Function at 0x40a45a
Capabilities:
Delete file
Get common file path
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x33c
mov eax, dword [0x51a448]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor edx, edx
mov dword [ebp - 0x33c], 1
push edi
push 2
push edx
xor eax, eax
mov dword [ebp - 0x320], edx
push ecx
mov esi, edx
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x338], edx
mov ebx, edx
mov dword [ebp - 0x334], edx
mov dword [ebp - 0x330], edx
mov dword [ebp - 0x328], edx
mov word [ebp - 0x210], ax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edi, eax
test edi, edi
je 0x40a64b
lea eax, [ebp - 0x318]
mov byte [ebp - 0x318], bl
mov dword [ebp - 0x31c], eax
lea eax, [ebp - 0x31c]
push eax
push 0x40a435
push 0xe
push edi
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
cmp dword [ebp - 0x31c], ebx
je 0x40a64b
push ebx
push 0x10
push 0x10
push 1
push dword [ebp - 0x31c]
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, eax
test esi, esi
jne 0x40a52c
push eax
push 0x20
push 0x20
push 1
push dword [ebp - 0x31c]
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, eax
test esi, esi
je 0x40a64b
push 0
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
lea eax, [ebp - 0x210]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push str.K7ACCtrlImgTemp.k7t
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x210]
mov ecx, esi
call fcn.0040a1ae
test eax, eax
je 0x40a64b
xor eax, eax
push eax
push eax
push 3
push eax
push eax
push SysReAllocString
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x32c], eax
cmp eax, 0xffffffff
je 0x40a64b
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x324], eax
cmp eax, 0x800
ja 0x40a62b
add eax, 0x40
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test ebx, ebx
je 0x40a62b
push 0
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x324]
push ebx
push dword [ebp - 0x32c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40a62b
mov edx, dword [ebp - 0x324]
test edx, edx
je 0x40a62b
mov ecx, ebx
call fcn.0040439a
push eax
mov dword [ebp - 0x320], eax
call fcn.004c8d20
pop ecx
cmp eax, 0xfa0
jbe 0x40a62b
push dword [ebp - 0x320]
call fcn.004c8ceb
and dword [ebp - 0x320], 0
pop ecx
push dword [ebp - 0x32c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x40a64b
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x328], 0
je 0x40a660
push dword [ebp - 0x328]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
test esi, esi
je 0x40a66b
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
test edi, edi
je 0x40a676
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp word [ebp - 0x210], 0
je 0x40a68d
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x320]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.0049d307
leave
ret