Function at 0x43a440
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x43a97c
push rbp
mov rbp, rsp
sub rsp, 0x68
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0x90]
nop dword [rax]
test rdx, rdx
je 0x43a475
nop
mov edx, dword [rdx + 0x90]
cmp edx, 2
je 0x43a96a
mov qword [rsp + 0x78], rax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
xor r8d, r8d
jmp 0x43a4a9
mov rdi, qword [rsp + 0x38]
inc rdi
mov rax, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x30]
mov ebx, dword [rsp + 0x18]
mov rdx, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x16]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x18], ebx
mov qword [rsp + 0x58], rdx
mov byte [rsp + 0x16], cl
mov qword [rsp + 0x38], rdi
mov r9d, dword [rax + 0x90]
cmp r9d, 4
ja 0x43a688
nop word [rax + rax]
nop
cmp r9d, 1
je 0x43a6fd
cmp r9d, 2
jne 0x43a680
cmp byte [rax + 0xb2], 0
je 0x43a535
cmp byte [rax + 0xb1], 0
je 0x43a530
cmp qword [rax + 0x10], 0xfffffffffffffade
jne 0x43a52b
cmp qword [rax + 0x30], rdx
jne 0x43a526
mov r9d, dword [rdx + 0x440]
cmp r9d, ebx
sete r9b
jmp 0x43a540
xor r9d, r9d
jmp 0x43a540
xor r9d, r9d
jmp 0x43a540
xor r9d, r9d
jmp 0x43a540
xor r9d, r9d
nop dword [rax + rax]
test r9b, r9b
jne 0x43a73d
mov ebx, 2
mov ecx, 0x1002
call fcn.0043df40
nop dword [rax + rax]
test al, al
je 0x43a653
mov rax, qword [rsp + 0x78]
mov byte [rax + 0xb2], 1
mov byte [rax + 0xb1], 1
mov qword [rax + 0x10], 0xfffffffffffffade
mov rdx, qword [rax + 0x30]
mov qword [rsp + 0x60], rdx
mov esi, dword [rdx + 0x440]
mov dword [rsp + 0x1c], esi
mov rdi, qword [rsp + 0x58]
nop dword [rax + rax]
cmp rdi, rdx
je 0x43a5ac
mov edi, 1
jmp 0x43a5b6
mov edi, dword [rsp + 0x18]
cmp esi, edi
setne dil
mov byte [rsp + 0x17], dil
mov ebx, 0x1002
mov ecx, 2
call fcn.0043db80
cmp dword [0x00ae3c44], 0
jne 0x43a629
movzx eax, byte [rsp + 0x17]
test al, al
jne 0x43a5e3
mov rcx, qword [rsp + 0x30]
jmp 0x43a62e
nop
call fcn.0046e440
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
jg 0x43a62e
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x60]
call fcn.00437120
mov rsi, qword [rsp + 0x20]
add rsi, 0x1388
mov rcx, rsi
jmp 0x43a62e
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x38]
mov r8, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x1c]
mov rsi, rcx
movzx ecx, byte [rsp + 0x16]
jmp 0x43a73d
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x38]
mov r8, qword [rsp + 0x28]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x18]
mov rsi, qword [rsp + 0x30]
jmp 0x43a73d
cmp r9d, 3
jb 0x43a6a6
jmp 0x43a6fd
cmp r9d, 6
je 0x43a846
cmp r9d, 8
je 0x43a73d
nop dword [rax]
cmp r9d, 9
je 0x43a6b6
bt r9d, 0xc
jb 0x43a73d
jmp 0x43a855
mov ebx, 9
mov ecx, 4
call fcn.0043e540
test al, al
jne 0x43a6ed
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x38]
mov r8, qword [rsp + 0x28]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x18]
mov rsi, qword [rsp + 0x30]
jmp 0x43a73d
mov rax, qword [rsp + 0x78]
mov r9d, 4
mov ecx, 1
mov byte [rsp + 0x16], cl
mov ebx, r9d
or r9d, 0x1000
mov ecx, r9d
call fcn.0043df40
test al, al
jne 0x43a818
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x38]
mov r8, qword [rsp + 0x28]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x18]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x18], ebx
mov qword [rsp + 0x58], rdx
mov byte [rsp + 0x16], cl
test rdi, rdi
jne 0x43a776
call fcn.0046e440
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x2710
mov qword [rsp + 0x28], r8
nop dword [rax + rax]
call fcn.0046e440
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x28]
nop dword [rax]
cmp qword [rsp], rax
jge 0x43a7ce
mov dword [rsp], 0xa
call fcn.0046c2a0
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov r8, qword [rsp + 0x28]
jmp 0x43a489
nop
lea rax, [0x007c7078]
mov qword [rsp], rax
call fcn.0046a700
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
call fcn.0046e440
xorps xmm15, xmm15
mov r14, qword [0x00ae3510]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x1388
jmp 0x43a489
mov rax, qword [rsp + 0x78]
mov byte [rax + 0xb2], 0
mov byte [rax + 0xb1], 0
mov rdx, qword [rax]
add rdx, 0x13a0
mov qword [rax + 0x10], rdx
xor ebx, ebx
movzx ecx, byte [rsp + 0x16]
add rsp, 0x68
pop rbp
ret
xor eax, eax
mov ebx, 1
xor ecx, ecx
add rsp, 0x68
pop rbp
ret
mov qword [rsp + 0x50], r14
nop
nop
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x48], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x40], rdx
call fcn.0043b140
lea rax, [0x0079562e]
mov ebx, 0x12
call fcn.0043b9c0
mov rax, qword [rsp + 0x78]
call fcn.0043b940
lea rax, [0x00790a19]
mov ebx, 7
call fcn.0043b9c0
mov rax, qword [rsp + 0x40]
call fcn.0043b700
lea rax, [0x00795ef9]
mov ebx, 0x13
nop dword [rax]
call fcn.0043b9c0
mov rax, qword [rsp + 0x48]
call fcn.0043b700
call fcn.0043b380
call fcn.0043b1a0
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x48], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x40], rdx
call fcn.0043b140
lea rax, [0x00795640]
mov ebx, 0x12
call fcn.0043b9c0
mov rax, qword [rsp + 0x50]
call fcn.0043b940
lea rax, [0x00790a19]
mov ebx, 7
call fcn.0043b9c0
mov rax, qword [rsp + 0x40]
call fcn.0043b700
lea rax, [0x00796016]
mov ebx, 0x13
nop
call fcn.0043b9c0
mov rax, qword [rsp + 0x48]
call fcn.0043b700
call fcn.0043b380
call fcn.0043b1a0
lea rax, [0x007945d5]
mov ebx, 0x10
call fcn.004396a0
lea rax, str.suspendG_from_non_preemptible_goroutineruntime:_casfrom_Gscanstatus_failed_gpstack_growth_not_allowed_in_system_calltraceback:_unexpected_SPWRITE_function_2006_01_02_15:04:05.999999999__0700_MST277555756156289135105907917022705078125transport_endpoint_is_already_connectedhttp:_putIdleConn:_keep_alives_disabledinvalid_HTTP_header_value_for_header__qusername_password_authentication_failedgo_package_net:_using_cgo_DNS_resolver_ngot__T__expected_string_or_GeoLocationRtlDosPathNameToNtPathName_U_WithStatustls:_unsupported_certificate_curve___s_tls:_internal_error:_wrong_nonce_lengthchain_is_not_signed_by_an_acceptable_CAinvalid_indexed_representation_index__dIPv4_field_must_have_at_least_one_digitmath_big:_buffer_too_small_to_fit_valuemissing_argument_to_repetition_operatortrailing_backslash_at_end_of_expressionhttps:__microsoftgraph.chinacloudapi.cnredis:_cant_parse_string_reply:__.100qx509:_invalid_subject_alternative_namesx509:_invalid_NameConstraints_extensionx509:_failed_to_parse_URI_constraint__q_because_it_doesnt_contain_any_IP_SANscipher:_incorrect_tag_size_given_to_GCMtags_dont_match___d_vs__v___v__s___dasn1:_Unmarshal_recipient_value_is_nil_time:_Stop_called_on_uninitialized_Timerinvalid_span_in_heapArena_for_user_arenaruntime:_typeBitsBulkBarrier_with_type__bulkBarrierPreWrite:_unaligned_argumentsrefill_of_span_with_free_space_remaining_cpu_classes_scavenge_assist:cpu_secondsruntime.SetFinalizer:_first_argument_is_failed_to_acquire_lock_to_reset_capacitymarkWorkerStop:_unknown_mark_worker_modecannot_free_workbufs_when_work.full___0runtime:_out_of_memory:_cannot_allocate_runtime.preemptM:_duplicatehandle_failedglobal_runq_empty_with_non_zero_runqsizemust_be_able_to_track_idle_limiter_eventruntime:_SyscallN_has_too_many_argumentserrors:_target_must_be_a_non_nil_pointer13877787807814456755295395851135253906256938893903907228377647697925567626953125ryuFtoaFixed32_called_with_negative_precreflect:_FieldByName_of_non_struct_type_MapIter.Key_called_on_exhausted_iteratorreflect.Value.SetBytes_of_non_byte_slicereflect.Value.setRunes_of_non_rune_sliceaddress_family_not_supported_by_protocolhttp2:_timeout_awaiting_response_headersFrame_accessor_called_on_non_owned_Framehttp2:_Transport_encoding_header__q___qprotocol_error:_headers_after_END_STREAMxml:_trailing___in_field__s_of_type__sazure:_base_storage_service_url_requiredazure:_malformed_storage_account_key:__vsentinel:_Sentinels_master_q_failed:__soversized_record_received_with_length__dtls:_received_empty_certificates_messagemalformed_MIME_header:_missing_colon:__qevictOldest__v__on_table_with__v_entrieshttps:__microsoftgraph.chinacloudapi.cn_uuid:_incorrect_UUID_format_in_string__qcrypto_rsa:_input_must_be_hashed_messagersa:_internal_error:_inconsistent_lengthx509:_malformed_extension_critical_fieldx509:_cannot_parse_IP_address_of_length__s__q_is_not_permitted_by_any_constraintcrypto_cipher:_message_too_large_for_GCMcrypto_cipher:_output_smaller_than_inputchacha20poly1305:_invalid_buffer_overlapedwards25519:_use_of_uninitialized_PointNumericString_contains_invalid_charactercannot_represent_time_as_GeneralizedTimecrypto_md5:_invalid_hash_state_identifiernet_url:_invalid_control_character_in_URLunexpected_call_to_os.Exit_0__during_testruntime:_typeBitsBulkBarrier_without_type_memory_classes_metadata_mspan_free:bytesruntime.SetFinalizer:_second_argument_is_gcSweep_being_done_but_phase_is_not_GCoffobjects_added_out_of_order_or_overlappingmheap.freeSpanLocked___invalid_stack_freemheap.freeSpanLocked___invalid_span_stateattempted_to_add_zero_sized_address_rangeruntime:_blocked_read_on_closing_polldescstopTheWorld:_not_stopped__stopwait___0_time:_Reset_called_on_uninitialized_Timertime:_missing_Location_in_call_to_Time.InTime.UnmarshalBinary:_unsupported_versionvalue_must_be_greater_than_or_equal_to__vvalue_can_not_be_null__required_parametercant_call_pointer_on_a_non_pointer_Value34694469519536141888238489627838134765625strconv:_illegal_AppendInt_FormatInt_basereflect:_FieldByIndex_of_non_struct_type_reflect.Value.Addr_of_unaddressable_valueMapIter.Next_called_on
mov ebx, 0x27
call fcn.004396a0
nop
mov qword [rsp + 8], rax
call fcn.00471400
mov rax, qword [rsp + 8]
jmp fcn.0043a440