Function at 0x415371
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2cc
mov ecx, dword [0x4d7eb8]
cmp ecx, 0xffffffff
jne 0x415389
xor eax, eax
leave
ret
mov eax, dword [ebp + 0xc]
push edi
xor edi, edi
cmp eax, edi
je 0x4153ad
test byte [eax], 0x10
je 0x4153ad
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
jmp 0x4153b6
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
cmp ecx, edi
push ebx
push esi
jne 0x4156e2
push str.GdiPlus.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
cmp ebx, edi
jne 0x4154c4
push 0xb
pop ecx
push 1
push 0
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], edi
lea eax, [ebp - 4]
push eax
mov esi, str._SystemRoot_WinSxS
lea edi, [ebp - 0x7c]
lea eax, [ebp - 0x7c]
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, 0x4d80e8
call fcn.00454bdd
lea eax, [ebp - 0x2cc]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x10]
push eax
call fcn.004a976e
add esp, 0xc
test eax, eax
je 0x4154a0
push dword [ebp - 4]
call fcn.0040fbcd
pop ecx
cmp word [ebp - 0x2a0], 0x2e
je 0x41548d
test byte [ebp - 0x2cc], 0x10
je 0x41548d
push dword [ebp - 4]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
call esi
mov edi, eax
lea eax, [ebp - 0x2a0]
push eax
call esi
lea eax, [eax + edi + 0x1e]
push eax
lea ecx, [ebp - 0xc]
call fcn.00443f79
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 4]
push str._s_sGdiPlus.dll
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea ecx, [ebp - 0xc]
mov ebx, eax
call fcn.0043db4f
test ebx, ebx
jne 0x4154a0
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x10]
call fcn.00405715
test eax, eax
jne 0x415425
lea ecx, [ebp - 4]
call fcn.0043db4f
lea ecx, [ebp - 0x10]
call fcn.00402cea
test ebx, ebx
jne 0x4154c2
or dword [0x4d7eb8], 0xffffffff
xor eax, eax
jmp 0x4159e3
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.GdiplusShutdown
push ebx
call esi
push str.GdipLoadImageFromFile
push ebx
mov dword [0x4d7ebc], eax
call esi
push str.GdipDisposeImage
push ebx
mov dword [0x4d7ec8], eax
call esi
push str.GdipCreateFromHDC
push ebx
mov dword [0x4d7ec0], eax
call esi
push str.GdipDrawImageRectI
push ebx
mov dword [0x4d7f08], eax
call esi
push str.GdipCreateBitmapFromHBITMAP
push ebx
mov dword [0x4d7ec4], eax
call esi
push str.GdipCreateHBITMAPFromBitmap
push ebx
mov dword [0x4d7eec], eax
call esi
push str.GdipSaveImageToFile
push ebx
mov dword [0x4d7ef0], eax
call esi
push str.GdipGetImageEncodersSize
push ebx
mov dword [0x4d7ef4], eax
call esi
push str.GdipGetImageEncoders
push ebx
mov dword [0x4d7ed4], eax
call esi
push str.GdipDrawImageI
push ebx
mov dword [0x4d7ed8], eax
call esi
push str.GdipGetImageWidth
push ebx
mov dword [0x4d7ef8], eax
call esi
push str.GdipGetImageHeight
push ebx
mov dword [0x4d7efc], eax
call esi
push str.GdipDrawImageRectRectI
push ebx
mov dword [0x4d7f00], eax
call esi
push str.GdipDeleteGraphics
push ebx
mov dword [0x4d7f04], eax
call esi
push str.GdipSetInterpolationMode
push ebx
mov dword [0x4d7f0c], eax
call esi
push str.GdipSetPixelOffsetMode
push ebx
mov dword [0x4d7f10], eax
call esi
push str.GdipSetSmoothingMode
push ebx
mov dword [0x4d7f14], eax
call esi
push str.GdipLoadImageFromStream
push ebx
mov dword [0x4d7f18], eax
call esi
push str.GdipGetImageType
push ebx
mov dword [0x4d7f1c], eax
call esi
mov dword [0x4d7f20], eax
push str.GdipCreateBitmapFromHICON
push ebx
call esi
push str.GdipGetImageDimension
push ebx
mov dword [0x4d7f2c], eax
call esi
push str.GdipCreateHICONFromBitmap
push ebx
mov dword [0x4d7f30], eax
call esi
push str.GdipSetTextRenderingHint
push ebx
mov dword [0x4d7f24], eax
call esi
push str.GdipImageGetFrameDimensionsList
push ebx
mov dword [0x4d7f28], eax
call esi
push str.GdipImageSelectActiveFrame
push ebx
mov dword [0x4d7ecc], eax
call esi
push str.GdipImageGetFrameDimensionsCount
push ebx
mov dword [0x4d7ed0], eax
call esi
push str.GdipImageGetFrameCount
push ebx
mov dword [0x4d7edc], eax
call esi
push str.GdipGetPropertyItemSize
push ebx
mov dword [0x4d7ee0], eax
call esi
push str.GdipGetPropertyItem
push ebx
mov dword [0x4d7ee4], eax
call esi
push str.GdipBitmapLockBits
push ebx
mov dword [0x4d7ee8], eax
call esi
push str.GdipBitmapUnlockBits
push ebx
mov dword [0x4d7f34], eax
call esi
push str.GdipCreateBitmapFromScan0
push ebx
mov dword [0x4d7f38], eax
call esi
push str.GdipCreateBitmapFromResource
push ebx
mov dword [0x4d7f3c], eax
call esi
push str.GdipCloneBitmapAreaI
push ebx
mov dword [0x4d7f40], eax
call esi
push str.GdipGetImageGraphicsContext
push ebx
mov dword [0x4d7f44], eax
call esi
push str.GdipScaleWorldTransform
push ebx
mov dword [0x4d7f48], eax
call esi
push str.GdipCreateTexture
push ebx
mov dword [0x4d7f4c], eax
call esi
push str.GdipDeleteBrush
push ebx
mov dword [0x4d7f50], eax
call esi
push str.GdipFillRectangle
push ebx
mov dword [0x4d7f54], eax
call esi
mov dword [0x4d7f58], eax
push str.GdiplusStartup
push ebx
call esi
mov ecx, eax
mov dword [0x4d7eb8], ecx
cmp dword [0x4d7fdc], edi
jne 0x415710
cmp dword [0x4d7ec8], edi
je 0x415710
xor eax, eax
mov dword [ebp - 0x50], 1
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x50]
push eax
push 0x4d7fdc
call ecx
xor edi, edi
mov esi, dword [ebp + 8]
lea eax, [esi - 1]
cmp eax, 0xfffffffe
jb 0x415725
mov eax, dword [0x4d7fdc]
jmp 0x4159e3
lea eax, [esi + 2]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
call fcn.004404ef
pop ecx
pop ecx
push 0x7c
push esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
cmp eax, edi
mov dword [ebp - 4], eax
je 0x41576c
mov word [eax], di
push 0x23
push edi
push esi
mov dword [ebp - 0x38], eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov ecx, dword [0x4d7ec8]
mov ebx, eax
mov ax, word [esi]
cmp ax, 0x23
je 0x41579d
cmp dword [ebp - 4], edi
jne 0x415797
cmp ecx, edi
jne 0x4158cd
cmp ax, 0x23
jne 0x4157a9
mov eax, dword [0x4d7fa0]
mov ebx, esi
mov dword [ebp - 0xc], eax
jmp 0x4157fa
cmp ebx, edi
je 0x4158c5
mov ax, word [ebx]
push 2
push edi
push esi
mov word [ebp - 0x18], ax
mov word [ebx], di
call fcn.00412ae5
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov ax, word [ebp - 0x18]
mov word [ebx], ax
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x4157e6
sub eax, ebx
sar eax, 1
jmp 0x4157ed
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044407f
mov ebx, dword [ebp - 0x1c]
cmp dword [ebp - 4], edi
je 0x41593a
push 2
pop esi
add dword [ebp - 4], esi
je 0x41593a
mov eax, dword [ebp - 4]
cmp word [eax], di
jne 0x41581a
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edi
je 0x41593a
push dword [ebp - 4]
call fcn.0043fb28
test al, al
pop ecx
je 0x41585f
push ebx
push dword [ebp - 0xc]
mov dword [ebp - 4], esi
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov esi, eax
cmp esi, edi
je 0x41593a
lea eax, [ebp - 8]
push eax
push edi
push esi
call dword [0x4d7eec]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x41593a
push dword [ebp - 4]
call fcn.0043fafb
test al, al
pop ecx
je 0x41587c
mov dword [ebp - 4], 3
mov dword [ebp - 0x14], 0x14
jmp 0x415897
push dword [ebp - 4]
call fcn.0043fabc
test al, al
pop ecx
je 0x41593a
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
push eax
push edi
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push ebx
push dword [ebp - 0xc]
call fcn.0044f7ee
add esp, 0x18
test byte [ebp - 0x13], 1
mov esi, eax
je 0x415910
cmp esi, edi
mov dword [ebp - 8], esi
je 0x415937
mov eax, dword [ebp + 0xc]
or dword [eax], 4
jmp 0x415932
cmp ecx, edi
je 0x4159c2
push esi
call fcn.00448051
test al, al
pop ecx
je 0x4158f9
lea eax, [ebp - 0x28]
push eax
push esi
call fcn.0041477a
push edi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call fcn.00442bf7
add esp, 0x14
mov dword [ebp - 8], eax
jmp 0x4159c2
push 0x10
push edi
push edi
push 1
push esi
push edi
call dword [sym.imp.USER32.dll_LoadImageW]
cmp eax, edi
mov dword [ebp - 0x18], eax
je 0x415987
mov esi, eax
cmp dword [ebp - 0x2c], edi
je 0x415920
mov eax, dword [ebp + 0xc]
or dword [eax], 2
mov dword [ebp - 8], esi
jmp 0x415932
lea eax, [ebp - 8]
push eax
push esi
call dword [0x4d7f2c]
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp dword [ebp - 8], edi
jne 0x41593a
mov dword [ebp - 8], edi
cmp dword [ebp - 0xc], edi
je 0x415977
cmp dword [ebp - 8], edi
jne 0x415977
cmp dword [ebp - 4], edi
jne 0x415950
mov dword [ebp - 4], 2
push edi
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 4]
push ebx
push dword [ebp - 0xc]
call fcn.00414db6
push edi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call fcn.00442bf7
add esp, 0x20
cmp eax, edi
mov dword [ebp - 8], eax
jne 0x4159c2
cmp dword [ebp - 0x10], edi
je 0x4159c2
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4159c2
lea eax, [ebp - 8]
push eax
push esi
call dword [0x4d7ec8]
cmp dword [ebp - 8], edi
je 0x4159c2
mov ebx, dword [ebp + 0xc]
cmp ebx, edi
je 0x4159c2
push 0x2e
push edi
push esi
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
cmp eax, edi
je 0x4159c2
push 0x4bfa80
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4159c2
or dword [ebx], 4
mov eax, dword [ebp - 0x38]
cmp eax, edi
je 0x4159ce
mov word [eax], 0x7c
mov esi, dword [ebp - 8]
lea ecx, [ebp - 0x28]
call fcn.0043db4f
lea ecx, [ebp - 0x1c]
call fcn.0043db4f
mov eax, esi
pop esi
pop ebx
pop edi
leave
ret