Function at 0x4990a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x334
push ebx
push ebp
mov ebp, dword [esp + 0x340]
push esi
push edi
mov esi, eax
call fcn.00497b80
mov ecx, dword [esi + 4]
mov dword [esp + 0x24], eax
lea eax, [esp + 0xf8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esi + 0xc]
mov ebx, dword [esp + 0x104]
sub ebx, dword [esp + 0xfc]
push 0
push 0
push 0x1200
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
mov eax, dword [ebp + 0xc]
sub eax, ebx
cdq
idiv dword [esp + 0x24]
inc edi
mov ecx, eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
sub eax, ebx
cdq
idiv dword [esp + 0x24]
mov dword [esp + 0x78], eax
test ecx, ecx
jge 0x49911a
xor ecx, ecx
mov dword [esp + 0x20], ecx
test edi, edi
je 0x499c8c
cmp ecx, eax
jg 0x499c8c
xor ecx, ecx
mov eax, edi
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049e995
mov ebx, eax
add esp, 4
lea eax, [ebx + 4]
push eax
lea ecx, [edi - 1]
push ecx
mov dword [ebx], 0
mov edx, dword [esi + 0xc]
push 0x1211
push edx
mov dword [esp + 0x24], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
cmp edi, eax
jle 0x499179
inc dword [ebx + eax*4]
inc eax
cmp eax, edi
jl 0x499171
xor ecx, ecx
mov eax, edi
mov edx, 0x10
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049e995
mov dword [esp + 0x20], eax
xor ecx, ecx
add esp, 4
mov eax, edi
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049e995
xor ebx, ebx
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x94], edi
mov dword [esp + 0x80], ebx
test edi, edi
jle 0x49933f
nop
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, ebx
shl eax, 4
add eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [edx + ebx*4]
test eax, eax
jne 0x499210
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push eax
push 0
push 0x1207
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esp + 0x10]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push 2
push edx
push eax
push ecx
jmp 0x499234
mov edx, dword [esp + 0x10]
push edx
dec eax
push eax
mov eax, dword [esi + 0xc]
push 0x1207
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x10]
mov edx, dword [esi]
mov eax, dword [esi + 0xc]
push 2
push ecx
push edx
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
test ebx, ebx
jne 0x4992ba
cmp byte [esi + 0x90], bl
je 0x4992ba
mov edx, dword [esi + 0x18]
lea ecx, [esp + 0xf8]
xor eax, eax
push ecx
push 2
push edx
mov dword [esp + 0x104], 0x1c
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x108], 4
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10c]
sub dword [edx], eax
mov ecx, dword [edx]
mov eax, dword [esi + 0x8c]
add eax, ecx
cmp dword [edx + 8], eax
jge 0x4992ba
mov ecx, edx
mov dword [ecx + 8], eax
mov edx, dword [esi + 0x94]
mov eax, dword [esp + 0x18]
mov dword [eax + ebx*4], edx
test ebx, ebx
je 0x499308
mov edx, dword [esp + 0x14]
mov eax, dword [edx + ebx*4]
lea ecx, [esp + 0xf8]
push ecx
mov ecx, dword [esi + 0xc]
dec eax
push eax
push 0x120b
push ecx
mov dword [esp + 0x108], 4
call dword [sym.imp.USER32.dll_SendMessageW]
test byte [esp + 0x10c], 1
je 0x499308
mov eax, dword [esp + 0x18]
or dword [eax + ebx*4], 2
cmp dword [esp + 0x94], ebx
jle 0x499324
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 8]
cmp eax, dword [ebp + 8]
jle 0x499324
mov dword [esp + 0x94], ebx
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx]
cmp edx, dword [ebp + 0x10]
jge 0x499336
mov dword [esp + 0x80], ebx
inc ebx
cmp ebx, edi
jl 0x4991d0
mov eax, dword [esp + 0x1c]
shl edi, 4
lea edi, [edi + eax - 8]
mov eax, dword [edi]
cmp dword [ebp + 0x10], eax
mov dword [esp + 0xf0], edi
jle 0x499390
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0x14]
push 5
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov ecx, dword [ebp]
push eax
lea eax, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.USER32.dll_FillRect]
push 0x15
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, dword [ebp]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push edx
mov dword [esp + 0xc4], eax
call edi
mov ecx, dword [ebp]
mov dword [esp + 0xe8], eax
mov eax, dword [esi + 0x28]
push eax
push ecx
call edi
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
mov dword [esp + 0xf0], eax
call edi
push 0x32
mov dword [esp + 0x40], eax
call edi
mov dword [esp + 0x38], eax
mov eax, esi
call fcn.004988d0
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.004965b0
mov dword [esp + 0x20], edi
imul edi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 0x74], edi
jmp 0x499410
mov eax, dword [esp + 0x10]
mov ebx, dword [sym.imp.GDI32.dll_SetTextColor]
test eax, eax
je 0x499b7f
test byte [eax + 0x20], 1
je 0x499464
call dword [sym.imp.USER32.dll_GetFocus]
mov edi, dword [sym.imp.USER32.dll_GetSysColor]
cmp eax, dword [esi]
jne 0x49944e
push 0xe
call edi
mov edx, dword [ebp]
push eax
push edx
call ebx
push 0xd
call edi
push eax
mov eax, dword [ebp]
push eax
jmp 0x49947e
push 8
call edi
mov ecx, dword [ebp]
push eax
push ecx
call ebx
push 0xa
call edi
mov edx, dword [ebp]
push eax
push edx
jmp 0x49947e
mov edi, dword [sym.imp.USER32.dll_GetSysColor]
push 8
call edi
push eax
mov eax, dword [ebp]
push eax
call ebx
push 5
call edi
mov ecx, dword [ebp]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [ebp]
push 2
push edx
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ebx, dword [esp + 0x94]
cmp ebx, dword [esp + 0x80]
mov dword [esp + 0x70], ebx
jg 0x499b14
jmp 0x4994b0
mov eax, ebx
shl eax, 4
add eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax]
add ecx, dword [esp + 0x74]
mov eax, dword [eax + 8]
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x88], ecx
add ecx, edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
test ebx, ebx
jle 0x4994f7
cmp eax, dword [esi + 0x84]
jle 0x499b02
mov ecx, dword [esp + 0x34c]
lea eax, [esp + 0x84]
push eax
push ecx
call dword [sym.imp.GDI32.dll_RectInRegion]
test eax, eax
je 0x499b02
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
xor edi, edi
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x7c], edi
mov dword [esp + 0x50], edx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], eax
test ebx, ebx
jne 0x49956e
mov eax, dword [esi + 0x84]
cmp ecx, eax
jl 0x499599
lea ecx, [esp + 0x50]
dec eax
push ecx
mov dword [esp + 0x5c], eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov edi, eax
mov dword [esp + 0x7c], edi
push edi
jmp 0x49959b
jle 0x499599
mov eax, dword [esi + 0x84]
cmp edx, eax
jge 0x499599
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov ecx, dword [ebp]
mov edi, eax
push edi
mov dword [esp + 0x80], edi
push ecx
jmp 0x49959f
push 0
mov edx, dword [ebp]
push edx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov edx, dword [edx + 0x10]
lea eax, [esp + 0x84]
push eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + ebx*4]
push eax
mov eax, dword [ebp]
push eax
mov eax, dword [esp + 0x20]
push eax
call edx
test al, al
je 0x4995e5
test edi, edi
je 0x499b02
jmp 0x499afb
mov eax, dword [ebp]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [esi + 0x64]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov eax, dword [esi + 0x68]
add eax, dword [esp + 0x88]
add edx, ecx
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x8c]
sub eax, ecx
cmp dword [edi + ebx*4], 0
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x98], edx
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
jne 0x49980f
sub ecx, dword [esp + 0x88]
sub eax, edx
push ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [ebp]
push eax
xor edi, edi
push ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov edx, dword [ebp]
push edx
mov dword [esp + 0xc4], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
mov eax, dword [esp + 0xc0]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 5
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push eax
lea ecx, [esp + 0x44]
push ecx
push edi
call dword [sym.imp.USER32.dll_FillRect]
mov edx, dword [esp + 0x10]
mov ecx, edx
call fcn.004966b0
imul eax, dword [esi + 0x6c]
mov ecx, dword [edx + 0x20]
add dword [esp + 0x40], eax
test cl, 0x40
je 0x499724
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x4c]
sub eax, ebx
sub eax, dword [esp + 0x38]
shr ecx, 4
cdq
sub eax, edx
mov edx, dword [esp + 0x40]
sar eax, 1
add eax, ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x128], edx
add edx, ebx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], edx
mov edx, dword [esp + 0x38]
add eax, edx
not cl
mov dword [esp + 0x134], eax
and cl, 1
movzx eax, cl
push eax
push esi
lea eax, [esp + 0x130]
call fcn.00498aa0
mov ebx, dword [esp + 0x70]
mov ecx, dword [esp + 0x3c]
add dword [esp + 0x40], ecx
cmp dword [esi + 0x30], 0
je 0x4997be
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
lea ebx, [esp + 0xc4]
mov dword [esp + 0xc4], 0
mov edx, dword [ecx]
push ebx
push eax
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
shl ecx, 8
sub eax, dword [esp + 0x38]
push ecx
cdq
sub eax, edx
mov ebx, eax
push 0xffffffffffffffff
sar ebx, 1
add ebx, dword [esp + 0x4c]
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x104]
push edx
mov edx, dword [esi + 0x30]
push ebx
push eax
push edi
push ecx
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_DrawEx]
mov eax, dword [esi + 0x64]
add eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0x70]
add dword [esp + 0x40], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x88]
push 0xcc0020
push 0
push 0
push edi
push ecx
mov ecx, dword [esp + 0xac]
push edx
mov edx, dword [ebp]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0x40]
add dword [esp + 0x98], eax
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
push 0x104
lea edi, [esp + 0x13c]
push edi
mov edi, dword [esp + 0x1c]
mov edi, dword [edi + ebx*4]
push edi
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + ebx*4]
mov ecx, dword [ebp]
push edx
mov edi, eax
lea eax, [esp + 0x9c]
push eax
push 0xffffffffffffffff
push edi
push ecx
call dword [sym.imp.USER32.dll_DrawTextW]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x98]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x68], ecx
mov ecx, dword [eax + ebx*4]
mov eax, dword [ebp]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0xa4]
or ecx, 0x400
push ecx
mov dword [esp + 0x70], edx
lea edx, [esp + 0x64]
push edx
push 0xffffffffffffffff
push edi
push eax
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [esp + 0x18]
test byte [ecx + ebx*4], 2
je 0x4998c1
mov edx, dword [esp + 0xa0]
sub edx, dword [esp + 0x68]
push 0
push edx
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov edi, dword [esp + 0x7c]
test edi, edi
je 0x4998fe
mov ecx, dword [ebp]
push 0
push ecx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0x58]
cmp edx, edi
jle 0x4998ee
mov edx, edi
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x50]
cmp dword [esp + 0x60], eax
jge 0x49990a
mov dword [esp + 0x60], eax
jmp 0x49990a
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x30], edi
mov edi, dword [esp + 0x60]
mov dword [esp + 0xd8], edi
mov edi, dword [esp + 0x64]
mov dword [esp + 0xe4], edi
mov edi, dword [esp + 0x60]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc8], edi
mov edi, dword [esp + 0x6c]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], edx
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], ecx
test ebx, ebx
jne 0x4999d3
mov edx, dword [esi + 0x64]
add edx, dword [esp + 0x50]
mov dword [esp + 0xfc], eax
mov dword [esp + 0xb4], edx
mov edx, dword [esi + 0x84]
push 2
lea eax, [esp + 0xfc]
mov dword [esp + 0x108], ecx
mov ecx, dword [ebp]
dec edx
push eax
push ecx
mov dword [esp + 0x104], edx
mov dword [esp + 0x10c], edx
call dword [sym.imp.GDI32.dll_Polyline]
mov edi, dword [sym.imp.USER32.dll_IntersectRect]
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0xdc]
push eax
mov ecx, eax
push ecx
call edi
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0xcc]
push eax
mov ecx, eax
push ecx
call edi
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0xb0]
push eax
mov ecx, eax
push ecx
call edi
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x2c]
push eax
mov ecx, eax
push ecx
call edi
mov edx, dword [esp + 0xd8]
cmp edx, dword [esp + 0xe0]
jge 0x499a5a
mov eax, dword [esp + 0xdc]
cmp eax, dword [esp + 0xe4]
jge 0x499a5a
mov edi, dword [esp + 0xa8]
mov edx, dword [ebp]
push edi
lea ecx, [esp + 0xdc]
push ecx
push edx
call dword [sym.imp.USER32.dll_FillRect]
jmp 0x499a61
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0xc8]
cmp eax, dword [esp + 0xd0]
jge 0x499a94
mov ecx, dword [esp + 0xcc]
cmp ecx, dword [esp + 0xd4]
jge 0x499a94
mov eax, dword [ebp]
push edi
lea edx, [esp + 0xcc]
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
test ebx, ebx
je 0x499a9c
mov eax, edi
jmp 0x499aa4
push 5
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov ecx, dword [esp + 0xac]
cmp ecx, dword [esp + 0xb4]
jge 0x499ad7
mov edx, dword [esp + 0xb0]
cmp edx, dword [esp + 0xb8]
jge 0x499ad7
mov ecx, dword [ebp]
push eax
lea eax, [esp + 0xb0]
push eax
push ecx
call dword [sym.imp.USER32.dll_FillRect]
mov edx, dword [esp + 0x28]
cmp edx, dword [esp + 0x30]
jge 0x499afb
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x34]
jge 0x499afb
mov edx, dword [ebp]
push edi
lea ecx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.USER32.dll_FillRect]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
inc ebx
cmp ebx, dword [esp + 0x80]
mov dword [esp + 0x70], ebx
jle 0x4994b0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x499b30
mov edx, dword [eax + 0x20]
shr edx, 4
test dl, 1
je 0x499b30
mov dword [esp + 0x10], ecx
jmp 0x499b59
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x499b3d
mov dword [esp + 0x10], ecx
jmp 0x499b59
mov eax, dword [eax + 8]
test eax, eax
je 0x499b51
cmp dword [eax + 0x10], 0
jne 0x499b76
mov eax, dword [eax + 8]
test eax, eax
jne 0x499b44
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
add dword [esp + 0x74], ecx
inc eax
cmp eax, dword [esp + 0x78]
mov dword [esp + 0x20], eax
jle 0x499410
jmp 0x499b88
mov eax, dword [eax + 0x10]
mov dword [esp + 0x10], eax
jmp 0x499b59
mov edx, dword [esp + 0x20]
dec edx
mov dword [esp + 0x78], edx
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [ebx + 0xc]
inc eax
imul eax, dword [esp + 0x24]
lea eax, [eax + ecx - 1]
cmp dword [ebp + 0x14], eax
jle 0x499c2c
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x28], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x2c], eax
mov eax, dword [edx]
push 5
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov edx, dword [ebp]
push eax
lea ecx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.USER32.dll_FillRect]
mov esi, dword [esi + 0x84]
mov ecx, dword [ebp]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [esi - 1]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xbc]
push eax
push ecx
call edi
push 2
lea edx, [esp + 0x2c]
mov esi, eax
mov eax, dword [ebp]
push edx
push eax
call dword [sym.imp.GDI32.dll_Polyline]
mov ecx, dword [ebp]
push esi
push ecx
call edi
jmp 0x499c32
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0xec]
mov eax, dword [ebp]
push edx
push eax
call edi
mov ecx, dword [esp + 0xe8]
mov edx, dword [ebp]
push ecx
push edx
call edi
mov eax, dword [esp + 0xbc]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebx
call fcn.0049e96f
mov ecx, dword [esp + 0x18]
add esp, 4
push ecx
call fcn.0049e96f
mov edx, dword [esp + 0x1c]
add esp, 4
push edx
call fcn.0049e96f
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x334
ret 8
push 5
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov ecx, dword [ebp]
push eax
lea eax, [ebp + 8]
push eax
push ecx
call dword [sym.imp.USER32.dll_FillRect]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x334
ret 8