Function at 0x40d330
Capabilities:
Create thread
Find taskbar

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x464220
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x47e820]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor esi, esi
push esi
push esi
push esi
push 1
lea ebx, [edi + 0xf58]
push 0x71
push ebx
mov dword [esp + 0x2c], ebx
call fcn.00432c1e
push 0x46ee7c
push 0x480160
push esi
push esi
push 4
push 0x66
push ebx
call fcn.00432c1e
mov eax, dword [edi + 0x20]
add esp, 0x34
mov ebx, 1
push ebx
push esi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push esi
lea ecx, [edi + 0x47c]
mov dword [0x482c94], ebx
call fcn.00432ba0
lea ecx, [edi + 0x72c]
push esi
mov dword [esp + 0x20], ecx
call fcn.00432ba0
push esi
lea ecx, [edi + 0x9dc]
call fcn.00432ba0
lea ecx, [edi + 0xc8c]
push esi
mov dword [esp + 0x24], ecx
call fcn.00432ba0
mov dword [0x482c9c], ebx
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
call ebx
push esi
mov dword [esp + 0x14], eax
call ebx
mov edx, dword [0x482da8]
mov ecx, dword [esp + 0x10]
push 0x46f194
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
push edx
mov esi, eax
mov dword [esp + 0x38], ecx
call fcn.0044a428
add esp, 8
test eax, eax
push 1
sete al
call ebx
mov ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push 0
mov dword [edi + 0xf40], eax
call ebx
mov ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push 0
mov dword [edi + 0xf3c], ecx
call ebx
lea ecx, [eax + eax*4]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push 1
mov dword [edi + 0xf44], eax
call ebx
lea ecx, [eax + eax*4]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
push 0
add ecx, edx
push str.Shell_TrayWnd
mov dword [edi + 0xf48], ecx
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x40d4d6
lea edx, [esp + 0x34]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x40d4d6
mov eax, dword [esp + 0x34]
test eax, eax
jg 0x40d4d4
mov eax, dword [esp + 0x38]
test eax, eax
jg 0x40d4da
mov eax, dword [esp + 0x3c]
cmp eax, esi
jge 0x40d4ca
mov dword [esp + 0x24], eax
jmp 0x40d4d6
mov eax, dword [esp + 0x40]
mov dword [esp + 0x28], eax
jmp 0x40d4d6
mov esi, eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [edi + 0x18c], edx
mov dword [edi + 0x190], ecx
mov dword [edi + 0x194], esi
push 1
mov dword [edi + 0x198], eax
sub eax, ecx
push eax
sub esi, edx
push esi
push ecx
push edx
mov ecx, edi
call fcn.00432b62
mov esi, dword [esp + 0x1c]
mov dword [edi + 0xf4c], 1
mov edi, 0x46f2c4
mov eax, esi
call fcn.0041d020
call fcn.0042fc51
mov edi, dword [eax + 0xc]
mov ebx, dword [sym.imp.USER32.dll_LoadImageA]
push 0
push 0
push 0
push 0
push 0xfb
push edi
call ebx
push 0
push 0
push 0
push 0
push 0xf8
push edi
mov dword [esp + 0x30], eax
call ebx
push 0
push 0
push 0
push 0
push 0x102
push edi
mov dword [esp + 0x34], eax
call ebx
mov ebx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
call fcn.0041ce90
mov eax, dword [esp + 0x20]
mov esi, dword [ebp + 8]
mov ebx, 1
xor edi, edi
mov dword [eax + 0x5c], ebx
mov dword [eax + 0x60], edi
mov ecx, dword [esi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edx, dword [0x482da8]
push 0x46f194
push edx
call fcn.0044a428
add esp, 8
cmp eax, edi
sete al
test al, al
je 0x40d662
call fcn.0042fdf3
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40d5d2
push 0x80004005
call fcn.0040aa40
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], edi
cmp dword [0x482ca4], edi
je 0x40d601
mov ecx, dword [0x482d8c]
push ecx
push str.c:ipepmemfile_pwfcreate_08_09_17_file__s_view2.html
lea edx, [esp + 0x18]
push edx
jmp 0x40d611
mov eax, dword [0x482d8c]
push eax
push str.c:ipepmemfile_pwfcreate_08_09_17_file__s_view1.html
lea ecx, [esp + 0x18]
push ecx
call fcn.0040ab20
mov ecx, dword [esp + 0x20]
add esp, 0xc
push edi
call fcn.00432ba0
lea edi, [esi + 0x74]
push 5
mov ecx, edi
call fcn.00432ba0
mov ebx, dword [esp + 0x10]
push 0
push 0
push 0
push 0
push 0
push ebx
mov ecx, edi
call fcn.00433a6d
lea eax, [ebx - 0x10]
mov dword [esp + 0x50], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x40d74a
call fcn.0042fdf3
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40d67c
push 0x80004005
call fcn.0040aa40
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], ebx
mov ecx, dword [0x482d8c]
push ecx
lea edx, [esp + 0x14]
push str.c:ipepmemfile_pwfcreate_08_09_17_file__s_reader.swf
push edx
call fcn.0040ab20
add esp, 0xc
call fcn.0040d7a0
mov edi, dword [esp + 0x10]
push edi
push 0
push 0x480164
push 0
push 0
push ebx
mov ebx, dword [esp + 0x2c]
push 0x8e
push ebx
call fcn.00432c1e
add esp, 0x20
push 5
mov ecx, ebx
call fcn.00432ba0
push 0x482cb4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0xffffffffffffffff
push 0
mov ecx, 0x482e20
call fcn.00425c5f
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x18]
push eax
push 0
push esi
push 0x411480
push 0
push 0
call ebx
mov ecx, dword [esi + 0x20]
push 0
push 0x64
push 0xce
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
lea edx, [esp + 0x18]
push edx
push 0
push esi
push 0x4073c0
push 0
push 0
call ebx
lea eax, [edi - 0x10]
mov dword [esp + 0x50], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40d756
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esi + 0x404], 0
je 0x40d780
mov ecx, dword [esi + 0x3fc]
mov edx, dword [esi + 0x238]
imul ecx, ecx, 0x3e8
push 0
push ecx
push 0xcd
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4