Function at 0x42a380
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x475146
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
push ebx
mov ebx, dword [esp + 0xd8]
push ebp
push esi
xor esi, esi
push edi
lea ecx, [esp + 0x94]
mov dword [0x48f770], 1
mov dword [0x48f6dc], esi
mov eax, dword [ebx]
push 0x3c
push ecx
mov ecx, ebx
call dword [eax + 0x34]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x98]
mov dword [0x48f62c], edx
mov edx, dword [esp + 0x94]
mov dword [0x48f624], ecx
mov ecx, dword [esp + 0xb8]
mov dword [0x48f620], edx
mov edx, dword [esp + 0xbc]
mov dword [0x48f644], ecx
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0xa4]
mov dword [0x48f648], edx
mov edx, dword [esp + 0xc4]
mov dword [0x48f64c], ecx
mov ecx, dword [esp + 0xa8]
mov dword [0x48f650], edx
mov edx, dword [esp + 0xac]
mov dword [0x48f634], ecx
mov ecx, dword [esp + 0xb0]
mov dword [0x48f638], edx
mov edx, dword [esp + 0xb4]
mov dword [0x48f63c], ecx
mov ecx, dword [esp + 0xc8]
mov dword [0x48f640], edx
mov edx, dword [esp + 0xcc]
mov dword [0x48f654], ecx
mov ecx, dword [esp + 0x9c]
push eax
push 0x40
mov dword [0x48f630], eax
mov dword [0x48f658], edx
mov dword [0x48f628], ecx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [0x48f630]
mov dword [0x48f62c], eax
mov edx, dword [ebx]
push ecx
push eax
mov ecx, ebx
call dword [edx + 0x34]
mov eax, dword [0x48f62c]
mov ecx, dword [0x48f654]
xor edx, edx
push 4
mov dx, word [eax + 0xe]
mov eax, dword [0x48f634]
mov dword [0x48f65c], edx
mov edx, dword [0x48f658]
mov dword [0x48f644], eax
mov eax, dword [0x48f640]
mov dword [0x48f5cc], ecx
mov ecx, dword [0x48f638]
mov dword [0x48f5c8], edx
mov edx, dword [0x48f63c]
mov dword [0x48f650], eax
mov dword [0x48f648], ecx
mov dword [0x48f64c], edx
mov edx, dword [ebx]
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
mov dword [esp + 0x28], esi
call dword [edx + 0x34]
push esi
lea ecx, [esp + 0x44]
call fcn.00468d1a
mov eax, dword [esp + 0x20]
mov dword [esp + 0xdc], esi
cmp eax, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
jle 0x42a893
mov edx, dword [ebx]
lea eax, [esp + 0xd0]
push 4
push eax
mov ecx, ebx
call dword [edx + 0x34]
mov edx, dword [ebx]
lea eax, [esp + 0x3c]
push 4
push eax
mov ecx, ebx
call dword [edx + 0x34]
mov edx, dword [ebx]
lea eax, [esp + 0x24]
push 4
push eax
mov ecx, ebx
call dword [edx + 0x34]
cmp dword [esp + 0x18], esi
jne 0x42a58e
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00450390
mov ecx, dword [esp + 0x28]
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [esp + 0x1c], edi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
mov eax, dword [ebx]
push ecx
push edx
mov ecx, ebx
call dword [eax + 0x34]
push 0x18
call fcn.0046517b
mov edi, eax
add esp, 4
cmp edi, esi
je 0x42a5d3
mov ecx, edi
call fcn.00408060
lea ebp, [edi + 8]
mov dword [edi], 0x478804
mov ecx, ebp
call fcn.00408060
mov dword [ebp], 0x478804
mov dword [esp + 0x10], edi
jmp 0x42a5d9
mov dword [esp + 0x10], esi
mov edi, esi
mov eax, dword [esp + 0x18]
mov dword [edi + 0x10], esi
push eax
mov dword [edi + 0x14], esi
call fcn.00438420
add esp, 4
mov ecx, edi
push eax
call fcn.00468f0e
lea ecx, [edi + 8]
push 0xff00ff
push ecx
push edi
call fcn.00438f60
add esp, 0xc
test eax, eax
je 0x42a8bd
mov al, byte [0x48f530]
test al, 1
jne 0x42a639
mov dl, al
mov ecx, 0x48f520
or dl, 1
mov byte [0x48f530], dl
call fcn.004683b2
push 0x42aca0
call fcn.00450266
add esp, 4
mov al, byte [0x48f530]
test al, 2
jne 0x42a664
mov dl, al
mov ecx, 0x48f510
or dl, 2
mov byte [0x48f530], dl
call fcn.004683b2
push 0x42ac90
call fcn.00450266
add esp, 4
mov al, byte [0x48f530]
test al, 4
jne 0x42a695
mov dl, al
push 0x42ac80
or dl, 4
mov dword [0x48f50c], esi
mov byte [0x48f530], dl
mov dword [0x48f508], 0x478804
call fcn.00450266
add esp, 4
mov edx, 0x48f520
test edx, edx
je 0x42a6a6
cmp dword [0x48f524], esi
jne 0x42a6c6
mov ebp, dword [esp + 0x44]
lea eax, [esp + 0x40]
neg eax
sbb eax, eax
and eax, ebp
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov ecx, 0x48f520
call fcn.00468469
mov eax, 0x48f510
test eax, eax
je 0x42a6d7
cmp dword [0x48f514], esi
jne 0x42a6f7
mov ebp, dword [esp + 0x44]
lea eax, [esp + 0x40]
neg eax
sbb eax, eax
and eax, ebp
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov ecx, 0x48f510
call fcn.00468469
mov ecx, 0x48f508
test ecx, ecx
je 0x42a708
cmp dword [0x48f50c], esi
jne 0x42a722
mov edx, dword [esp + 0x44]
push 0x20
push 0x20
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
mov ecx, 0x48f508
call fcn.00468f0e
cmp edi, esi
jne 0x42a72a
xor eax, eax
jmp 0x42a72d
mov eax, dword [edi + 4]
push eax
mov eax, dword [0x48f524]
push eax
call fcn.004685aa
mov ecx, dword [0x48f50c]
mov edi, eax
mov eax, 0x48f508
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [0x48f514]
push eax
push ecx
call fcn.004685aa
push 0xffffff
push 0x20
push 0x20
push esi
push esi
mov ecx, 0x48f510
mov ebp, eax
call fcn.0046e709
mov ecx, dword [0x48f524]
mov eax, 0x48f520
neg eax
mov edx, dword [0x48f514]
push 0xff00ff
sbb eax, eax
push 0x20
and eax, ecx
mov ecx, 0x48f510
neg ecx
sbb ecx, ecx
push 0x20
push esi
and ecx, edx
push esi
push eax
push ecx
call fcn.00438ca0
mov ecx, dword [0x48f514]
mov eax, 0x48f510
add esp, 0x1c
mov edx, dword [0x48f524]
neg eax
sbb eax, eax
push 0xcc0020
and eax, ecx
push esi
push esi
push eax
push 0x20
push 0x20
push esi
push esi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
cmp edi, esi
jne 0x42a7db
xor edi, edi
jmp 0x42a7de
mov edi, dword [edi + 4]
mov eax, dword [0x48f524]
push edi
push eax
call fcn.004685aa
cmp ebp, esi
jne 0x42a7f2
xor ebp, ebp
jmp 0x42a7f5
mov ebp, dword [ebp + 4]
mov ecx, dword [0x48f514]
push ebp
push ecx
call fcn.004685aa
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, 0x48f6a0
mov edi, eax
call fcn.00430f40
cmp eax, esi
jne 0x42a866
cmp dword [0x48f6a4], esi
jne 0x42a836
mov eax, dword [0x48f6a8]
push 1
push eax
mov ecx, 0x48f6a0
call fcn.00430fb0
mov ecx, 0x48f6a0
call fcn.00431020
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], edi
mov dword [eax + 4], ecx
mov edx, dword [0x48f6a4]
mov ecx, dword [esp + 0x1c]
mov edx, dword [edx + ecx*4]
mov dword [eax], edx
mov ecx, dword [0x48f6a4]
mov edx, dword [esp + 0x1c]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x10]
mov dword [eax + 0xc], ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x42a534
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x42a893
push eax
call fcn.004502a7
add esp, 4
cmp dword [esp + 0xe8], esi
je 0x42a9f6
cmp dword [0x48f6d8], esi
jne 0x42a9f6
mov eax, dword [0x48f628]
xor ebp, ebp
cmp eax, esi
jle 0x42a9b2
jmp 0x42a910
cmp edi, esi
mov dword [esp + 0x10], edi
je 0x42a8f3
lea ecx, [edi + 8]
mov byte [esp + 0xdc], 1
mov dword [ecx], 0x478804
call fcn.00401870
mov ecx, edi
mov byte [esp + 0xdc], 0
call fcn.004018d0
push edi
call fcn.004651a4
add esp, 4
lea ecx, [esp + 0x40]
mov dword [esp + 0xdc], 0xffffffff
call fcn.00468d8c
xor eax, eax
jmp 0x42ac58
xor esi, esi
push 0x6c
call fcn.0046517b
add esp, 4
cmp eax, esi
je 0x42a955
mov ecx, 0x4791e4
mov dword [eax], 0x4791d8
mov dword [eax + 4], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], esi
mov dword [eax + 8], esi
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], esi
mov dword [eax + 0x40], esi
mov dword [eax + 0x3c], esi
mov dword [eax + 0x38], esi
mov dword [eax + 0x48], esi
mov dword [eax + 0x54], esi
mov dword [eax + 0x50], esi
mov dword [eax + 0x4c], esi
mov dword [eax + 0x44], ecx
mov esi, eax
xor eax, eax
lea ecx, [esi + 0x18]
xor edx, edx
mov dword [esi + 0x14], eax
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
lea ecx, [esi + 0x58]
mov dword [esi + 0x58], edx
mov dword [ecx + 4], edx
or ecx, 0xffffffff
mov dword [esi + 0x60], ecx
mov dword [esi + 0x28], ecx
mov dword [esi + 0x64], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x68], eax
mov eax, dword [0x48f690]
mov edi, eax
inc eax
push ecx
push eax
mov ecx, 0x48f688
call fcn.00430e00
mov edx, dword [0x48f68c]
inc ebp
mov dword [edx + edi*4], esi
mov eax, dword [0x48f628]
cmp ebp, eax
jl 0x42a90e
xor esi, esi
push 4
mov dword [0x48f734], esi
call fcn.0046517b
add esp, 4
mov dword [eax], ebx
push esi
push esi
push esi
push esi
push eax
push 0x429490
call fcn.00466c55
lea ecx, [esp + 0x40]
mov dword [0x48f6d8], eax
mov dword [esp + 0xdc], 0xffffffff
call fcn.00468d8c
mov eax, 1
jmp 0x42ac58
mov eax, dword [0x48f628]
mov dword [esp + 0x14], esi
cmp eax, esi
jle 0x42abfd
push 1
call fcn.00439100
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x74]
add esp, 4
rep stosd dword es:[edi], eax
mov eax, dword [ebx]
lea ecx, [esp + 0x70]
push 0x24
push ecx
mov ecx, ebx
call dword [eax + 0x34]
push 0x6c
call fcn.0046517b
add esp, 4
cmp eax, esi
je 0x42aa73
mov ecx, 0x4791e4
mov dword [eax], 0x4791d8
mov dword [eax + 4], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], esi
mov dword [eax + 8], esi
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], esi
mov dword [eax + 0x40], esi
mov dword [eax + 0x3c], esi
mov dword [eax + 0x38], esi
mov dword [eax + 0x44], ecx
mov dword [eax + 0x48], esi
mov dword [eax + 0x54], esi
mov dword [eax + 0x50], esi
mov dword [eax + 0x4c], esi
mov ebp, eax
jmp 0x42aa75
xor ebp, ebp
mov eax, dword [esp + 0x74]
cmp eax, 0xbb8
jbe 0x42aa85
mov eax, 0x32
mov dword [ebp + 0x14], eax
mov eax, dword [esp + 0x78]
lea edx, [ebp + 0x18]
mov dword [ebp + 0x18], eax
mov ecx, dword [esp + 0x7c]
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x84]
mov dword [edx + 0xc], ecx
mov edx, dword [esp + 0x88]
mov dword [ebp + 0x2c], edx
mov eax, dword [esp + 0x8c]
cmp eax, 0x100
jne 0x42aade
cmp dword [esp + 0x90], 0xe5
jne 0x42aade
mov eax, 0x201
mov dword [esp + 0x8c], eax
mov dword [ebp + 0x58], eax
mov eax, dword [esp + 0x90]
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x60], 0xffffffff
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x68], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 0x10], esi
cmp eax, esi
jle 0x42abc8
mov edx, dword [ebx]
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x54]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x54]
push 0x1c
push eax
mov ecx, ebx
call dword [edx + 0x34]
cmp dword [esp + 0x54], esi
je 0x42abb3
mov ecx, dword [esp + 0x64]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [esp + 0x64]
mov edx, dword [ebx]
push ecx
push eax
mov ecx, ebx
mov dword [esp + 0x5c], eax
call dword [edx + 0x34]
xor edx, edx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x28], edx
mov esi, dword [ebp + 8]
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x30], edx
mov dword [esp + 0x30], eax
mov ax, word [esp + 0x6c]
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x34], ecx
mov cx, word [esp + 0x60]
mov dword [esp + 0x28], edx
lea edx, [esi + 1]
mov word [esp + 0x2c], cx
push 0xffffffffffffffff
push edx
mov ecx, ebp
mov word [esp + 0x40], ax
call fcn.00430ca0
mov ecx, dword [ebp + 4]
lea eax, [esi + esi*4]
lea esi, [esp + 0x28]
lea edi, [ecx + eax*4]
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x70]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x42ab08
mov eax, dword [0x48f690]
push 0xffffffffffffffff
mov edi, eax
inc eax
push eax
mov ecx, 0x48f688
call fcn.00430e00
mov edx, dword [0x48f68c]
mov eax, dword [esp + 0x14]
inc eax
mov dword [edx + edi*4], ebp
mov ecx, dword [0x48f628]
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x42aa07
mov ecx, dword [0x48f690]
xor edi, edi
xor eax, eax
cmp ecx, esi
jle 0x42ac2b
mov ecx, dword [0x48f68c]
mov ecx, dword [ecx + eax*4]
mov edx, dword [ecx + 0x14]
mov ebx, edx
sub ebx, edi
inc eax
mov dword [ecx + 0x14], ebx
mov ecx, dword [0x48f690]
cmp eax, ecx
mov edi, edx
jl 0x42ac0b
mov edi, 1
lea ecx, [esp + 0x40]
mov dword [0x48f6dc], edi
mov dword [0x48f770], esi
mov dword [0x4893d0], edi
mov dword [esp + 0xdc], 0xffffffff
call fcn.00468d8c
mov eax, edi
mov ecx, dword [esp + 0xd4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xd0
ret 8