Function at 0x140009fa0
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140229d30]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r13, rcx
lea rcx, str.KERNEL32.DLL
xor r15d, r15d
mov r14, rdx
mov esi, r15d
call fcn.140009e68
test rax, rax
je 0x14000a098
lea rdx, str.GetThreadPreferredUILanguages
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14000a098
lea rcx, [rbp - 0x4e]
xor edx, edx
mov r8d, 0xc8
mov dword [rsp + 0x34], r15d
mov word [rbp - 0x50], r15w
call fcn.14014b070
lea r9, [rsp + 0x30]
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x34]
lea ecx, [r15 + 0x34]
mov dword [rsp + 0x30], 0x65
call rbx
test eax, eax
je 0x14000a098
lea rbx, [rbp - 0x50]
mov edi, r15d
cmp word [rbp - 0x50], r15w
je 0x14000a098
cmp rdi, 0x14
jge 0x14000a098
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call fcn.14014b054
mov r12d, eax
test eax, eax
je 0x14000a085
call fcn.14014a788
cmp dword [rax], 0x22
je 0x14000a085
mov dword [rsp + rdi*4 + 0x40], r12d
inc esi
inc rdi
mov rcx, rbx
call fcn.140149ac0
lea rbx, [rbx + rax*2 + 2]
cmp word [rbx], r15w
jne 0x14000a056
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov r15d, 0x3ff
mov r12d, 0xfc00
movzx ecx, ax
movsxd rbx, esi
mov eax, ecx
and ecx, r12d
and eax, r15d
movzx edi, ax
or ecx, edi
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
inc esi
mov ecx, edi
mov dword [rsp + rbx*4 + 0x40], eax
movsxd rbx, esi
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
mov dword [rsp + rbx*4 + 0x40], eax
inc esi
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx ecx, ax
movsxd rbx, esi
mov eax, ecx
and ecx, r12d
and eax, r15d
movzx edi, ax
or ecx, edi
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
inc esi
mov ecx, edi
mov dword [rsp + rbx*4 + 0x40], eax
movsxd rbx, esi
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
xor r15d, r15d
inc esi
mov dword [rsp + rbx*4 + 0x40], eax
cmp dword [0x14023bd38], r15d
jne 0x14000a129
movsxd rax, esi
inc esi
mov dword [rsp + rax*4 + 0x40], 0x800
movsxd rsi, esi
mov rbx, r15
test rsi, rsi
jle 0x14000a250
mov ecx, dword [rsp + rbx*4 + 0x40]
cmp ecx, 0x800
jne 0x14000a184
lea r8, [0x140193250]
lea rcx, [rsp + 0x30]
mov edx, 4
call fcn.14014a848
test eax, eax
je 0x14000a1a1
cmp eax, 0xc
je 0x14000a282
cmp eax, 0x16
je 0x14000a27c
cmp eax, 0x22
je 0x14000a27c
cmp eax, 0x50
je 0x14000a1a1
call fcn.1400096b4
int3
mov r9d, 4
lea r8, [rsp + 0x30]
lea edx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
je 0x14000a244
call fcn.14014a788
mov r12d, dword [rax]
call fcn.14014a788
mov edx, 0x112
mov dword [rax], r15d
lea rax, [rsp + 0x30]
lea r8d, [rdx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x50]
mov r9, r13
mov qword [rsp + 0x20], r14
call fcn.1401496ac
mov edi, eax
call fcn.14014a788
cmp dword [rax], r15d
je 0x14000a216
call fcn.14014a788
cmp dword [rax], r15d
je 0x14000a21e
cmp dword [rax], 0xc
je 0x14000a293
cmp dword [rax], 0x16
je 0x14000a288
cmp dword [rax], 0x22
je 0x14000a288
cmp dword [rax], 0x50
je 0x14000a21e
mov ecx, 0x80004005
call fcn.140001980
int3
call fcn.14014a788
mov dword [rax], r12d
cmp edi, 0xffffffff
je 0x14000a23c
cmp edi, 0x112
jae 0x14000a23c
lea rcx, [rbp - 0x50]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
jmp 0x14000a23f
mov rax, r15
test rax, rax
jne 0x14000a252
inc rbx
cmp rbx, rsi
jl 0x14000a138
xor eax, eax
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.140148510
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400096b4
int3
call fcn.14000966c
int3
mov ecx, 0x80070057
call fcn.140001980
int3
mov ecx, 0x8007000e
call fcn.140001980
int3