Function at 0x14001a60d
Capabilities:
Get geographical location

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rbx, rdx
mov r14, rcx
mov rdi, qword [rdx]
lea rsi, [rsp + 0x38]
mov rcx, rsi
mov rdx, rdi
call fcn.140002f38
cmp byte [rsi], 0
je 0x14001a646
mov rax, qword [rsp + 0x40]
mov qword [r14 + 8], rax
mov byte [r14], 1
jmp 0x14001a76a
cmp byte [rsp + 0x39], 0
je 0x14001a78a
mov al, byte [rsp + 0x3a]
movzx ecx, al
cmp ecx, 0x2c
je 0x14001a66d
cmp ecx, 0x7d
jne 0x14001a697
mov word [r14], 0x500
jmp 0x14001a76a
cmp byte [rbx + 8], 0
jne 0x14001a6a1
inc qword [rdi + 0x10]
lea rsi, [rsp + 0x20]
mov rcx, rsi
mov rdx, rdi
call fcn.140002f38
cmp byte [rsi], 0
je 0x14001a798
mov rax, qword [rsp + 0x28]
jmp 0x14001a639
cmp byte [rbx + 8], 0
je 0x14001a7b1
mov byte [rbx + 8], 0
cmp al, 0x22
jne 0x14001a774
inc qword [rdi + 0x10]
lea r8, [rdi + 0x18]
and qword [rdi + 0x28], 0
lea rsi, [rsp + 0x20]
mov rcx, rsi
mov rdx, rdi
call fcn.14014928b
cmp dword [rsi], 2
jne 0x14001a6df
mov rax, qword [rsp + 0x28]
mov qword [r14 + 8], rax
mov al, 1
jmp 0x14001a767
mov rdi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
lea r8, str.resultfile_unique_idwidthheightdurationmime_typefile_sizestruct_Animationperformerstruct_AudioIdusernameinvite_linkpinned_messageslow_mode_delaycan_set_sticker_setGroupcan_send_media_messagescan_send_other_messagescan_add_web_page_previewscan_send_pollscan_send_messagesstruct_Permissionsstruct_Photostruct_Contactvaluefile_namestruct_Documentunique_idsizestruct_Filelengthstruct_Invoicestruct_LocationUserentitiesPreemailstruct_OrderInfocorrect_option_idexplanationallows_multiple_answersquestionoptionsis_closedis_anonymousvariant_identifierhashsecretstruct_Credentialscredentialsstruct_Datafilestranslationfront_sideselfiereverse_sidestruct_PhotoSizeopen_periodclose_datevoter_countstruct_Optiontotal_voter_countcountry_codestatecitystreet_line1street_line2post_codestruct_Addresspointx_shifty_shiftscalestruct_MaskPositionMaskemojiset_nametelegram_payment_charge_idprovider_payment_charge_idstruct_SuccessfulPaymentis_botlanguage_codestruct_Userstruct_Venuestruct_Videostruct_VideoNotestruct_Voice
mov r9d, 6
mov rcx, rdi
mov rdx, rbx
call fcn.14007dcaf
test al, al
je 0x14001a709
xor ecx, ecx
jmp 0x14001a761
lea r8, [0x14041186c]
mov r9d, ntohs
mov rcx, rdi
mov rdx, rbx
call fcn.14007dcaf
mov cl, 1
test al, al
jne 0x14001a761
lea r8, [0x140411877]
mov r9d, 0xa
mov rcx, rdi
mov rdx, rbx
call fcn.14007dcaf
mov cl, 2
test al, al
jne 0x14001a761
lea r8, str.parametersstruct_Responsestruct_Response_with_4_elements
mov r9d, 0xa
mov rcx, rdi
mov rdx, rbx
call fcn.14007dcaf
mov cl, 4
sub cl, al
mov byte [r14 + 1], cl
xor eax, eax
mov byte [r14], al
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
movzx eax, al
lea rdx, [rsp + 0x20]
cmp eax, 0x7d
jne 0x14001a7a8
mov qword [rdx], reloc.WS2_32.dll_setsockopt
jmp 0x14001a7bd
lea rdx, [rsp + 0x20]
mov qword [rdx], 3
jmp 0x14001a7bd
cmp byte [rsp + 0x21], 0
je 0x14001a7ca
mov al, byte [rsp + 0x22]
jmp 0x14001a6a5
mov qword [rdx], reloc.WS2_32.dll_recvfrom
jmp 0x14001a7bd
lea rdx, [rsp + 0x20]
mov qword [rdx], 8
mov rcx, rdi
call fcn.140331a00
jmp 0x14001a639
lea rdx, [rsp + 0x20]
mov qword [rdx], 5
jmp 0x14001a7bd