Function at 0x4a530c
Capabilities:
Inspect load icon resource

Disassembly:
push 0xbf8
mov eax, 0x6940e8
call fcn.0056e23b
lea ecx, [ebp - 0xbc4]
call fcn.004a47af
and dword [ebp - 4], 0
call fcn.0052dc09
test eax, eax
je 0x4a57e4
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0xb88], eax
push 0x6c
inc ebx
mov dword [ebp - 0xb98], eax
push eax
mov dword [ebp - 0xb9c], ebx
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0xb90], eax
call esi
mov edi, dword [sym.imp.USER32.dll_LoadIconW]
push eax
call edi
push eax
push 0x6b
push 0
call esi
push eax
call edi
push eax
push 0xb
push 0
push 0x6cdadc
call fcn.00582d3d
add esp, 0x14
test eax, eax
je 0x4a578f
xor eax, eax
push eax
push eax
push 0x400b
push eax
push 0x6cdaf8
call fcn.00582d3d
add esp, 0x14
test eax, eax
je 0x4a578f
push 0x6c
push 0
call esi
push eax
call edi
push eax
push 0x6b
push 0
call esi
push eax
call edi
push eax
push 0xb
push 0
push 0x6cdb10
call fcn.00582d3d
add esp, 0x14
test eax, eax
je 0x4a578f
xor eax, eax
push eax
push eax
push 0xb
push eax
push 0x6cdb30
call fcn.00582d3d
add esp, 0x14
test eax, eax
je 0x4a578f
push 0
lea eax, [ebp - 0xb9c]
push eax
lea eax, [ebp - 0xb88]
push eax
call sub.gdiplus.dll_GdiplusStartup
test eax, eax
jne 0x4a578f
call fcn.004a6a09
test eax, eax
je 0x4a578f
mov edi, 0x7967a8
mov ecx, edi
call fcn.00672b08
cmp eax, ebx
jbe 0x4a547f
push ebx
mov ecx, edi
call fcn.0052a7d7
push eax
lea ecx, [ebp - 0xbc4]
call fcn.004a4b77
lea ecx, [ebp - 0x278]
call fcn.004a473a
mov byte [ebp - 4], bl
lea eax, [ebp - 0xbc4]
push eax
lea ecx, [ebp - 0x278]
call fcn.004a5101
test eax, eax
je 0x4a5543
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.004a4998
mov ecx, edi
call fcn.00672b08
cmp eax, ebx
jbe 0x4a56bd
lea ecx, [ebp - 0xbc4]
call fcn.004a61fe
test eax, eax
jne 0x4a56bd
push eax
call fcn.005650c3
pop ecx
test eax, eax
je 0x4a56bd
call fcn.005652d3
test eax, eax
jne 0x4a56bd
push 0x6cdb48
call fcn.005452cc
pop ecx
lea ecx, [ebp - 0xc04]
call fcn.0056606c
mov byte [ebp - 4], 2
xorps xmm0, xmm0
push ecx
push ecx
lea ecx, [ebp - 0xc04]
movsd qword [esp], xmm0
call fcn.005660f2
push 0x6cdb98
call fcn.0052dc53
pop ecx
test eax, eax
je 0x4a5510
push 0x6cdb5c
call fcn.0052dd63
mov dword [ebp - 0xb7c], eax
pop ecx
test eax, eax
jne 0x4a5557
push 0
lea ecx, [ebp - 0xc04]
call fcn.00566268
fstp qword [ebp - 0xb84]
movsd xmm0, qword [ebp - 0xb84]
comisd xmm0, xmmword [0x6ce6f8]
jae 0x4a56a9
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4a54ec
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.004a4998
jmp 0x4a578f
xor esi, esi
push ebx
jmp 0x4a5567
mov eax, dword [eax + 0x14]
push 0
lea esi, [esi + eax*2]
add esi, 2
lea ecx, [ebp - 0xbc4]
call fcn.004a5280
test eax, eax
jne 0x4a555c
inc esi
add esi, 1
mov dword [ebp - 0xb8c], esi
je 0x4a56a9
lea ecx, [ebp - 0x2c]
call fcn.004173bc
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x6cdbe4
lea eax, [ebp - 0x2c]
push 0x6cdc24
push eax
call fcn.0041ccda
add esp, 0x10
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
cmovae eax, dword [ebp - 0x28]
push eax
push esi
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0xb80], eax
test eax, eax
je 0x4a5696
xor ecx, ecx
push ecx
push ecx
push ecx
push 0xf001f
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
push ebx
lea ecx, [ebp - 0xbc4]
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0xb78], eax
call fcn.004a5280
mov edi, eax
test edi, edi
je 0x4a5655
mov esi, dword [ebp - 0xb74]
mov eax, dword [edi + 0x14]
lea ecx, [edi + 4]
cmp dword [ecx + 0x14], 8
jb 0x4a561b
mov ecx, dword [ecx]
lea eax, [eax*2 + 2]
push eax
push ecx
push esi
call fcn.00643300
mov eax, dword [edi + 0x14]
lea ecx, [ebp - 0xbc4]
add esp, 0xc
lea esi, [esi + eax*2]
push 0
add esi, 2
call fcn.004a5280
mov edi, eax
test edi, edi
jne 0x4a560d
mov dword [ebp - 0xb74], esi
mov esi, dword [ebp - 0xb8c]
mov eax, dword [ebp - 0xb74]
xor ecx, ecx
push esi
push dword [ebp - 0xb78]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_FlushViewOfFile]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x962
push 0x111
push dword [ebp - 0xb7c]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0xb80]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.0041786a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc04]
call fcn.005660ab
jmp 0x4a578f
push 0
mov esi, 0x796710
push 0
mov ecx, esi
call fcn.005615a0
test eax, eax
je 0x4a578f
push 0
push 0
push esi
call fcn.0052e443
add esp, 0xc
mov ecx, esi
call fcn.004d887e
test eax, eax
je 0x4a56fd
mov ecx, esi
call fcn.00560edb
test eax, eax
jne 0x4a56fd
call fcn.00551eca
lea ecx, [ebp - 0x240]
call fcn.004a477c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb70]
call fcn.004a46bd
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x48]
call fcn.004173bc
mov byte [ebp - 4], 6
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0xbc4]
call fcn.004a5994
test eax, eax
je 0x4a5753
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x2bc]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.004a4b77
jmp 0x4a5727
lea eax, [ebp - 0xb70]
push eax
lea ecx, [ebp - 0x240]
call fcn.00435332
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x48]
call fcn.0041786a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb70]
call fcn.004a491e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.004a49f1
call fcn.0052dbc7
push 0
push 0x6cdc40
call fcn.00582e78
push 0
push 0x6cdc5c
call fcn.00582e78
push 0
push 0x6cdc74
call fcn.00582e78
push 0
push 0x6cdc94
call fcn.00582e78
add esp, 0x20
call fcn.0052d329
call fcn.00541024
call dword [sym.imp.ole32.dll_OleUninitialize]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x4a597f
lea ecx, [ebp - 0xc04]
call fcn.0056606c
mov byte [ebp - 4], 7
xorps xmm0, xmm0
push ecx
push ecx
lea ecx, [ebp - 0xc04]
movsd qword [esp], xmm0
call fcn.005660f2
push 0x6cdcc8
call fcn.0052dc53
pop ecx
test eax, eax
je 0x4a582c
push str.Privacy_Eraser_File_Shredder_Loop
call fcn.0052dd63
mov dword [ebp - 0xb7c], eax
pop ecx
test eax, eax
jne 0x4a5871
push 0x6cde10
call fcn.0052dc53
pop ecx
test eax, eax
jne 0x4a594e
push eax
lea ecx, [ebp - 0xc04]
call fcn.00566268
fstp qword [ebp - 0xb84]
movsd xmm0, qword [ebp - 0xb84]
comisd xmm0, xmmword [0x6ce6f8]
jae 0x4a5970
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4a5808
lea ecx, [ebp - 0x2c]
call fcn.004173bc
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x6cdd9c
lea eax, [ebp - 0x2c]
push 0x6cdcac
push eax
call fcn.0041ccda
add esp, 0x10
xor ebx, ebx
inc ebx
mov edi, 0x7967a8
mov ecx, edi
push ebx
call fcn.0052a7d7
push eax
call fcn.00647fd1
cmp dword [ebp - 0x14], 8
pop ecx
lea ecx, [eax*2 + 2]
lea eax, [ebp - 0x28]
mov dword [ebp - 0xb80], ecx
cmovae eax, dword [ebp - 0x28]
push eax
push ecx
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0xb78], eax
test eax, eax
je 0x4a5940
xor ecx, ecx
push ecx
push ecx
push ecx
push 0xf001f
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
push ebx
mov ecx, edi
mov esi, eax
call fcn.0052a7d7
mov edi, dword [ebp - 0xb80]
push eax
push edi
push esi
call fcn.00651eba
add esp, 0xc
push edi
push esi
call dword [sym.imp.KERNEL32.dll_FlushViewOfFile]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x962
push 0x111
push dword [ebp - 0xb7c]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0xb78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c]
call fcn.0041786a
jmp 0x4a5970
push 0x6cdd1c
call fcn.0052dd63
mov esi, eax
pop ecx
test esi, esi
je 0x4a5970
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp esi, eax
je 0x4a5970
push esi
call fcn.005679a1
pop ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc04]
call fcn.005660ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc4]
call fcn.004a4a35
call fcn.0056e1e5
ret