Function at 0x4734c0
Capabilities:
Check if file exists
Get file attributes
Get file size
Link many functions at runtime
Read file on windows

Disassembly:
sub esp, 0x250
push ebx
mov ebx, dword [esp + 0x270]
push ebp
mov ebp, dword [esp + 0x25c]
push esi
mov esi, dword [esp + 0x26c]
push edi
mov edi, dword [esp + 0x274]
mov dword [esp + 0x10], 0
mov dword [esi], 0xffffffff
test ebx, ebx
je 0x4734fb
mov byte [ebx], 0
cmp byte [ebp], 0
je 0x473669
push 6
push str.hicon:
push ebp
mov byte [esp + 0x23], 0
mov byte [esp + 0x21], 0
call fcn.00485860
add esp, 0xc
test eax, eax
je 0x47353f
test edi, edi
jne 0x4735b2
push 8
push str.hbitmap:
push ebp
call fcn.00485860
add esp, 0xc
test eax, eax
jne 0x4735b2
cmp byte [ebp + 5], 0x3a
jne 0x473550
mov dword [esi], 1
add ebp, 6
jmp 0x473559
mov dword [esi], 0
add ebp, 8
cmp byte [ebp], 0x2a
mov dword [esp + 0x264], ebp
sete al
mov byte [esp + 0x17], 1
mov byte [esp + 0x15], al
test al, al
je 0x473583
inc ebp
mov dword [esp + 0x264], ebp
test ebx, ebx
je 0x473583
mov byte [ebx], 1
mov eax, ebp
call fcn.0040ce10
test al, al
je 0x47359d
push 0x10
push 0
push ebp
call fcn.00486bdb
add esp, 0xc
jmp 0x4735a6
push ebp
call fcn.00486371
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x473669
push 0x2e
push ebp
call fcn.00486fda
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4735c4
inc ebx
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x47367a
cmp edi, 1
ja 0x473637
test ebx, ebx
je 0x47367a
push 0x49d9f8
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473637
push 0x49d9fc
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473637
push 0x4a07c4
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473637
push 0x4a07c8
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473637
push 0x4a07cc
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
jne 0x473676
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x268]
push eax
push ecx
push edi
push ebp
mov byte [esp + 0x26], 1
mov dword [esi], 1
call fcn.00473ca0
add esp, 0x10
mov dword [esp + 0x10], eax
cmp eax, 2
jae 0x4736ed
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
mov eax, dword [esp + 0x10]
mov byte [esp + 0x16], 0
test edi, edi
jle 0x47368b
mov dword [esi], 1
jmp 0x4736ed
test ebx, ebx
je 0x4736ed
push 0x49d9f4
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
jne 0x4736a9
mov dword [esi], 1
jmp 0x4736e9
push 0x4a07d0
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x4736e3
push 0x4a07d4
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x4736e3
push 0x4a07d8
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
jne 0x4736e9
mov dword [esi], eax
jmp 0x4736e9
mov dword [esi], 2
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x268]
mov ecx, dword [esp + 0x26c]
cmp edx, 0xffffffff
je 0x473705
cmp ecx, 0xffffffff
jne 0x473724
xor esi, esi
cmp edx, esi
je 0x47370f
cmp ecx, esi
jne 0x473724
mov dword [esp + 0x26c], esi
mov dword [esp + 0x268], esi
mov byte [esp + 0x14], 0
jmp 0x47373a
cmp edx, 0xffffffff
je 0x473735
cmp ecx, 0xffffffff
je 0x473735
mov byte [esp + 0x14], 0
jmp 0x47373a
mov byte [esp + 0x14], 1
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor edi, edi
cmp byte [esp + 0x278], 0
je 0x473765
push str.gdiplus
call esi
mov edi, eax
mov eax, dword [esp + 0x10]
test edi, edi
jne 0x473765
mov byte [esp + 0x278], 0
test eax, eax
jne 0x473822
mov edx, dword [esp + 0x270]
mov edx, dword [edx]
cmp edx, 0xffffffff
jle 0x473822
cmp byte [esp + 0x278], al
jne 0x473822
cmp byte [esp + 0x14], al
je 0x473796
xor ecx, ecx
jmp 0x4737a4
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x26c]
push 0x2010
push ecx
push eax
push edx
push ebp
push 0
call dword [sym.imp.USER32.dll_LoadImageA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x4737cf
cmp byte [esp + 0x14], 0
jne 0x473822
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x473669
cmp dword [esp + 0x274], 0
jle 0x47381e
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x268]
mov edx, dword [esp + 0x274]
push eax
push ecx
push edx
push ebp
call fcn.00473ca0
add esp, 0x10
mov dword [esp + 0x10], eax
cmp eax, 2
jb 0x473669
mov byte [esp + 0x16], 1
jmp 0x473822
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], 0
test eax, eax
jne 0x47396e
cmp byte [esp + 0x278], 0
mov eax, dword [esp + 0x270]
mov dword [eax], 0
jne 0x473883
test ebx, ebx
je 0x473883
push 0x4a07e4
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473890
push str.jpeg
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473890
push 0x4a07f0
push ebx
call fcn.00484de1
add esp, 8
test eax, eax
je 0x473890
test edi, edi
jne 0x473898
push str.gdiplus
call esi
mov edi, eax
test edi, edi
je 0x473a45
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.GdiplusStartup
push edi
call esi
push str.GdiplusShutdown
push edi
mov ebp, eax
call esi
push str.GdipCreateBitmapFromFile
push edi
mov dword [esp + 0x2c], eax
call esi
push str.GdipCreateHBITMAPFromBitmap
push edi
mov ebx, eax
call esi
push str.GdipDisposeImage
push edi
mov dword [esp + 0x28], eax
call esi
mov esi, eax
xor eax, eax
mov dword [esp + 0x2c], 1
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
cmp ebp, eax
je 0x47395c
push eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x30]
push edx
call ebp
test eax, eax
jne 0x47395c
mov ecx, dword [esp + 0x264]
push 0x104
lea eax, [esp + 0x5c]
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x5c]
push eax
call ebx
test eax, eax
jne 0x473953
mov edx, dword [esp + 0x1c]
push 0xff000000
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [esp + 0x2c]
test eax, eax
je 0x47394c
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x1c]
push eax
call esi
mov ecx, dword [esp + 0x28]
push ecx
call dword [esp + 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x264]
cmp byte [esp + 0x14], 0
je 0x473bb4
mov esi, dword [esp + 0x270]
cmp dword [esi], 0
je 0x47399d
lea ecx, [esp + 0x2c]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x473b96
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x40]
push edx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov edi, dword [esp + 0x26c]
cmp edi, 0xffffffff
jne 0x473b6a
cmp dword [esp + 0x44], 0
je 0x4739de
fild dword [esp + 0x48]
fidiv dword [esp + 0x44]
fimul dword [esp + 0x268]
fadd qword [0x4a0b58]
call fcn.004937a0
mov edi, eax
mov ebx, dword [esp + 0x268]
cmp dword [esi], 0
je 0x473bae
mov eax, dword [esp + 0x3c]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push eax
call esi
mov ecx, dword [esp + 0x38]
push ecx
call esi
cmp byte [esp + 0x16], 0
jne 0x473bae
cmp byte [esp + 0x17], 0
jne 0x473bae
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [esp + 0x270]
mov ecx, dword [eax]
push 0x10
push edi
push ebx
push ecx
push ebp
push 0
call dword [sym.imp.USER32.dll_LoadImageA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
push 0
push 0
push 3
push 0
push 0
push SysReAllocString
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x473669
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push eax
push 2
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
jne 0x473a96
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
jne 0x473abc
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
mov ecx, dword [esp + 0x1c]
push 0
lea edx, [esp + 0x20]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x20]
push edx
push 0
push esi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
test eax, eax
js 0x473aa8
mov eax, dword [esp + 0x20]
test eax, eax
je 0x473aa8
lea ecx, [esp + 0x18]
push ecx
push 0x496808
push 0
push 0
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePictureIndirect]
test eax, eax
jns 0x473b19
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x20]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x473669
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x47396e
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
cmp dword [esp + 0x48], 0
je 0x4739de
fild dword [esp + 0x44]
fidiv dword [esp + 0x48]
fimul dword [esp + 0x26c]
fadd qword [0x4a0b58]
call fcn.004937a0
mov ebx, eax
jmp 0x4739e5
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
mov eax, dword [esp + 0x10]
jmp 0x473bc2
mov edi, dword [esp + 0x26c]
mov ebx, dword [esp + 0x268]
cmp dword [esp + 0x18], 0
je 0x473bfb
test ebx, ebx
jne 0x473bd6
test edi, edi
jne 0x473bd6
lea ecx, [ebx + 4]
jmp 0x473bd8
xor ecx, ecx
push ecx
push edi
push ebx
push 0
push eax
call dword [sym.imp.USER32.dll_CopyImage]
mov esi, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ebp, dword [esp + 0x27c]
jmp 0x473c54
test ebx, ebx
jne 0x473c20
test edi, edi
jne 0x473c20
cmp byte [esp + 0x15], 0
je 0x473c64
mov ebp, dword [esp + 0x27c]
test ebp, ebp
je 0x473c27
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret
mov ebp, dword [esp + 0x27c]
cmp byte [esp + 0x15], 0
je 0x473c39
mov ecx, ebp
neg ecx
sbb ecx, ecx
and ecx, 4
jmp 0x473c3e
mov ecx, 0xc
push ecx
mov ecx, dword [esp + 0x274]
mov edx, dword [ecx]
push edi
push ebx
push edx
push eax
call dword [sym.imp.USER32.dll_CopyImage]
mov esi, eax
cmp dword [esp + 0x10], esi
je 0x473c62
test ebp, ebp
je 0x473c62
mov byte [ebp], 0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x250
ret