Function at 0x476ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x68
push ebp
movzx ebp, dx
shr edx, 0x10
cmp ebp, 0x7530
push esi
mov esi, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
jle 0x476bcd
mov dword [esp + 0x10], 0xffffffff
mov ebp, dword [esp + 0x10]
cmp esi, 0x7530
jle 0x476be1
mov dword [esp + 0x14], 0xffffffff
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [0x5f92ec]
push 2
lea ecx, [esp + 0x1c]
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
push esi
push ebp
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x476cdb
mov edx, dword [0x5f92ec]
push ebx
push edi
lea ecx, [esp + 0x20]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
sub ecx, ebx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
sub esi, dword [esp + 0x24]
mov edi, edx
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebx, edx
add ecx, ecx
mov eax, 0x55555556
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x60], edx
lea ecx, [esi + esi]
mov eax, 0x55555556
imul ecx
mov eax, edx
push 2
shr eax, 0x1f
add edx, eax
push 5
lea ecx, [esp + 0x58]
mov dword [esp + 0x58], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], edi
mov edi, dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push ecx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], edx
mov dword [esp + 0x78], edx
mov dword [esp + 0x80], ebx
call edi
mov esi, eax
test esi, esi
je 0x476ce7
mov edx, dword [esp + 0x1c]
push edx
push ebp
push esi
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
push esi
je 0x476ce1
call dword [sym.imp.GDI32.dll_DeleteObject]
pop edi
pop ebx
pop esi
pop ebp
add esp, 0x68
ret
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x38], eax
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [esp + 0x40], eax
mov eax, esi
sub eax, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ebx
push 2
mov dword [esp + 0x48], eax
push 4
lea eax, [esp + 0x38]
or ebp, 0xffffffff
push eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], esi
call edi
mov esi, eax
test esi, esi
je 0x476d74
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
je 0x476d64
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x10]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp ebp, 0xffffffff
jne 0x476ef9
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x38], eax
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x2c]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
push 2
mov dword [esp + 0x48], eax
push 4
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], ecx
call edi
mov esi, eax
test esi, esi
je 0x476df8
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
je 0x476de8
mov dword [esp + 0x10], 1
mov ebp, dword [esp + 0x10]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp ebp, 0xffffffff
jne 0x476ef9
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [esp + 0x40], eax
mov eax, ebx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
push 2
mov dword [esp + 0x48], eax
push 4
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], esi
call edi
mov esi, eax
test esi, esi
je 0x476e7a
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
je 0x476e6e
mov dword [esp + 0x10], 2
mov ebp, dword [esp + 0x10]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp ebp, 0xffffffff
jne 0x476ef9
mov ecx, dword [esp + 0x28]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov eax, ecx
sub eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
mov dword [esp + 0x40], eax
mov eax, ebx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
push 2
mov dword [esp + 0x48], eax
push 4
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], esi
call edi
mov esi, eax
test esi, esi
je 0x476ef5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
je 0x476eee
mov dword [esp + 0x10], 3
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebp, dword [esp + 0x10]
mov edx, dword [0x5f6bf8]
mov eax, dword [esp + 0x14]
mov edi, dword [0x5f8b80]
mov esi, dword [0x5f7ff4]
or ecx, 0xffffffff
cmp eax, edx
jne 0x476f1e
mov ecx, dword [0x5bfdd8]
jmp 0x476f45
cmp eax, esi
jne 0x476f2a
mov ecx, dword [0x5bfe00]
jmp 0x476f45
cmp eax, edi
jne 0x476f45
test ebp, ebp
mov ecx, dword [0x5bfe4c]
je 0x476cd9
cmp ebp, 1
je 0x476cd9
cmp ebp, ecx
je 0x476cd9
cmp ebp, 0xffffffff
je 0x476cd9
cmp eax, edx
jne 0x476f6c
pop edi
pop ebx
pop esi
mov dword [0x5bfdd8], ebp
pop ebp
add esp, 0x68
jmp fcn.004e8020
cmp eax, esi
jne 0x476f82
pop edi
pop ebx
pop esi
mov dword [0x5bfe00], ebp
pop ebp
add esp, 0x68
jmp fcn.004e8020
cmp eax, edi
jne 0x476f8c
mov dword [0x5bfe4c], ebp
pop edi
pop ebx
pop esi
pop ebp
add esp, 0x68
jmp fcn.004e8020