Function at 0x100887f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x88
push ebx
push esi
push edi
mov edi, dword [esp + 0x98]
xor ebx, ebx
cmp edi, ebx
mov dword [esp + 0x10], ebx
je 0x10088c04
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, eax
cmp esi, ebx
mov dword [esp + 0x28], esi
je 0x10088c04
lea eax, [esp + 0x38]
push ebp
push eax
push 0x18
push edi
call dword [sym.imp.GDI32.dll_GetObjectA]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
push ebx
lea eax, [esp + 0x98]
mov dword [esp + 0x5c], ecx
push ebx
push eax
lea ecx, [esp + 0x60]
push ebx
push ecx
push esi
mov dword [esp + 0x6c], 0x28
mov dword [esp + 0x74], edx
mov word [esp + 0x78], 1
mov word [esp + 0x7a], 0x20
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov ebp, eax
cmp ebp, ebx
je 0x10088bf0
push ebp
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
mov dword [esp + 0x34], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x34], ebx
je 0x10088bd9
lea edx, [esp + 0x7c]
push edx
push 0x18
push ebp
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [esp + 0x88]
mov ecx, eax
and ecx, 0x80000003
jns 0x100888e5
dec ecx
or ecx, 0xfffffffc
inc ecx
je 0x10088900
inc eax
mov edx, eax
and edx, 0x80000003
jns 0x100888f7
dec edx
or edx, 0xfffffffc
inc edx
jne 0x100888e7
mov dword [esp + 0x88], eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x40]
push 0xcc0020
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
push 0
push 0
push ebx
push eax
push ecx
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov esi, dword [sym.imp.GDI32.dll_GetPixel]
push 1
push 1
push ebx
call esi
mov edx, dword [esp + 0xa0]
mov ebp, dword [sym.imp.GDI32.dll_SetPixel]
push edx
push 1
push 1
push ebx
mov edi, eax
call ebp
push 1
push 1
push ebx
call esi
push edi
push 1
push 1
push ebx
mov dword [esp + 0xb0], eax
call ebp
mov ebp, 0x64
push 0x660
push 2
mov dword [esp + 0x20], ebp
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
xor edi, edi
mov esi, eax
push edi
push edi
push 0x7fffffff
lea eax, [esi + 0x10]
push 0x7fffffff
push eax
mov dword [esi], 0x20
mov dword [esi + 4], 1
mov dword [esi + 0xc], edi
mov dword [esi + 8], edi
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [esp + 0xa0]
xor eax, eax
mov al, ch
mov edx, dword [esp + 0x90]
mov byte [esp + 0x12], al
mov eax, ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x1c], edi
shr eax, 0x10
dec ecx
mov byte [esp + 0x13], al
imul ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x44]
add ecx, edx
cmp eax, edi
mov dword [esp + 0x20], ecx
jle 0x10088b7e
mov edx, dword [esp + 0x40]
xor edi, edi
test edx, edx
jle 0x10088b5c
lea eax, [ebp + 2]
shl eax, 4
mov dword [esp + 0x24], eax
cmp edi, edx
mov dword [esp + 0x28], edi
lea eax, [ecx + edi*4]
jge 0x10088b47
mov ebp, dword [eax]
mov cl, byte [esp + 0xa0]
mov edx, ebp
sar edx, 0x10
cmp dl, cl
jne 0x10088a46
mov dl, byte [esp + 0x12]
mov ecx, ebp
sar ecx, 8
cmp cl, dl
jne 0x10088a46
mov dl, byte [esp + 0x13]
mov cl, byte [eax]
cmp cl, dl
je 0x10088a52
mov ecx, dword [esp + 0x40]
add eax, 4
inc edi
cmp edi, ecx
jl 0x10088a1d
cmp edi, dword [esp + 0x28]
jle 0x10088b47
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jb 0x10088a9b
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [esp + 0x18]
push 2
add eax, 0x64
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
add eax, 0x640
push eax
push ebx
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
mov ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 8]
mov ecx, dword [esp + 0x28]
add edx, 2
lea ebp, [eax + 1]
push ebp
push edi
shl edx, 4
push eax
add edx, esi
push ecx
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0x28]
mov ecx, dword [esi + 0x10]
cmp eax, ecx
jge 0x10088aca
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x14]
cmp eax, ecx
jge 0x10088ad8
mov dword [esi + 0x14], eax
cmp edi, dword [esi + 0x18]
jle 0x10088ae0
mov dword [esi + 0x18], edi
cmp ebp, dword [esi + 0x1c]
jle 0x10088ae8
mov dword [esi + 0x1c], ebp
mov ecx, dword [esi + 8]
inc ecx
mov eax, ecx
mov dword [esi + 8], ecx
cmp eax, 0x7d0
jne 0x10088b47
mov eax, dword [esp + 0x24]
push esi
push eax
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov ebp, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10088b24
push 2
push ebp
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
push ebp
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x10088b28
mov dword [esp + 0x14], ebp
push 0
push 0
push 0x7fffffff
lea eax, [esi + 0x10]
push 0x7fffffff
push eax
mov dword [esi + 8], 0
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x20]
inc edi
cmp edi, edx
jl 0x10088a0e
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x44]
sub ecx, eax
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x20], ecx
cmp eax, edx
mov dword [esp + 0x1c], eax
jl 0x100889f6
add ebp, 2
push esi
shl ebp, 4
push ebp
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov esi, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10088bac
push 2
push esi
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x10088bb0
mov dword [esp + 0x14], esi
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push edx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [esp + 0x14]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
pop ebp
pop edi
mov eax, ebx
pop esi
pop ebx
add esp, 0x88
ret
pop edi
mov eax, ebx
pop esi
pop ebx
add esp, 0x88
ret