Function at 0x100315f0
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10052648
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10080e78]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x14], ebp
mov eax, dword [ebp + 0x58]
push eax
push 1
xor esi, esi
push esi
lea ecx, [esp + 0x34]
call sub.mfc90.dll_Ordinal_525
mov ecx, dword [ebp + 0x5c]
push ecx
push 1
push esi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x7c], esi
call sub.mfc90.dll_Ordinal_525
mov byte [esp + 0x70], 1
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
push eax
push 1
push esi
lea ecx, [esp + 0x3c]
call sub.mfc90.dll_Ordinal_525
mov byte [esp + 0x70], 2
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBFondoXP_void_
push eax
push 1
push esi
lea ecx, [esp + 0x54]
call sub.mfc90.dll_Ordinal_525
push 0xe1e1e1
push 1
push esi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7c], 3
call sub.mfc90.dll_Ordinal_525
push 0xc8c8c8
push 1
push esi
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 4
call sub.mfc90.dll_Ordinal_525
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], vtable.CBrush.0
mov esi, dword [esp + 0x78]
lea edx, [esp + 0x30]
push edx
mov ecx, esi
mov byte [esp + 0x74], 6
call sub.mfc90.dll_Ordinal_6078
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x88]
mov edi, eax
inc eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x88], eax
add eax, 0xfffffffb
push 0xffffffffffffffff
mov dword [esp + 0x68], eax
dec edx
push 0xffffffffffffffff
lea eax, [esp + 0x60]
sub edi, ecx
mov dword [esp + 0x60], ebx
mov ebx, dword [sym.imp.USER32.dll_InflateRect]
push eax
sub edi, 7
mov dword [esp + 0x90], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
call ebx
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBColorXP_void_
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
lea ecx, [esp + 0x1c]
call sub.mfc90.dll_Ordinal_1358
mov ecx, dword [esp + 0x1c]
mov eax, dword [esi + 4]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
push ecx
inc edx
push edx
lea eax, [esp + 0x58]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
push ecx
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
inc eax
push eax
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
add eax, edi
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
inc edx
push edx
push eax
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
add edx, edi
push edx
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
inc edx
push edx
dec eax
push eax
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
lea eax, [edx + edi + 2]
dec ecx
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
lea edx, [esp + 0x40]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
inc eax
push eax
add ecx, 0xfffffffe
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
lea ecx, [eax + edi + 2]
push ecx
add edx, 0xfffffffe
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
inc eax
push eax
inc ecx
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
add eax, edi
inc ecx
push eax
push ecx
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [esp + 0x84]
push edx
call ebx
cmp dword [ebp + 0x54], 1
lea eax, [esp + 0x28]
jne 0x100318b9
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebp, ebp
jmp 0x100318d0
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
lea ecx, [eax + ebp]
push ecx
push edx
lea eax, [esp + 0x58]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4527
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
lea edx, [ecx + ebp]
push edx
inc eax
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4396
inc ebp
cmp ebp, 3
jl 0x100318d0
push 1
push 1
lea ecx, [esp + 0x84]
push ecx
call ebx
lea edx, [esp + 0x30]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
mov ebx, dword [sym.imp.GDI32.dll_SetPixel]
xor ebp, ebp
nop
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
push eax
mov eax, dword [esi + 4]
add ecx, ebp
add ecx, edi
push ecx
add edx, ebp
push edx
push eax
call ebx
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
add ecx, ebp
push eax
add ecx, edi
sub edx, ebp
push ecx
push edx
mov edx, dword [esi + 4]
push edx
call ebx
inc ebp
cmp ebp, 5
jl 0x10031930
call sym.GuiTk115d.dll_public:_static_unsigned_long_int___cdecl_GuiDrawLayer::GetRGBPressBXP_void_
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
add ecx, ebp
push eax
add ecx, edi
sub edx, ebp
push ecx
push edx
mov edx, dword [esi + 4]
push edx
call ebx
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
lea eax, [esp + 0x28]
jne 0x100319ab
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebp, ebp
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
je 0x100319c4
mov edx, dword [eax + 0x58]
jmp 0x100319c7
mov edx, dword [eax + 0x5c]
mov ecx, dword [esp + 0x80]
lea eax, [ecx + ebp]
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esi + 4]
add eax, edi
push eax
lea ecx, [ecx + ebp + 1]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x54], 1
je 0x100319f3
mov edx, dword [eax + 0x58]
jmp 0x100319f6
mov edx, dword [eax + 0x5c]
mov eax, dword [esp + 0x80]
lea ecx, [eax + ebp]
mov eax, dword [esp + 0x84]
push edx
add ecx, edi
sub eax, ebp
push ecx
mov ecx, dword [esi + 4]
dec eax
push eax
push ecx
call ebx
inc ebp
cmp ebp, 5
jl 0x100319b5
mov edx, dword [esp + 0x14]
cmp dword [edx + 0x54], 1
lea eax, [esp + 0x28]
jne 0x10031a2d
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
xor ebp, ebp
jmp 0x10031a40
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esi + 4]
add eax, ebp
push 0xe1e1e1
add eax, edi
push eax
lea ecx, [ecx + ebp + 2]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x80]
lea ecx, [eax + ebp]
mov eax, dword [esp + 0x84]
push 0xc8c8c8
add ecx, edi
sub eax, ebp
push ecx
mov ecx, dword [esi + 4]
sub eax, 2
push eax
push ecx
call ebx
inc ebp
cmp ebp, 4
jl 0x10031a40
mov edx, dword [esp + 0x78]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_6078
lea ecx, [esp + 0x18]
mov byte [esp + 0x70], 5
mov dword [esp + 0x18], vtable.CBrush.0
call fcn.10001760
mov esi, vtable.CPen.0
lea ecx, [esp + 0x38]
mov byte [esp + 0x70], 4
mov dword [esp + 0x38], esi
call fcn.10001760
lea ecx, [esp + 0x40]
mov byte [esp + 0x70], 3
mov dword [esp + 0x40], esi
call fcn.10001760
lea ecx, [esp + 0x48]
mov byte [esp + 0x70], 2
mov dword [esp + 0x48], esi
call fcn.10001760
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 1
mov dword [esp + 0x30], esi
call fcn.10001760
lea ecx, [esp + 0x20]
mov byte [esp + 0x70], 0
mov dword [esp + 0x20], esi
call fcn.10001760
lea ecx, [esp + 0x28]
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x28], esi
call fcn.10001760
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14