Function at 0x40b6b8
Capabilities:
Get geographical location
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
mov ecx, dword [0x42cc04]
mov dword [ebp - 0xac], ecx
push ebx
push 0xf3c03a00
push 0xc3be2c00
push 0x9163e000
call fcn.0040cf5c
add esp, 0xc
push esi
mov ebx, 0xc9
mov dword [ebp - 0xac], ebx
push edi
mov dword [ebp - 0xac], ebx
push eax
call fcn.0040d14f
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
or ebx, eax
cmp ebx, eax
je 0x40b713
mov dword [ebp - 0xac], ebx
cmp eax, 0x29
je 0x40b781
mov edi, dword [ebp - 0xac]
xor edi, 0x56
jmp 0x40b75f
mov ebx, 0x73
push 0x28
call fcn.0040d037
add esp, 4
push 0x6f
call fcn.0040d037
add esp, 4
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0xac], esi
push 0
push 0
push 0x1b
push 0x42d020
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov ecx, ebx
xor ecx, 0x43900c00
push 0xa3b96d00
push eax
push 0x3e
call fcn.0040d037
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
jmp 0x40b803
mov dword [ebp - 0xd4], eax
add eax, edi
cmp eax, 0xffffffc1
jne 0x40b819
push edi
call fcn.0040d037
add esp, 4
mov dword [ebp - 0xac], edi
jmp 0x40b830
mov esi, dword [ebp - 0xac]
cmp esi, dword [ebp - 0x14]
jne 0x40b858
mov edi, 0xf3
push 0xffffffffffffffdc
push esi
push 0x513a0800
push 0x19
call fcn.0040d14f
add esp, 0x10
mov dword [ebp - 0xac], edi
mov eax, dword [0x42ccdc]
sub eax, edi
mov dword [ebp - 0xb4], eax
xor eax, esi
mov edx, esi
cmp eax, 0x536f
je 0x40b8a9
add eax, 0xffffffaa
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa0], eax
cmp ecx, 0x63004407
jne 0x40b8a9
xor edx, 0x50
cmp edx, 0x20
jne 0x40b8a9
push 0x6f
push edi
push 0xffffffffffffffed
push esi
push 0x91693d00
call fcn.0040d037
add esp, 0x14
sub edi, 0xffffffb4
mov dword [ebp - 0xac], edi
mov ebx, 0xa4
cmp esi, edi
je 0x40b8c1
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb4], ebx
and ebx, edi
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0xb4], edi
cmp esi, 0x21604a53
jne 0x40b911
mov dword [ebp - 0x64], esi
add ebx, edi
cmp eax, dword [0x42ccdc]
je 0x40b911
mov edi, 0x7f11
sub edi, ebx
push 0xf3f4cd00
push 0x7e
push 0xe1088700
push esi
push 0x4b3b4200
call fcn.0040d14f
add esp, 0x14
mov dword [ebp - 0xac], edi
mov ebx, 0x7a
mov dword [ebp - 0xc], ebx
jmp 0x40b91e
mov ecx, dword [ebp - 0xc]
add ecx, ecx
mov dword [ebp - 0xc], ecx
mov edi, dword [ebp - 0xb4]
and edi, ecx
jmp 0x40b941
mov eax, dword [0x42c3e0]
or eax, esi
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0xac]
cmp ebx, dword [0x42d0bc]
je 0x40b969
mov dword [ebp - 0xa8], ebx
mov edi, dword [ebp - 0xb4]
sub edi, esi
mov dword [ebp - 0xac], edi
push esi
push 0x57
call fcn.0040cf5c
add esp, 8
mov dword [ebp - 0xc], ebx
add ebx, edi
mov dword [ebp - 0xac], ebx
mov edi, dword [ebp - 0xc]
cmp edi, dword [ebp - 0x14]
je 0x40b9d0
cmp edi, dword [ebp - 0xb8]
je 0x40b9d0
xor edi, ebx
mov eax, 0xa6
cmp edi, dword [0x42d020]
jne 0x40b9d0
mov dword [ebp - 0xc8], eax
mov esi, dword [ebp - 0xb4]
push 0xab992500
push 0xffffffffffffff8c
call fcn.0040d0ae
add esp, 8
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0xac], edi
lea ecx, [ebp - 0xcc]
mov esi, 0x16
sub esi, 0xffffff94
cmp ecx, ebx
jne 0x40ba45
mov eax, 0xba1f
mov dword [ebp - 0x5c], eax
and esi, edi
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb4], ecx
cmp esi, dword [0x42ce58]
jne 0x40ba45
mov eax, ecx
and eax, 0xffffffd5
cmp eax, esi
jne 0x40ba45
sub eax, esi
mov edi, dword [ebp - 0xb4]
test edi, 0xd8
je 0x40ba45
cmp edi, ebx
jne 0x40ba45
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 0xb4], esi
xor edi, esi
jmp 0x40ba45
mov edi, 0x80
mov dword [ebp - 0xc], edi
push ecx
jmp 0x40ba55
push 0xe1638e00
mov edi, 0xe2
mov dword [ebp - 0xc], esi
push 0xffffffffffffffae
push 0x3b92100
call fcn.0040d14f
add esp, 8
add edi, eax
test edi, 0xbe
jne 0x40baa2
mov eax, dword [ebp - 0xac]
cmp esi, 0xffffff8e
jne 0x40baa2
xor eax, esi
cmp eax, 0xffffff97
jne 0x40baa2
push edi
push 0x73277400
push esi
push esi
push 0x93dbc000
call fcn.0040cf5c
add esp, 0x14
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xc], eax
call fcn.0040c04c
add esi, edi
mov ecx, dword [ebp - 0xb4]
cmp esi, 0xffffffce
jne 0x40bacb
mov dword [ebp - 0x98], esi
jmp 0x40bacb
mov eax, dword [ebp - 0xcc]
cmp eax, 0x65da
jne 0x40bade
mov dword [ebp - 0xb4], eax
shr eax, 0x10
jmp 0x40bb0b
cmp eax, 0x3ab2
jne 0x40bc93
jmp 0x40bb22
push 0x42ccd0
mov ecx, dword [ebp - 0xc]
jmp 0x40bb61
push 0x42be28
mov dword [ebp - 0xc], ebx
push 0x42bda4
mov eax, 0xdb
mov dword [ebp - 0xac], eax
push 0x42ca48
sub eax, 0x57
mov edi, eax
mov dword [ebp - 0xac], edi
dec edx
mov dword [ebp - 0xb4], edx
dec edx
mov ebx, dword [ebp - 0xac]
cmp edx, 0x4d
jne 0x40bbbd
and edx, 0x51020900
mov esi, dword [ebp - 0xc]
jmp 0x40bbbd
call fcn.0040c973
mov edi, dword [ebp - 0xc]
jmp 0x40bbd9
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0xb4]
jmp 0x40bc2c
mov edi, 0xb7e7504c
mov dword [ebp - 0x38], edi
sub edi, 0xb7a68943
mov dword [ebp - 0xc], edi
push dword [ebp - 0xcc]
push 0x3ab3206c
push dword [ebp - 0x94]
call fcn.0040c709
add eax, edi
mov ebx, dword [0x42d020]
jmp 0x40bc63
add dword [ebp - 0x94], 0x2d
jmp 0x40bc75
mov edi, dword [ebp - 0x94]
mov dword [ebp - 4], edi
call edi
cmp eax, edi
je 0x40bc8a
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 4], eax
mov edx, 0xd5
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
xor eax, 0x25
mov dword [ebp - 0xb4], eax
push eax
push 0xf3e7bb00
push edx
push 0xffffffffffffffb5
push 0xffffffffffffffcf
call fcn.0040d037
add esp, 0x14
pop edi
mov ebx, dword [ebp - 0xac]
jmp 0x40bccb
pop esi
mov edx, esi
push esi
call fcn.0040cf5c
add esp, 4
pop ebx
cmp ebx, 0x40
je 0x40bcfa
sub eax, esi
mov edx, esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0xb4], eax
cmp edx, eax
jne 0x40bcfa
sub edx, ebx
jmp 0x40bcfa
leave
ret