Function at 0x14003cd90
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r15
lea rbp, [rsp - 0x390]
sub rsp, 0x490
mov rax, qword [0x140063010]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov rbx, rdx
mov rsi, rcx
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [rsp + 0x60], eax
mov rdi, 0xffffffffffffffff
mov r9, rdi
lea r8, str.VpnApp::ProcessComandLine
mov edx, 0x102
lea rcx, [rsp + 0x64]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
lea r8, [0x140051568]
mov edx, 0x104
lea rcx, [rsp + 0x64]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov r9, rdi
lea r8, str.VpnApp::ProcessComandLine
mov edx, 0x104
lea rcx, [rbp + 0x16c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov ecx, dword [0x140065724]
mov eax, dword [0x140065720]
lea r15d, [rdi + 2]
add ecx, eax
je 0x14003cedc
mov dword [rsp + 0x48], 0
call fcn.140028b70
mov qword [rsp + 0x40], rax
lock inc dword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
test rax, rax
jne 0x14003ce6a
call fcn.140028b70
mov qword [rsp + 0x40], rax
lock inc dword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
mov dword [rsp + 0x50], 0x20
lea rax, [rsp + 0x64]
mov qword [rsp + 0x30], rax
lea rax, str.____s
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x16c]
mov qword [rsp + 0x20], rax
lea r9, [0x140000000]
lea r8, [rsp + 0x50]
movsx edx, r15w
call fcn.140028cf0
nop
mov qword [rsp + 0x40], 0
mov eax, edi
lock xadd dword [rsp + 0x48], eax
cmp eax, 1
js 0x14003ced7
call fcn.140028730
mov eax, edi
lock xadd dword [rsp + 0x48], eax
cmp eax, 1
jns 0x14003cec5
lock inc dword [rsp + 0x48]
test rbx, rbx
je 0x14003d116
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x14003cee5
test rdi, rdi
je 0x14003d116
lfence
lea rdx, str._about
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d10f
lfence
lea rdx, str.about
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d10f
lfence
lea rdx, str._settings
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d106
lfence
lea rdx, str.settings
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d106
lfence
lea rdx, str._notifications
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0fd
lfence
lea rdx, str.notifications
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0fd
lfence
lea rdx, str._ads_trackers
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0f4
lfence
lea rdx, str.ads_trackers
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0f4
lfence
lea rdx, str._app_optimizer
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0eb
lfence
lea rdx, str.app_optimizer
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0eb
lfence
lea rdx, str._all_errors
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0e2
lfence
lea rdx, str.all_errors
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0e2
lfence
lea rdx, str._country_restricted
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0d9
lfence
lea rdx, str.country_restricted
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0d9
lfence
lea rdx, str._systray
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0d3
lfence
lea rdx, str.systray
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0d3
lfence
lea rdx, str._notification
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003d0ca
lfence
lea rdx, str.notification
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003d116
mov dword [rsi + 0x70], 2
jmp 0x14003d116
mov dword [rsi + 0x70], r15d
jmp 0x14003d116
mov dword [rsi + 0x70], 7
jmp 0x14003d116
mov dword [rsi + 0x70], 6
jmp 0x14003d116
mov dword [rsi + 0x70], 8
jmp 0x14003d116
mov dword [rsi + 0x70], 5
jmp 0x14003d116
mov dword [rsi + 0x70], 9
jmp 0x14003d116
mov dword [rsi + 0x70], 4
jmp 0x14003d116
mov dword [rsi + 0x70], 3
lea rcx, [rsp + 0x60]
call fcn.140027640
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140045c20
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop rdi
pop rbp
ret