Function at 0x428900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
mov ecx, dword [esp + 8]
push 0xffffffffffffffff
push 0x4750f0
push eax
mov eax, dword [0x48f690]
mov dword fs:[0], esp
sub esp, 0x64
dec eax
cmp eax, ecx
jl 0x428e5c
mov eax, dword [0x48f6d4]
push ebx
xor ebx, ebx
push ebp
cmp eax, ebx
push esi
je 0x42894a
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call esi
cmp dword [0x48f6d4], ebx
jne 0x42893e
lea ecx, [esp + 0x28]
call fcn.004683b2
mov esi, dword [esp + 0x80]
mov dword [esp + 0x78], ebx
cmp esi, ebx
jne 0x428966
xor eax, eax
jmp 0x428969
mov eax, dword [esi + 4]
mov ebp, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push edi
push eax
call ebp
push eax
lea ecx, [esp + 0x30]
call fcn.00468469
mov eax, dword [esp + 0x94]
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, 0xffffffff
mov ecx, 0x48f6c8
jne 0x4289a7
test ecx, ecx
je 0x4289b3
cmp dword [0x48f6cc], ebx
je 0x4289b3
call fcn.00468f65
jmp 0x4289b3
test ecx, ecx
je 0x4289b3
cmp dword [0x48f6cc], ebx
jne 0x4289d9
mov eax, dword [0x48f63c]
mov edx, dword [0x48f634]
sub eax, edx
mov edx, dword [0x48f5c8]
push edx
push eax
mov eax, dword [esi + 4]
push eax
call edi
push eax
mov ecx, 0x48f6c8
call fcn.00468f0e
mov edx, dword [0x48f6cc]
mov ecx, dword [esp + 0x30]
mov eax, 0x48f6c8
neg eax
sbb eax, eax
and eax, edx
push eax
push ecx
call fcn.004685aa
lea ecx, [esp + 0x3c]
mov dword [esp + 0x24], eax
call fcn.004683b2
cmp esi, ebx
mov byte [esp + 0x7c], 1
jne 0x428a0f
xor eax, eax
jmp 0x428a12
mov eax, dword [esi + 4]
push eax
call ebp
push eax
lea ecx, [esp + 0x40]
call fcn.00468469
mov edx, 0x48f6c0
test edx, edx
je 0x428a30
cmp dword [0x48f6c4], ebx
jne 0x428a56
mov eax, dword [0x48f63c]
mov ebp, dword [0x48f634]
mov ecx, dword [0x48f5c8]
mov edx, dword [esi + 4]
sub eax, ebp
push ecx
push eax
push edx
call edi
push eax
mov ecx, 0x48f6c0
call fcn.00468f0e
mov esi, dword [0x48f6c4]
mov eax, 0x48f6c0
neg eax
sbb eax, eax
and eax, esi
push eax
mov eax, dword [esp + 0x44]
push eax
call fcn.004685aa
mov ecx, dword [0x48f63c]
mov dword [esp + 0x28], eax
mov eax, dword [0x48f634]
mov edi, dword [esp + 0x40]
sub ecx, eax
mov edx, dword [0x48f5c8]
lea eax, [esp + 0x3c]
push 0xcc0020
neg eax
sbb eax, eax
push ebx
and eax, edi
push ebx
push eax
mov eax, dword [esp + 0x40]
push edx
push ecx
push ebx
push ebx
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ebp, dword [0x48f62c]
mov ecx, dword [0x48f658]
mov dword [ebp + 8], ecx
mov ecx, 0xa
lea eax, [ebp + 8]
mov esi, ebp
lea edi, [esp + 0x4c]
mov dword [esp + 0x18], eax
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x5a]
mov eax, 1
mov cl, dl
shl eax, cl
cmp dx, 8
jbe 0x428ae6
xor eax, eax
mov edx, dword [esp + 0x4c]
push 8
lea eax, [edx + eax*4]
mov dword [esp + 0x18], eax
call fcn.0046517b
add esp, 4
cmp eax, ebx
je 0x428b0c
mov dword [eax + 4], ebx
mov dword [eax], 0x4791f0
mov esi, eax
jmp 0x428b0e
xor esi, esi
push esi
push ebp
mov dword [esp + 0x18], esi
call fcn.00438b90
add esp, 8
test eax, eax
je 0x428b38
push ebx
push esi
lea ecx, [esp + 0x34]
call fcn.00468643
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x428b49
cmp esi, ebx
je 0x428b45
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 4]
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x88]
mov ecx, dword [0x48f68c]
mov edx, dword [esp + 0x94]
mov ebx, dword [ecx + eax*4]
cmp edx, dword [ebx + 0x2c]
jge 0x428bdc
mov eax, dword [ebx + 0x28]
cmp eax, 0xffffffff
jle 0x428bdc
cmp dword [0x48f678], eax
jle 0x428bdc
mov ecx, dword [0x48f674]
lea eax, [eax + eax*2]
lea edi, [esp + 0x4c]
lea esi, [ecx + eax*8]
mov eax, dword [esp + 0x14]
mov ecx, 6
add eax, ebp
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
push edx
mov edx, dword [esp + 0x50]
push eax
push ecx
push edx
call fcn.004273b0
add esp, 0x10
test eax, eax
je 0x428bdc
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
and eax, 0xffff
mov dword [ecx], eax
mov eax, dword [esp + 0x50]
and eax, 0xffff
push edx
push eax
push 0
lea ecx, [esp + 0x38]
push ebp
push ecx
call fcn.004387e0
add esp, 0x14
mov ecx, dword [esp + 0x88]
mov edx, dword [0x48f68c]
mov edi, dword [esp + 0x94]
mov eax, dword [edx + ecx*4]
mov eax, dword [eax + 0x2c]
cmp edi, eax
jle 0x428c03
mov dword [esp + 0x94], edi
jmp 0x428c0c
mov dword [esp + 0x94], eax
mov edi, eax
cmp edi, ecx
jg 0x428cad
mov edx, dword [0x48f68c]
mov ebx, dword [edx + edi*4]
mov eax, dword [ebx + 8]
dec eax
test eax, eax
jl 0x428c9d
lea edi, [eax + eax*4]
shl edi, 2
inc eax
mov dword [esp + 0x1c], eax
mov edx, dword [ebx + 4]
mov esi, edi
add esi, edx
mov eax, dword [esi]
test eax, eax
je 0x428c81
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esi + 8]
add edx, ebp
push edx
push ecx
push eax
call fcn.004273b0
add esp, 0x10
test eax, eax
je 0x428c81
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
xor edx, edx
push ecx
mov dx, word [esi + 0x10]
mov dword [eax], edx
xor edx, edx
mov dx, word [esi + 4]
lea eax, [esp + 0x30]
push edx
push 0
push ebp
push eax
call fcn.004387e0
add esp, 0x14
mov eax, dword [esp + 0x1c]
sub edi, 0x14
dec eax
mov dword [esp + 0x1c], eax
jne 0x428c30
mov edi, dword [esp + 0x94]
mov ecx, dword [esp + 0x88]
inc edi
cmp edi, ecx
mov dword [esp + 0x94], edi
jle 0x428c14
mov ecx, dword [0x48f63c]
mov eax, dword [0x48f634]
mov esi, dword [esp + 0x30]
sub ecx, eax
mov edx, dword [0x48f5c8]
lea eax, [esp + 0x2c]
neg eax
sbb eax, eax
push 0xcc0020
mov ebp, dword [sym.imp.GDI32.dll_BitBlt]
and eax, esi
push 0
push 0
push eax
mov eax, dword [esp + 0x50]
push edx
push ecx
push 0
push 0
push eax
call ebp
mov eax, dword [esp + 0x90]
test eax, eax
je 0x428d0b
test ebx, ebx
je 0x428d0b
add ebx, 0x18
lea ecx, [esp + 0x2c]
push ebx
push ecx
call fcn.00426d90
add esp, 8
mov esi, dword [esp + 0x8c]
test esi, esi
je 0x428da0
mov edx, dword [0x48f638]
lea eax, [esp + 0x1c]
push edx
push 0
push eax
lea ecx, [esp + 0x38]
call fcn.0046871f
mov esi, dword [esi + 0x88]
test esi, esi
je 0x428d8e
mov edx, dword [esp + 0x88]
mov eax, esi
mov esi, dword [esi]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + 0xfc]
cmp eax, edx
jg 0x428d8a
mov ebx, dword [ecx + 0x100]
add ebx, eax
cmp edx, ebx
jge 0x428d8a
mov edx, dword [0x48f6e8]
test edx, edx
je 0x428d7a
cmp dword [ecx + 0x18], 0xc
jne 0x428d73
cmp eax, edi
jne 0x428d8a
mov eax, dword [ecx]
push 0
push edx
jmp 0x428d80
mov eax, dword [ecx]
push 0
push 0
lea edx, [esp + 0x34]
push 0
push edx
call dword [eax + 0x30]
test esi, esi
jne 0x428d3b
push 0
lea eax, [esp + 0x20]
push 0
push eax
lea ecx, [esp + 0x38]
call fcn.0046871f
mov eax, dword [esp + 0x98]
pop edi
test eax, eax
je 0x428db9
lea ecx, [esp + 0x28]
push ecx
call fcn.004276c0
add esp, 4
mov ecx, dword [0x48f640]
mov esi, dword [0x48f638]
mov edx, dword [0x48f63c]
mov ebx, dword [0x48f634]
lea eax, [esp + 0x28]
sub ecx, esi
sub edx, ebx
mov ebx, dword [esp + 0x2c]
neg eax
sbb eax, eax
push 0xcc0020
and eax, ebx
push esi
push 0
push eax
push ecx
push edx
mov edx, dword [esp + 0x98]
push 0
push 0
mov eax, dword [edx + 4]
push eax
call ebp
mov eax, dword [esp + 0x20]
pop esi
pop ebp
pop ebx
test eax, eax
je 0x428e18
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.004685aa
mov eax, dword [esp + 0x18]
test eax, eax
je 0x428e2e
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x30]
push eax
push ecx
call fcn.004685aa
mov ecx, dword [esp]
test ecx, ecx
je 0x428e3d
mov edx, dword [ecx]
push 1
call dword [edx + 4]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0
call fcn.004684e7
lea ecx, [esp + 0x1c]
mov dword [esp + 0x6c], 0xffffffff
call fcn.004684e7
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
add esp, 0x70
ret 0x18