Function at 0x40b6b4
Capabilities:
Get geographical location
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec
push 0xffffffffffffff8f
push 0x4577ab00
call fcn.0040d07f
add esp, 8
push ebx
jmp 0x40b70a
push esi
mov dword [ebp - 0xe8], eax
push edi
mov eax, 0x35fd
jmp 0x40b736
call fcn.0040cfb0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor edi, eax
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0xe8]
jmp 0x40b754
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0xe8], edx
push 0
push 0
push 0xc1
push 0x43227c
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0xe8]
add eax, 0x25
cmp eax, dword [0x431b6c]
jne 0x40b7a3
mov ecx, eax
cmp ecx, dword [0x432024]
jne 0x40b7a3
sub ecx, 0xffffffa0
cmp eax, dword [ebp - 0x60]
je 0x40b7a3
push ecx
call fcn.0040d345
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
test eax, 0xcf52
je 0x40b7f9
cmp eax, dword [0x432094]
jne 0x40b7f9
cmp eax, dword [ebp - 0x84]
je 0x40b7f9
cmp eax, 0xffffffe8
je 0x40b7f9
cmp eax, dword [0x4321a4]
jne 0x40b7f9
mov ebx, dword [ebp - 0xe8]
test eax, 0xb2
jne 0x40b7f9
mov ecx, dword [ebp - 0xe8]
xor ebx, 0x51044800
jmp 0x40b7f9
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffc9
push 3
push 0xfffffffffffffff8
push 0x99c05100
push 0xffffffffffffffaf
call fcn.0040d07f
add esp, 0x14
mov edx, dword [ebp - 0xe8]
jmp 0x40b840
jmp 0x40b845
jmp 0x40b858
cmp ecx, dword [0x432024]
je 0x40b86c
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe8], eax
or eax, 0x11804000
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe8], ecx
mov ebx, dword [ebp - 0xe8]
mov dword [ebp - 0xe8], ebx
and ecx, 0xa1014a00
mov dword [ebp - 0xe8], ecx
mov ecx, dword [ebp - 0xe8]
sub ecx, 0xffffffc1
cmp ecx, dword [ebp - 0xec]
jne 0x40b8b0
cmp ecx, dword [ebp - 0x60]
je 0x40b8b0
call fcn.0040d865
mov eax, dword [ebp - 0xe8]
jmp 0x40b8c4
add edi, edi
call fcn.0040d7cf
mov ebx, 0x64
mov dword [ebp - 0xe8], edi
jmp 0x40b8e4
mov eax, dword [ebp - 0xe8]
push eax
push eax
push 0x28
push 0x56
call fcn.0040d46d
add esp, 0x10
mov edi, dword [ebp - 0xe8]
xor edi, eax
mov dword [ebp - 0xa8], edi
mov esi, dword [ebp - 0xa8]
cmp esi, 0x59
jne 0x40b926
jmp 0x40b926
mov dword [ebp - 0x24], ecx
cmp ecx, 0xffffffa4
jne 0x40b961
test ecx, 0x2108050f
jne 0x40b961
mov edi, dword [ebp - 0x24]
xor edi, ecx
cmp edi, dword [0x4315fc]
je 0x40b961
mov edx, dword [ebp - 0xa8]
cmp edi, 0x1b
jne 0x40b961
mov eax, dword [0x431520]
jmp 0x40b961
mov edi, dword [0x4319c0]
push 0x6134b700
push 0xffffffffffffff88
push edi
push edi
call fcn.0040d865
add esp, 0x10
mov ebx, dword [0x4319c0]
add ebx, eax
mov dword [ebp - 0xa8], ebx
xor ebx, eax
mov dword [ebp - 0xa8], edi
mov esi, dword [ebp - 0xa8]
cmp eax, 0x52
jne 0x40b9b1
mov dword [ebp - 0x24], ebx
mov edi, ebx
sub esi, 0x11164200
jmp 0x40b9b1
mov edi, dword [ebp - 0xa8]
mov dword [ebp - 0x24], edi
lea ebx, [ebp - 0x30]
sub edi, 0x30
mov dword [ebp - 0xe8], ebx
test ebx, 0x64
je 0x40b9d1
mov dword [ebp - 0x24], edi
add edi, 0x5a
mov ecx, 0x41
mov dword [ebp - 0x24], edi
mov dword [ebp - 0xa8], ecx
push ebx
test edi, 0x91
je 0x40b9f7
mov edx, dword [0x430f4c]
mov dword [ebp - 0xc4], edx
push 0x9928d100
mov edx, dword [ebp - 0x24]
sub edx, ebx
mov dword [ebp - 0xe8], edx
mov edx, 0x25
jmp 0x40ba13
call fcn.0040c070
mov dword [ebp - 0xe8], eax
mov ebx, dword [ebp - 0x30]
add eax, 0xffffffb7
mov edx, 0x97
mov dword [ebp - 0xa8], edx
test eax, 0x47b5
jne 0x40ba39
mov dword [ebp - 0x24], eax
shr ebx, 0x10
jmp 0x40ba44
cmp ebx, 0xb9f7
jne 0x40bbe4
mov eax, 9
mov dword [ebp - 0x94], eax
push 0x430ffc
mov ebx, 0xf5
add ebx, 0x6d
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xe8], ebx
push 0x431b6c
mov dword [ebp - 0x24], ebx
push 0x430da0
xor ebx, eax
mov edx, ebx
mov dword [ebp - 0xa8], edx
push 0x430eb0
xor eax, 0x590d0400
mov dword [ebp - 0x94], edx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x24], ebx
cmp ebx, 9
je 0x40bae5
xor eax, edx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0xa8], eax
cmp ebx, dword [0x431118]
jne 0x40bae5
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
cmp edx, 0x12
je 0x40bae5
mov dword [ebp - 0xe8], ebx
jmp 0x40bae5
dec ecx
mov esi, dword [ebp - 0xa8]
or esi, ecx
cmp esi, 0x3a
jne 0x40bb2c
add esi, 0x6b
mov dword [ebp - 0xe8], ecx
mov edi, dword [ebp - 0x24]
jmp 0x40bb2c
dec ecx
mov dword [ebp - 0x94], ecx
call fcn.0040c907
cmp eax, dword [0x43225c]
jne 0x40bb43
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x94], eax
mov eax, 0x2546275c
mov dword [ebp - 0xa8], ebx
sub eax, 0x250560f3
mov ecx, 0xf9
sub eax, ecx
jmp 0x40bb6b
push dword [ebp - 0x30]
push 0xb9f7e9eb
push dword [ebp - 0x58]
call fcn.0040c669
mov dword [ebp - 0x94], eax
add dword [ebp - 0x58], 0xe
mov ebx, dword [ebp - 0x24]
jmp 0x40bb92
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x90], eax
call eax
cmp eax, 0x21150642
je 0x40bbca
mov esi, dword [ebp - 0x24]
test esi, 0xc1b0814a
jne 0x40bbca
mov ecx, dword [ebp - 0x94]
add esi, 0x44
jmp 0x40bbca
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xe8], eax
push eax
push 0xc3c5f600
call fcn.0040d5de
add esp, 8
jmp 0x40bc1d
push 0xfffffffffffffff5
push eax
call fcn.0040d345
add esp, 8
mov dword [ebp - 0x94], eax
pop edi
mov esi, edi
cmp esi, dword [0x431c14]
je 0x40bc41
add esi, edi
mov dword [ebp - 0xa8], esi
pop esi
cmp esi, dword [0x4319c0]
jne 0x40bc7b
mov ecx, dword [ebp - 0x90]
add ecx, 0x3f
mov dword [ebp - 0xa8], esi
jmp 0x40bc7b
pop ebx
mov edx, 0xe7
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x24], edx
leave
ret