Function at 0x4ad0dcde
Capabilities:
Get geographical location

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x4ad240ac]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x15c], edi
test eax, eax
jne 0x4ad12ae5
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
cmp dword [ebp + 0xc], 1
jne 0x4ad12827
movzx eax, word [ebp - 0x14a]
push 0xa
pop ecx
cdq
idiv ecx
movzx ecx, word [ebp - 0x14e]
push eax
movzx eax, word [ebp - 0x14c]
push 0x4ad24910
push eax
mov eax, 0x4ad24930
push eax
push ecx
push eax
movzx eax, word [ebp - 0x150]
push eax
push str._2d_s_02d_s_02d_s_02d
test edi, edi
je 0x4ad14fb4
push dword [ebp + 0x14]
push edi
call fcn.4ad01799
add esp, 0x28
mov eax, edi
push 2
lea edx, [eax + 2]
pop ebx
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x4ad0ddaf
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.4ad0139d
leave
ret 0x10
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x4ad127ac
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
lea eax, [esi + 2]
push esi
push eax
call dword [sym.imp.msvcrt.dll_memmove]
add esp, 0xc
mov word [esi], di
add esi, ebx
add esi, ebx
cmp word [esi], 0
je 0x4ad1281f
movzx edi, word [esi]
cmp di, 0x27
je 0x4ad14fd8
cmp dword [ebp - 0x148], 0
jne 0x4ad127d0
cmp di, 0x68
je 0x4ad12802
cmp di, 0x48
je 0x4ad12802
cmp di, 0x6d
jne 0x4ad127d2
xor eax, eax
add esi, ebx
inc eax
cmp word [esi], di
je 0x4ad12804
mov ecx, eax
neg ecx
lea esi, [esi + ecx*2]
cmp eax, 1
jne 0x4ad127d0
mov eax, esi
lea edx, [eax + 2]
jmp 0x4ad127ac
mov edi, dword [ebp - 0x15c]
jmp 0x4ad12877
cmp byte [0x4ad24081], 0
push 2
pop ebx
je 0x4ad14ff7
and dword [ebp - 0x148], 0
push esi
lea esi, [ebx + 0x7e]
push esi
lea eax, [ebp - 0x144]
push eax
push 0x1003
call fcn.4ad0519d
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
test eax, eax
je 0x4ad14fc1
cmp word [ebp - 0x144], 0
lea esi, [ebp - 0x144]
jne 0x4ad127da
push 0x20
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
call fcn.4ad0519d
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
pop esi
test eax, eax
je 0x4ad14fee
lea eax, [ebp - 0x44]
push eax
test edi, edi
je 0x4ad15052
push dword [ebp + 0x14]
push edi
call fcn.4ad017fb
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x4ad128bb
jmp 0x4ad0ddb9
lea ecx, [ebp - 0x164]
push ecx
push eax
call fcn.4ad12afc
jmp 0x4ad0dd2a
call fcn.4ad0735f
add esp, 0x20
jmp 0x4ad0ddbd
push 0x4ad1505c
push esi
lea eax, [ebp - 0x144]
push eax
call fcn.4ad017fb
jmp 0x4ad12863
xor eax, eax
cmp dword [ebp - 0x148], eax
sete al
mov dword [ebp - 0x148], eax
jmp 0x4ad127d0
mov word [ebp - 0x44], ax
jmp 0x4ad128a1
cmp dword [0x4ad24090], 0
movzx eax, word [ebp - 0x150]
mov edx, 0x4ad24b80
je 0x4ad15026
push 0xc
pop ecx
cmp eax, ecx
jb 0x4ad1501e
jbe 0x4ad15017
sub eax, ecx
mov edx, 0x4ad24b40
jmp 0x4ad1502b
test eax, eax
jne 0x4ad1502b
mov eax, ecx
jmp 0x4ad1502b
mov edx, 0x4ad01b2c
movzx ecx, word [ebp - 0x14e]
push edx
push ecx
push 0x4ad24930
push eax
push str._02d_s_02d_s
lea eax, [ebp - 0x44]
push 0x20
push eax
call fcn.4ad01799
add esp, 0x1c
jmp 0x4ad128a1
call fcn.4ad0c05e
jmp 0x4ad0ddbd