Function at 0x412890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4aa1de
mov eax, dword fs:[0]
push eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c97a0]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, dword [esp + 0x24]
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
xor ebp, ebp
mov dword [edi + 4], ebp
mov dword [edi + 0x14], ebp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x1c], ebp
mov dword [edi + 0x20], eax
lea esi, [edi + 0x24]
mov dword [esp + 0x1c], ebp
call fcn.00475290
mov byte [esp + 0x1c], 1
mov dword [edi + 0x90], vtable.WTL::CMessageFilter.0
lea ecx, [edi + 0x94]
push ecx
mov dword [edi], vtable.CPageDxf.0
mov dword [esi], vtable.CPageDxf.1.0
mov dword [edi + 0x90], vtable.CPageDxf.2.0
call fcn.0046ea50
lea edx, [edi + 0xe0]
push edx
mov byte [esp + 0x20], 2
call fcn.0046ea50
lea eax, [edi + 0x12c]
push eax
mov byte [esp + 0x20], 3
call fcn.0046ea50
lea ecx, [edi + 0x178]
push ecx
mov byte [esp + 0x20], 4
call fcn.0046ea50
lea edx, [edi + 0x1c4]
push edx
mov byte [esp + 0x20], 5
call fcn.0046ea50
lea eax, [edi + 0x210]
push eax
mov byte [esp + 0x20], 6
call fcn.0046ea50
lea ecx, [edi + 0x25c]
push ecx
mov byte [esp + 0x20], 7
call fcn.0046ea50
lea edx, [edi + 0x2a8]
push edx
mov byte [esp + 0x20], 8
call fcn.0046ea50
lea eax, [edi + 0x2f4]
push eax
mov byte [esp + 0x20], 9
call fcn.0046ea50
lea ecx, [edi + 0x340]
push ecx
mov byte [esp + 0x20], 0xa
call fcn.0046ea50
lea esi, [edi + 0x38c]
call fcn.0046e060
xor eax, eax
mov dword [edi + 0x3dc], ebp
mov dword [edi + 0x3e0], ebp
mov dword [edi + 0x3e4], eax
mov dword [edi + 0x3e8], eax
mov dword [edi + 0x3ec], eax
mov dword [edi + 0x3f0], eax
mov ebx, vtable.CSomImageWnd.0
mov dword [edi + 0x3f4], ebp
mov dword [edi + 0x3f8], ebp
mov dword [edi + 0x3fc], ebp
mov dword [edi + 0x3d8], ebx
mov dword [edi + 0x400], ebp
mov dword [edi + 0x404], ebp
mov dword [edi + 0x40c], ebp
mov dword [edi + 0x410], ebp
mov dword [edi + 0x414], eax
mov dword [edi + 0x418], eax
mov dword [edi + 0x41c], eax
mov dword [edi + 0x420], eax
mov dword [edi + 0x424], ebp
mov dword [edi + 0x428], ebp
mov dword [edi + 0x42c], ebp
mov dword [edi + 0x408], ebx
mov dword [edi + 0x430], ebp
mov dword [edi + 0x434], ebp
mov dword [edi + 0x43c], ebp
mov dword [edi + 0x440], ebp
mov dword [edi + 0x444], eax
mov dword [edi + 0x448], eax
mov dword [edi + 0x44c], eax
mov edx, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [edi + 0x450], eax
mov dword [edi + 0x454], ebp
mov dword [edi + 0x458], ebp
mov dword [edi + 0x45c], ebp
mov dword [edi + 0x438], ebx
mov dword [edi + 0x460], ebp
mov dword [edi + 0x464], ebp
mov dword [edi + 0x46c], ebp
mov dword [edi + 0x470], ebp
mov dword [edi + 0x474], eax
mov dword [edi + 0x478], eax
mov dword [edi + 0x47c], eax
mov dword [edi + 0x480], eax
mov dword [edi + 0x484], ebp
mov dword [edi + 0x488], ebp
mov dword [edi + 0x48c], ebp
mov dword [edi + 0x468], ebx
mov dword [edi + 0x490], ebp
mov dword [edi + 0x494], ebp
mov dword [edi + 0x49c], ebp
mov dword [edi + 0x4ac], ebp
mov dword [edi + 0x4b0], ebp
mov dword [edi + 0x4b4], ebp
mov dword [edi + 0x4b8], edx
mov dword [edi + 0x498], 0x4b3a7c
lea eax, [edi + 0x4c0]
push eax
mov byte [esp + 0x20], 0xd
call fcn.0045c6f0
lea ecx, [edi + 0x5d4]
push ecx
mov byte [esp + 0x20], 0xe
call fcn.0046ea50
lea edx, [edi + 0x620]
push edx
mov byte [esp + 0x20], 0xf
call fcn.0046ea50
lea eax, [edi + 0x66c]
push eax
mov byte [esp + 0x20], 0x10
call fcn.0046ea50
lea ecx, [edi + 0x6b8]
push ecx
mov byte [esp + 0x20], 0x11
call fcn.0046ea50
mov byte [esp + 0x1c], 0x12
xor eax, eax
mov dword [edi + 0x708], ebp
mov dword [edi + 0x70c], ebp
mov dword [edi + 0x710], eax
mov dword [edi + 0x714], eax
mov dword [edi + 0x718], eax
mov dword [edi + 0x71c], eax
mov dword [edi + 0x720], ebp
mov dword [edi + 0x724], ebp
lea edx, [edi + 0x734]
push edx
mov dword [edi + 0x728], ebp
mov dword [edi + 0x704], ebx
mov dword [edi + 0x72c], ebp
mov dword [edi + 0x730], ebp
call fcn.0046ea50
lea eax, [edi + 0x780]
push eax
mov byte [esp + 0x20], 0x13
call fcn.0046ea50
lea esi, [edi + 0x7cc]
call fcn.0046e060
lea esi, [edi + 0x818]
call fcn.0046e060
lea esi, [edi + 0x864]
call fcn.0046e060
lea esi, [edi + 0x8b0]
call fcn.0046e060
mov byte [esp + 0x1c], 0x18
mov dword [edi + 0x900], ebp
mov dword [edi + 0x904], ebp
xor eax, eax
mov dword [edi + 0x908], eax
mov dword [edi + 0x90c], eax
mov dword [edi + 0x910], eax
mov dword [edi + 0x914], eax
mov dword [edi + 0x918], ebp
mov dword [edi + 0x91c], ebp
mov dword [edi + 0x920], ebp
mov dword [edi + 0x8fc], 0x4b931c
mov dword [edi + 0x938], ebp
mov dword [edi + 0x934], 0x19a
mov dword [edi + 0x944], ebp
mov dword [edi + 0x948], ebp
mov dword [edi + 0x94c], eax
mov dword [edi + 0x950], eax
mov dword [edi + 0x954], eax
mov dword [edi + 0x958], eax
mov dword [edi + 0x95c], ebp
mov dword [edi + 0x960], ebp
mov dword [edi + 0x964], ebp
mov dword [edi + 0x940], ebx
mov dword [edi + 0x968], ebp
mov dword [edi + 0x96c], ebp
mov dword [edi + 0x974], ebp
mov dword [edi + 0x978], ebp
mov dword [edi + 0x97c], eax
mov dword [edi + 0x980], eax
mov dword [edi + 0x984], eax
mov dword [edi + 0x988], eax
mov dword [edi + 0x98c], ebp
mov dword [edi + 0x990], ebp
mov dword [edi + 0x994], ebp
mov dword [edi + 0x970], 0x4b918c
mov dword [edi + 0x99c], ebp
mov dword [edi + 0x9a4], ebp
mov dword [edi + 0x9a8], ebp
mov dword [edi + 0x9ac], eax
mov dword [edi + 0x9b0], eax
mov dword [edi + 0x9b4], eax
mov dword [edi + 0x9b8], eax
lea ecx, [edi + 0x9d4]
push ecx
mov dword [edi + 0x9bc], ebp
mov dword [edi + 0x9c0], ebp
mov dword [edi + 0x9c4], ebp
mov dword [edi + 0x9a0], ebx
mov dword [edi + 0x9c8], ebp
mov dword [edi + 0x9cc], ebp
call fcn.0046ea50
lea edx, [edi + 0xa20]
mov byte [esp + 0x1c], 0x19
push edx
call fcn.0046ea50
lea eax, [edi + 0xa6c]
push eax
mov byte [esp + 0x20], 0x1a
call fcn.0046ea50
lea ecx, [edi + 0xab8]
push ecx
mov byte [esp + 0x20], 0x1b
call fcn.0046ea50
lea edx, [edi + 0xb04]
push edx
mov byte [esp + 0x20], 0x1c
call fcn.0046ea50
lea eax, [edi + 0xb50]
push eax
mov byte [esp + 0x20], 0x1d
call fcn.0046ea50
lea ecx, [edi + 0xb9c]
push ecx
mov byte [esp + 0x20], 0x1e
call fcn.0046ea50
lea edx, [edi + 0xbe8]
push edx
mov byte [esp + 0x20], 0x1f
call fcn.0046ea50
lea eax, [edi + 0xc34]
push eax
mov byte [esp + 0x20], 0x20
call fcn.0046ea50
lea esi, [edi + 0xc80]
push ebp
mov ecx, 0x4d2340
call fcn.004635f0
mov dword [esi], vtable.CLFCheckBox.0
mov byte [esp + 0x1c], 0x22
mov dword [edi + 0xcd0], ebp
mov dword [edi + 0xcd4], ebp
xor eax, eax
mov dword [edi + 0xcd8], eax
mov dword [edi + 0xcdc], eax
mov dword [edi + 0xce0], eax
mov dword [edi + 0xce4], eax
mov dword [edi + 0xce8], ebp
mov dword [edi + 0xcec], ebp
mov dword [edi + 0xcf0], ebp
mov dword [edi + 0xccc], 0x4b90fc
mov dword [edi + 0xd00], ebp
mov dword [edi + 0xcf8], ebp
mov dword [edi + 0xd04], ebp
mov edx, dword [0x4ce67c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ce67c
call eax
add eax, 0x10
mov dword [edi + 0xd18], eax
mov byte [esp + 0x1c], 0x23
mov edx, dword [0x4ce67c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ce67c
call eax
add eax, 0x10
mov dword [edi + 0xd1c], eax
lea eax, [edi + 0xd20]
push eax
mov byte [esp + 0x20], 0x24
call fcn.0045f470
lea eax, [edi + 0xd40]
mov byte [esp + 0x1c], 0x25
push eax
call fcn.0045f470
lea eax, [edi + 0xd60]
push eax
mov byte [esp + 0x20], 0x26
call fcn.00442000
lea ecx, [edi + 0xd80]
push ecx
mov byte [esp + 0x20], 0x27
call fcn.0045f470
mov dword [edi + 0xda0], ebp
mov byte [edi + 0xda4], 1
mov dword [edi + 0xd08], 1
mov dword [edi + 0x9d0], ebp
mov dword [edi + 0xd10], ebp
mov dword [edi + 0xd14], ebp
mov dword [edi + 0x4bc], ebp
mov dword [edi + 0x93c], ebp
mov dword [edi + 0xda8], 0xffffffff
mov eax, edi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 4