Function at 0x1400e44d0
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0xc0], xmm6
mov r15, r8
mov edi, edx
mov ebx, ecx
mov rax, qword [0x1401e3a38]
xor rax, rsp
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0xa8], xmm0
mov word [rsp + 0x98], 0
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x78], 0
lea rcx, [0x14019a0d0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400e4615
movsxd rcx, ebx
lea rdx, str.GetSystemPreferredUILanguages
mov rdx, qword [rdx + rcx*8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400e4615
mov rbx, rax
or edi, 8
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x4c], 0
lea rdx, [rsp + 0x50]
lea r9, [rsp + 0x4c]
mov ecx, edi
xor r8d, r8d
call rax
test eax, eax
je 0x1400e4615
mov edx, dword [rsp + 0x4c]
test edx, edx
je 0x1400e4615
lea rcx, [rsp + 0x30]
mov r8, rcx
call fcn.1400e4e50
mov r8, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
lea r9, [rsp + 0x4c]
mov ecx, edi
call rbx
test eax, eax
je 0x1400e4615
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x1400e4615
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call fcn.140186640
mov rdi, rax
mov rax, qword [rsp + 0xb0]
cmp rax, rdi
jae 0x1400e47e2
lea rcx, [rsp + 0x98]
mov rdx, rdi
mov r9, rbx
call fcn.140006110
jmp 0x1400e4844
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ebx, ax
cmp ebx, 0x1400
je 0x1400e4680
lea r14, [rsp + 0x50]
mov ecx, ebx
mov edx, 0x59
mov r8, r14
mov r9d, 9
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, 2
jl 0x1400e4680
add eax, 0xffffffff
movsxd rbp, eax
mov rax, qword [rsp + 0xb0]
cmp rax, rbp
jae 0x1400e4688
lea rcx, [rsp + 0x98]
lea r9, [rsp + 0x50]
mov rdx, rbp
call fcn.140006110
cmp qword [rsp + 0x90], 7
ja 0x1400e46cc
lea rax, [rsp + 0x78]
jmp 0x1400e46d1
xor r14d, r14d
jmp 0x1400e4d11
cmp rax, 7
jbe 0x1400e4698
mov rdi, qword [rsp + 0x98]
jmp 0x1400e46a0
lea rdi, [rsp + 0x98]
mov qword [rsp + 0xa8], rbp
mov r8, rbp
add r8, rbp
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.14016f270
mov word [rdi + rbp*2], 0
cmp qword [rsp + 0x90], 7
jbe 0x1400e4679
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x88], 0
mov word [rax], 0
test ebx, 0xfc00
je 0x1400e4730
lea r8, [rsp + 0x50]
mov ecx, ebx
mov edx, 0x5a
mov r9d, 9
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, 2
jl 0x1400e4730
add eax, 0xffffffff
movsxd rbx, eax
mov rax, qword [rsp + 0x90]
cmp rax, rbx
jae 0x1400e47f2
lea rcx, [rsp + 0x78]
lea r9, [rsp + 0x50]
mov rdx, rbx
call fcn.140006110
cmp qword [rsp + 0x88], 0
je 0x1400e4c21
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov rsi, qword [rsp + 0xa8]
cmp qword [rsp + 0xb0], 7
jbe 0x1400e47c0
mov rbx, qword [rsp + 0x98]
cmp rsi, 7
jbe 0x1400e47ce
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmovae rdi, rax
mov rax, rdi
add rax, 1
lea rcx, [rdi + rdi + 2]
mov rax, 0xffffffffffffffff
cmovs rcx, rax
cmp rcx, 0x1000
jb 0x1400e4806
add rcx, 0x27
cmovb rcx, rax
call fcn.14014b1a0
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x1400e4a2f
lea rbx, [rsp + 0x98]
cmp rsi, 7
ja 0x1400e476a
movdqu xmm0, xmmword [rbx]
movdqa xmmword [rsp + 0x50], xmm0
mov edi, 7
jmp 0x1400e4a44
cmp rax, 7
jbe 0x1400e481c
mov rbp, qword [rsp + 0x98]
jmp 0x1400e4824
cmp rax, 7
jbe 0x1400e49f5
mov rdi, qword [rsp + 0x78]
jmp 0x1400e49fa
test rcx, rcx
je 0x1400e4a2d
call fcn.14014b1a0
mov rcx, rax
jmp 0x1400e4a2f
lea rbp, [rsp + 0x98]
mov qword [rsp + 0xa8], rdi
mov r8, rdi
add r8, rdi
mov rcx, rbp
mov rdx, rbx
call fcn.14016f270
mov word [rbp + rdi*2], 0
mov r14b, 1
cmp qword [rsp + 0xa8], 0
je 0x1400e4d11
lea r13, [rsp + 0x98]
xorps xmm6, xmm6
nop word cs:[rax + rax]
nop dword [rax + rax]
mov rbp, qword [r15 + 8]
mov rdx, qword [r15 + 0x10]
cmp rdx, rbp
je 0x1400e48c0
movups xmmword [rbp + 0x10], xmm6
mov r12, qword [rsp + 0xa8]
cmp qword [rsp + 0xb0], 7
mov rdi, r13
jbe 0x1400e489f
mov rdi, qword [rsp + 0x98]
cmp r12, 7
ja 0x1400e48d0
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rbp], xmm0
mov esi, 7
jmp 0x1400e4964
mov rcx, r15
mov r8, r13
call fcn.140030620
jmp 0x1400e4971
mov rsi, r12
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
jb 0x1400e48f0
movabs rsi, 0x7ffffffffffffffe
mov rax, rsi
add rax, 1
mov rcx, 0xffffffffffffffff
js 0x1400e4908
lea rcx, [rsi + rsi]
add rcx, 2
cmp rcx, 0x1000
jb 0x1400e4937
mov rax, 0xffffffffffffffff
add rcx, 0x27
jb 0x1400e4921
mov rax, rcx
mov rcx, rax
call fcn.14014b1a0
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x1400e4950
test rcx, rcx
je 0x1400e4946
call fcn.14014b1a0
mov rcx, rax
jmp 0x1400e4950
xor ecx, ecx
nop dword [rax + rax]
mov qword [rbp], rcx
lea r8, [r12 + r12]
add r8, 2
mov rdx, rdi
call fcn.14016f270
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], rsi
add qword [r15 + 8], 0x20
mov rax, qword [rsp + 0xa8]
lea rbx, [rbx + rax*2]
add rbx, 2
mov rcx, rbx
call fcn.140186640
mov rdi, rax
mov rax, qword [rsp + 0xb0]
cmp rax, rdi
jae 0x1400e49b0
mov rcx, r13
mov rdx, rdi
mov r9, rbx
call fcn.140006110
jmp 0x1400e49e1
mov rbp, r13
cmp rax, 7
jbe 0x1400e49c1
mov rbp, qword [rsp + 0x98]
mov qword [rsp + 0xa8], rdi
mov r8, rdi
add r8, rdi
mov rcx, rbp
mov rdx, rbx
call fcn.14016f270
mov word [rbp + rdi*2], 0
cmp qword [rsp + 0xa8], 0
jne 0x1400e4870
jmp 0x1400e4d11
lea rdi, [rsp + 0x78]
mov qword [rsp + 0x88], rbx
lea r8, [rbx + rbx]
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.14016f270
mov word [rdi + rbx*2], 0
cmp qword [rsp + 0x88], 0
jne 0x1400e473f
jmp 0x1400e4c21
xor ecx, ecx
mov qword [rsp + 0x50], rcx
lea r8, [rsi + rsi]
add r8, 2
mov rdx, rbx
call fcn.14016f270
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdi
cmp rdi, rsi
jne 0x1400e4a74
mov word [rsp + 0x20], 0x2d
lea rcx, [rsp + 0x50]
mov edx, 1
mov r9d, 1
call fcn.14000eb70
mov r14, rax
jmp 0x1400e4a98
lea rax, [rsi + 1]
mov qword [rsp + 0x60], rax
mov rax, r14
cmp rdi, 7
jbe 0x1400e4a8b
mov rax, qword [rsp + 0x50]
mov word [rax + rsi*2], 0x2d
mov word [rax + rsi*2 + 2], 0
mov r8, qword [rsp + 0x88]
cmp qword [rsp + 0x90], 7
jbe 0x1400e4ab2
mov r9, qword [rsp + 0x78]
jmp 0x1400e4ab7
lea r9, [rsp + 0x78]
mov rax, qword [r14 + 0x10]
mov rcx, qword [r14 + 0x18]
mov rdx, rcx
sub rdx, rax
cmp rdx, r8
jae 0x1400e4adf
mov qword [rsp + 0x20], r8
mov rcx, r14
mov rdx, r8
call fcn.14000a0c0
mov r14, rax
jmp 0x1400e4b08
lea rsi, [rax + r8]
mov qword [r14 + 0x10], rsi
mov rdi, r14
cmp rcx, 8
jb 0x1400e4af3
mov rdi, qword [r14]
lea rcx, [rdi + rax*2]
add r8, r8
mov rdx, r9
call fcn.14016f270
mov word [rdi + rsi*2], 0
mov rsi, qword [r15 + 8]
mov rdx, qword [r15 + 0x10]
cmp rdx, rsi
je 0x1400e4b45
pxor xmm0, xmm0
movdqu xmmword [rsi + 0x10], xmm0
mov rdi, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 7
jbe 0x1400e4b2c
mov r14, qword [r14]
cmp rdi, 7
ja 0x1400e4b55
movdqu xmm0, xmmword [r14]
movdqu xmmword [rsi], xmm0
mov ebx, 7
jmp 0x1400e4bcc
mov rcx, r15
mov r8, r14
call fcn.140030620
jmp 0x1400e4bd9
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovae rbx, rax
mov rax, rbx
add rax, 1
lea rcx, [rbx + rbx + 2]
mov rax, 0xffffffffffffffff
cmovs rcx, rax
cmp rcx, 0x1000
jb 0x1400e4ba8
add rcx, 0x27
cmovb rcx, rax
call fcn.14014b1a0
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x1400e4bb9
test rcx, rcx
je 0x1400e4bb7
call fcn.14014b1a0
mov rcx, rax
jmp 0x1400e4bb9
xor ecx, ecx
mov qword [rsi], rcx
lea r8, [rdi + rdi]
add r8, 2
mov rdx, r14
call fcn.14016f270
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], rbx
add qword [r15 + 8], 0x20
mov rax, qword [rsp + 0x68]
cmp rax, 8
jb 0x1400e4c21
mov rcx, qword [rsp + 0x50]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400e4c1c
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400e4e24
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14014b210
mov rsi, qword [r15 + 8]
mov rdx, qword [r15 + 0x10]
cmp rdx, rsi
je 0x1400e4cab
pxor xmm0, xmm0
movdqu xmmword [rsi + 0x10], xmm0
mov rbp, qword [rsp + 0xa8]
cmp qword [rsp + 0xb0], 7
jbe 0x1400e4cbd
mov rdi, qword [rsp + 0x98]
cmp rbp, 7
jbe 0x1400e4ccb
mov rbx, rbp
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovae rbx, rax
mov rax, rbx
add rax, 1
lea rcx, [rbx + rbx + 2]
mov rax, 0xffffffffffffffff
cmovs rcx, rax
cmp rcx, 0x1000
jb 0x1400e4cda
add rcx, 0x27
cmovb rcx, rax
call fcn.14014b1a0
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x1400e4ceb
lea r8, [rsp + 0x98]
mov rcx, r15
call fcn.140030620
jmp 0x1400e4d0e
lea rdi, [rsp + 0x98]
cmp rbp, 7
ja 0x1400e4c58
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rsi], xmm0
mov ebx, 7
jmp 0x1400e4d01
test rcx, rcx
je 0x1400e4ce9
call fcn.14014b1a0
mov rcx, rax
jmp 0x1400e4ceb
xor ecx, ecx
mov qword [rsi], rcx
lea r8, [rbp + 2]
add r8, rbp
mov rdx, rdi
call fcn.14016f270
mov qword [rsi + 0x10], rbp
mov qword [rsi + 0x18], rbx
add qword [r15 + 8], 0x20
mov r14b, 1
mov rax, qword [rsp + 0x90]
cmp rax, 8
jb 0x1400e4d5c
mov rcx, qword [rsp + 0x78]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400e4d57
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400e4e24
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14014b210
mov rax, qword [rsp + 0xb0]
cmp rax, 8
jb 0x1400e4daa
mov rcx, qword [rsp + 0x98]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400e4da5
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x1400e4e24
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14014b210
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400e4df5
mov rdx, qword [rsp + 0x40]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1400e4ddd
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400e4e24
add rdx, 0x27
mov rcx, rax
call fcn.14014b210
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.14014b5e0
mov eax, r14d
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140179190
ud2
mov r8, rcx
mov ecx, 3
mov edx, 0x30
jmp 0x1400e44d0