Function at 0x1000eed24
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4b0
mov rax, qword [0x10010f190]
xor rax, rsp
mov qword [rsp + 0x4a0], rax
xor ebx, ebx
mov r14, rcx
mov qword [rsp + 0x30], rbx
cmp rcx, rbx
je 0x1000ef181
call fcn.1000ee78c
xor edx, edx
mov rcx, r14
movzx r8d, al
mov dword [0x10011c7e8], eax
mov rsi, rbx
and r8d, 0x20
or r8d, 2
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
cmp rax, rbx
je 0x1000ef181
test byte [0x10011c7e8], 0x20
jne 0x1000ef183
lea rax, [rsp + 0x30]
mov r9d, reloc.certcli.dll_Ordinal_260
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x290]
mov rdx, r14
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_SearchPathW]
cmp eax, ebx
je 0x1000ef179
mov rax, qword [rsp + 0x30]
cmp rax, rbx
jne 0x1000eedf5
lea rax, [rsp + 0x290]
mov rbp, rbx
mov qword [rsp + 0x30], rax
jmp 0x1000eee01
lea rbp, [rsp + 0x290]
mov word [rax - 2], bx
xor r9d, r9d
lea rdx, [0x10002d618]
mov rcx, rdi
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
cmp rax, rbx
je 0x1000ef105
mov eax, dword [0x10011c7e8]
test al, 4
je 0x1000eeff6
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov r13d, 0x404
mov r15d, 0xc04
mov r12w, ax
cmp ax, r13w
jne 0x1000eee8f
mov r9d, Ordinal_36
lea r8, [rsp + 0x250]
mov ecx, r13d
lea edx, [r9 - 0x18]
mov r12d, r15d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, ebx
je 0x1000eee8f
lea rdx, [0x10002d684]
lea rcx, [rsp + 0x250]
mov r8d, 3
call sub.msvcrt.dll_wcsncmp
cmp eax, ebx
je 0x1000eee8f
mov r12w, r13w
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, r12w
call fcn.1000eec24
cmp eax, ebx
je 0x1000ef0f3
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
cmp word [rsp + 0xf0], bx
je 0x1000eef28
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
cmp r12w, r15w
je 0x1000eee8b
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx r13d, ax
cmp ax, r12w
je 0x1000eefde
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
call fcn.1000eec24
cmp eax, ebx
je 0x1000ef105
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
cmp word [rsp + 0xf0], bx
je 0x1000eefde
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov ecx, 0x409
cmp cx, r12w
je 0x1000ef0d8
cmp cx, r13w
jmp 0x1000ef0a4
test al, 3
je 0x1000ef105
call fcn.1000eea10
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
movzx r12d, ax
call fcn.1000eec24
cmp eax, ebx
je 0x1000ef105
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
cmp word [rsp + 0xf0], bx
je 0x1000ef09b
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov ecx, 0x409
cmp cx, r12w
je 0x1000ef0d8
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
xor r9d, r9d
call fcn.1000eec24
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
mov r9, qword [rsp + 0x30]
xor r8d, r8d
mov rdx, rbp
mov rcx, rdi
call fcn.1000ee9a0
mov rsi, rax
cmp rax, rbx
jne 0x1000ef0f8
cmp rsi, rbx
je 0x1000ef105
mov rcx, rdi
call sub.KERNEL32.dll_FreeLibrary
mov rax, rsi
jmp 0x1000ef183
test dil, 1
je 0x1000ef174
mov rcx, rdi
call sub.KERNEL32.dll_FreeLibrary
call fcn.1000ee78c
test al, 0x38
je 0x1000ef158
mov rax, qword [rsp + 0x30]
lea r8, [0x10002d690]
lea rcx, [rsp + 0x290]
mov r9, rbp
mov edx, reloc.certcli.dll_Ordinal_260
mov qword [rsp + 0x20], rax
call fcn.100038358
xor r8d, r8d
lea rcx, [rsp + 0x290]
lea edx, [r8 + 1]
call fcn.1000ee6c0
jmp 0x1000ef171
call fcn.1000ee78c
mov rcx, r14
and eax, 0x26
setne bl
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
mov rax, rdi
jmp 0x1000ef183
mov rcx, rdi
call sub.KERNEL32.dll_FreeLibrary
xor eax, eax
mov rcx, qword [rsp + 0x4a0]
xor rcx, rsp
call fcn.1000ef870
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret