Function at 0x501ea9d5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0xec
push ebx
lea eax, [ebp - 0x58]
mov ebx, ecx
push eax
push dword [ebx + 0xf8]
call dword [sym.imp.USER32.dll_BeginPaint]
test eax, eax
je 0x501eb1da
cmp dword [ebp - 0x58], 0
je 0x501eb1da
test byte [ebx + 0xa5], 0x20
push esi
push edi
lea esi, [ebp - 0x50]
lea edi, [ebp + 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
je 0x501eaa2f
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xf8]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x501eb1d8
push dword [ebp - 0x58]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebx + 0x204]
mov dword [ebp + 0x74], eax
push dword [ebx + 0x200]
push dword [ebp - 0x58]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x38], eax
call esi
mov dword [ebp + 0x3c], eax
mov eax, dword [ebx + 0x22c]
push dword [eax + 8]
push dword [ebp + 0x74]
call esi
mov eax, dword [ebp + 0x50]
mov edi, dword [ebx + 0x208]
cdq
idiv edi
mov esi, dword [ebx + 0x31c]
xor ecx, ecx
add eax, esi
mov dword [ebp + 0x70], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp + 0x60], edx
cdq
idiv edi
cmp dword [ebx + 0x33c], ecx
mov edx, esi
setne cl
add edx, eax
mov eax, dword [ebp + 0x60]
sub dword [ebp + 0x50], eax
add ecx, edx
cmp dword [ebp + 0x70], 0
mov dword [ebp + 0x68], ecx
jle 0x501eaacb
cmp dword [ebp + 0x70], esi
jne 0x501eaacb
mov eax, dword [ebx + 0x22c]
mov eax, dword [eax + 0x6c]
add eax, 8
cmp eax, edi
jle 0x501eaacb
dec dword [ebp + 0x70]
sub dword [ebp + 0x50], edi
mov eax, dword [ebx + 0x1f8]
mov ecx, dword [ebx + 0x218]
add eax, ecx
cmp eax, dword [ebp + 0x4c]
jg 0x501eaae1
mov eax, dword [ebp + 0x4c]
push dword [ebp + 0x58]
push dword [ebp + 0x54]
push dword [ebp + 0x50]
push eax
lea eax, [ebp + 0x28]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [ebx + 0x234]
xor edi, edi
push edi
call fcn.501e8449
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x74]
call fcn.501e8c24
mov eax, dword [ebx + 0x13c]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x20]
and dword [ebp + 0x40], 0xfffffffc
mov ecx, ebx
mov dword [ebp + 0x44], edi
mov dword [ebp + 0x48], edi
call fcn.50272bbe
mov esi, eax
dec esi
cmp dword [ebp + 0x68], esi
jge 0x501eab3e
mov eax, dword [ebp + 0x68]
mov dword [ebp + 0x6c], eax
jmp 0x501eab41
mov dword [ebp + 0x6c], esi
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x70]
call fcn.50272bbe
mov eax, dword [ebx + 0x13c]
mov ecx, dword [eax]
lea edx, [ebp - 0x74]
push edx
push dword [ebp + 0x6c]
push dword [ebp + 0x70]
push eax
call dword [ecx + 0x34]
test eax, eax
jl 0x501eaf0b
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp + 0x40]
call fcn.501e8ea3
test eax, eax
jl 0x501eaf0b
cmp dword [ebp + 0x70], esi
jg 0x501eace1
cmp dword [ebp + 0x68], esi
mov eax, dword [ebx + 0x328]
mov dword [ebp + 0x60], eax
mov dword [ebx + 0x328], 0x80
jl 0x501eaba4
mov dword [ebp + 0x68], esi
mov eax, dword [ebp + 0x68]
sub eax, dword [ebp + 0x70]
mov esi, dword [ebx + 0x208]
mov edi, dword [ebx + 0x2e8]
imul esi, eax
add esi, dword [ebp + 0x50]
mov ecx, edi
add esi, dword [ebx + 0x33c]
mov dword [ebp + 0x5c], eax
call fcn.501e842e
test eax, eax
je 0x501eabf7
cmp dword [edi + 0x3c], 1
jne 0x501eabf7
mov ecx, dword [edi + 0x14]
mov eax, dword [edi + 0xc]
cmp ecx, eax
je 0x501eabf7
sub eax, dword [ebp + 0x70]
cmp eax, dword [ebp + 0x5c]
jbe 0x501eabf0
sub ecx, dword [ebp + 0x70]
cmp ecx, dword [ebp + 0x5c]
ja 0x501eabf7
mov ecx, edi
call fcn.502259d3
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x208]
add eax, esi
push eax
push dword [ebx + 0x200]
mov eax, dword [ebx + 0x1f8]
add eax, dword [ebx + 0x218]
push esi
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebx + 0x22c]
and dword [ebp - 4], 0
mov esi, dword [ebp + 0x68]
mov dword [ebp], eax
mov eax, dword [ebx + 0x230]
mov dword [ebp + 4], eax
mov eax, dword [ebx + 0x234]
mov dword [ebp + 8], eax
mov eax, dword [0x5029f6a4]
mov dword [ebp + 0xc], eax
mov eax, dword [0x5029f6a8]
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x14], 0x5029f678
lea eax, [ebp - 0x74]
push eax
push esi
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.50272bbe
mov eax, dword [ebx + 0x208]
neg eax
push eax
push 0
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebx + 0x33c]
add eax, dword [ebp + 0x50]
dec esi
cmp dword [ebp - 0x10], eax
jl 0x501eac96
cmp esi, dword [ebp + 0x70]
jge 0x501eac5d
test byte [ebx + 0xab], 1
jne 0x501eace1
mov eax, dword [ebx + 0x328]
mov edx, dword [ebp + 0x60]
cmp eax, edx
jg 0x501eacd2
jge 0x501eacca
mov eax, dword [ebx + 0x32c]
mov ecx, dword [ebx + 0x31c]
cmp eax, ecx
jl 0x501eacd2
mov esi, dword [ebx + 0x330]
add esi, ecx
cmp eax, esi
jg 0x501eacd2
mov dword [ebx + 0x328], edx
jmp 0x501eace1
push dword [ebx + 0x320]
mov ecx, ebx
push 4
call fcn.50272bbe
lea eax, [ebp + 0x4c]
push eax
push dword [ebp + 0x74]
mov ecx, ebx
call fcn.50272bbe
test byte [ebx + 0xaa], 8
je 0x501ead08
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x70]
push dword [ebp + 0x74]
call fcn.50272bbe
and byte [ebp + 0x67], 0
xor edi, edi
cmp dword [ebp + 0x44], edi
jle 0x501ead49
mov eax, dword [ebp + 0x48]
mov esi, dword [eax + edi*4]
mov eax, dword [esi]
lea ecx, [ebp + 0x70]
push ecx
push esi
call dword [eax + 0x14]
test byte [ebp + 0x71], 8
je 0x501ead43
mov eax, dword [ebp + 0x70]
and eax, 0x41
test al, al
je 0x501ead43
push dword [ebp + 0x70]
mov ecx, ebx
push esi
push dword [ebp + 0x74]
push 2
call fcn.50272bbe
inc edi
cmp edi, dword [ebp + 0x44]
jl 0x501ead13
xor edi, edi
cmp dword [ebp + 0x44], edi
jle 0x501eaef7
mov eax, dword [ebp + 0x48]
mov esi, dword [eax + edi*4]
mov eax, dword [esi]
lea ecx, [ebp + 0x70]
push ecx
push esi
call dword [eax + 0x14]
test byte [ebp + 0x71], 0x20
je 0x501ead85
mov eax, dword [esi]
lea ecx, [ebp + 0x28]
push ecx
push esi
call dword [eax + 0x48]
lea eax, [ebp + 0x28]
push eax
call fcn.501e83f8
test eax, eax
je 0x501ead85
mov byte [ebp + 0x67], 1
test byte [ebp + 0x71], 1
je 0x501ead8f
mov byte [ebp + 0x67], 1
mov eax, dword [ebp + 0x70]
and eax, 0x41
test al, al
je 0x501eada9
push dword [ebp + 0x70]
mov ecx, ebx
push esi
push dword [ebp + 0x74]
push 1
call fcn.50272bbe
inc edi
cmp edi, dword [ebp + 0x44]
jl 0x501ead54
cmp byte [ebp + 0x67], 0
je 0x501eaef7
push dword [ebp + 0x58]
mov eax, dword [ebx + 0x218]
dec eax
push eax
xor esi, esi
push esi
push esi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
mov dword [ebp + 0x6c], esi
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x6c]
mov esi, dword [eax + ecx*4]
mov eax, dword [esi]
lea ecx, [ebp + 0x28]
push ecx
push esi
call dword [eax + 0x48]
mov eax, dword [esi]
lea ecx, [ebp + 0x70]
push ecx
push esi
call dword [eax + 0x14]
test byte [ebp + 0x71], 1
je 0x501eae10
test byte [ebp + 0x71], 0x20
jne 0x501eae2b
lea eax, [ebp + 0x28]
push eax
call fcn.501e83f8
test eax, eax
jne 0x501eaee8
jmp 0x501eae2b
lea eax, [ebp + 0x28]
push eax
call fcn.501e83f8
test eax, eax
je 0x501eaee8
test byte [ebp + 0x71], 0x20
je 0x501eaee8
mov eax, dword [esi]
lea ecx, [ebp + 0x60]
push ecx
push esi
call dword [eax + 0x40]
test eax, eax
jl 0x501eaee8
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x60]
mov ecx, ebx
push 0
call fcn.50272bbe
test eax, eax
jl 0x501eaedf
mov eax, dword [esi]
lea ecx, [ebp + 0x5c]
push ecx
xor edi, edi
push esi
mov dword [ebp + 0x5c], edi
call dword [eax + 0x34]
xor eax, eax
cmp dword [ebp + 0x5c], edi
mov ecx, ebx
setne al
push eax
push edi
push 1
lea eax, [ebp + 0x18]
push eax
call fcn.50272bbe
mov edi, eax
test edi, edi
je 0x501eaedf
mov eax, dword [esi]
or dword [ebp + 0x68], 0xffffffff
lea ecx, [ebp + 0x68]
push ecx
push esi
call dword [eax + 0xc]
test eax, eax
jl 0x501eaed8
mov eax, dword [ebx + 0x31c]
imul eax, dword [ebx + 0x208]
add eax, dword [ebx + 0x33c]
mov ecx, dword [ebx + 0x234]
push 1
push 1
push eax
push 0
push dword [ebp + 0x68]
call fcn.501e8469
mov ecx, dword [ebx + 0x234]
push eax
push dword [ebp + 0x68]
call fcn.501e8459
push eax
push edi
push dword [ebp + 0x74]
call fcn.50272bbe
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [ebp + 0x44]
jl 0x501eadd4
mov eax, dword [ebx + 0x13c]
mov ecx, dword [eax]
lea edx, [ebp - 0x74]
push edx
push eax
call dword [ecx + 0x38]
xor edi, edi
jmp 0x501eaf32
lea eax, [ebp + 0x4c]
push eax
push dword [ebp + 0x74]
mov ecx, ebx
call fcn.50272bbe
test byte [ebx + 0xaa], 8
je 0x501eaf32
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x70]
push dword [ebp + 0x74]
call fcn.50272bbe
mov eax, dword [ebx + 0x13c]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x24]
test byte [ebx + 0xa4], 1
jne 0x501eaf9b
mov esi, dword [ebx + 0x2e8]
cmp byte [esi + 0x32], 0
je 0x501eaf9b
mov ecx, esi
call fcn.501e842e
test eax, eax
jne 0x501eaf9b
mov edi, dword [esi + 0x24]
mov eax, dword [ebx + 0x208]
add eax, edi
push eax
mov ecx, esi
call fcn.50225468
mov ecx, dword [ebx + 0x2e8]
inc eax
inc eax
push eax
push edi
call fcn.50225468
push eax
lea eax, [ebp + 0x18]
push eax
call dword [sym.imp.USER32.dll_SetRect]
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_InvertRect]
xor edi, edi
cmp dword [0x5029f648], edi
je 0x501eb177
mov eax, dword [ebx + 0x22c]
mov esi, dword [eax + 8]
call fcn.500d35a9
cmp esi, eax
je 0x501eb177
push 0xffffff
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0x5029f6bc
mov dword [ebp + 0x60], eax
call fcn.501e856a
push dword [0x5029f6bc]
call dword [sym.imp.GDI32.dll_UnrealizeObject]
mov eax, dword [ebx + 0x31c]
imul eax, dword [ebx + 0x208]
add eax, dword [ebx + 0x33c]
push edi
push eax
push edi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetBrushOrgEx]
push dword [0x5029f6bc]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp + 0x68], edi
mov edi, dword [sym.imp.GDI32.dll_PatBlt]
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x68]
or esi, 0xffffffff
mov dword [ebp + 0x6c], 0x5029f648
mov ecx, dword [ebp + 0x6c]
mov ecx, dword [ecx]
test ecx, ecx
je 0x501eb0cf
jl 0x501eb0ad
mov esi, dword [ebx + 0x22c]
mov esi, dword [esi + 0x7c]
mov edx, dword [ebx + 0x218]
imul esi, ecx
sub esi, dword [ebx + 0x324]
add esi, edx
cmp esi, edx
jle 0x501eb0be
cmp esi, dword [ebx + 0x200]
jge 0x501eb0be
push 0
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp + 0x58]
sub eax, dword [ebp + 0x50]
push 0x500325
push eax
push 1
push dword [ebp + 0x50]
push esi
push dword [ebp + 0x74]
call edi
push dword [0x5028b538]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp + 0x58]
sub eax, dword [ebp + 0x50]
push 0x5a0049
push eax
push 1
push dword [ebp + 0x50]
push esi
push dword [ebp + 0x74]
call edi
mov eax, dword [ebp + 0x68]
jmp 0x501eb0be
mov eax, dword [ebx + 0x22c]
mov eax, dword [eax + 0x7c]
imul eax, ecx
neg eax
mov dword [ebp + 0x68], eax
add dword [ebp + 0x6c], 4
cmp dword [ebp + 0x6c], 0x5029f678
jl 0x501eb02b
test eax, eax
je 0x501eb15f
test esi, esi
jge 0x501eb0e7
mov esi, dword [ebx + 0x218]
sub esi, dword [ebx + 0x324]
mov eax, dword [ebp + 0x68]
push 0
push dword [ebp + 0x74]
add esi, eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp esi, dword [ebx + 0x200]
mov dword [ebp + 0x6c], esi
jge 0x501eb12c
mov eax, dword [ebp + 0x58]
sub eax, dword [ebp + 0x50]
push 0x500325
push eax
push 1
push dword [ebp + 0x50]
push dword [ebp + 0x6c]
push dword [ebp + 0x74]
call edi
mov eax, dword [ebp + 0x6c]
add eax, dword [ebp + 0x68]
cmp eax, dword [ebx + 0x200]
mov dword [ebp + 0x6c], eax
jl 0x501eb102
push dword [0x5028b538]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x501eb157
mov eax, dword [ebp + 0x58]
sub eax, dword [ebp + 0x50]
push 0x5a0049
push eax
push 1
push dword [ebp + 0x50]
push esi
push dword [ebp + 0x74]
call edi
add esi, dword [ebp + 0x68]
cmp esi, dword [ebx + 0x200]
jl 0x501eb13d
push dword [ebp + 0x60]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp + 0x5c]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push 0xcc0020
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp + 0x74]
push eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x58]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp + 0x3c]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp + 0x38]
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xf8]
call dword [sym.imp.USER32.dll_EndPaint]
lea ecx, [ebp + 0x40]
call fcn.501e8415
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret