Function at 0x428100
Capabilities:
Get geographical location

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x270
mov rbp, rsp
mov ebx, edx
mov rsi, r8
mov dword [rbp + 0x3c], r9d
test rcx, rcx
jne 0x42813f
lea rcx, [rbp + 0x260]
call sub.kernel32.dll_GetSystemTime
lea rcx, [rbp + 0x260]
lea rdx, [rbp + 0x258]
call sub.kernel32.dll_SystemTimeToFileTime
jmp 0x42814b
lea rdx, [rbp + 0x258]
call fcn.00428f50
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x104], rax
lea rcx, [rbp + 0x104]
lea rdx, [rbp + 0x250]
call sub.kernel32.dll_FileTimeToLocalFileTime
mov rax, qword [rbp + 0x250]
mov qword [rbp + 0xfc], rax
lea rcx, [rbp + 0xfc]
lea rdx, [rbp + 0x260]
call sub.kernel32.dll_FileTimeToSystemTime
xor rdi, rdi
cmp ebx, 1
jne 0x42831f
test rsi, rsi
jne 0x42825c
movzx eax, word [rbp + 0x268]
mov dword [rbp + 0x80], eax
mov byte [rbp + 0x88], 0
lea rax, [0x0045d460]
mov qword [rbp + 0x90], rax
mov byte [rbp + 0x98], 0xa
movzx eax, word [rbp + 0x26a]
mov dword [rbp + 0xa0], eax
mov byte [rbp + 0xa8], 0
lea rax, [0x0045d460]
mov qword [rbp + 0xb0], rax
mov byte [rbp + 0xb8], 0xa
movzx eax, word [rbp + 0x26c]
mov dword [rbp + 0xc0], eax
mov byte [rbp + 0xc8], 0
lea rax, [0x0045d480]
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0xd8], 0xa
movzx eax, word [rbp + 0x26e]
mov ecx, 0xa
xor edx, edx
div ecx
mov dword [rbp + 0xe0], eax
mov byte [rbp + 0xe8], 0
lea rcx, [0x00428594]
lea rdx, [rbp + 0x80]
mov r8d, 6
call fcn.0042c0a0
add edi, eax
jmp 0x428318
movzx eax, word [rbp + 0x268]
mov dword [rbp + 0x80], eax
mov byte [rbp + 0x88], 0
lea rax, [0x0045d460]
mov qword [rbp + 0x90], rax
mov byte [rbp + 0x98], 0xa
movzx eax, word [rbp + 0x26a]
mov dword [rbp + 0xa0], eax
mov byte [rbp + 0xa8], 0
lea rax, [0x0045d460]
mov qword [rbp + 0xb0], rax
mov byte [rbp + 0xb8], 0xa
movzx eax, word [rbp + 0x26c]
mov dword [rbp + 0xc0], eax
mov byte [rbp + 0xc8], 0
lea rax, [0x0045d480]
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0xd8], 0xa
movzx eax, word [rbp + 0x26e]
mov ecx, 0xa
xor edx, edx
div ecx
mov dword [rbp + 0xe0], eax
mov byte [rbp + 0xe8], 0
mov rcx, rsi
mov edx, dword [rbp + 0x3c]
lea r8, [0x00428594]
lea r9, [rbp + 0x80]
mov dword [rsp + 0x20], 6
call fcn.00426d90
add edi, eax
mov eax, edi
jmp 0x428586
mov rax, qword [0x0044d290]
cmp byte [rax], 0
jne 0x428410
mov ax, 0x61
movzx ecx, word [rbp + 0x268]
cmp byte [0x0044b518], 0
je 0x428362
cmp ecx, 0xc
jb 0x428356
cmp ecx, 0xc
jbe 0x428350
sub ecx, 0xc
mov ax, 0x70
jmp 0x428366
test ecx, ecx
jne 0x428366
mov ecx, 0xc
jmp 0x428366
mov ax, 0x20
test rsi, rsi
jne 0x4283b2
mov dword [rbp + 0x40], ecx
mov byte [rbp + 0x48], 0
lea rcx, [0x0045d460]
mov qword [rbp + 0x50], rcx
mov byte [rbp + 0x58], 0xa
movzx ecx, word [rbp + 0x26a]
mov dword [rbp + 0x60], ecx
mov byte [rbp + 0x68], 0
mov word [rbp + 0x70], ax
mov byte [rbp + 0x78], 9
lea rcx, [0x004285c8]
lea rdx, [rbp + 0x40]
mov r8d, 3
call fcn.0042c0a0
add edi, eax
jmp 0x428409
mov dword [rbp + 0x40], ecx
mov byte [rbp + 0x48], 0
lea rcx, [0x0045d460]
mov qword [rbp + 0x50], rcx
mov byte [rbp + 0x58], 0xa
movzx ecx, word [rbp + 0x26a]
mov dword [rbp + 0x60], ecx
mov byte [rbp + 0x68], 0
mov word [rbp + 0x70], ax
mov byte [rbp + 0x78], 9
mov rcx, rsi
mov edx, dword [rbp + 0x3c]
lea r8, [0x004285c8]
lea r9, [rbp + 0x40]
mov dword [rsp + 0x20], 3
call fcn.00426d90
add edi, eax
cmp word [rsi], 0x20
jne 0x428409
mov word [rsi], 0x30
mov eax, edi
jmp 0x428586
xor r13, r13
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
mov edx, 0x1003
lea r8, [rbp + 0x14e]
mov r9d, 0x80
call sub.kernel32.dll_GetLocaleInfoW_1
test eax, eax
jne 0x428451
lea rcx, [rbp + 0x14e]
lea rdx, [0x004285e4]
mov r8d, 0x80
call fcn.00426bc0
lea rbx, [rbp + 0x14e]
lea rax, [rbp + 0x14e]
test rax, rax
je 0x42850f
movzx rdi, word [rbx]
cmp word [rbx], 0x27
jne 0x428488
test r13d, r13d
sete al
test al, al
setne al
movzx rax, al
neg eax
mov r13d, eax
jmp 0x428500
test r13d, r13d
jne 0x428500
cmp di, 0x68
je 0x42849f
cmp di, 0x48
je 0x42849f
cmp di, 0x6d
jne 0x428500
xor rax, rax
add rbx, 2
add eax, 1
cmp word [rbx], di
je 0x4284a2
movsxd rcx, eax
add rcx, rcx
sub rbx, rcx
cmp eax, 1
jne 0x4284fc
mov rcx, rbx
movzx rax, word [rcx]
add rcx, 2
test ax, ax
jne 0x4284bf
mov r8, rbx
lea r9, [rbx + 2]
mov rax, rbx
neg rax
lea rax, [rcx + rax]
mov ecx, 2
cqo
idiv rcx
add rax, rax
mov rcx, r8
mov rdx, r9
mov r8, rax
call fcn.00405650
mov word [rbx], di
add rbx, 2
add rbx, 2
cmp word [rbx], 0
jne 0x428468
nop
call sub.kernel32.dll_GetUserDefaultLCID
mov ecx, eax
mov edx, 2
lea r8, [rbp + 0x260]
lea r9, [rbp + 0x14e]
lea rax, [rbp + 0x10c]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x20
call sub.kernel32.dll_GetTimeFormatW
test eax, eax
jne 0x428550
mov word [rbp + 0x10c], 0
test rsi, rsi
je 0x428572
mov rcx, rsi
lea rdx, [rbp + 0x10c]
mov r8d, dword [rbp + 0x3c]
call fcn.00426bc0
mov rcx, rsi
call fcn.0040af20
jmp 0x428586
lea rcx, [rbp + 0x10c]
lea rdx, [rbp + 0x40]
or r8d, 0xffffffff
call fcn.0042c0a0
lea rsp, [rbp + 0x270]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret