Function at 0x100310e0
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10052648
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10080e78]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x14], ebx
mov eax, dword [ebx + 0x58]
push eax
push 1
xor esi, esi
push esi
lea ecx, [esp + 0x34]
call sub.mfc90.dll_Ordinal_525
mov ecx, dword [ebx + 0x5c]
push ecx
push 1
push esi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x7c], esi
call sub.mfc90.dll_Ordinal_525
mov byte [esp + 0x70], 1
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
push eax
push 1
push esi
lea ecx, [esp + 0x3c]
call sub.mfc90.dll_Ordinal_525
mov byte [esp + 0x70], 2
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBFondoXP_void_
push eax
push 1
push esi
lea ecx, [esp + 0x54]
call sub.mfc90.dll_Ordinal_525
push 0xe1e1e1
push 1
push esi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7c], 3
call sub.mfc90.dll_Ordinal_525
push 0xc8c8c8
push 1
push esi
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 4
call sub.mfc90.dll_Ordinal_525
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], vtable.CBrush.0
mov esi, dword [esp + 0x78]
lea edx, [esp + 0x30]
push edx
mov ecx, esi
mov byte [esp + 0x74], 6
call sub.mfc90.dll_Ordinal_6078
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x84]
mov edi, eax
sub edi, ecx
mov dword [esp + 0x60], eax
dec edx
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x80]
add eax, 0xfffffffb
sub edi, 7
mov dword [esp + 0x88], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x60], eax
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBColorXP_void_
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
lea ecx, [esp + 0x1c]
call sub.mfc90.dll_Ordinal_1358
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_FillRect]
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
push edx
inc eax
push eax
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
push edx
add eax, edi
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
inc ecx
push ecx
push edx
lea eax, [esp + 0x58]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
push ecx
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x7c]
push eax
inc ecx
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x7c]
add ecx, edi
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
inc eax
push eax
inc ecx
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
inc eax
add ecx, edi
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
lea edx, [esp + 0x40]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
add eax, 2
push eax
inc ecx
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
add eax, 2
add ecx, edi
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x7c]
dec edx
push edx
inc eax
push eax
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x7c]
dec edx
push edx
add eax, edi
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov ebp, dword [sym.imp.USER32.dll_InflateRect]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [esp + 0x84]
push ecx
call ebp
cmp dword [ebx + 0x54], 1
lea eax, [esp + 0x28]
jne 0x1003137d
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebx, ebx
jmp 0x10031390
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
push edx
lea ecx, [ebx + eax]
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x7c]
inc eax
lea edx, [ebx + ecx]
push eax
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
inc ebx
cmp ebx, 3
jl 0x10031390
push 1
push 1
lea eax, [esp + 0x84]
push eax
call ebp
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov ebx, dword [sym.imp.GDI32.dll_SetPixel]
xor ebp, ebp
lea esp, [esp]
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
push eax
add edx, ebp
add ecx, ebp
push edx
mov edx, dword [esi + 4]
add ecx, edi
push ecx
push edx
call ebx
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
push eax
mov eax, dword [esi + 4]
sub ecx, ebp
add edx, ebp
push ecx
add edx, edi
push edx
push eax
call ebx
inc ebp
cmp ebp, 5
jl 0x100313f0
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
sub ecx, ebp
push eax
mov eax, dword [esi + 4]
add ebp, edx
push ecx
add ebp, edi
push ebp
push eax
call ebx
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x54], 1
lea eax, [esp + 0x28]
jne 0x10031465
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebp, ebp
nop
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
je 0x1003147f
mov edx, dword [eax + 0x58]
jmp 0x10031482
mov edx, dword [eax + 0x5c]
mov eax, dword [esp + 0x80]
lea ecx, [eax + ebp + 1]
mov eax, dword [esp + 0x7c]
push edx
add eax, ebp
push ecx
mov ecx, dword [esi + 4]
add eax, edi
push eax
push ecx
call ebx
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
je 0x100314ad
mov edx, dword [eax + 0x58]
jmp 0x100314b0
mov edx, dword [eax + 0x5c]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esi + 4]
sub eax, ebp
dec eax
add ecx, ebp
push eax
add ecx, edi
push ecx
push edx
call ebx
inc ebp
cmp ebp, 5
jl 0x10031470
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
lea eax, [esp + 0x28]
jne 0x100314e3
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebp, ebp
lea ecx, [ecx]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
push 0xe1e1e1
lea ecx, [ecx + ebp + 2]
lea eax, [edx + ebp]
add eax, edi
push ecx
push eax
mov eax, dword [esi + 4]
push eax
call ebx
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esi + 4]
sub eax, ebp
push 0xc8c8c8
sub eax, 2
add ecx, ebp
push eax
add ecx, edi
push ecx
push edx
call ebx
inc ebp
cmp ebp, 4
jl 0x100314f0
mov eax, dword [esp + 0x78]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
lea ecx, [esp + 0x18]
mov byte [esp + 0x70], 5
mov dword [esp + 0x18], vtable.CBrush.0
call fcn.10001760
mov esi, vtable.CPen.0
lea ecx, [esp + 0x38]
mov byte [esp + 0x70], 4
mov dword [esp + 0x38], esi
call fcn.10001760
lea ecx, [esp + 0x40]
mov byte [esp + 0x70], 3
mov dword [esp + 0x40], esi
call fcn.10001760
lea ecx, [esp + 0x48]
mov byte [esp + 0x70], 2
mov dword [esp + 0x48], esi
call fcn.10001760
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 1
mov dword [esp + 0x30], esi
call fcn.10001760
lea ecx, [esp + 0x20]
mov byte [esp + 0x70], 0
mov dword [esp + 0x20], esi
call fcn.10001760
lea ecx, [esp + 0x28]
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x28], esi
call fcn.10001760
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14