Function at 0x4a22ce
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf94d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x228
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x4a2328
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x144]
push 0x1d98
push 0x4585
push 0
push 0x33d5
call fcn.004a5679
add esp, 0x14
jmp 0x4a305a
lea eax, [ebp + 0xc]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x194], 0x73eb
mov dword [ebp - 0xac], 0x111738ab
mov dword [ebp - 0x128], 0x6d2e8588
mov dword [ebp - 0x180], 1
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x4a2393
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jne 0x4a23b8
push 3
pop eax
test eax, eax
jne 0x4a23b8
and dword [ebp - 0xec], 0
jmp 0x4a23c2
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x168]
movzx eax, byte [eax]
test eax, eax
je 0x4a248a
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x20c], 0
mov byte [ebp - 0x1b], 0
movzx eax, byte [ebp - 0x1b]
test eax, eax
je 0x4a2423
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x4a244e
push 0x259c
push 0x24a
push 0x1a82
push 0x202
push 0x1eff
call dword [sym.imp.GDI32.dll_Rectangle]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x190], eax
push 0xa7d
push dword [ebp - 0x184]
push 0
push dword [ebp - 0x154]
push 0x5d17
push 0x418
push dword [ebp - 0x190]
call fcn.004a5d3b
add esp, 0x1c
jmp 0x4a305a
mov dword [ebp - 0x1cc], 0xfffffff7
mov dword [ebp - 0x1c8], 0xfffffff7
mov dword [ebp - 0x1c4], 0xfffffff7
mov dword [ebp - 0x1c0], 0xfffffff7
lea ecx, [ebp - 0x89]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x220]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x208]
call fcn.00435629
push 1
lea ecx, [ebp - 0x134]
call fcn.0043557d
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x1f4], 2
mov dword [ebp - 0x3c], 0
jmp 0x4a2518
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x4a2534
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x134]
call fcn.0043566b
mov dword [eax], 0x4081c290
jmp 0x4a2511
push 0
lea ecx, [ebp - 0x134]
call fcn.0043566b
and dword [eax], 0
jmp 0x4a256a
push 0
lea ecx, [ebp - 0x134]
call fcn.0043566b
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x134]
call fcn.0043566b
cmp dword [eax], 3
jg 0x4a2656
mov dword [ebp - 0x64], 0x62751c76
mov dword [ebp - 0x64], 3
jmp 0x4a2597
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x4a2651
mov dword [ebp - 0x44], 0xab593421
mov dword [ebp - 0x15c], 3
push 0
lea ecx, [ebp - 0x134]
call fcn.0043566b
push dword [eax]
lea ecx, [ebp - 0x208]
call fcn.0043566b
cmp dword [eax], 0
je 0x4a25d3
jmp 0x4a2651
mov dword [ebp - 0x44], 3
jmp 0x4a25e3
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x4a264c
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x58], 0
jmp 0x4a2600
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x4a2640
mov dword [ebp - 0x34], 0x8b6b0e1b
mov dword [ebp - 0x34], 0
jmp 0x4a261d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x4a263e
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x4a263c
push 0
push 0x1c14
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x4a2616
jmp 0x4a25f9
mov dword [ebp - 0x15c], 1
jmp 0x4a25dc
jmp 0x4a2590
jmp 0x4a2546
lea ecx, [ebp - 0x134]
call fcn.0043564f
lea ecx, [ebp - 0x208]
call fcn.0043564f
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x50], 0x444182bd
push 3
lea ecx, [ebp - 0x1d8]
call fcn.0043557d
mov dword [ebp - 0x178], 0x24f20479
mov dword [ebp - 0xe8], 0xfffffff9
mov dword [ebp - 0x1fc], 0x790660d6
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x2c], 0x5e53
mov dword [ebp - 0x17c], 0x42d225d8
mov dword [ebp - 0x18], 0
jmp 0x4a26d2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4a26e8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b8], 0x5464b5f5
jmp 0x4a26cb
mov dword [ebp - 0x18], 0
jmp 0x4a26f8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4a2711
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d8]
call fcn.0043566b
or dword [eax], 0xffffffff
jmp 0x4a26f1
mov dword [ebp - 0x50], 0
jmp 0x4a2721
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x4a2ac9
mov dword [ebp - 0x84], 0x87f6fb80
mov dword [ebp - 0x140], 0x2426f379
mov dword [ebp - 0x48], 0xdfa0148
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x60], 0
jmp 0x4a275d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x4a2773
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x13c], 0x996f377c
jmp 0x4a2756
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
dec ecx
mov dword [ebp - 0x48], ecx
test eax, eax
je 0x4a2825
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x7c]
imul eax, eax, 0x7e29
cmp eax, 0xffffffff
jle 0x4a27b7
mov dword [ebp - 0x164], 1
jmp 0x4a27be
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1f0], eax
mov eax, 0x2e7c
cmp eax, 0x9063
jne 0x4a27df
mov dword [ebp - 0x68], 1
jmp 0x4a27e3
and dword [ebp - 0x68], 0
push 2
lea ecx, [ebp - 0x1d8]
call fcn.0043566b
mov ecx, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x210], eax
mov eax, 0xbbfefa2e
test eax, eax
je 0x4a2825
mov dword [ebp - 0xb0], 1
jmp 0x4a282c
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xb0], eax
jge 0x4a2843
mov dword [ebp - 0x10c], 1
jmp 0x4a284a
and dword [ebp - 0x10c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x10c], eax
jge 0x4a286b
mov dword [ebp - 0xb8], 1
jmp 0x4a2872
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xf90f5f2f
jbe 0x4a2915
mov dword [ebp - 0x2c], 0
jmp 0x4a2892
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x4a2910
push 2
lea ecx, [ebp - 0x1e4]
call fcn.0043557d
mov dword [ebp - 0x4c], 0
jmp 0x4a28b5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x4a28d1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1e4]
call fcn.0043566b
mov dword [eax], 0x231966ba
jmp 0x4a28ae
push 0
lea ecx, [ebp - 0x1e4]
call fcn.0043566b
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x1c], 0
movzx eax, byte [ebp - 0x1c]
test eax, eax
je 0x4a2900
push 0x1e6a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
lea ecx, [ebp - 0x1e4]
call fcn.0043564f
jmp 0x4a288b
jmp 0x4a2ac4
mov dword [ebp - 0xc8], 0xb1ab372c
mov dword [ebp - 0x1a4], 0x96066eaa
mov dword [ebp - 0x1a0], 0x96066eaa
mov dword [ebp - 0x19c], 0x96066eaa
mov dword [ebp - 0x198], 0x96066eaa
cmp dword [ebp - 0x17c], 0
je 0x4a29d6
cmp dword [ebp - 0x84], 0
je 0x4a29b2
cmp dword [ebp - 0x84], 0
je 0x4a2996
cmp dword [ebp - 0x7c], 0xfffffffe
je 0x4a2978
mov dword [ebp - 0xf4], 1
jmp 0x4a297f
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
sub eax, 9
je 0x4a2996
mov dword [ebp - 0x16c], 1
jmp 0x4a299d
and dword [ebp - 0x16c], 0
mov eax, 0x4bafc8d6
test eax, eax
je 0x4a29b2
mov dword [ebp - 0xc0], 1
jmp 0x4a29b9
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0xc0]
test eax, eax
je 0x4a29d6
mov dword [ebp - 0x11c], 1
jmp 0x4a29dd
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jne 0x4a2a04
mov eax, 0x7afa
test eax, eax
jne 0x4a2a04
and dword [ebp - 0xfc], 0
jmp 0x4a2a0e
mov dword [ebp - 0xfc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
cmp dword [ebp - 0xfc], eax
jne 0x4a2a3b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a4], 0
je 0x4a2a3b
mov dword [ebp - 0x6c], 1
jmp 0x4a2a3f
and dword [ebp - 0x6c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + eax - 0x13c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x6c], eax
jle 0x4a2a6d
mov dword [ebp - 0xd0], 1
jmp 0x4a2a74
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0xd7fa
jge 0x4a2a8c
mov dword [ebp - 0x114], 1
jmp 0x4a2a93
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x114], eax
jg 0x4a2aad
mov dword [ebp - 0xd8], 1
jmp 0x4a2ab4
and dword [ebp - 0xd8], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1a4], 2
jmp 0x4a271a
lea ecx, [ebp - 0x1d8]
call fcn.0043564f
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x160], eax
push 3
lea ecx, [ebp - 0x98]
call fcn.0043557d
mov dword [ebp - 0x5c], 0x18d58162
mov dword [ebp - 0x88], 0x4015fb26
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x24], 0x97b2c3cc
mov dword [ebp - 0x14], 0
jmp 0x4a2b1c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x4a2b38
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.0043566b
mov dword [eax], 1
jmp 0x4a2b15
mov dword [ebp - 0x14], 0
jmp 0x4a2b48
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x4a2b5e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b0], 0x9a9b8fa4
jmp 0x4a2b41
push 0
lea ecx, [ebp - 0x98]
call fcn.0043566b
and dword [eax], 0
jmp 0x4a2b94
push 0
lea ecx, [ebp - 0x98]
call fcn.0043566b
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x104]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x98]
call fcn.0043566b
cmp dword [eax], 0xfffffffe
jg 0x4a2d20
mov dword [ebp - 0x54], 0xa2215256
mov dword [ebp - 0x78], 0x720348f4
mov dword [ebp - 0x80], 0x4a0426a7
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfe24307a
jb 0x4a2be1
mov dword [ebp - 0xe0], 1
jmp 0x4a2be8
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jne 0x4a2c59
cmp dword [ebp - 0x54], 0
jne 0x4a2c18
push 0
lea ecx, [ebp - 0x98]
call fcn.0043566b
cmp dword [eax], 0
jne 0x4a2c18
and dword [ebp - 0x124], 0
jmp 0x4a2c22
mov dword [ebp - 0x124], 1
cmp dword [ebp - 0x124], 0xfffffff7
jg 0x4a2c34
mov dword [ebp - 0x70], 1
jmp 0x4a2c38
and dword [ebp - 0x70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
mov dword [ebp + eax - 0x1b0], ecx
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x78]
jne 0x4a2c59
and dword [ebp - 0xa0], 0
jmp 0x4a2c63
mov dword [ebp - 0xa0], 1
cmp dword [ebp - 0xa0], 1
jle 0x4a2c78
mov dword [ebp - 0x150], 1
jmp 0x4a2c7f
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x88], eax
jle 0x4a2c9f
mov dword [ebp - 0xa4], 1
jmp 0x4a2ca6
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xa4]
jne 0x4a2cbd
mov dword [ebp - 0x9c], 1
jmp 0x4a2cc4
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x9c], eax
jl 0x4a2cdb
mov dword [ebp - 0xb4], 1
jmp 0x4a2ce2
and dword [ebp - 0xb4], 0
mov esi, dword [ebp - 0xb4]
add esi, 0xa
push 2
lea ecx, [ebp - 0x98]
call fcn.0043566b
imul esi, dword [eax]
test esi, esi
jne 0x4a2d0b
mov dword [ebp - 0xbc], 1
jmp 0x4a2d12
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x30], eax
jmp 0x4a2b70
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b0], 0
je 0x4a2e62
cmp dword [ebp - 0x30], 0
je 0x4a2dba
push 2
lea ecx, [ebp - 0x98]
call fcn.0043566b
cmp dword [eax], 0
jne 0x4a2d70
mov eax, 0xffff
test eax, eax
jne 0x4a2d70
mov eax, 0x8361cd5c
test eax, eax
jne 0x4a2d70
and dword [ebp - 0xc4], 0
jmp 0x4a2d7a
mov dword [ebp - 0xc4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0xc4], eax
jge 0x4a2d9b
mov dword [ebp - 0xcc], 1
jmp 0x4a2da2
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0x82ad
je 0x4a2dba
mov dword [ebp - 0xd4], 1
jmp 0x4a2dc1
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xd4]
jl 0x4a2dd8
mov dword [ebp - 0xdc], 1
jmp 0x4a2ddf
and dword [ebp - 0xdc], 0
push 0
lea ecx, [ebp - 0x98]
call fcn.0043566b
mov ecx, dword [ebp - 0xdc]
cmp ecx, dword [eax]
jl 0x4a2e02
mov dword [ebp - 0xe4], 1
jmp 0x4a2e09
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xffff
jb 0x4a2e21
mov dword [ebp - 0xf0], 1
jmp 0x4a2e28
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0
jle 0x4a2e40
cmp dword [ebp - 0x30], 0
jne 0x4a2e40
and dword [ebp - 0xf8], 0
jmp 0x4a2e4a
mov dword [ebp - 0xf8], 1
cmp dword [ebp - 0xf8], 0xc637
je 0x4a2e62
mov dword [ebp - 0x100], 1
jmp 0x4a2e69
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
neg eax
cmp eax, dword [ebp - 0x5c]
jge 0x4a2e82
mov dword [ebp - 0x108], 1
jmp 0x4a2e89
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4a2ead
mov eax, 0xf13a4b1f
test eax, eax
je 0x4a2ead
mov dword [ebp - 0x110], 1
jmp 0x4a2eb4
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0x69b12db2
je 0x4a2ecc
mov dword [ebp - 0x118], 1
jmp 0x4a2ed3
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x88]
je 0x4a2ee5
cmp dword [ebp - 0x24], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x1b0], 0xfffffffe
test eax, eax
je 0x4a2fff
mov dword [ebp - 0x120], 0x54e2
mov dword [ebp - 0x158], str.wbahwxx_pah_mgzbsqlsk_bxkxdo_bjuxqlh_ksbxhew_mszleeu_ekk_irxos_onzay_lidkhkvrv_zxtkkynk_sqnsedyl
cmp dword [ebp - 0x120], 0x572b
jle 0x4a2f93
and dword [ebp - 0x38], 0
jmp 0x4a2f28
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x469e
jge 0x4a2f93
and dword [ebp - 0x40], 0
jmp 0x4a2f3e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x102e
jge 0x4a2f91
mov eax, dword [ebp - 0x38]
cdq
idiv dword [ebp - 0x40]
mov eax, edx
cdq
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], edx
push dword [ebp - 0x170]
push dword [ebp - 0x174]
lea ecx, [ebp - 0x238]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x238]
call fcn.00435424
jmp 0x4a2f37
jmp 0x4a2f21
mov byte [ebp - 0x25], 0
and dword [ebp - 4], 0
cmp dword [ebp - 0x120], 0x543f
jge 0x4a2fb3
push dword [ebp - 0x158]
call fcn.004a9457
pop ecx
jmp 0x4a2fcf
or dword [ebp - 4], 0xffffffff
jmp 0x4a2fd9
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x4a2ffd
push 0x751
push 0x1e43
push 0xe62
push 0x1879
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x4a3046
mov dword [ebp - 0x24], 0
jmp 0x4a300f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x4a302e
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x4a302c
push 0x255e
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x4a3008
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x4a3046
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0x98]
call fcn.0043564f
mov eax, dword [ebp - 0x160]
and dword [eax], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret