Function at 0x106c140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x109bee8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8c
push esi
mov esi, ecx
push edi
xor edi, edi
mov eax, dword [esi + 0x54]
mov dword [esp + 0x3c], esi
cmp eax, edi
je 0x106c42e
mov ecx, dword [esi + 0x58]
cmp ecx, edi
je 0x106c18d
call fcn.01091010
mov ecx, dword [esi + 0x58]
cmp ecx, edi
je 0x106c18a
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x58], edi
push 8
call fcn.0108e46c
add esp, 4
cmp eax, edi
je 0x106c1a6
mov dword [eax + 4], edi
mov dword [eax], 0x10022bc
jmp 0x106c1a8
xor eax, eax
mov edx, dword [esi + 0x1c]
push ebx
lea ecx, [esp + 0x44]
push ebp
push ecx
push edx
mov dword [esi + 0x58], eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x48]
mov eax, dword [esi + 0x54]
mov edi, dword [esp + 0x4c]
sub ebx, ebp
mov ebp, dword [esp + 0x54]
mov edx, dword [eax + 4]
lea ecx, [esp + 0x84]
push ecx
sub ebp, edi
push 0x18
push edx
mov dword [esp + 0x30], ebp
call dword [sym.imp.GDI32.dll_GetObjectA]
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x58]
rep stosd dword es:[edi], eax
mov edi, 1
lea ecx, [esp + 0x28]
mov dword [esp + 0x58], 0x28
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebp
mov word [esp + 0x64], di
mov word [esp + 0x66], 0x18
call fcn.01090763
mov eax, dword [esp + 0xac]
mov dword [esp + 0xa4], 0
test eax, eax
je 0x106c23b
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x2c]
call fcn.0109081a
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x28]
neg eax
sbb eax, eax
push 0
and eax, ecx
lea ecx, [esp + 0x14]
push 0
push ecx
lea edx, [esp + 0x64]
push 0
push edx
push eax
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov ecx, dword [esi + 0x58]
push eax
call fcn.01090fb9
mov eax, dword [esi + 0x58]
test eax, eax
je 0x106c284
mov eax, dword [eax + 4]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0109095b
mov edx, dword [esi]
lea eax, [esp + 0x28]
push eax
mov ecx, esi
mov dword [esi + 0x94], 0
call dword [edx + 0xbc]
mov eax, dword [esp + 0x10]
mov dword [esi + 0x94], edi
test eax, eax
je 0x106c3fc
lea ecx, [ebx + ebx*2]
lea eax, [ecx*8 + 0x1f]
cdq
and edx, 0x1f
add eax, edx
xor edx, edx
sar eax, 5
shl eax, 2
test ebp, ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], edx
jle 0x106c3ce
mov edi, ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], edi
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
add ecx, ebp
xor ebp, ebp
test ebx, ebx
jle 0x106c3a7
mov eax, ebx
mov dword [esp + 0x38], edi
mov dword [esp + 0x20], eax
jmp 0x106c314
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
cmp ebp, eax
mov esi, ebp
jl 0x106c31c
mov esi, eax
cmp esi, edx
jl 0x106c322
mov esi, edx
cmp esi, edi
jl 0x106c32c
mov dword [esp + 0x38], edi
mov esi, edi
cmp esi, 0xb
jl 0x106c336
mov esi, 0xb
mov edx, esi
shl edx, 4
add edx, esi
mov al, dl
mov esi, edx
not al
shl esi, 8
mov byte [esp + 0x3c], al
sub esi, edx
mov edi, dword [esp + 0x3c]
xor edx, edx
mov dl, byte [ecx]
and edi, 0xff
imul edx, edi
add edx, esi
xor eax, eax
sar edx, 8
mov byte [ecx], dl
mov al, byte [ecx + 1]
inc ecx
imul eax, edi
add eax, esi
xor edx, edx
sar eax, 8
mov byte [ecx], al
mov dl, byte [ecx + 1]
inc ecx
imul edx, edi
mov eax, dword [esp + 0x20]
add edx, esi
sar edx, 8
mov byte [ecx], dl
inc ecx
inc ebp
dec eax
cmp ebp, ebx
mov dword [esp + 0x20], eax
jl 0x106c30c
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
inc edx
add ecx, eax
dec edi
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x24]
cmp edx, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edi
jl 0x106c2ec
mov ebp, ecx
mov edi, 1
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x28]
neg eax
sbb eax, eax
lea ecx, [esp + 0x58]
and eax, edx
mov edx, dword [esp + 0x10]
push 0
push ecx
push edx
push ebp
push 0
push 0
push 0
push ebp
push ebx
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_SetDIBitsToDevice]
lea ecx, [esp + 0x28]
call fcn.01090882
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], ecx
lea ecx, [esp + 0x28]
mov dword [esi + 0x78], edi
mov dword [esp + 0xa4], 0xffffffff
call fcn.01090898
pop ebp
pop ebx
mov ecx, dword [esp + 0x94]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x98
ret 4