Function at 0x1000ef70
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push 0xffffffffffffffff
push 0x1004ebe8
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x10080e78]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
cmp dword [ecx + 0x80], 1
jne 0x1000f35b
mov esi, dword [esp + 0x28]
mov edi, dword [sym.imp.USER32.dll_InflateRect]
xor ebx, ebx
nop
mov al, bl
add al, 0x79
movzx eax, al
mov cl, bl
sub cl, 0x35
shl eax, 8
movzx edx, cl
or eax, edx
shl eax, 8
or eax, 0xff
push eax
push eax
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_2263
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [esp + 0x34]
push ecx
call edi
inc ebx
cmp ebx, 2
jl 0x1000efb0
push 2
push 2
lea edx, [esp + 0x34]
push edx
call edi
push 0x14
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
mov edi, dword [sym.imp.GDI32.dll_SetPixel]
push eax
mov eax, dword [esp + 0x34]
add eax, 2
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
add eax, 3
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
add eax, 4
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
add eax, 5
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
add eax, 6
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
push eax
add ecx, 2
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
push eax
add ecx, 3
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push 0xb9dcff
push eax
add ecx, 4
mov edx, dword [esi + 4]
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xb9dcff
push eax
add ecx, 5
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x9ee1fe
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xffffff
inc eax
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 2
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 3
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 4
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 5
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 6
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push 0xd9f3ff
add eax, 7
push eax
push ecx
mov edx, dword [esi + 4]
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 8
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
add eax, 9
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xfffffe
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 2
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 3
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 4
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 5
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 6
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xd9f3ff
push eax
add ecx, 7
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0xfffffe
inc eax
push eax
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
inc ecx
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
add ecx, 2
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
add ecx, 3
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
add ecx, 4
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
add ecx, 5
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 4]
push 0x8bdcfe
inc eax
push eax
add ecx, 6
push ecx
push edx
call edi
push 0x8bdcfe
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esi + 4]
inc eax
push eax
add ecx, 7
push ecx
push edx
call edi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret 0x14
xor eax, eax
mov esi, vtable.CBrush.0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
push 0x14
mov dword [esp + 0x24], eax
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push eax
lea ecx, [esp + 0x14]
call sub.mfc90.dll_Ordinal_1358
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0x30]
push ecx
push eax
call dword [sym.imp.USER32.dll_FillRect]
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x10], esi
call fcn.10001760
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret 0x14