Function at 0x4148dc
Capabilities:
Check for debugger via api

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [sym.imp.GDI32.dll_GetObjectW]
xor ebx, ebx
push ebx
push 0x4260f4ed
push ebx
mov dword [ebp - 4], 0x101
call edi
push ebx
push 0x54069416
push ebx
call edi
mov esi, dword [sym.imp.ole32.dll_CoDecodeProxy]
push ebx
push 6
push 0x55eef962
push 0xd00ddc8a
call esi
push ebx
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
call ebx
push 0
push 0xfffffffffffffff1
push 0xcb8d6b73
push 0xdf89c714
call esi
push 0
push 0x76c85914
push 0
call edi
push 0
push 0xc8dfb6f3
push 0
call edi
push 0
push 0xf57be2d8
push 0
call edi
mov edi, dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
push 0
push 0
call edi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x17
push 0x35bab931
push 0x2c281666
call esi
push 0
push 0xa33c13de
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xf5d12ab9
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xcab4a1ef
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xd6c4770a
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x17de9b87
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xf
push 0x98f79712
push 0xe7769af9
call esi
push 0
push 0x10
push 0x89e16357
push 0x90f9d1ec
call esi
push 0
push 0xf9409130
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 4
push 0xf8a67693
push 0x6f8e5b0a
call esi
push 0
push 0x40139122
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0x20fa8f5b
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x53bc576e
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x668e98f4
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
call ebx
push 0
push 0x39255c13
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 8
push 0x838f535c
push 0xabaaec89
call esi
mov esi, dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xc4be7132
push 0
call esi
push 0
push 0
call edi
push 0
push 0xd4104050
push 0
call esi
push 0
push 0x352342ae
push 0
call esi
mov eax, dword [ebp - 4]
add eax, eax
push eax
push 0x40
call dword [0x41c048]
push 0
push 0x2d61c5f7
push 0
mov esi, eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x14
push 0x8b92a6ed
push 0xeddc7086
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0
call edi
push 0
push 0xd5de22cc
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x2c9855e5
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xf159bc68
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0
call edi
push 0
push 0xd3cabb51
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xe5d3a4f
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0x85d180ae
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x129bcdc7
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x7c99ec5e
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0x51a7032e
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
call ebx
push 0
push 0x49ab2e41
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x806377a7
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0
call edi
push 0
push 8
push 0x83a538ce
push 0x6115eb54
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0x3746acc2
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0
call edi
push 0
push 0
call edi
push 0
call ebx
push 0
push 0x9b775883
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0xb058a55d
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xffffffffffffffea
push 0x7b55ccd3
push 0x74892583
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xf4a7996c
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xffffffffffffffea
push 0x5eb55b5c
push 0xf4fbfe8
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xc0a1c294
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xff69b46a
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [ebp - 4]
push eax
push esi
call dword [0x41c174]
push 0
push 0
call edi
push 0
push 0xe83f4e80
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x7661e421
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 8
push 0x89a29a92
push 0x70a5e915
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x8b78d1ba
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x9a5682d8
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0xe
push 0x75d9a021
push 0x94fdefd9
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0x77024c9a
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x101bf8c4
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x55b5ec60
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xd6bce74
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
call ebx
push 0
call ebx
push 0
push 0xd0a92dd6
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xa1ec58a2
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xa49cb1ff
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0x72761b6d
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xdb1e3f23
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0
call edi
push 0
push 0xfa89bdf4
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 9
push 0x140f176e
push 0x579cb79e
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0xf592d5cd
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xb0efc994
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call ebx
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x5707cf8a
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
push 0xffffffffffffffff
push 0x47ab008
push 0xd4782466
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
xor edi, edi
push edi
push 0xca472d90
push edi
call dword [sym.imp.GDI32.dll_GetObjectW]
push edi
push 6
push 0x14be18ce
push 0x91f9c3d2
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push edi
call ebx
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret