Function at 0x10001fe70
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4b0
mov rax, qword [0x100029100]
xor rax, rsp
mov qword [rsp + 0x4a0], rax
xor ebx, ebx
movzx r12d, dx
mov r14, rcx
mov qword [rsp + 0x30], rbx
call fcn.10001f958
xor edx, edx
movzx r8d, al
mov rcx, r14
mov rsi, rbx
and r8d, 0x20
mov dword [0x100029a70], eax
or r8d, 2
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
cmp rax, rbx
je 0x100020314
test byte [0x100029a70], 0x20
jne 0x100020316
lea rax, [rsp + 0x30]
mov r9d, 0x104
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x290]
mov rdx, r14
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_SearchPathW]
cmp eax, ebx
je 0x10002030b
mov rax, qword [rsp + 0x30]
cmp rax, rbx
jne 0x10001ff34
lea rax, [rsp + 0x290]
mov rbp, rbx
mov qword [rsp + 0x30], rax
jmp 0x10001ff40
lea rbp, [rsp + 0x290]
mov word [rax - 2], bx
xor r9d, r9d
lea rdx, [0x100009008]
mov rcx, rdi
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
cmp rax, rbx
je 0x100020296
cmp r12w, bx
jne 0x100020242
mov eax, dword [0x100029a70]
test al, 4
je 0x10002013f
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov r13d, 0x404
mov r15d, 0xc04
mov r12w, ax
cmp ax, r13w
jne 0x10001ffd8
mov r9d, 0x20
lea r8, [rsp + 0x250]
mov ecx, r13d
lea edx, [r9 - 0x18]
mov r12d, r15d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, ebx
je 0x10001ffd8
lea rdx, [0x100009074]
lea rcx, [rsp + 0x250]
mov r8d, 3
call sub.msvcrt.dll_wcsncmp
cmp eax, ebx
je 0x10001ffd8
mov r12w, r13w
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, r12w
call fcn.10001fdf0
cmp eax, ebx
je 0x100020280
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
cmp word [rsp + 0xf0], bx
je 0x100020071
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
cmp r12w, r15w
je 0x10001ffd4
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx r13d, ax
cmp ax, r12w
je 0x100020127
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
call fcn.10001fdf0
cmp eax, ebx
je 0x100020296
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
cmp word [rsp + 0xf0], bx
je 0x100020127
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov ecx, 0x409
cmp cx, r12w
je 0x100020225
cmp cx, r13w
jmp 0x1000201f1
test al, 3
je 0x100020296
call fcn.10001fbdc
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
movzx r12d, ax
call fcn.10001fdf0
cmp eax, ebx
je 0x100020296
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
cmp word [rsp + 0xf0], bx
je 0x1000201e8
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov ecx, 0x409
cmp cx, r12w
je 0x100020225
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
xor r9d, r9d
call fcn.10001fdf0
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
mov r9, qword [rsp + 0x30]
xor r8d, r8d
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rax, rbx
jne 0x100020285
jmp 0x100020280
test byte [0x100029a70], 7
je 0x100020296
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
xor r9d, r9d
movzx ecx, r12w
call fcn.10001fdf0
cmp eax, ebx
je 0x100020296
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10001fb6c
mov rsi, rax
cmp rsi, rbx
je 0x100020296
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, rsi
jmp 0x100020316
test dil, 1
je 0x100020306
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.10001f958
test al, 0x38
je 0x1000202ea
mov rax, qword [rsp + 0x30]
lea r8, [0x100001780]
lea rcx, [rsp + 0x290]
mov r9, rbp
mov edx, 0x104
mov qword [rsp + 0x20], rax
call fcn.10001f740
xor r8d, r8d
lea rcx, [rsp + 0x290]
lea edx, [r8 + 1]
call fcn.10001f88c
jmp 0x100020303
call fcn.10001f958
mov rcx, r14
and eax, 0x26
setne bl
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
mov rax, rdi
jmp 0x100020316
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov rcx, qword [rsp + 0x4a0]
xor rcx, rsp
call fcn.100020910
mov rbx, qword [rsp + 0x500]
add rsp, 0x4b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret