Function at 0x4ad133d8
Capabilities:
Get geographical location

Disassembly:
call fcn.4ad08fc4
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x40]
xor edx, edx
mov ecx, eax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov edi, eax
test eax, eax
je 0x4ad17d79
mov rcx, qword [0x4ad2e200]
inc edi
movsxd rdx, edi
add rdx, rdx
call qword [sym.imp.msvcrt.dll_realloc]
mov rbx, rax
test rax, rax
je 0x4ad17d95
mov qword [0x4ad2e200], rax
mov dword [0x4ad2e100], edi
call fcn.4ad08fc4
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x40]
xor edx, edx
mov ecx, eax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor edi, edi
cmp eax, edi
je 0x4ad17d9c
mov rbx, qword [0x4ad2e200]
jmp 0x4ad13525
lea rcx, [0x4ad4a460]
jmp 0x4ad1355f
lea rcx, [0x4ad4a4a0]
jmp 0x4ad1355f
lea rcx, [0x4ad4a420]
jmp 0x4ad1355f
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
mov rax, qword [0x4ad2e1c8]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
xor ebx, ebx
mov r14d, edx
movsxd r15, r9d
mov rbp, r8
mov rdx, rcx
lea r13d, [rbx + 1]
cmp rcx, rbx
je 0x4ad17cbf
lea rcx, [rsp + 0x60]
mov r8d, 0x24
call sub.msvcrt.dll_memcpy
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.4ad1422c
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov r12d, 0x20
cmp byte [0x4ad2e0ca], bl
je 0x4ad17d9e
mov esi, ebx
call fcn.4ad08fc4
lea edi, [r12 + 0x60]
lea edx, [rdi - 0x61]
lea r8, [rsp + 0xd0]
mov ecx, eax
mov r9d, edi
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, ebx
je 0x4ad17cdf
xor edi, edi
lea rbx, [rsp + 0xd0]
cmp word [rsp + 0xd0], di
je 0x4ad134db
movzx ecx, word [rbx]
cmp cx, 0x27
je 0x4ad17d2d
cmp esi, edi
jne 0x4ad134d0
cmp cx, 0x64
je 0x4ad13606
cmp cx, 0x4d
je 0x4ad13606
add rbx, 2
jmp 0x4ad134d6
cmp word [rbx], di
jne 0x4ad134ab
call fcn.4ad08fc4
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x40]
mov ecx, eax
mov eax, dword [0x4ad2e100]
xor edx, edx
mov dword [rsp + 0x28], eax
mov rax, qword [0x4ad2e200]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetDateFormatW]
cmp eax, edi
je 0x4ad12ed3
mov rbx, qword [0x4ad2e200]
cmp rbx, rdi
je 0x4ad12ed3
movzx eax, word [rsp + 0x44]
cmp eax, edi
je 0x4ad17e48
sub eax, 1
je 0x4ad12f77
sub eax, 1
je 0x4ad12f6b
sub eax, 1
je 0x4ad133c3
sub eax, 1
jne 0x4ad13f40
lea rcx, [0x4ad4a3e0]
jmp 0x4ad1355f
lea rax, [rsp + 0x90]
lea rdx, [rsp + 0x90]
sub rcx, rax
lea rax, [r12 + 0x7fffffde]
cmp rax, rdi
je 0x4ad13595
movzx eax, word [rdx + rcx]
cmp ax, di
je 0x4ad13595
mov word [rdx], ax
add rdx, 2
sub r12, 1
jne 0x4ad13572
cmp r12, rdi
je 0x4ad17e54
mov word [rdx], di
cmp rbp, rdi
je 0x4ad17e5d
cmp r13d, edi
je 0x4ad135b9
cmp r14d, 1
je 0x4ad17ea8
mov rdx, r15
mov r8, rbx
mov rcx, rbp
call fcn.4ad01744
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
dec rcx
mov eax, ecx
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call entry0
mov rbx, qword [rsp + 0x228]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edx, edi
add rbx, 2
inc edx
cmp word [rbx], cx
je 0x4ad13608
movsxd rax, edx
add rax, rax
sub rbx, rax
cmp edx, 1
jne 0x4ad17d3b
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
mov rdx, rbx
not rcx
lea r8, [rcx + rcx]
lea rcx, [rbx + 2]
call sub.msvcrt.dll_memmove
add rbx, 4
jmp 0x4ad1364a
xor edi, edi
jmp 0x4ad134d6
cmp eax, 1
jne 0x4ad13f51
lea rcx, [0x4ad4a3a0]
jmp 0x4ad1355f
lea rcx, [0x4ad4a360]
jmp 0x4ad1355f
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x4ad1343b
mov rdx, qword [0x4ad2e2a8]
lea rax, [rsp + 0xd0]
lea rcx, [rsp + 0xd0]
sub rdx, rax
lea rax, [rdi + 0x7fffff7e]
cmp rax, rbx
je 0x4ad17d1a
movzx eax, word [rdx + rcx]
cmp ax, bx
je 0x4ad17d1a
mov word [rcx], ax
add rcx, 2
sub rdi, r13
jne 0x4ad17cf9
cmp rdi, rbx
jne 0x4ad17d23
sub rcx, 2
xor edi, edi
mov word [rcx], di
jmp 0x4ad13499
cmp esi, edi
mov eax, edi
sete al
mov esi, eax
jmp 0x4ad134d0
cmp cx, 0x64
cmove r13d, edi
cmp edx, 3
jle 0x4ad17d71
lea rdx, [rax + rbx]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rdx
add rbx, 6
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx + rcx]
mov rcx, rbx
call sub.msvcrt.dll_memmove
nop
jmp 0x4ad1364a
add rbx, rax
jmp 0x4ad134d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4ad2e13c], eax
mov ecx, eax
xor edx, edx
call fcn.4ad0b8b0
xor eax, eax
jmp 0x4ad135db
mov ecx, 8
jmp 0x4ad17d87
jmp 0x4ad17d79
movzx ebx, word [rsp + 0x42]
movzx esi, word [rsp + 0x46]
movzx edi, word [rsp + 0x40]
test r14d, r14d
jne 0x4ad17dc1
mov eax, 0x51eb851f
mul edi
shr edx, 5
imul edx, edx, 0xffffff9c
add edi, edx
mov eax, dword [0x4ad2e1ac]
cmp eax, 2
jne 0x4ad17dd6
mov eax, edi
mov edi, esi
mov esi, ebx
mov ebx, eax
jmp 0x4ad17de1
cmp eax, r13d
jne 0x4ad17de1
mov eax, ebx
mov ebx, esi
mov esi, eax
mov eax, dword [0x4ad2e100]
mov rcx, qword [0x4ad2e200]
cmp eax, r12d
jge 0x4ad17e16
mov edx, 0x40
call qword [sym.imp.msvcrt.dll_realloc]
mov rcx, rax
test rax, rax
je 0x4ad17d95
mov qword [0x4ad2e200], rax
mov eax, r12d
mov dword [0x4ad2e100], eax
mov dword [rsp + 0x38], edi
movsxd rdx, eax
lea rax, [0x4ad4a740]
mov qword [rsp + 0x30], rax
lea r8, str._02d_s_02d_s_02d
mov r9d, ebx
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call fcn.4ad01484
xor edi, edi
jmp 0x4ad12f5f
lea rcx, [0x4ad4a700]
jmp 0x4ad1355f
sub rdx, 2
jmp 0x4ad1359e
cmp r13d, edi
jne 0x4ad17e73
lea rcx, [0x4ad3c310]
mov rdx, rbx
call fcn.4ad05fc4
jmp 0x4ad17ea1
call fcn.4ad06ac8
lea rcx, str._s__s
cmp al, dil
je 0x4ad17e91
lea r8, [rsp + 0x90]
mov rdx, rbx
jmp 0x4ad17e9c
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.4ad05fc4
mov ecx, eax
jmp 0x4ad135d9
call fcn.4ad06ac8
mov rdx, r15
mov rcx, rbp
cmp al, dil
je 0x4ad17edc
mov r8, rbx
call fcn.4ad01744
lea r8, [0x4ad29774]
mov rdx, r15
mov rcx, rbp
call fcn.4ad01ac0
lea r8, [rsp + 0x90]
jmp 0x4ad17efe
lea r8, [rsp + 0x90]
call fcn.4ad01744
lea r8, [0x4ad29774]
mov rdx, r15
mov rcx, rbp
call fcn.4ad01ac0
mov r8, rbx
mov rdx, r15
mov rcx, rbp
call fcn.4ad01ac0
jmp 0x4ad135c7