Function at 0x14002ee18
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3d8]
sub rsp, 0x4b0
mov rax, qword [0x14004f068]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
xor ebx, ebx
mov r13, rcx
mov qword [rsp + 0x30], rbx
call fcn.14002e890
mov dword [0x14004f6e0], eax
xor edx, edx
and eax, 0x20
mov rcx, r13
or eax, 2
mov edi, ebx
mov r8d, eax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x14002f367
test byte [0x14004f6e0], 0x20
jne 0x14002f369
lea rax, [rsp + 0x30]
mov r9d, 0x104
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rbp + 0x190]
mov rdx, r13
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_SearchPathW]
nop dword [rax + rax]
test eax, eax
je 0x14002f358
mov rax, qword [rsp + 0x30]
test rax, rax
jne 0x14002eeec
lea rax, [rbp + 0x190]
mov r15d, ebx
mov qword [rsp + 0x30], rax
jmp 0x14002eef7
lea r15, [rbp + 0x190]
mov word [rax - 2], bx
xor r9d, r9d
lea rdx, [0x1400412f0]
mov rcx, rsi
lea r8d, [r9 + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_FindResourceExW]
nop dword [rax + rax]
test rax, rax
je 0x14002f19a
mov eax, dword [0x14004f6e0]
test al, 4
je 0x14002f1fd
call qword [sym.imp.api_ms_win_core_localization_obsolete_l1_1_0.dll_GetUserDefaultUILanguage]
nop dword [rax + rax]
movzx r14d, ax
mov r12d, 0x404
mov eax, 0xc04
cmp r14w, r12w
jne 0x14002ef9b
mov r9d, 0x20
lea r8, [rbp + 0x150]
mov ecx, r12d
mov r14d, eax
lea edx, [r9 - 0x18]
call qword [sym.imp.api_ms_win_core_localization_l1_2_0.dll_GetLocaleInfoW]
nop dword [rax + rax]
test eax, eax
je 0x14002ef9b
mov r8d, 3
lea rdx, [0x14004135c]
lea rcx, [rbp + 0x150]
call qword [sym.imp.msvcrt.dll_wcsncmp]
nop dword [rax + rax]
test eax, eax
je 0x14002ef9b
movzx r14d, r12w
lea r9, [rbp - 0x10]
movzx ecx, r14w
lea r8, [rbp + 0xa0]
lea rdx, [rsp + 0x40]
call fcn.14002eda0
test eax, eax
je 0x14002f191
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x14002efe0
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002efe3
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
test r9, r9
je 0x14002f00d
lea r8, [rbp + 0xa0]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f010
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
cmp word [rbp - 0x10], bx
je 0x14002f044
test r9, r9
je 0x14002f038
lea r8, [rbp - 0x10]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov rdi, rax
jmp 0x14002f03b
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
mov eax, 0xc04
cmp r14w, ax
je 0x14002ef97
call qword [sym.imp.api_ms_win_core_localization_obsolete_l1_1_0.dll_GetSystemDefaultUILanguage]
nop dword [rax + rax]
movzx r12d, ax
cmp ax, r14w
je 0x14002f11c
lea r9, [rbp - 0x10]
movzx ecx, ax
lea r8, [rbp + 0xa0]
lea rdx, [rsp + 0x40]
call fcn.14002eda0
test eax, eax
je 0x14002f19a
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x14002f0b1
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f0b4
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
test r9, r9
je 0x14002f0de
lea r8, [rbp + 0xa0]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f0e1
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
cmp word [rbp - 0x10], bx
je 0x14002f121
test r9, r9
je 0x14002f10e
lea r8, [rbp - 0x10]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f111
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
jmp 0x14002f121
mov r9, qword [rsp + 0x30]
mov ecx, 0x409
cmp cx, r14w
je 0x14002f176
cmp cx, r12w
je 0x14002f176
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rdx, [rsp + 0x40]
call fcn.14002eda0
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x14002f16a
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f16d
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
test r9, r9
je 0x14002f18e
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov rdi, rax
jmp 0x14002f191
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
test sil, 1
je 0x14002f353
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_FreeLibrary]
nop dword [rax + rax]
call fcn.14002e890
test al, 0x38
je 0x14002f331
mov rax, qword [rsp + 0x30]
lea r8, str._s_s
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0x104
lea rcx, [rbp + 0x190]
call fcn.14002e6d0
xor r8d, r8d
lea rcx, [rbp + 0x190]
lea edx, [r8 + 1]
call fcn.14002e7a0
jmp 0x14002f350
test al, 3
je 0x14002f19a
call fcn.14002eb7c
lea r9, [rbp - 0x10]
movzx ecx, ax
lea r8, [rbp + 0xa0]
movzx r14d, ax
lea rdx, [rsp + 0x40]
call fcn.14002eda0
test eax, eax
je 0x14002f19a
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x14002f24c
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
test rdi, rdi
jne 0x14002f31d
test r9, r9
je 0x14002f276
lea r8, [rbp + 0xa0]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f279
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
cmp word [rbp - 0x10], bx
je 0x14002f2ae
test r9, r9
je 0x14002f2a6
lea r8, [rbp - 0x10]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f2a9
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
mov ecx, 0x409
cmp cx, r14w
je 0x14002f2f9
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rdx, [rsp + 0x40]
call fcn.14002eda0
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x14002f2f1
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov r9, qword [rsp + 0x30]
mov rdi, rax
jmp 0x14002f2f4
mov rdi, rbx
test rdi, rdi
jne 0x14002f31d
test r9, r9
je 0x14002f311
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call fcn.14002eb08
mov rdi, rax
jmp 0x14002f314
mov rdi, rbx
test rdi, rdi
je 0x14002f19a
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, rdi
jmp 0x14002f369
call fcn.14002e890
and eax, 0x26
mov rcx, r13
setne bl
xor edx, edx
mov r8d, ebx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rsi, rax
mov rax, rsi
jmp 0x14002f369
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_FreeLibrary]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.140030000
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret