Function at 0x4136d9
Capabilities:
Check for debugger via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
xor ebx, ebx
push edi
push ebx
push ebx
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], ecx
call esi
push ebx
mov ebx, dword [sym.imp.ole32.dll_CoDecodeProxy]
push 6
push 0x73fb8df
push 0xfc8de216
call ebx
mov edi, dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x93ba47e6
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call esi
push 0
push 0x3ad117cd
push 0
call edi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0xa60edcb1
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xa4bb71a1
push 0
call edi
push 0
push 3
push 0xdca47eac
push 0xce3f0787
call ebx
push 0
push 0
call esi
push 0
push 0xa4af0f1f
push 0
call edi
push 0
push 0x9c17dc17
push 0
call edi
push 0
push 7
push 0x68768315
push 0x5b47e0da
call ebx
push 0
push 0x1ad89378
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x82b6c6d3
push 0
call edi
push 0
push 4
push 0x954bfb4c
push 0x23f2332
call ebx
push 0
push 0
call esi
push 0
push 0xffffffffffffffea
push 0xce201035
push 0xccd2fa6c
call ebx
push 0
push 0x7bfd372d
push 0
call edi
push 0
push 0x6c3ff46b
push 0
call edi
push 0
push 0xf3807d4f
push 0
call edi
push 0
push 0xf
push 0xf2fdd9e5
push 0xedac3c3d
call ebx
push 0
push 0
call esi
push 0
push 0xb51a44b
push 0
call edi
push 0
push 0x15
push 0x7cce08b6
push 0x32a7fb4e
call ebx
push 0
push 0x2e28bb9
push 0
call edi
push 0
push 0xd8c93df1
push 0
call edi
push 0
push 0xbad34f3c
push 0
call edi
push 0
push 0
call esi
push 0
push 0xe61a6c4
push 0
call edi
push 0
push 0x9105e9f
push 0
call edi
push 0
push 0
call esi
push dword [ebp - 8]
call dword [0x41c190]
push dword [ebp - 0x10]
mov esi, eax
call dword [0x41c190]
add esi, 0x71
add eax, esi
push eax
push 0x40
mov dword [ebp - 0xc], eax
call dword [0x41c048]
mov esi, dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
push 0
push 0
mov dword [ebp - 4], eax
call esi
push 0
push 0x32a894c2
push 0
call edi
push 0
push 9
push 0xdaaf590e
push 0x10dfbbba
call ebx
push 0
push 0
call esi
push 0
push 0x1f231edd
push 0
call edi
push 0
push 0x7ddbd166
push 0
call edi
push 0
push 0x3cbc2766
push 0
call edi
push 0
push 0xf34086ad
push 0
call edi
push 0
push 0x9a116cf5
push 0
call edi
push 0
push 0x92b7f50c
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfffffffffffffff7
push 0x68d50d41
push 0xd9722f22
call ebx
push 0
push 0x15
push 0xe811b36b
push 0x47e2409d
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xc
push 0xa66661fb
push 0x62fbd4b7
call ebx
push 0
push 0x12
push 0x6eae1691
push 0xefc23c76
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfffffffffffffff0
push 0xf99fb15e
push 0x56528dc2
call ebx
push 0
push 3
push 0x2720a41
push 0x6d049772
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xb997a1ea
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call esi
push 0
push 7
push 0x9c96d43a
push 0x971dbd2
call ebx
push 0
push 8
push 0xd4126f65
push 0x669cba88
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x1cca744
push 0
call edi
push 0
push 9
push 0x30a43e0c
push 0x24a5608b
call ebx
push 0
push 0x6bfb1fe3
push 0
call edi
push 0
push 0x15094893
push 0
call edi
push 0
push 0
call esi
push 0
push 0x15
push 0x2ca4280d
push 0xd548efe5
call ebx
push 0
push 0xb
push 0xde70bd94
push 0x6b3932a1
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x7617b53b
push 0
call edi
push 0
push 0xffffffffffffffeb
push 0xb532a177
push 0x26108bff
call ebx
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x413a6d
cmp eax, 0x7fffffff
ja 0x413a63
push ecx
push dword [ebp - 8]
mov edx, eax
push ecx
mov ecx, dword [ebp - 4]
call fcn.0040b433
jmp 0x413a6d
test eax, eax
je 0x413a6d
mov eax, dword [ebp - 4]
mov byte [eax], 0
push 0
push 0x13
push 0x19ae4183
push 0x46f116e2
call ebx
push 0
push 0xa917688a
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x15
push 0xad188fab
push 0xc5966e06
call ebx
push 0
push 0xfffffffffffffff5
push 0xea2abce3
push 0x7f76fd
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfffffffffffffff7
push 0x5138233c
push 0x86d678b1
call ebx
push 0
push 0xa0b75c3
push 0
call edi
push 0
push 0xbe95a863
push 0
call edi
push 0
push 0xcf300e95
push 0
call edi
push 0
push 0x502b14ac
push 0
call edi
push 0
push 9
push 0xfa174c71
push 0xf62331eb
call ebx
push 0
push 0x455b236a
push 0
call edi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0xf60f82d1
push 0
call edi
push 0
push 0xab27b67
push 0
call edi
push 0
push 0
call esi
push 0
push 0x914ffbb9
push 0
call edi
push 0
push 0x691ed236
push 0
call edi
push 0
push 0
call esi
push 0
push 0
push 0x62e6fdd1
push 0x9e3166d0
call ebx
push 0
push 0
call esi
push 0
push 0xcd000e78
push 0
call edi
push 0
push 0x3b76990e
push 0
call edi
push 0
push 0xfb2233eb
push 0
call edi
push 0
push 0xfffffffffffffffa
push 0xf2f343bb
push 0x27bf5482
call ebx
push 0
push 0x36f3a494
push 0
call edi
push 0
push 0xc8043889
push 0
call edi
push 0
push 0xe63100b6
push 0
call edi
push 0
push 0x891e4a8f
push 0
call edi
push 0
push 0xc
push 0xf830a3b5
push 0xf057885a
call ebx
push 0
push 0x24cb96b7
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x10836699
push 0
call edi
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x413c3d
cmp eax, 0x7fffffff
ja 0x413c3d
mov edx, dword [ebp - 4]
mov ecx, eax
cmp byte [edx], 0
je 0x413c1a
inc edx
sub ecx, 1
jne 0x413c0f
test ecx, ecx
je 0x413c24
mov edx, eax
sub edx, ecx
jmp 0x413c26
xor edx, edx
test ecx, ecx
je 0x413c3d
push ecx
push dword [ebp - 0x10]
sub eax, edx
push ecx
mov ecx, dword [ebp - 4]
add ecx, edx
mov edx, eax
call fcn.0040b433
push 0
push 0
call esi
push 0
push 0x14
push 0xd2be1934
push 0xa39b2730
call ebx
push 0
push 0x6374ba9d
push 0
call edi
push 0
push 4
push 0xad69d4b2
push 0xd9349efd
call ebx
push 0
push 0xfffffffffffffff9
push 0x6c42eaf9
push 0x25d79518
call ebx
push 0
push 0xeb030783
push 0
call edi
push 0
push 0xd84eb347
push 0
call edi
push 0
push 0
call esi
push 0
push 0x7805fb5b
push 0
call edi
push 0
push 0x2ef33c75
push 0
call edi
push 0
push 0
call esi
push 0
push 0x2b92dbbb
push 0
call edi
push 0
push 0xb193ac06
push 0
call edi
push 0
push 0xeda54c9d
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x69cc2340
push 0
call edi
push 0
push 0x1b3f8b95
push 0
call edi
push 0
push 0x7bcd9759
push 0
call edi
push 0
push 0xc66cc856
push 0
call edi
push 0
push 0
call esi
push 0
push 0x3021b455
push 0
call edi
push 0
push 0x15
push 0x81cd1e2c
push 0xb5058a02
call ebx
push 0
push 0x57d9506d
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xecad2a08
push 0
call edi
push 0
push 0xcb7f58d2
push 0
call edi
push 0
push 0x56c3bbb3
push 0
call edi
push 0
push 0
call esi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xab4ed257
push 0
call edi
push 0
push 0x523d4ca1
push 0
call edi
push 0
push 0xfffffffffffffff1
push 0x9e5cc58e
push 0x4d7ed4f8
call ebx
push 0
push 0x592b57f
push 0
call edi
push 0
push 0x327e74c3
push 0
call edi
push 0
push 0xa
push 0x6d94ba68
push 0x2c52e387
call ebx
push 0
push 0x20e3db21
push 0
call edi
push dword [ebp - 8]
call dword [0x41c0d8]
push 0
push 0xfffffffffffffff9
push 0x9c3b56d7
push 0x64aca0fd
call ebx
push 0
push 0x33131580
push 0
call edi
push 0
push 0x257bd973
push 0
call edi
push 0
push 0x4f815015
push 0
call edi
push 0
push 7
push 0xfd21aae2
push 0xf798c3a2
call ebx
push 0
push 0
call esi
push 0
push 0xffffffffffffffe9
push 0x3782da90
push 0xea2a09f8
call ebx
push 0
push 0xe763ec28
push 0
call edi
push 0
push 0
call esi
push 0
push 0xfffffffffffffff8
push 0x722ae042
push 0x73f6b45f
call ebx
push 0
push 0xd5be410b
push 0
call edi
push 0
push 0xe5066d84
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x13
push 0xbc8fb2cb
push 0xc850ac0d
call ebx
push 0
push 0xfffffffffffffff4
push 0xa3f2a566
push 0x8627f8bb
call ebx
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0xfffffffffffffffd
push 0x9e6b871
push 0xf472301c
call ebx
push 0
push 0
call esi
push 0
push 0xffffffffffffffec
push 0x7789dff
push 0xd7bf3d6d
call ebx
push 0
push 0x189cc317
push 0
call edi
push 0
push 0x198251f9
push 0
call edi
push 0
push 0x598ce60c
push 0
call edi
push 0
push 0xfdfb4665
push 0
call edi
push 0
push 0x71c5e54
push 0
call edi
push 0
push 0x5d1d8dfd
push 0
call edi
push 0
push 0xf
push 0xca5f86f2
push 0x62c7edf0
call ebx
xor ebx, ebx
push ebx
push 0xb33a467a
push ebx
call edi
push ebx
push 0x4ebd75f6
push ebx
call edi
push ebx
push 0xb71d4ab4
push ebx
call edi
push ebx
push 0xa7279600
push ebx
call edi
push ebx
push 0x7f28e434
push ebx
call edi
push ebx
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
call ebx
push 0
call ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret