Function at 0x4dc100
Capabilities:
Check for unmoving mouse cursor
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x586b1a
push eax
mov dword fs:[0], esp
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
mov esi, ecx
call dword [sym.imp.USER32.dll_ReleaseCapture]
xor ebp, ebp
push ebp
call dword [sym.imp.USER32.dll_ClipCursor]
mov eax, dword [esi + 0x1c4]
dec eax
cmp eax, 0xf
ja case.0x4dc140.3
jmp dword [eax*4 + 0x4dd8f0]
cmp dword [esi + 0x1bc], ebp
jne 0x4dc357
push esi
lea ecx, [esp + 0x3c]
call fcn.00572dba
push 0xff0000
push 1
push 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], ebp
call sub.MFC42.DLL_CPen::CPen
lea eax, [esp + 0x10]
lea ecx, [esp + 0x38]
push eax
mov byte [esp + 0xa8], 1
call sub.MFC42.DLL_CDC::SelectObject
push 5
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectStockObject
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x20]
push ecx
push edx
mov ebp, eax
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x30]
call fcn.00405db0
mov dword [esp + 0x30], 0x591ae8
lea eax, [esp + 0x20]
mov byte [esp + 0xa4], 2
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CGdiObject::Attach
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
sub eax, ebx
lea ebx, [esi + 0x104]
sub ecx, edi
test ebx, ebx
jne 0x4dc206
xor edx, edx
jmp 0x4dc209
mov edx, dword [ebx + 4]
push 0xcc0020
push 0
push 0
push edx
mov edx, dword [esp + 0x4c]
push ecx
push eax
push 0
push 0
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xb0]
lea edi, [esi + 0x18c]
mov dword [esi + 0x198], ecx
mov ecx, edi
mov dword [esi + 0x194], eax
call sub.MFC42.DLL_CRect::NormalizeRect
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push edx
mov edx, dword [edi]
push eax
mov eax, dword [esp + 0x44]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
test ebp, ebp
je 0x4dc27c
push ebp
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 4]
mov ebp, dword [edi]
mov edx, dword [esi + 0x190]
sub eax, ecx
mov ecx, dword [edi + 8]
sub ecx, ebp
test ebx, ebx
je 0x4dc2a1
mov ebx, dword [ebx + 4]
push 0xcc0020
push edx
push ebp
push ebx
push eax
push ecx
mov ecx, dword [esi + 0x178]
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, edi
lea edx, [esi + 0x19c]
mov dword [esi + 0x1bc], 1
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
lea ecx, [esi + 0x1ac]
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [ecx], edx
mov edx, dword [edi + 8]
mov dword [ecx + 4], eax
mov eax, dword [edi + 0xc]
mov edi, 0x5916f4
mov dword [ecx + 8], edx
mov dword [esp + 0x30], edi
mov dword [ecx + 0xc], eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 3
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov ebx, 0x5916e0
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 4
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x38]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xa4], 0xffffffff
call sub.MFC42.DLL_CClientDC::CClientDC
xor ebp, ebp
jmp case.0x4dc140.3
lea edi, [esi + 0x19c]
lea ecx, [esi + 0x1ac]
mov edx, edi
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
lea eax, [esp + 0x4c]
mov edx, dword [edx + 0xc]
push eax
mov dword [ecx + 0xc], edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x4c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, edi
mov ecx, dword [eax]
mov dword [esp + 0x5c], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x60], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x68], edx
push eax
lea edx, [esp + 0x60]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x4dc3d6
mov dword [esi + 0x1bc], ebp
jmp case.0x4dc140.3
push esi
lea ecx, [esp + 0x70]
call fcn.00572dba
mov ecx, dword [esi + 0x20]
lea eax, [esp + 0x38]
push eax
push ecx
mov dword [esp + 0xac], 5
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x30]
call fcn.00405db0
mov dword [esp + 0x30], 0x591ae8
lea edx, [esp + 0x38]
mov byte [esp + 0xa4], 6
push edx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CGdiObject::Attach
lea eax, [esp + 0x30]
lea ecx, [esp + 0x6c]
push eax
call sub.MFC42.DLL_CDC::SelectObject_2
push 0xff0000
push 1
push 4
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 7
push ecx
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectObject
push 5
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectStockObject
mov ecx, dword [edi + 4]
mov edx, dword [edi + 8]
mov ebx, eax
mov eax, dword [edi]
mov edi, dword [edi + 0xc]
cmp eax, ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], edi
jge 0x4dc48e
mov dword [esp + 0x20], ebp
cmp ecx, ebp
jge 0x4dc496
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x40]
cmp edx, eax
jle 0x4dc4a2
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
cmp edi, eax
jle 0x4dc4ae
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CRect::NormalizeRect
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x78]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp ebx, ebp
je 0x4dc4ed
push ebx
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectObject_1
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 8
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov ebx, 0x5916e0
mov dword [esp + 0x30], edi
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 9
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x30], ebx
mov dword [esp + 0xa4], 0xffffffff
lea ecx, [esp + 0x6c]
jmp 0x4dd8ab
lea edi, [esi + 0x19c]
lea ecx, [esi + 0x1ac]
mov edx, edi
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
lea eax, [esp + 0x4c]
mov edx, dword [edx + 0xc]
push eax
mov dword [ecx + 0xc], edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x4c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, edi
mov ecx, dword [eax]
mov dword [esp + 0x5c], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x60], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x68], edx
push eax
lea edx, [esp + 0x60]
push ecx
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x4dc5c5
mov dword [esi + 0x1bc], ebp
jmp case.0x4dc140.3
push esi
lea ecx, [esp + 0x70]
call fcn.00572dba
mov ecx, dword [esi + 0x20]
lea eax, [esp + 0x38]
push eax
push ecx
mov dword [esp + 0xac], 0xa
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], 0x591ae8
lea edx, [esp + 0x38]
mov byte [esp + 0xa4], 0xb
push edx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CGdiObject::Attach
lea eax, [esp + 0x30]
lea ecx, [esp + 0x6c]
push eax
call sub.MFC42.DLL_CDC::SelectObject_2
push 0xff0000
push 1
push 4
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0xc
push ecx
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectObject
push 5
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectStockObject
mov ecx, dword [edi + 4]
mov edx, dword [edi + 8]
mov ebx, eax
mov eax, dword [edi]
mov edi, dword [edi + 0xc]
cmp eax, ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], edi
jge 0x4dc678
mov dword [esp + 0x20], ebp
cmp ecx, ebp
jge 0x4dc680
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x40]
cmp edx, eax
jle 0x4dc68c
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
cmp edi, eax
jle 0x4dc698
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CRect::NormalizeRect
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x78]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp ebx, ebp
je 0x4dc6d7
push ebx
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectObject_1
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0xd
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov ebx, 0x5916e0
mov dword [esp + 0x30], edi
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 0xe
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x30], ebx
mov dword [esp + 0xa4], 0xffffffff
lea ecx, [esp + 0x6c]
jmp 0x4dd8ab
cmp dword [esi + 0x1bc], ebp
jne 0x4dc927
push esi
lea ecx, [esp + 0x70]
call fcn.00572dba
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0xac], 0xf
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], 0x591ae8
lea eax, [esp + 0x38]
mov byte [esp + 0xa4], 0x10
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CGdiObject::Attach
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CDC::SelectObject_2
cmp dword [esi + 0x60], ebp
je 0x4dc8df
lea edi, [esi + 0x18c]
mov ecx, edi
call sub.MFC42.DLL_CRect::NormalizeRect
mov eax, dword [edi + 4]
mov edx, dword [edi + 0xc]
mov ecx, dword [edi]
sub edx, eax
push 1
push edx
mov edx, dword [edi + 8]
lea ebx, [esi + 0x40]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, ebx
call sub.MFC42.DLL_CWnd::MoveWindow
mov eax, dword [esi + 0xfc]
mov ecx, ebx
push eax
call fcn.004d3690
mov ecx, dword [esi + 0x100]
push ecx
mov ecx, ebx
call fcn.004d3650
lea eax, [esi + 0x23c]
cmp eax, ebp
jne 0x4dc7f6
xor eax, eax
jmp 0x4dc7f9
mov eax, dword [eax + 4]
mov edx, dword [esi + 0x60]
push 1
push eax
push 0x30
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
mov ecx, ebx
call sub.MFC42.DLL_CWnd::ShowWindow
mov ecx, ebx
call sub.MFC42.DLL_CWnd::SetFocus
lea eax, [esp + 0x4c]
mov ecx, ebx
push eax
call fcn.004d3920
mov eax, dword [esp + 0x4c]
mov ecx, dword [edi + 8]
mov ebx, dword [edi]
mov edx, dword [esp + 0x50]
lea eax, [eax + eax*4]
sub ecx, ebx
cmp ecx, eax
jge 0x4dc866
mov ecx, dword [edi + 0xc]
mov ebx, dword [edi + 4]
sub ecx, ebx
cmp ecx, edx
jge 0x4dc866
mov ecx, dword [edi]
mov ebx, dword [edi + 8]
sub ecx, ebx
mov ebx, dword [edi + 0xc]
add ecx, eax
mov eax, dword [edi + 4]
sub eax, ebx
push ecx
add eax, edx
mov edx, dword [esi + 0x20]
push eax
push 0x1792
push edx
jmp 0x4dc8a7
mov ecx, dword [edi + 8]
mov ebx, dword [edi]
sub ecx, ebx
cmp ecx, eax
jge 0x4dc887
mov edx, dword [edi + 8]
mov ecx, ebx
sub eax, edx
mov edx, dword [esi + 0x20]
add eax, ecx
push eax
push ebp
push 0x1792
push edx
jmp 0x4dc8a7
mov eax, dword [edi + 0xc]
mov ebx, dword [edi + 4]
sub eax, ebx
cmp eax, edx
jge 0x4dc8ad
mov ecx, dword [esi + 0x20]
mov eax, ebx
mov ebx, dword [edi + 0xc]
push ebp
sub eax, ebx
add eax, edx
push eax
push 0x1792
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 0x198]
mov eax, dword [esi + 0x194]
mov edx, dword [edi]
mov edi, dword [edi + 4]
push ecx
push eax
push edi
push edx
lea edx, [esi + 0x94]
push edx
call dword [sym.imp.USER32.dll_SetRect]
lea eax, [esp + 0x6c]
lea ecx, [esi + 0x8c]
push eax
call sub.MFC42.DLL_CRectTracker::Draw
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esi + 0x1bc], 1
mov dword [esp + 0x30], 0x5916f4
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 0x11
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x30], 0x5916e0
mov dword [esp + 0xa4], 0xffffffff
lea ecx, [esp + 0x6c]
jmp 0x4dd8ab
mov eax, dword [esi + 0x1c0]
cmp eax, 0xffffffff
je 0x4dc937
cmp eax, 8
jne 0x4dc9af
lea edi, [esi + 0x19c]
lea ecx, [esi + 0x1ac]
mov edx, edi
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
lea eax, [esp + 0x4c]
mov edx, dword [edx + 0xc]
push eax
mov dword [ecx + 0xc], edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x4c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov edx, dword [edi + 8]
mov dword [esp + 0x5c], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x64], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x68], eax
push ecx
lea eax, [esp + 0x60]
push edx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x4dc9af
mov dword [esi + 0x1bc], ebp
mov dword [esi + 0x1c0], 0xffffffff
jmp case.0x4dc140.3
mov eax, dword [esi + 0x204]
cmp eax, 1
jne 0x4dc9f4
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov dword [esi + 0x218], eax
mov dword [esi + 0x220], eax
mov dword [esi + 0x21c], ecx
mov dword [esi + 0x224], ecx
jmp case.0x4dc140.3
cmp eax, 2
jne 0x4dca18
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [esi + 0x210], ecx
mov dword [esi + 0x214], edx
jmp case.0x4dc140.3
cmp eax, 3
jne case.0x4dc140.3
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov dword [esi + 0x218], eax
mov dword [esi + 0x21c], ecx
mov dword [esi + 0x204], ebp
mov ecx, esi
call fcn.004de650
jmp case.0x4dc140.3
mov eax, dword [esi + 0x230]
cmp eax, 1
jl case.0x4dc140.3
mov edx, dword [esi + 0x1e4]
mov ecx, dword [esi + 0x22c]
mov ebx, dword [esp + 0xb0]
add edx, 2
mov dword [esp + 0x30], edx
mov edx, dword [ecx]
fild dword [esp + 0x30]
mov eax, ebx
mov dword [esp + 0x18], ebp
sub eax, edx
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fabs
fcomp st(1)
fnstsw ax
test ah, 0x41
je 0x4dcac9
mov ebp, dword [esp + 0xb4]
mov eax, dword [ecx + 4]
mov edx, ebp
sub edx, eax
mov dword [esp + 0x30], edx
fild dword [esp + 0x30]
fabs
fcomp st(1)
fnstsw ax
test ah, 0x41
fstp st(0)
je 0x4dcad2
mov ebx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x18], 1
jmp 0x4dcad2
mov ebp, dword [esp + 0xb4]
fstp st(0)
mov edi, dword [esi + 0x230]
lea ecx, [esi + 0x228]
push 0xffffffffffffffff
lea eax, [edi + 1]
push eax
call fcn.004e04a0
mov ecx, dword [esi + 0x22c]
push esi
mov dword [ecx + edi*8], ebx
mov dword [ecx + edi*8 + 4], ebp
lea ecx, [esp + 0x3c]
call fcn.00572dba
mov eax, dword [esi + 0x20]
lea edx, [esp + 0x4c]
push edx
push eax
mov dword [esp + 0xac], 0x12
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, 0x591ae8
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], edi
lea ecx, [esp + 0x4c]
mov byte [esp + 0xa4], 0x13
push ecx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CGdiObject::Attach
lea edx, [esp + 0x30]
lea ecx, [esp + 0x38]
push edx
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
sub eax, ecx
mov ecx, dword [esp + 0x58]
lea edx, [esi + 0x104]
sub ecx, ebp
test edx, edx
jne 0x4dcb78
xor ebx, ebx
jmp 0x4dcb7d
mov edx, dword [edx + 4]
xor ebx, ebx
push 0xcc0020
push ebx
push ebx
push edx
push ecx
push eax
mov eax, dword [esp + 0x54]
push ebx
push ebx
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
cmp dword [esp + 0x18], ebx
jne 0x4dcc4e
mov ecx, dword [esi + 0xfc]
mov edx, dword [esi + 0x1e4]
mov eax, dword [esi + 0x1d4]
push ecx
push edx
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x14
push ecx
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov edx, dword [esi + 0x22c]
mov eax, dword [edx]
mov ecx, dword [edx + 4]
push ecx
push eax
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x40]
push eax
call sub.MFC42.DLL_CDC::MoveTo
mov eax, dword [esi + 0x230]
xor edi, edi
cmp eax, ebx
jle 0x4dcc1f
mov ecx, dword [esi + 0x22c]
mov eax, dword [ecx + edi*8]
mov ecx, dword [ecx + edi*8 + 4]
push ecx
push eax
lea ecx, [esp + 0x40]
call sub.MFC42.DLL_CDC::LineTo
mov eax, dword [esi + 0x230]
inc edi
cmp edi, eax
jl 0x4dcbfc
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916f4
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x15
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov byte [esp + 0xa4], 0x13
jmp 0x4dd7e6
mov edx, dword [esp + 0xac]
xor ecx, ecx
and edx, 8
cmp dl, 8
jne 0x4dcc64
mov ecx, 1
mov eax, dword [esi + 0x1ec]
mov ebp, 0x5916f4
cmp eax, 1
jne 0x4dce94
cmp ecx, ebx
jne 0x4dcd06
mov eax, dword [esi + 0xfc]
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1d4]
push eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
push 5
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x16
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dccf1
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov dword [esp + 0x10], ebp
mov byte [esp + 0xa4], 0x17
lea ecx, [esp + 0x10]
jmp 0x4dd7ad
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x18
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea edx, [esp + 0x18]
lea ecx, [esp + 0x38]
push edx
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dcdb8
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dcd84
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dcd92
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dcda1
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dcdae
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dcd76
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push ebx
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0xfc]
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1d4]
push eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
push 5
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x19
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dce5d
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x1a
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916e0
mov dword [esp + 0x18], edi
mov byte [esp + 0xa4], 0x1b
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 2
jne 0x4dcf11
mov edx, dword [esi + 0x100]
lea ecx, [esp + 0x10]
push edx
call sub.MFC42.DLL_CBrush::CBrush
push 8
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x1c
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dcefc
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov dword [esp + 0x10], ebp
mov byte [esp + 0xa4], 0x1d
lea ecx, [esp + 0x10]
jmp 0x4dd7ad
cmp eax, 3
jne 0x4dcfd1
mov edx, dword [esi + 0xfc]
mov eax, dword [esi + 0x1e4]
mov ecx, dword [esi + 0x1d4]
push edx
push eax
push ecx
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CPen::CPen
lea edx, [esp + 0x18]
lea ecx, [esp + 0x38]
push edx
mov byte [esp + 0xa8], 0x1e
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x100]
lea ecx, [esp + 0x10]
push eax
call sub.MFC42.DLL_CBrush::CBrush
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x1f
push ecx
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
mov edx, dword [esp + 0x3c]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x20
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916e0
mov dword [esp + 0x18], ebp
mov byte [esp + 0xa4], 0x21
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 4
jne 0x4dd168
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x22
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea eax, [esp + 0x18]
lea ecx, [esp + 0x38]
push eax
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd08c
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd058
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd066
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd075
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd082
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd04a
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push ebx
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0xfc]
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1d4]
push eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
push 5
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x23
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dd131
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x24
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916e0
mov dword [esp + 0x18], edi
mov byte [esp + 0xa4], 0x25
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 5
jne 0x4dd300
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x26
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea edx, [esp + 0x18]
lea ecx, [esp + 0x38]
push edx
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd223
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd1ef
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd1fd
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd20c
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd219
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd1e1
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push 1
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0xfc]
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1d4]
push eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
push 5
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x27
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dd2c9
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x28
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916e0
mov dword [esp + 0x18], edi
mov byte [esp + 0xa4], 0x29
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 6
jne 0x4dd408
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x2a
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea edx, [esp + 0x18]
lea ecx, [esp + 0x38]
push edx
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd3bb
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd387
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd395
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd3a4
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd3b1
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd379
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push ebx
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x18], 0x5916f4
mov byte [esp + 0xa4], 0x2b
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 7
jne 0x4dd511
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x2c
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea eax, [esp + 0x18]
lea ecx, [esp + 0x38]
push eax
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd4c3
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd48f
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd49d
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd4ac
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd4b9
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd481
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push 1
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x18], 0x5916f4
mov byte [esp + 0xa4], 0x2d
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 8
jne 0x4dd6a9
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x2e
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea eax, [esp + 0x18]
lea ecx, [esp + 0x38]
push eax
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd5cc
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd598
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd5a6
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd5b5
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd5c2
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd58a
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push 2
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0xfc]
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1d4]
push eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CPen::CPen
push 5
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0x2f
call sub.MFC42.DLL_CDC::SelectStockObject
mov edi, eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CGdiObject::DeleteObject
cmp edi, ebx
je 0x4dd672
push edi
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::SelectObject_1
mov edi, 0x5916f4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 0x30
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x10], 0x5916e0
mov dword [esp + 0x18], edi
mov byte [esp + 0xa4], 0x31
lea ecx, [esp + 0x18]
jmp 0x4dd7ad
cmp eax, 9
jne 0x4dd7ba
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x22c]
push 1
push eax
push ecx
mov byte [esp + 0xb0], 0x32
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CGdiObject::Attach
lea edx, [esp + 0x18]
lea ecx, [esp + 0x38]
push edx
call sub.MFC42.DLL_CDC::SelectObject_2
mov eax, dword [esi + 0x22c]
mov edi, 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x28], edx
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x230]
mov dword [esp + 0x24], ecx
mov ebp, dword [eax + 4]
cmp edx, edi
mov dword [esp + 0x2c], ebp
jle 0x4dd764
add eax, 8
mov ecx, dword [eax]
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jge 0x4dd730
mov dword [esp + 0x20], ecx
mov ecx, dword [eax]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jle 0x4dd73e
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
cmp ecx, ebx
jge 0x4dd74d
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
cmp ecx, ebp
jle 0x4dd75a
mov ebp, ecx
mov dword [esp + 0x2c], ebp
inc edi
add eax, 8
cmp edi, edx
jl 0x4dd722
xor ebx, ebx
mov edx, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebp, dword [esp + 0x3c]
lea eax, [esp + 0x38]
neg eax
sbb eax, eax
push edx
push ecx
lea edx, [esp + 0x28]
and eax, ebp
push 2
push edx
push eax
call fcn.004e6360
add esp, 0x14
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x18], 0x5916f4
mov byte [esp + 0xa4], 0x33
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov byte [esp + 0xa4], 0x13
mov eax, dword [esi + 0x22c]
cmp eax, ebx
je 0x4dd7d3
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [esi + 0x22c], ebx
mov ecx, esi
mov dword [esi + 0x234], ebx
mov dword [esi + 0x230], ebx
call fcn.004de650
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x30], 0x5916f4
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 0x34
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x38]
mov dword [esp + 0x30], 0x5916e0
mov dword [esp + 0xa4], 0xffffffff
call sub.MFC42.DLL_CClientDC::CClientDC
xor ebp, ebp
jmp case.0x4dc140.3
push esi
lea ecx, [esp + 0x84]
call fcn.00572dba
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x84]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [esp + 0x18], eax
mov dword [esi + 0xfc], eax
mov eax, dword [esp + 0xac]
mov ecx, eax
and ecx, 1
cmp cl, 1
jne 0x4dd885
mov eax, dword [esi + 0x24c]
lea edx, [esp + 0x18]
push ebp
push edx
push 0x178a
push eax
jmp 0x4dd89e
and eax, 2
cmp al, 2
jne 0x4dd8a4
mov edx, dword [esi + 0x24c]
lea ecx, [esp + 0x18]
push ebp
push ecx
push 0x178b
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x80]
call sub.MFC42.DLL_CClientDC::CClientDC
mov eax, dword [esi + 0x1c4]
mov dword [esi + 0x1c8], eax
mov esi, dword [esi + 0x248]
cmp esi, ebp
je 0x4dd8d4
push ebp
push ebp
push 0x4c2
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x98
ret 0xc