Function at 0x14003a540
Capabilities:
Access peb ldr_data
Get geographical location

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x14003a8ee
push rbp
mov rbp, rsp
sub rsp, 0xa8
mov qword [rsp + 0x48], 0
mov rax, qword [0x14056e598]
lea rcx, [rsp + 0x48]
mov qword [rsp], rax
mov qword [rsp + 8], 0xffffffffffffffff
mov qword [rsp + 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x18], 0xffffffffffffffff
mov qword [rsp + 0x20], rcx
movups xmmword [rsp + 0x28], xmm15
mov qword [rsp + 0x38], 2
call fcn.14003aea0
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x40], 0
nop
je 0x14003a88d
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x98], rax
test byte [rax], al
lea rcx, [rax + 0x5d0]
mov qword [rsp + 0xa0], rcx
nop
mov rax, rcx
call fcn.1400104c0
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x98]
mov qword [rdx + 0x5d8], rcx
mov rax, qword [0x14056e5b8]
mov rcx, qword [r14 + 0x30]
movups xmmword [rcx + 0x3c0], xmm15
call fcn.14003aac0
mov rcx, qword [rsp + 0x98]
mov qword [rcx + 0x48], rax
cmp qword [rcx + 0x5f0], 0
jne 0x14003a68e
cmp byte [0x140c27a77], 0
je 0x14003a68e
mov rax, qword [0x14056e590]
mov qword [rsp], rax
movups xmmword [rsp + 8], xmm15
mov qword [rsp + 0x18], 2
mov qword [rsp + 0x20], 0x100003
call fcn.14003ad20
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x98]
mov qword [rcx + 0x5f0], rax
test rax, rax
je 0x14003a82d
nop
nop
mov rax, qword [rsp + 0xa0]
call fcn.140010720
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x70], xmm15
mov rcx, qword [0x14056e698]
lea rdx, [rsp + 0x50]
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 0x30
call fcn.14003aca0
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
je 0x14003a7cc
mov rax, qword [rsp + 0x58]
lea rcx, [rax + 0x4000]
mov qword [rsp + 0x80], rcx
mov rdx, qword [r14 + 8]
mov qword [rsp + 0x90], rdx
cmp rdx, rcx
jb 0x14003a761
sub rdx, rax
lea rax, [rdx - 0x4000]
cmp rax, 0x4000000
ja 0x14003a761
mov qword [r14], rcx
mov rax, qword [r14]
add rax, 0x13a0
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], rax
call fcn.140070c20
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0xa8
pop rbp
nop
ret
call fcn.14003f200
lea rax, [0x1406ccc41]
mov ebx, 0x13
call fcn.14003fa80
mov rax, qword [rsp + 0x80]
nop
call fcn.14003f900
lea rax, [0x1407a0848]
mov ebx, 1
call fcn.14003fa80
mov rax, qword [rsp + 0x90]
nop
call fcn.14003f900
lea rax, [0x1406bcad5]
mov ebx, 2
call fcn.14003fa80
call fcn.14003f260
lea rax, str.bad_g0_stackself_preempt__recovered_bad_recoverybad_g_statusentersyscallwirep:_p__m__p__statusreleasep:_m_sysmonwait_preemptoffcas64_failed_m__gsignal_byte_limit_nruntime:_spabi_mismatchCypro_MinoanMeetei_MayekPahawh_HmongSora_SompengSyloti_Nagrimultipathtcp127.0.0.1:53no_such_hostCIDR_addressunknown_portinvalid_portgetaddrinfowtransmitfileGetConsoleCPnot_pollableECDSA_SHA256ECDSA_SHA384ECDSA_SHA512SERIALNUMBERinvalid_kinddate_in_zonetoPrettyJsonmustFromJsonregexFindAllin_containerDeferCleanuptlsunsafeekmhttpmuxgo121image_x_iconContent_TypePUSH_PROMISECONTINUATIONCookie.Valuecontent_typemax_forwardshttp2debug1http2debug2moreSpecificstatus_code_Multi_StatusNot_ModifiedUnauthorizedIm_a_teapotNot_Extendedinvalid_basegotypesaliasRCodeSuccessRCodeRefusedcontinueblock_clauseautocompletelight_yellowtcmalloc::._______t_GOEXPERIMENTcountry_code_37__d4__BBd5_____:d5____0_9_1_6_stream_startdocument_endsequence_endtail_commentnot_a_number_in_struct_Mime_VersionX_ImforwardsX_Powered_ByContent_Type__sensitive_CircleMinus_CircleTimes_Equilibrium_GreaterLess_LeftCeiling_LessGreater_MediumSpace_NotPrecedes_NotSucceeds_OverBracket_RightVector_Rrightarrow_RuleDelayed_SmallCircle_SquareUnion_SubsetEqual_UpDownArrow_Updownarrow_VerticalBar_backepsilon_blacksquare_circledcirc_circleddash_curlyeqprec_curlyeqsucc_diamondsuit_eqslantless_expectation_nRightarrow_nrightarrow_preccurlyeq_precnapprox_quaternions_straightphi_succcurlyeq_succnapprox_thickapprox_updownarrow_NotLessLess_NotSuperset_InstAltMatchunexpected__altmatch____anynotnl______but_have___unknown:_d_Sfixed32KindSfixed64Kindmessage_typejava_packageoptimize_forswift_prefixruby_packagedebug_redactdouble_valuestring_valueverificationis_extensionOUT_OF_RANGEimage_x_icnsaudio_x_mpegaudio_x_midiaudio_x_aiffaudio_amr_nbaudio_x_mp4aavx5124fmapsavx512bitalgcaller_errorunknown_type__struct__protobuf_keyprotobuf_valListenSocketNormalSocketgrpc_messagegrpc_timeoutGrpc_Messagegrpc_configxl_drawings_
mov ebx, 0xc
call fcn.14003d760
call fcn.140072620
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x88], rax
call fcn.14003f200
lea rax, [0x1406dd3e7]
mov ebx, 0x24
nop
call fcn.14003fa80
mov rax, qword [rsp + 0x88]
call fcn.14003f7c0
call fcn.14003f440
call fcn.14003f260
lea rax, [0x1406dbd93]
mov ebx, 0x22
call fcn.14003d760
call fcn.140072620
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x88], rax
call fcn.14003f200
lea rax, [0x1406e31e6]
mov ebx, 0x2d
call fcn.14003fa80
mov rax, qword [rsp + 0x88]
call fcn.14003f7c0
call fcn.14003f440
call fcn.14003f260
lea rax, [0x1406e4c6c]
mov ebx, 0x30
call fcn.14003d760
call fcn.140072620
xorps xmm15, xmm15
mov r14, qword [0x140c27e28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x88], rax
call fcn.14003f200
lea rax, [0x1406e31b9]
mov ebx, 0x2d
call fcn.14003fa80
mov rax, qword [rsp + 0x88]
call fcn.14003f7c0
call fcn.14003f440
call fcn.14003f260
lea rax, [0x1406de13d]
mov ebx, 0x25
call fcn.14003d760
nop
call fcn.14006eec0
jmp fcn.14003a540