Function at 0x10000ebac
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4b0
mov rax, qword [0x100012110]
xor rax, rsp
mov qword [rsp + 0x4a0], rax
xor ebx, ebx
mov r14, rcx
mov qword [rsp + 0x30], rbx
cmp rcx, rbx
je 0x10000f00f
call fcn.10000e694
xor edx, edx
mov rcx, r14
movzx r8d, al
mov dword [0x100012c18], eax
mov rsi, rbx
and r8d, 0x20
or r8d, 2
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
cmp rax, rbx
je 0x10000f00f
test byte [0x100012c18], 0x20
jne 0x10000f011
lea rax, [rsp + 0x30]
mov r9d, 0x104
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x290]
mov rdx, r14
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_SearchPathW]
cmp eax, ebx
je 0x10000f006
mov rax, qword [rsp + 0x30]
cmp rax, rbx
jne 0x10000ec7d
lea rax, [rsp + 0x290]
mov rbp, rbx
mov qword [rsp + 0x30], rax
jmp 0x10000ec89
lea rbp, [rsp + 0x290]
mov word [rax - 2], bx
xor r9d, r9d
lea rdx, [0x100005e58]
mov rcx, rdi
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
cmp rax, rbx
je 0x10000ef91
mov eax, dword [0x100012c18]
test al, 4
je 0x10000ee7e
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov r13d, 0x404
mov r15d, 0xc04
mov r12w, ax
cmp ax, r13w
jne 0x10000ed17
mov r9d, 0x20
lea r8, [rsp + 0x250]
mov ecx, r13d
lea edx, [r9 - 0x18]
mov r12d, r15d
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp eax, ebx
je 0x10000ed17
lea rdx, [0x100005ec4]
lea rcx, [rsp + 0x250]
mov r8d, 3
call sub.msvcrt.dll_wcsncmp
cmp eax, ebx
je 0x10000ed17
mov r12w, r13w
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, r12w
call fcn.10000eb2c
cmp eax, ebx
je 0x10000ef7b
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
cmp word [rsp + 0xf0], bx
je 0x10000edb0
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
cmp r12w, r15w
je 0x10000ed13
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx r13d, ax
cmp ax, r12w
je 0x10000ee66
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
call fcn.10000eb2c
cmp eax, ebx
je 0x10000ef91
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
cmp word [rsp + 0xf0], bx
je 0x10000ee66
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov ecx, 0x409
cmp cx, r12w
je 0x10000ef60
cmp cx, r13w
jmp 0x10000ef2c
test al, 3
je 0x10000ef91
call fcn.10000e918
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
movzx ecx, ax
movzx r12d, ax
call fcn.10000eb2c
cmp eax, ebx
je 0x10000ef91
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x1a0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
cmp word [rsp + 0xf0], bx
je 0x10000ef23
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0xf0]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov ecx, 0x409
cmp cx, r12w
je 0x10000ef60
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
xor r9d, r9d
call fcn.10000eb2c
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
mov r9, qword [rsp + 0x30]
xor r8d, r8d
mov rdx, rbp
mov rcx, rdi
call fcn.10000e8a8
mov rsi, rax
cmp rax, rbx
jne 0x10000ef80
cmp rsi, rbx
je 0x10000ef91
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, rsi
jmp 0x10000f011
test dil, 1
je 0x10000f001
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.10000e694
test al, 0x38
je 0x10000efe5
mov rax, qword [rsp + 0x30]
lea r8, [0x100005ed0]
lea rcx, [rsp + 0x290]
mov r9, rbp
mov edx, 0x104
mov qword [rsp + 0x20], rax
call fcn.100007e94
xor r8d, r8d
lea rcx, [rsp + 0x290]
lea edx, [r8 + 1]
call fcn.10000e5c8
jmp 0x10000effe
call fcn.10000e694
mov rcx, r14
and eax, 0x26
setne bl
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
mov rax, rdi
jmp 0x10000f011
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov rcx, qword [rsp + 0x4a0]
xor rcx, rsp
call fcn.10000f610
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret