Function at 0x46a810
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4b8512
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x468
push ebx
push ebp
push esi
xor ebp, ebp
push edi
push ebp
lea ecx, [esp + 0x4c]
call fcn.004adda0
mov dword [esp + 0x480], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], 0x4bcfb4
lea ecx, [esp + 0x24]
mov byte [esp + 0x480], 1
call fcn.004ad59e
mov ebx, dword [esp + 0x4c]
lea eax, [esp + 0x48]
neg eax
sbb eax, eax
mov byte [esp + 0x480], 2
and eax, ebx
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x28]
call fcn.004ad655
mov esi, dword [esp + 0x488]
push 0x18
movsx eax, word [esi]
lea eax, [eax + eax*2]
shl eax, 3
push eax
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x14]
call fcn.004ae048
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x10]
neg eax
sbb eax, eax
and eax, ebx
push eax
push ecx
call fcn.004ad796
cmp word [esi], bp
mov edi, eax
mov dword [esp + 0x20], edi
jle 0x46aa0b
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
jmp 0x46a8ed
mov esi, dword [esp + 0x488]
call fcn.004b25bf
mov edx, dword [esi + 0xa]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + 8]
push 0x10
push 0
push 0
lea edx, [ecx + edx + 1]
push 0
push edx
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, eax
test esi, esi
je 0x46aa13
lea ecx, [esp + 0x38]
call fcn.004ad59e
mov edx, dword [esp + 0x4c]
lea eax, [esp + 0x48]
neg eax
sbb eax, eax
mov byte [esp + 0x480], 3
and eax, edx
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x3c]
call fcn.004ad655
lea eax, [esp + 0x5c]
push eax
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectA]
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push esi
and eax, edx
push eax
call ebx
push 3
lea ecx, [esp + 0x28]
mov edi, eax
call fcn.004ad921
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x64]
lea eax, [esp + 0x38]
push 0xcc0020
neg eax
sbb eax, eax
push ecx
and eax, edx
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x30]
push edx
push 0
push 0
push eax
mov eax, dword [esp + 0x30]
push 0x18
push 0x18
push 0
push eax
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edi
and eax, ecx
push eax
call ebx
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
lea ecx, [esp + 0x38]
mov byte [esp + 0x480], 2
call fcn.004ad6d3
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
add edx, 0x18
mov edi, dword [esp + 0x20]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x488]
inc ebp
add esi, 0x10b
movsx eax, word [edx]
cmp ebp, eax
mov dword [esp + 0x1c], esi
jl 0x46a8e6
xor ebp, ebp
cmp edi, ebp
jne 0x46aa54
xor eax, eax
jmp 0x46aa57
test edi, edi
je 0x46aa1a
mov edi, dword [edi + 4]
mov ecx, dword [esp + 0x28]
push edi
push ecx
call fcn.004ad796
lea ecx, [esp + 0x24]
call fcn.004ad6bd
lea ecx, [esp + 0x24]
mov byte [esp + 0x480], 1
call fcn.004ad6d3
mov dword [esp + 0x10], vtable.CGdiObject.0
mov byte [esp + 0x480], 4
jmp 0x46ab58
mov eax, dword [edi + 4]
mov edx, dword [esp + 0x28]
push eax
push edx
call fcn.004ad796
lea ecx, [esp + 0x24]
call fcn.004ad6bd
mov ecx, dword [esp + 0x14]
lea esi, [esp + 0x10]
neg esi
sbb esi, esi
push ebp
and esi, ecx
call dword [sym.imp.USER32.dll_GetDC]
push 1
push esi
mov edi, eax
call fcn.004600d0
add esp, 8
mov ebx, eax
call fcn.004b25bf
mov eax, dword [eax + 4]
lea ecx, [esp + 0x74]
mov eax, dword [eax + 0x8c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x378]
lea eax, [esp + 0x278]
push edx
lea ecx, [esp + 0x17c]
push eax
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x80]
push edx
push eax
call fcn.004985ac
push 0x4d58e0
lea ecx, [esp + 0x190]
push 0x4d58e0
lea edx, [esp + 0x50]
push ecx
lea eax, [esp + 0x94]
push edx
push eax
call fcn.00496c32
add esp, 0x28
lea ecx, [esp + 0x74]
push str.HTToolBar.bmp
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [esp + 0x74]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push edi
push esi
lea eax, [esp + 0x7c]
push ebx
push eax
push 0
call fcn.00460200
add esp, 0x14
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [esp + 0x24]
mov byte [esp + 0x480], 1
call fcn.004ad6d3
mov dword [esp + 0x10], vtable.CGdiObject.0
mov byte [esp + 0x480], 5
lea ecx, [esp + 0x10]
call fcn.004ae09f
lea ecx, [esp + 0x48]
mov dword [esp + 0x480], 0xffffffff
call fcn.004ade12
mov ecx, dword [esp + 0x478]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x474
ret