Function at 0x40a5d9
Capabilities:
Create thread
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x46c
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push esi
push edi
push 0
mov esi, ecx
push 0xc
mov dword [esp + 0x18], esi
call ebx
push eax
push 0xb
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x6b
push dword [0x4ab230]
call edi
push eax
push 1
push 0x80
push dword [esi + 4]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
push 0
push 0x32
call ebx
push eax
push 0x31
call ebx
push eax
push 1
push 0x6b
push dword [0x4ab230]
call edi
mov ebx, dword [esp + 0x10]
push eax
push 0
push 0x80
push dword [ebx + 4]
call esi
mov esi, 0x81
push esi
push dword [0x4ab21c]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push esi
push 0
mov dword [ebx + 0x1dc], eax
call dword [sym.imp.USER32.dll_LoadMenuW]
mov edi, eax
mov dword [esp + 0xc], edi
call sym.Dismx86.exe_BcdIsWinPEBoot
test eax, eax
je 0x40a6b1
push 1
push edi
call dword [sym.imp.USER32.dll_GetSubMenu]
mov ebx, dword [sym.imp.USER32.dll_DeleteMenu]
mov esi, eax
push 0x400
push 7
push esi
call ebx
push 0x400
push 7
push esi
call ebx
push 0x400
push 7
push esi
call ebx
mov ebx, dword [esp + 0x10]
push edi
call fcn.00409680
pop ecx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebx + 0x1f8], eax
test eax, eax
je 0x40a840
push str.ConfigLanguages.zip
mov edx, 0x4ab30c
lea ecx, [esp + 0x18]
call fcn.0043ab55
mov ebx, dword [esp + 0x18]
pop ecx
lea ecx, [ebx - 0x10]
call fcn.0043baa0
lea ecx, [ebx - 0x10]
lea esi, [eax + 0x10]
call fcn.0043c924
or dword [esp + 0x268], 0xffffffff
lea eax, [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x268], eax
cmp eax, 0xffffffff
je 0x40a80f
mov edi, dword [esp + 0x10]
test byte [esp + 0x18], 0x10
jne 0x40a7f4
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
test eax, eax
je 0x40a7f4
xor ecx, ecx
mov word [eax], cx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocaleName]
test eax, eax
je 0x40a7f4
push 0x104
lea eax, [esp + 0x274]
push eax
push 4
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x18]
call fcn.0043b487
lea eax, [esp + 0x14]
push eax
lea ecx, [edi + 0x1ec]
call fcn.00430953
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.0043c924
push dword [edi + 0x1f8]
call dword [sym.imp.USER32.dll_GetMenuItemCount]
push dword [0x4ab4dc]
lea ebx, [eax + 0x8020]
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
mov ecx, dword [edi + 0x1f8]
test eax, eax
lea eax, [esp + 0x270]
push eax
push ebx
jne 0x40a7eb
push 8
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push ebx
push dword [edi + 0x1f8]
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
jmp 0x40a7f4
push 0
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
lea ecx, [esp + 0x18]
call fcn.00438a3e
cmp dword [esp + 0x268], 0xffffffff
jne 0x40a71f
mov edi, dword [esp + 0xc]
lea ecx, [esi - 0x10]
call fcn.0043c924
push 2
push edi
call dword [sym.imp.USER32.dll_GetSubMenu]
push 0x48fea8
mov esi, eax
call sym.Dismx86.exe_DismMultiLanguage
mov ebx, dword [esp + 0x10]
push eax
push dword [ebx + 0x1f8]
push 0x10
push esi
call dword [sym.imp.USER32.dll_AppendMenuW]
push str.Configdefault.ui.zip
mov edx, 0x4ab30c
lea ecx, [esp + 0x10]
call fcn.0043ab55
pop ecx
mov ecx, dword [eax]
call fcn.0045592e
mov ecx, dword [esp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov eax, dword [ebx + 4]
lea esi, [ebx + 0x18]
push eax
mov dword [esi + 4], eax
call dword [sym.imp.USER32.dll_GetDC]
push esi
mov ecx, 0x4ab4e4
mov dword [esi + 0xc], eax
call fcn.0044e296
push 0x58
push dword [ebx + 0x24]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, str.Data_DefaultControl
mov dword [0x4aa160], eax
mov ecx, 0x4ab4f8
call fcn.0043a873
test eax, eax
je 0x40a8cf
push ecx
mov edx, eax
lea ecx, [esp + 0x10]
call fcn.00438a17
pop ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push dword [eax]
mov ecx, esi
call fcn.00458bfe
mov ecx, dword [esp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.0043c924
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push str.skin.xml
call fcn.00458bfe
mov dword [esp + 0xc], eax
test eax, eax
je 0x40aa06
push eax
mov ecx, esi
call fcn.00456f59
lea ecx, [ebx + 0x10]
push ecx
lea ecx, [ebx + 0xd8]
call fcn.0044e296
mov ecx, dword [esp + 0xc]
push 0x48ff28
call fcn.0045d768
mov ecx, dword [esp + 0xc]
push 0x48ff44
mov dword [ebx + 0x1e4], eax
call fcn.0045d768
push 1
push str.StatusBar
lea ecx, [ebx + 0x12c]
mov dword [ebx + 0x1e8], eax
mov byte [ebx + 0xd7], 1
call fcn.0044e7fa
xor esi, esi
mov dword [ebx + 0x1e0], eax
cmp dword [ebx + 0x1e4], esi
je 0x40aa08
cmp dword [ebx + 0x1e8], esi
je 0x40aa08
test eax, eax
je 0x40aa08
mov ecx, ebx
call fcn.004598b0
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetMenu]
call fcn.0043ac79
mov esi, dword [sym.imp.msvcrt.dll__beginthreadex]
xor edi, edi
push edi
push edi
push edi
push 0x446616
push edi
push edi
call esi
add esp, 0x18
mov dword [0x4ab258], eax
call fcn.0043ac79
push 4
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new_unsigned_int_]
pop ecx
test eax, eax
je 0x40a9b4
mov dword [eax], ebx
jmp 0x40a9b6
mov eax, edi
push edi
push edi
push eax
push 0x432765
push edi
push edi
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x18
test eax, eax
je 0x40a9d2
push eax
call edi
call fcn.0043ac79
push 4
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new_unsigned_int_]
pop ecx
test eax, eax
je 0x40a9e8
mov dword [eax], ebx
jmp 0x40a9ea
xor eax, eax
push 0
push 0
push eax
push 0x43279f
push 0
push 0
call esi
add esp, 0x18
test eax, eax
je 0x40aa34
push eax
call edi
jmp 0x40aa34
xor esi, esi
push 0x10
push 0x486308
call sym.Dismx86.exe_DismMultiLanguage
push eax
push 0x48ff68
call sym.Dismx86.exe_DismMultiLanguage
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
push esi
push 0x10
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10