Function at 0x40a87b
Capabilities:
Create thread
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x46c
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push esi
push edi
push 0
mov esi, ecx
push 0xc
mov dword [esp + 0x18], esi
call ebx
push eax
push 0xb
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x6b
push dword [0x4ad1a8]
call edi
push eax
push 1
push 0x80
push dword [esi + 4]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
push 0
push 0x32
call ebx
push eax
push 0x31
call ebx
push eax
push 1
push 0x6b
push dword [0x4ad1a8]
call edi
mov ebx, dword [esp + 0x10]
push eax
push 0
push 0x80
push dword [ebx + 4]
call esi
mov esi, 0x81
push esi
push dword [0x4ad194]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push esi
push 0
mov dword [ebx + 0x1dc], eax
call dword [sym.imp.USER32.dll_LoadMenuW]
mov edi, eax
mov dword [esp + 0xc], edi
call sym.Dismx86.exe_BcdIsWinPEBoot
test eax, eax
je 0x40a953
push 1
push edi
call dword [sym.imp.USER32.dll_GetSubMenu]
mov ebx, dword [sym.imp.USER32.dll_DeleteMenu]
mov esi, eax
push 0x400
push 7
push esi
call ebx
push 0x400
push 7
push esi
call ebx
push 0x400
push 7
push esi
call ebx
mov ebx, dword [esp + 0x10]
push edi
call fcn.0040991e
pop ecx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebx + 0x1f8], eax
test eax, eax
je 0x40aae2
push str.ConfigLanguages.zip
mov edx, 0x4ad284
lea ecx, [esp + 0x18]
call fcn.0043baed
mov ebx, dword [esp + 0x18]
pop ecx
lea ecx, [ebx - 0x10]
call fcn.0043cad2
lea ecx, [ebx - 0x10]
lea esi, [eax + 0x10]
call fcn.0043d912
or dword [esp + 0x268], 0xffffffff
lea eax, [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x268], eax
cmp eax, 0xffffffff
je 0x40aab1
mov edi, dword [esp + 0x10]
test byte [esp + 0x18], 0x10
jne 0x40aa96
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
test eax, eax
je 0x40aa96
xor ecx, ecx
mov word [eax], cx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocaleName]
test eax, eax
je 0x40aa96
push 0x104
lea eax, [esp + 0x274]
push eax
push 4
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x18]
call fcn.0043c2b8
lea eax, [esp + 0x14]
push eax
lea ecx, [edi + 0x1ec]
call fcn.004316c8
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.0043d912
push dword [edi + 0x1f8]
call dword [sym.imp.USER32.dll_GetMenuItemCount]
push dword [0x4ad454]
lea ebx, [eax + 0x8020]
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
mov ecx, dword [edi + 0x1f8]
test eax, eax
lea eax, [esp + 0x270]
push eax
push ebx
jne 0x40aa8d
push 8
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push ebx
push dword [edi + 0x1f8]
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
jmp 0x40aa96
push 0
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
lea ecx, [esp + 0x18]
call fcn.00439ac0
cmp dword [esp + 0x268], 0xffffffff
jne 0x40a9c1
mov edi, dword [esp + 0xc]
lea ecx, [esi - 0x10]
call fcn.0043d912
push 2
push edi
call dword [sym.imp.USER32.dll_GetSubMenu]
push 0x491f70
mov esi, eax
call sym.Dismx86.exe_DismMultiLanguage
mov ebx, dword [esp + 0x10]
push eax
push dword [ebx + 0x1f8]
push 0x10
push esi
call dword [sym.imp.USER32.dll_AppendMenuW]
push str.Configdefault.ui.zip
mov edx, 0x4ad284
lea ecx, [esp + 0x10]
call fcn.0043baed
pop ecx
mov ecx, dword [eax]
call fcn.0045696c
mov ecx, dword [esp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov eax, dword [ebx + 4]
lea esi, [ebx + 0x18]
push eax
mov dword [esi + 4], eax
call dword [sym.imp.USER32.dll_GetDC]
push esi
mov ecx, 0x4ad45c
mov dword [esi + 0xc], eax
call fcn.0044f327
push 0x58
push dword [ebx + 0x24]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, str.Data_DefaultControl
mov dword [0x4ac170], eax
mov ecx, 0x4ad470
call fcn.0043b82e
test eax, eax
je 0x40ab71
push ecx
mov edx, eax
lea ecx, [esp + 0x10]
call fcn.00439a99
pop ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push dword [eax]
mov ecx, esi
call fcn.00459c46
mov ecx, dword [esp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.0043d912
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push str.skin.xml
call fcn.00459c46
mov dword [esp + 0xc], eax
test eax, eax
je 0x40aca8
push eax
mov ecx, esi
call fcn.00457f95
lea ecx, [ebx + 0x10]
push ecx
lea ecx, [ebx + 0xd8]
call fcn.0044f327
mov ecx, dword [esp + 0xc]
push 0x491fe0
call fcn.0045e7a5
mov ecx, dword [esp + 0xc]
push 0x491ffc
mov dword [ebx + 0x1e4], eax
call fcn.0045e7a5
push 1
push 0x492018
lea ecx, [ebx + 0x12c]
mov dword [ebx + 0x1e8], eax
mov byte [ebx + 0xd7], 1
call fcn.0044f888
xor esi, esi
mov dword [ebx + 0x1e0], eax
cmp dword [ebx + 0x1e4], esi
je 0x40acaa
cmp dword [ebx + 0x1e8], esi
je 0x40acaa
test eax, eax
je 0x40acaa
mov ecx, ebx
call fcn.0045a8e3
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetMenu]
call fcn.0043bc11
mov esi, dword [sym.imp.msvcrt.dll__beginthreadex]
xor edi, edi
push edi
push edi
push edi
push 0x447642
push edi
push edi
call esi
add esp, 0x18
mov dword [0x4ad1d0], eax
call fcn.0043bc11
push 4
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new_unsigned_int_]
pop ecx
test eax, eax
je 0x40ac56
mov dword [eax], ebx
jmp 0x40ac58
mov eax, edi
push edi
push edi
push eax
push 0x433394
push edi
push edi
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x18
test eax, eax
je 0x40ac74
push eax
call edi
call fcn.0043bc11
push 4
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new_unsigned_int_]
pop ecx
test eax, eax
je 0x40ac8a
mov dword [eax], ebx
jmp 0x40ac8c
xor eax, eax
push 0
push 0
push eax
push 0x4333ce
push 0
push 0
call esi
add esp, 0x18
test eax, eax
je 0x40acd6
push eax
call edi
jmp 0x40acd6
xor esi, esi
push 0x10
push 0x48f30c
call sym.Dismx86.exe_DismMultiLanguage
push eax
push 0x492030
call sym.Dismx86.exe_DismMultiLanguage
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
push esi
push 0x10
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10