Function at 0x4046cd
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
push edi
xor edi, edi
push 0x10
push edi
push edi
push edi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
cmp eax, edi
mov dword [ebp - 0x20], eax
je 0x4048d1
push ebx
lea ecx, [ebp - 0x54]
push esi
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov dword [ebp - 0xc], eax
call esi
push dword [ebp - 0xc]
mov dword [ebp - 8], eax
call esi
push dword [ebp - 0x20]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 4], eax
push dword [ebp - 8]
call esi
cmp dword [ebx + 0x52a], edi
mov dword [ebp - 0x20], eax
je 0x404765
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x38], edi
push dword [ebp - 8]
push dword [ebx + 0x52e]
call fcn.00401c23
add esp, 0xc
push 0x2c
lea eax, [ebp - 0x80]
push edi
push eax
call sub.MSVCRT.dll_memset
mov eax, dword [ebp - 0x50]
add esp, 0xc
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x78], eax
push edi
lea eax, [ebp - 0x28]
push edi
push eax
lea eax, [ebp - 0x80]
push edi
push eax
push dword [ebp - 0xc]
mov dword [ebp - 0x80], 0x28
mov word [ebp - 0x74], 1
mov word [ebp - 0x72], 0x18
call dword [sym.imp.GDI32.dll_CreateDIBSection]
cmp eax, edi
je 0x4048ab
push eax
push dword [ebp - 4]
call esi
push 0xcc0020
push edi
push edi
mov dword [ebp - 0x1c], eax
push dword [ebp - 8]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push edi
push edi
push dword [ebp - 4]
call dword [sym.imp.GDI32.dll_BitBlt]
call dword [sym.imp.GDI32.dll_GdiFlush]
push dword [ebp - 0x1c]
push dword [ebp - 4]
call esi
push dword [ebp - 4]
mov dword [ebp - 0x1c], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x50]
lea eax, [eax + eax*2]
push eax
push edi
push dword [0x41514c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], edi
lea edx, [ecx + ecx*2]
dec eax
imul eax, edx
cmp dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], edx
je 0x404875
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
add edx, eax
cmp ecx, edi
je 0x40485f
mov ecx, dword [ebp - 0x24]
mov bl, byte [edx + 2]
mov byte [ecx], bl
mov bl, byte [edx + 1]
mov byte [ecx + 1], bl
mov bl, byte [edx]
mov byte [ecx + 2], bl
add ecx, 3
add edx, 3
inc dword [ebp - 4]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x50]
cmp dword [ebp - 4], ecx
jne 0x404838
mov edx, dword [ebp - 0x2c]
add dword [ebp - 0x10], edx
sub eax, edx
inc dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x4c]
jne 0x404826
mov ebx, dword [ebp + 8]
push dword [ebx + 0x532]
lea eax, [ebx + 0x562]
push edi
push eax
push dword [ebp - 0x4c]
push ecx
push dword [ebp - 0x18]
call fcn.00403e9a
add esp, 0x18
push dword [ebp - 0x18]
push edi
push dword [0x41514c]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0x1c]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x20]
push dword [ebp - 8]
call esi
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0xc]
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0xc]
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebx
push dword [ebp + 0xc]
call dword [sym.imp.MSVCRT.dll_remove]
pop ecx
pop edi
leave
ret