Function at 0x478600
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56a980
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x5c5678]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
cmp edi, ebx
je 0x478845
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x478845
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x1c]
push eax
push ecx
mov dword [ebp - 0x1c], ebx
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, ebx
je 0x478656
mov dword [esi + 8], eax
mov eax, dword [esi + 4]
lea edx, [ebp - 0x18]
push edx
push eax
mov dword [ebp - 0x18], ebx
call sub.gdiplus.dll_GdipGetImageHeight
cmp eax, ebx
je 0x47866d
mov dword [esi + 8], eax
mov ecx, dword [ebp - 0x18]
push 0x26200a
push ebx
push ebx
mov ebx, dword [ebp - 0x1c]
push ecx
push ebx
push edi
call fcn.004d3370
add esp, 0x18
mov dword [ebp - 0x14], eax
test eax, eax
je 0x478845
xor edi, edi
test ebx, ebx
jl 0x478782
xor esi, esi
cmp dword [ebp - 0x18], esi
jl 0x478779
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x20]
push edx
push esi
push edi
push ecx
xor ebx, ebx
call sub.gdiplus.dll_GdipBitmapGetPixel
test eax, eax
je 0x4786c5
mov edx, dword [ebp + 8]
mov dword [edx + 8], eax
jmp 0x4786c8
mov ebx, dword [ebp - 0x20]
mov eax, ebx
shr eax, 0x18
mov byte [ebp - 0xd], al
cmp al, 0xff
jne 0x4786f1
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebx + 4]
push 0
push esi
push edi
push eax
call sub.gdiplus.dll_GdipBitmapSetPixel
test eax, eax
je 0x47876c
mov dword [ebx + 8], eax
jmp 0x47876c
test al, al
je 0x47876c
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x24]
push ecx
push esi
push edi
push eax
xor ebx, ebx
call sub.gdiplus.dll_GdipBitmapGetPixel
test eax, eax
je 0x478715
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 8], eax
jmp 0x478718
mov ebx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0xd]
mov eax, ebx
mov ecx, 0xff
shr eax, 0x18
sub ecx, edx
cmp ecx, eax
jl 0x47872e
mov cl, al
movzx ecx, cl
mov eax, ebx
shr eax, 0x10
movzx eax, al
shl ecx, 8
or eax, ecx
mov edx, ebx
shr edx, 8
movzx ecx, dl
shl eax, 8
or eax, ecx
movzx edx, bl
shl eax, 8
or eax, edx
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
push esi
push edi
push ecx
call sub.gdiplus.dll_GdipBitmapSetPixel
test eax, eax
je 0x47876c
mov edx, dword [ebp - 0x14]
mov dword [edx + 8], eax
inc esi
cmp esi, dword [ebp - 0x18]
jle 0x4786a5
mov ebx, dword [ebp - 0x1c]
inc edi
cmp edi, ebx
jle 0x47869a
lea esi, [ebp - 0x24]
xor edi, edi
call fcn.00478360
mov dword [ebp - 4], edi
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x478813
mov ecx, dword [ebp - 0x14]
push 0x64
lea eax, [ebp - 0x20]
push 0x58f384
push eax
call fcn.004d3a00
add esp, 0xc
mov byte [ebp - 4], 1
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], edi
je 0x4787f3
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov edi, str.disable_resize
call fcn.00422950
push ecx
mov byte [ebp - 4], 2
mov edx, esp
mov dword [ebp - 0x18], esp
push edx
mov edi, esi
call fcn.00422950
mov byte [ebp - 4], 3
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.00478260
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x478813
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x478831
mov ecx, dword [ebx]
mov edx, dword [ecx + 8]
push ebx
call edx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret