Function at 0x40ab50
Capabilities:
Create thread
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x928
mov eax, dword [0x47201c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov ebx, ecx
mov byte [ebp - 0x108], 0
call fcn.00454990
add esp, 0xc
test ebx, ebx
je 0x40ae8e
cmp dword [ebx], 1
jne 0x40ae8e
push esi
push edi
lea esi, [ebx + 0x990]
push esi
push str.PopFlash
push 0x4637f4
call fcn.004026c0
add esp, 0xc
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0
push esi
call fcn.0044efbe
xor ecx, ecx
add esp, 8
cmp eax, 0xffffffff
setne cl
mov eax, ecx
test eax, eax
jne 0x40ac22
push esi
push str.FFileExistedA
push str._s_Failed_:__s
call fcn.004026c0
add esp, 0xc
push 0
push 0
push 0x104
lea eax, [ebp - 0x108]
push eax
push esi
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToCacheFileA]
test eax, eax
js 0x40ac0f
lea edi, [ebp - 0x108]
call fcn.004025f0
test eax, eax
jne 0x40ac33
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044ef0f
mov esp, ebp
pop ebp
ret
push 0x400
lea edx, [ebp - 0x908]
push edx
push 0xffffffffffffffff
push esi
jmp 0x40ac48
push 0x400
lea ecx, [ebp - 0x908]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x108]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x2c0
call fcn.0044f7ad
add esp, 4
test eax, eax
je 0x40ac6e
mov esi, eax
call fcn.00407240
mov edi, eax
jmp 0x40ac70
xor edi, edi
mov eax, dword [ebx + 0xda0]
neg eax
sbb eax, eax
and eax, 8
call fcn.004072e0
mov dword [edi + 0x2b8], 0x40a9d0
mov dword [edi + 0x2bc], ebx
mov eax, dword [ebx + 0xd94]
mov edx, dword [ebx + 0xd9c]
mov ecx, dword [ebx + 0xd90]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0xd98]
sub edx, ecx
push edx
push eax
mov eax, dword [edi + 0x40]
push ecx
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
lea ecx, [ebp - 0x908]
push ecx
lea edx, [edi + 0x88]
push 0x104
push edx
call fcn.0044fa87
mov eax, dword [edi]
mov edx, dword [eax + 0x38]
add esp, 0xc
mov ecx, edi
call edx
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
push 1
mov dword [ebp - 0x90c], eax
call esi
push 0x18
mov esi, eax
call fcn.0044f7ad
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov ecx, dword [edi + 0x40]
mov dword [eax], ecx
mov edx, dword [ebx + 0xda8]
mov dword [eax + 0x14], edx
mov ecx, dword [ebx + 0xd90]
mov dword [eax + 4], ecx
mov edx, dword [ebx + 0xd94]
mov dword [eax + 0xc], edx
mov ecx, dword [ebx + 0xd90]
mov dword [eax + 8], ecx
mov edx, dword [ebx + 0xd94]
mov dword [eax + 0x10], edx
mov ecx, dword [ebx + 0xda4]
dec ecx
add esp, 4
cmp ecx, 7
ja case.0x40ad53.3
jmp dword [ecx*4 + 0x40aea0]
mov ecx, dword [ebx + 0xd90]
sub ecx, dword [ebx + 0xd98]
mov dword [eax + 4], ecx
jmp case.0x40ad53.3
mov edx, dword [ebp - 0x90c]
mov dword [eax + 4], edx
jmp case.0x40ad53.3
mov ecx, dword [ebx + 0xd94]
sub ecx, dword [ebx + 0xd9c]
mov dword [eax + 0xc], ecx
jmp case.0x40ad53.3
mov dword [eax + 0xc], esi
mov edx, dword [eax + 4]
cmp edx, dword [eax + 8]
jne 0x40ad9a
mov ecx, dword [eax + 0xc]
cmp ecx, dword [eax + 0x10]
je 0x40adb5
push 0
push 0
push eax
push 0x40a990
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [edi + 0x40]
push 5
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
xor eax, eax
push eax
push eax
push eax
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x924], eax
mov dword [ebp - 0x920], eax
mov dword [ebp - 0x91c], eax
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], eax
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x928]
push eax
call esi
test eax, eax
je 0x40ae51
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
lea esp, [esp]
cmp dword [ebp - 0x924], 0x112
jne 0x40ae28
cmp dword [ebp - 0x920], 0xf060
je 0x40ae51
lea ecx, [ebp - 0x928]
push ecx
call ebx
lea edx, [ebp - 0x928]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [ebp - 0x928]
push eax
call esi
test eax, eax
jne 0x40ae10
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
push 1
mov ecx, edi
call eax
call dword [sym.imp.ole32.dll_OleUninitialize]
cmp byte [ebp - 0x108], 0
je 0x40ae78
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044ef0f
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0044ef0f
mov esp, ebp
pop ebp
ret