, 0xf72e0573
rol eax, 0x94
popf
jmp 0x140018e78
xor r9d, r9d
mov dword [rsp + 0x60], r9d
jmp 0x140019088
mov r9d, dword [rsp + 0x60]
and qword [rsp + 0x30], 0
mov r8d, edi
and dword [rsp + 0x28], 0
xor edx, edx
mov ecx, 0x38002032
pushf
not ecx
add ecx, 0xda452719
xor ecx, 0xecbbe1fa
rol ecx, 0xa8
popf
pushf
not ecx
add ecx, 0xc414b15e
xor ecx, 0xc4e6f03f
rol ecx, 0x27
popf
pushf
not ecx
add ecx, 0x9080efa0
xor ecx, 0xaace5e1f
rol ecx, 0x61
popf
mov qword [rsp + 0x20], rbx
jmp 0x1400190e2
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, eax
test eax, eax
je 0x140019134
push rax
pushf
mov eax, 0xffb4dc23
pushf
not eax
add eax, 0xd403d693
xor eax, 0xe3f32e8e
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb4426282
xor eax, 0xe569253a
rol eax, 0xff
popf
pushf
not eax
add eax, 0xfeb78ad3
xor eax, 0xf1c0b685
rol eax, 0x64
popf
jmp 0x140018e78
push rax
pushf
mov eax, 0x5441abc0
pushf
not eax
add eax, 0xebe521e3
xor eax, 0xaad979a9
rol eax, 0x80
popf
pushf
not eax
add eax, 0x97e9acf2
xor eax, 0xd9c1ccb5
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd994fc10
xor eax, 0x8a742a67
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x880d679b
xor eax, 0xd6c60d3f
rol eax, 0xbf
popf
jmp 0x140018e78
mov r8, qword [rbx]
dec r8
push rdx
not rdx
sub r8, rdx
pop rdx
sub r8, 1
push rax
pushf
mov eax, 0x9fd13184
pushf
not eax
add eax, 0xc3c50d3b
xor eax, 0xe15bc66f
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xdcddc6b4
xor eax, 0xd15cb7c9
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x8cab9dc0
xor eax, 0x82897a85
rol eax, 0x19
popf
pushf
not eax
add eax, 0x99184414
xor eax, 0xa8575c5c
rol eax, 0xec
popf
jmp 0x140018e78
movzx ecx, byte [r8]
lea rax, [0x1b75de61f]
pushf
sub rax, 0x775d710f
popf
cmp byte [rcx + rax], 0
je 0x140019259
push rax
pushf
mov eax, 0x6de589c6
pushf
not eax
add eax, 0xe374af9d
xor eax, 0xf06d448f
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xa4ad3c02
xor eax, 0xa99652d5
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9f66eba6
xor eax, 0xe0b56466
rol eax, 0xc7
popf
jmp 0x140018e78
push rax
pushf
mov eax, 0x4673a301
pushf
not eax
add eax, 0x91271fb5
xor eax, 0x857947cc
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc40a424b
xor eax, 0x8649038c
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe9ac836d
xor eax, 0xa11dd8cc
rol eax, 0xa8
popf
jmp 0x140018e78
dec r8
sub rdx, 1
jne 0x140019301
push rax
pushf
mov eax, 0xc2692f88
pushf
not eax
add eax, 0xb7a0419d
xor eax, 0xa98f9391
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc94c0c47
xor eax, 0x8a07f597
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb59b779b
xor eax, 0xd747d1d7
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb618e571
xor eax, 0xef356a2c
rol eax, 0x53
popf
jmp 0x140018e78
push rax
pushf
mov eax, 0xfb2b8195
pushf
not eax
add eax, 0xa550f78e
xor eax, 0xbdd94906
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x9260c866
xor eax, 0xbb062303
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe64e4f43
xor eax, 0x805ec1a6
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xfd7da814
xor eax, 0x8e453b1c
rol eax, 0x36
popf
jmp 0x140018e78
mov rbx, qword [rsp + 0x50]
mov rax, rdx
add rsp, 0x40
pop rdi
ret