Function at 0x10091890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
push ebp
push edi
mov edi, dword [esp + 0x98]
xor ebp, ebp
cmp edi, ebp
mov dword [esp + 0xc], ebp
je 0x10091cea
push ebx
push ebp
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x2c], ebx
je 0x10091cdc
push esi
lea eax, [esp + 0x40]
push eax
push 0x18
push edi
call dword [sym.imp.GDI32.dll_GetObjectW]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
push ebp
push ebp
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x68], ecx
push ebp
lea ecx, [esp + 0x68]
push ecx
push ebx
mov dword [esp + 0x70], 0x28
mov dword [esp + 0x78], edx
mov word [esp + 0x7c], 1
mov word [esp + 0x7e], 0x20
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], ebp
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov esi, eax
cmp esi, ebp
je 0x10091cc6
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x3c], ebp
je 0x10091caf
lea edx, [esp + 0x80]
push edx
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [esp + 0x8c]
mov ecx, eax
and ecx, 0x80000003
jns 0x1009198b
dec ecx
or ecx, 0xfffffffc
inc ecx
je 0x100919a9
lea ecx, [ecx]
inc eax
mov edx, eax
and edx, 0x80000003
jns 0x100919a0
dec edx
or edx, 0xfffffffc
inc edx
jne 0x10091990
mov dword [esp + 0x8c], eax
push edi
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x44]
push 0xcc0020
xor edi, edi
push edi
push edi
push ebp
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
push eax
push ecx
push edi
push edi
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
push 0x660
push 2
mov dword [esp + 0x20], 0x64
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
push edi
push SysReAllocString
push SysReAllocString
lea edx, [esi + 0x10]
push edx
mov dword [esi], 0x20
mov dword [esi + 4], 1
mov dword [esi + 0xc], edi
mov dword [esi + 8], edi
call dword [sym.imp.USER32.dll_SetRect]
mov ebx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
movzx eax, dl
movzx edi, bl
mov ecx, ebx
shr ecx, 0x10
add eax, edi
cmp eax, 0xff
mov byte [esp + 0x13], cl
mov byte [esp + 0x11], 0xff
jg 0x10091a4c
mov byte [esp + 0x11], al
movzx eax, dh
movzx edi, bh
add eax, edi
cmp eax, 0xff
mov byte [esp + 0x10], 0xff
jg 0x10091a64
mov byte [esp + 0x10], al
shr edx, 0x10
movzx edx, dl
movzx eax, cl
add eax, edx
cmp eax, 0xff
mov byte [esp + 0x12], 0xff
jg 0x10091a7f
mov byte [esp + 0x12], al
mov edi, dword [esp + 0x88]
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x48]
dec edi
imul edi, dword [esp + 0x8c]
add edi, ecx
test eax, eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], 0
jle 0x10091c50
mov ebp, dword [esp + 0x44]
xor ebx, ebx
test ebp, ebp
jle 0x10091c2a
mov eax, dword [esp + 0x18]
add eax, 2
shl eax, 4
mov dword [esp + 0x24], eax
lea esp, [esp]
cmp ebx, ebp
mov dword [esp + 0x2c], ebx
lea edi, [edi + ebx*4]
jge 0x10091c1d
nop
mov ecx, dword [edi]
mov dl, byte [esp + 0xa4]
mov eax, ecx
sar eax, 0x10
cmp al, dl
jb 0x10091b1c
cmp al, byte [esp + 0x11]
ja 0x10091b1c
mov eax, ecx
mov cl, byte [esp + 0xa5]
sar eax, 8
cmp al, cl
jb 0x10091b1c
cmp al, byte [esp + 0x10]
ja 0x10091b1c
mov al, byte [edi]
cmp al, byte [esp + 0x13]
jb 0x10091b1c
cmp al, byte [esp + 0x12]
jbe 0x10091b24
add edi, 4
inc ebx
cmp ebx, ebp
jl 0x10091ae0
mov ebp, dword [esp + 0x2c]
cmp ebx, ebp
jle 0x10091c19
mov ecx, dword [esi + 8]
cmp ecx, dword [esp + 0x18]
jb 0x10091b73
mov esi, dword [esp + 0x20]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
add eax, 0x640
push 2
push eax
add edi, 0x64
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 8]
lea edi, [eax + 1]
push edi
push ebx
add edx, 2
push eax
shl edx, 4
push ebp
add edx, esi
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esi + 0x10]
cmp eax, ecx
lea ebp, [esi + 0x10]
jge 0x10091ba1
mov dword [ebp], eax
mov eax, dword [esp + 0x1c]
cmp eax, dword [esi + 0x14]
jge 0x10091bad
mov dword [esi + 0x14], eax
cmp ebx, dword [esi + 0x18]
jle 0x10091bb5
mov dword [esi + 0x18], ebx
cmp edi, dword [esi + 0x1c]
jle 0x10091bbd
mov dword [esi + 0x1c], edi
mov ecx, dword [esi + 8]
inc ecx
mov eax, ecx
cmp eax, 0x7d0
mov dword [esi + 8], ecx
jne 0x10091c19
mov eax, dword [esp + 0x24]
push esi
push eax
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov edi, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10091bf9
push 2
push edi
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x10091bfd
mov dword [esp + 0x14], edi
push 0
push 0
push SysReAllocString
push SysReAllocString
push ebp
mov dword [esi + 8], 0
call dword [sym.imp.USER32.dll_SetRect]
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x28]
inc ebx
cmp ebx, ebp
jl 0x10091ad0
mov ebx, dword [esp + 0x8c]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x48]
sub edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], eax
jl 0x10091ab0
mov ebp, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
add ecx, 2
push esi
shl ecx, 4
push ecx
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov esi, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10091c82
push 2
push esi
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x10091c86
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x38]
push edx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push ebp
call dword [sym.imp.GDI32.dll_DeleteDC]
mov esi, dword [esp + 0x20]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebp, dword [esp + 0x14]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
pop esi
pop ebx
pop edi
mov eax, ebp
pop ebp
add esp, 0x8c
ret 0xc
pop ebx
pop edi
mov eax, ebp
pop ebp
add esp, 0x8c
ret 0xc
pop edi
mov eax, ebp
pop ebp
add esp, 0x8c
ret 0xc