Function at 0x425d10
Capabilities:
Get geographical location
Get token membership

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
push esi
push edi
push 0xee47
mov ecx, 0x18108
mov dword [ebp - 0x20], 0x15bad
mov edi, 0xe36d
mov dword [ebp - 0xc], 0x11a9b
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
add esp, 0xc
push 0x5ad4
push ecx
push 0x3ae9
push ecx
push 0x7a
push 0x11df5
push ecx
call fcn.004013a0
add esp, 8
mov dword [ebp - 0x30], 0x1415f
call fcn.00408180
sub esp, 8
mov edx, 0x165f5
call fcn.00408470
mov ecx, 0xed98
mov dword [ebp - 0x10], 0xc87e
mov ebx, eax
call fcn.00402430
push 0xee47
mov ecx, 0x18108
call fcn.00401170
mov ecx, 0x6d8d
mov dword [ebp - 0x24], 0x28208
and ecx, ebx
mov dword [ebp - 0x1c], 0x7b70
add ebx, 0x6447
mov dword [ebp - 0x28], 0x18510
add esp, 0x20
mov dword [ebp - 0x14], ebx
xor esi, esi
mov ebx, 0x4204
xor ecx, 0x2902
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ecx
mov edx, 0x14989
mov eax, 0x808
mov ecx, 0xe551
jmp 0x425e03
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x1c]
add ecx, 0xffff06b7
sub eax, dword [ebp - 0x14]
or ecx, 0x15cea
xor dword [ebp - 0x30], 0x1838d
and esi, 0x182c0
mov dword [ebp - 0x34], ebx
sub ecx, 0x1b8e
mov ebx, dword [ebp - 8]
add ebx, 0x164bd
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 4], esi
mov dword [ebp - 8], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], eax
cmp edx, 0x8039
jle 0x425e85
or esi, dword [ebp - 0x20]
and ebx, 0xd21f
or ecx, 0x104b0
mov dword [ebp - 8], ebx
cmp dword [ebp - 0x1c], 0xcdd7
mov dword [ebp - 4], esi
je 0x425e85
sub dword [ebp - 0xc], 0x1acd
add edx, 0x177b4
and dword [ebp - 0x20], 0xe271
or esi, eax
mov dword [ebp - 4], esi
mov esi, dword [ebp - 0xc]
xor ecx, 0x104b0
inc dword [ebp - 0x10]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 0x24]
or esi, dword [ebp - 0x18]
cmp dword [ebp - 0x10], 0xc87f
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x18], edi
jl 0x425e00
cmp ebx, 0x8202
mov ebx, 0x104b0
jge 0x425f55
mov eax, 0x8202
sub eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
nop dword [eax + eax]
xor edx, dword [ebp - 0x28]
xor edi, ecx
sub ebx, 0xc962
xor edi, 0xba7e
xor ecx, 0x13de9
cmp ebx, 0xdcb8
jle 0x425f4f
add esi, dword [ebp - 0x24]
cmp dword [ebp - 0xc], 0x14b06
je 0x425f4f
mov eax, dword [ebp - 0x34]
xor esi, edx
xor eax, dword [ebp - 0x2c]
xor ecx, 0x1542b
xor dword [ebp - 0x28], eax
cmp edi, 0x10ea6
jne 0x425f4f
sub edx, 0xca1c
and ebx, 0x1e41
cmp dword [ebp - 0x38], 0xbe34
jle 0x425f4f
mov edi, dword [ebp - 0x10]
xor dword [ebp - 0x2c], 0xcbf5
xor edi, 0x10ea6
and esi, 0x10633
sub dword [ebp - 0x30], 1
jne 0x425ee0
mov eax, 0x602a
mov dword [ebp - 4], esi
mov ecx, 0x16a6
mov dword [ebp - 0x20], eax
mov eax, 0x1d7ce
mov dword [ebp - 8], ecx
mov dword [ebp - 0x14], 0xebb9
mov edi, 0xad3d
mov ecx, 0x73fd
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 0x19258
mov ebx, 0x1f88
mov dword [ebp - 0xc], 0xeae5
mov edx, 0xc1d
mov dword [ebp - 0x1c], 0x108fc
mov esi, 0x6e84
nop word [eax + eax]
or eax, dword [ebp - 0x18]
and edx, 0x243f
or edi, dword [ebp - 0xc]
and eax, 0x1c40a
xor dword [ebp - 0xc], 0x18040
sub ecx, dword [ebp - 0x14]
sub ebx, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
add eax, edi
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x1c], 0xae71
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], eax
jge 0x42606f
and esi, 0xdff6
or edi, 0x8aeb
sub esi, 0x5313
or ebx, 0x5d26
cmp ecx, 0x12eae
je 0x42606f
xor edx, 0x5d26
add edi, 0x14598
mov dword [ebp - 0x38], edx
cmp edx, 0x82f7
jne 0x42606f
or dword [ebp - 0x14], 0x12270
xor eax, esi
sub dword [ebp - 8], 0x92d6
add ecx, 0x33b1
push 0x106a
push 0x14744
push 0x414d
push 0x788c
push 0x9d35
push 0x14c62
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], ecx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0x18]
add esp, 0x18
add dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
xor ebx, dword [ebp - 8]
inc eax
sub edi, eax
mov dword [ebp - 0x20], eax
cmp ebx, 0x16d22
jne 0x4260b0
push 0x10203
push 0x1c47
push 0x8956
call dword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
mov ecx, dword [ebp - 0x2c]
mov eax, edi
xor eax, dword [ebp - 8]
add esp, 0xc
xor eax, 0x4feb
and edi, ecx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x38]
cmp eax, 0x602b
mov eax, dword [ebp - 0x10]
jl 0x425fb0
call fcn.004245a0
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
add esp, 4
call fcn.00401a00
mov esi, dword [ebp - 4]
add esp, 8
add esi, 0x1aaf3
push esi
call fcn.00404700
add esp, 8
call fcn.004021a0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret