Function at 0x40ce9f
Capabilities:
Check for debugger via api

Disassembly:
push ebx
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
push esi
push edi
xor esi, esi
push esi
call ebx
mov edi, dword [sym.imp.GDI32.dll_GetObjectW]
push esi
push 0x34e53575
push esi
call edi
push esi
push 0x768e0764
push esi
call edi
push esi
push 0x77fb02f3
push esi
call edi
push esi
call ebx
mov esi, dword [sym.imp.ole32.dll_CoDecodeProxy]
xor ebx, ebx
push ebx
push 0xe
push 0xdb6160ec
push 0xf74f8d5d
call esi
push ebx
push 0xfffffffffffffffb
push 0xc5de0325
push 0x30ecca67
call esi
push ebx
push 0xe9d30189
push ebx
call edi
push ebx
push 0x70c079ef
push ebx
call edi
push ebx
push 0xd717a614
push ebx
call edi
push ebx
push 0x37a8dbc2
push ebx
call edi
push ebx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
call ebx
push 0
push 0x52403da6
push 0
call edi
push 0
push 0
call ebx
push 0
push 0xf4f514dc
push 0
call edi
push 0
push 0xa24b49eb
push 0
call edi
push 0
push 0xe15036e
push 0
call edi
push 0
push 0xe4a3766e
push 0
call edi
push 0
push 0xfffffffffffffffc
push 0x199ad477
push 0x7cdc6f56
call esi
push 0
push 0
call ebx
push 0
push 0x12
push 0x357c8efe
push 0xf38f1cf7
call esi
push 0
push 0
call ebx
push 0
push 0xbafd50e9
push 0
call edi
push 0
push 0x4832f682
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xedb56b0d
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xa9ec45a0
push 0
call edi
push 0
push 0x632c5a2e
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x73007628
push 0
call edi
push 0
push 0x58b81a2d
push 0
call edi
push 0
push 9
push 0x4a6039c1
push 0xaf1418b6
call esi
push 0
push 0x11
push 0x4b432a74
push 0x1a4607ef
call esi
push 0
push 0x80c66c41
push 0
call edi
push 0
push 0xad30ef32
push 0
call edi
push 0
push 3
push 0xf8f5928d
push 0x2da0e059
call esi
push 0
push 2
push 0xd606597d
push 0x62a72449
call esi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xb2e41ced
push 0
call edi
push 0
push 1
push 0xc4a4103a
push 0xfc5fcdd1
call esi
push 0
push 0xed9e1a9d
push 0
call edi
push 0
push 0xa67b283f
push 0
call edi
push 0
push 0x85b3d0b7
push 0
call edi
push 0
push 2
push 0x467bf0a8
push 0xc4926608
call esi
push 0
push 6
push 0xe99733b6
push 0xa069f762
call esi
push 0
push 0x6ed511f9
push 0
call edi
push 0
push 0xd
push 0x8364922a
push 0x51b73d29
call esi
push 0
push 0x6aadcbe2
push 0
call edi
push 0
push 0x55f95a0f
push 0
call edi
push 0
push 0xabbc4374
push 0
call edi
push 0
push 0xbae1abf9
push 0
call edi
push 0
push 0x16d2c38f
push 0
call edi
push 0
push 0x219058cb
push 0
call edi
push 0
push 0xc4e7d0ff
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xe2f53776
push 0
call edi
push 0
push 0x91a45748
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x25eed6de
push 0
call edi
push 0
push 0x1621ce1e
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xf190c12f
push 0
call edi
push 0
push 5
push 0xe363c4d9
push 0x96e198ac
call esi
push 0
push 0x4fc7c5a4
push 0
call edi
push 0
push 0x3f9da4c2
push 0
call edi
push 0
push 0
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xd
push 0x95ea2ea9
push 0x6d4749ca
call esi
push 0
push 0xd52731e5
push 0
call edi
push 0
push 6
push 0x3db330cf
push 0xb6b1ee3e
call esi
push str.MilcoSoft_Rip_X
push 0
push 0x1f0001
call dword [0x41c164]
push 0
push 0x99c2f34f
push 0
mov esi, eax
call edi
push 0
push 0x234e84db
push 0
call edi
push 0
push 0xb0655f79
push 0
call edi
push 0
push 1
push 0x9774169b
push 0xfa7a64ce
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 7
push 0x38c1d588
push 0xf8612a92
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xc37af61b
push 0
call edi
push 0
push 0x11
push 0x9539e145
push 0xde84a0c7
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x6f1b1e66
push 0
call edi
push 0
push 0x2e122a90
push 0
call edi
push 0
push 3
push 0xa086d56f
push 0x226d4f4c
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x538d4f84
push 0
call edi
push 0
push 0x3ea706e9
push 0
call edi
push 0
push 0xda8c7cf
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x14
push 0x2283b1a1
push 0x26b465da
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x47130c9a
push 0
call edi
push 0
push 1
push 0x21301d5f
push 0xcec03497
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xa3bb3d3
push 0
call edi
push 0
push 0x8042a88a
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x2c4fc5f6
push 0
call edi
push 0
push 0x86e2c4f1
push 0
call edi
push 0
push 0x15
push 0x2681b8ad
push 0x45d1aebc
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call ebx
push 0
push 0xc52383d
push 0
call edi
push 0
push 0xd9564f98
push 0
call edi
push 0
push 0xb997555b
push 0
call edi
push 0
push 0xa45ee9c4
push 0
call edi
push 0
push 0xa6238efd
push 0
call edi
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0x6dd2a0e0
push 0
call edi
push 0
push 0x6c5d01dc
push 0
call edi
test esi, esi
jne 0x40d64e
push esi
push 0x37fb1076
push esi
call edi
push esi
push 0x9e365a66
push esi
call edi
push esi
push esi
call ebx
push esi
push 0xcdcb8552
push esi
call edi
push esi
push esi
call ebx
push esi
mov esi, dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0xc
push 0x1357df43
push 0x35c88413
call esi
push 0
push 0x14
push 0xba83cace
push 0xe1419994
call esi
push 0
push 0xa1e446a1
push 0
call edi
push 0
push 0xe3d4035c
push 0
call edi
push 0
push 0x12
push 0x7baaabe9
push 0x347cb5d4
call esi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xa
push 0x1331e449
push 0xa4eb9339
call esi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfffffffffffffffd
push 0xa213fdb5
push 0xd5e2f41a
call esi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x539064ce
push 0
call edi
push 0
push 0x1f32f5ff
push 0
call edi
push 0
push 0
call ebx
push 0
push 0xdb372f7a
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x1958c6d5
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x8237801b
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xbbe04ee
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x6d4237a
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x15
push 0x57663258
push 0x1cfdde9b
call esi
push 0
push 0x17af0b68
push 0
call edi
push 0
push 0x3970a4b1
push 0
call edi
push 0
push 0
call ebx
push str.MilcoSoft_Rip_X
push 0
push 0
call dword [0x41c100]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfffffffffffffffc
push 0x698c7f59
push 0x72e1733b
call esi
push 0
push 0
call ebx
push 0
push 0x11
push 0xd7a0ef98
push 0x2aab7c2c
call esi
push 0
push 0xadb7bad9
push 0
call edi
push 0
push 0xd26a41fb
push 0
call edi
push 0
push 0x6e52e28f
push 0
call edi
push 0
push 0x6c62d10a
push 0
call edi
push 0
push 0xccd80080
push 0
call edi
push 0
push 0xf
push 0x15fd5001
push 0xf6710c00
call esi
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0xfa3de6a3
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0x43e79c3f
push 0
call edi
push 0
push 0x389c3ac
push 0
call edi
push 0
push 0
call ebx
push 0
push 0x4bcc4d5
push 0
call edi
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call ebx
push 0
push 0xcfbba35e
push 0
call edi
push 0
push 0
call ebx
push 0
push 2
push 0xbad48e17
push 0x72f8c1c5
call esi
push 0
push 0
call ebx
push 0
push 0
call ebx
push 0
push 0x9e92f697
push 0
call edi
xor edi, edi
push edi
push edi
call ebx
push edi
push edi
call ebx
push edi
push 5
push 0x6bf5b599
push 0x1afd4cfe
call esi
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
xor eax, eax
inc eax
jmp 0x40d650
xor eax, eax
pop edi
pop esi
pop ebx
ret