Function at 0x14001bd24
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x14007d040]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rbx, rdx
mov qword [rbp - 0x40], rdx
and dword [rbp - 0x78], 0
xor edx, edx
mov r8d, 0x90
lea rcx, [rbp + 0x70]
call fcn.14005a710
lea rax, [rsp + 0x30]
mov qword [rbp - 0x38], rax
mov dword [rsp + 0x70], 0x70747468
mov dword [rsp + 0x74], 0x692f2f3a
mov dword [rsp + 0x78], 0x70612d70
mov dword [rsp + 0x7c], 0x6f632e69
mov dword [rbp - 0x80], 0x736a2f6d
mov word [rbp - 0x7c], 0x6e6f
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov edi, 0x60
mov ecx, edi
call fcn.14002ed58
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
and qword [rsp + 0x40], 0
and qword [rsp + 0x48], 0
xor r8d, r8d
lea rdx, [0x14006e39f]
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov ecx, edi
call fcn.14002ed58
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x7a]
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140003408
mov r8, rax
lea rdx, [rbp - 0x30]
call fcn.140002c64
nop
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x30]
lea r8, [rbp - 0x70]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400215cc
nop
lea rcx, [rbp - 0x70]
call fcn.14001a834
nop
lea rcx, [rbp - 0x60]
call fcn.14001a834
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.14005a710
lea rcx, [rbp + 0x10]
call fcn.14001e540
nop
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rdx + 0x28]
mov rdx, qword [rdx + 0x20]
lea rcx, [rsp + 0x30]
call fcn.1400254b0
mov dword [rbp - 0x78], 6
lea rdx, [rsp + 0x30]
lea esi, [rdi - 0x51]
cmp qword [rsp + 0x48], rsi
cmova rdx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14001bed8
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14001e76c
nop
mov r14d, 0x1000
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001bf3a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001bf35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c711
call fcn.14002ed50
movdqa xmm0, xmmword [0x140071730]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001bf85
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001bf80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c717
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
and qword [rbx], 0
and qword [rbx + 8], 0
mov rcx, rdi
call fcn.14002ed58
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
mov dword [rbp - 0x78], 7
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
and qword [rbp], 0
mov qword [rbp + 8], rsi
mov byte [rbp - 0x10], 0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 6
lea rdx, [0x14006e5d8]
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c03c
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c037
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c71d
call fcn.14002ed50
lea rcx, [rbp - 0x10]
mov rdi, qword [rbp + 8]
cmp rdi, rsi
cmova rcx, qword [rbp - 0x10]
mov r8, qword [rbp]
cmp r8, 7
jne 0x14001c692
lea rdx, str.success
call fcn.14005ab50
test eax, eax
jne 0x14001c692
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea edi, [rax + 1]
mov r8d, edi
lea rdx, [0x14006e5e8]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r8d, [rdi + 4]
lea rdx, str.query
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c116
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c110
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c723
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c14e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c149
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c729
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8, rdi
lea rdx, [0x14006e5f4]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 7
lea rdx, str.country
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c1f5
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c1ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c72f
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c22d
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c228
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c735
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov edi, 2
mov r8d, edi
lea rdx, [0x14006e600]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r8d, [rdi + 9]
lea rdx, str.countryCode
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c2d7
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c2d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c73b
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c30f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c30a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c741
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 1
lea rdx, [0x14006e614]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0xa
lea rdx, str.regionName
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c3b9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c3b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c747
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c3f1
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c3ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c74d
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8, rdi
lea rdx, [0x14006e624]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 4
lea rdx, str.city
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c498
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c492
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c753
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c4d0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c4cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c759
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8, rdi
lea rdx, [0x14006e630]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 3
lea rdx, [0x14006e634]
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c577
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c571
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c75f
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c5af
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c5aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c765
call fcn.14002ed50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8, rdi
lea rdx, [0x14006e638]
lea rcx, [rsp + 0x50]
call fcn.14000510c
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 8
lea rdx, str.timezone
lea rcx, [rsp + 0x30]
call fcn.14000510c
nop
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14001a5cc
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ea34
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, rsi
jbe 0x14001c656
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14001c650
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c76b
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, rsi
jbe 0x14001c68e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14001c689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c771
call fcn.14002ed50
mov rdi, qword [rbp + 8]
cmp rdi, rsi
jbe 0x14001c6c1
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, r14
jb 0x14001c6bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c70b
call fcn.14002ed50
and qword [rbp], 0
mov qword [rbp + 8], rsi
mov byte [rbp - 0x10], 0
lea rcx, [rbp + 0x10]
call fcn.14001e688
nop
lea rcx, [rbp + 0x70]
call fcn.14001fbb0
mov rax, rbx
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14002ed30
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
int3