Function at 0x475cba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 4
mov eax, 0x56af66
call fcn.00514047
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.CMFCVisualManagerOffice2007.0
push 0xffffffffffffffff
push 0
mov dword [ebp - 4], 0x69
call fcn.00497bff
lea ecx, [esi + 0xac9c]
mov byte [ebp - 4], 0x68
mov dword [ecx], vtable.CMap_struct_HWND_____struct_HWND_____int__int_.0
call fcn.0044c86b
mov edi, fcn.00471dfa
push edi
push 2
pop ebx
push ebx
push 0x2c
lea eax, [esi + 0xac0c]
push eax
mov byte [ebp - 4], 0x67
call fcn.00517c7e
push edi
push ebx
push 0x2c
lea eax, [esi + 0xabb4]
push eax
mov byte [ebp - 4], 0x66
call fcn.00517c7e
push edi
push ebx
push 0x2c
lea eax, [esi + 0xab5c]
push eax
mov byte [ebp - 4], 0x65
call fcn.00517c7e
lea ecx, [esi + 0xab30]
mov byte [ebp - 4], 0x64
call fcn.00471dfa
lea ecx, [esi + 0xab04]
mov byte [ebp - 4], 0x63
call fcn.00471dfa
lea ecx, [esi + 0xaad8]
mov byte [ebp - 4], 0x62
call fcn.00471dfa
lea ecx, [esi + 0xaaac]
mov byte [ebp - 4], 0x61
call fcn.00471dfa
lea ecx, [esi + 0xaa80]
mov byte [ebp - 4], 0x60
call fcn.00471dfa
lea ecx, [esi + 0xaa54]
mov byte [ebp - 4], 0x5f
call fcn.00471dfa
lea ecx, [esi + 0xaa28]
mov byte [ebp - 4], 0x5e
call fcn.00471dfa
mov byte [ebp - 4], 0x5d
lea ecx, [esi + 0xa9fc]
call fcn.00471dfa
lea ecx, [esi + 0xa9d0]
mov byte [ebp - 4], 0x5c
call fcn.00471dfa
lea ecx, [esi + 0xa9a4]
mov byte [ebp - 4], 0x5b
call fcn.00471dfa
push 0x471f3c
push 7
push 0x5a4
lea eax, [esi + 0x8228]
push eax
mov byte [ebp - 4], 0x5a
call fcn.00517c7e
lea ecx, [esi + 0x802c]
mov edi, vtable.CBrush.0
mov byte [ebp - 4], 0x59
mov dword [ecx], edi
call fcn.0040231a
lea ecx, [esi + 0x8024]
mov byte [ebp - 4], 0x58
mov dword [ecx], edi
call fcn.0040231a
lea ecx, [esi + 0x801c]
mov byte [ebp - 4], 0x57
mov dword [ecx], vtable.CFont.0
call fcn.0040231a
lea ecx, [esi + 0x8014]
mov edi, vtable.CPen.0
mov byte [ebp - 4], 0x56
mov dword [ecx], edi
call fcn.0040231a
lea ecx, [esi + 0x800c]
mov byte [ebp - 4], 0x55
mov dword [ecx], edi
call fcn.0040231a
mov edi, 0x41a6a9
push edi
push ebx
push 8
lea eax, [esi + 0x7ffc]
push eax
mov byte [ebp - 4], 0x54
call fcn.00517c7e
push edi
push ebx
push 8
lea eax, [esi + 0x7fec]
push eax
mov byte [ebp - 4], 0x53
call fcn.00517c7e
lea ecx, [esi + 0x7e9c]
mov byte [ebp - 4], 0x52
call fcn.004c887a
lea ecx, [esi + 0x7d4c]
mov byte [ebp - 4], 0x51
call fcn.004c887a
lea ecx, [esi + 0x7bfc]
mov byte [ebp - 4], 0x50
call fcn.004c887a
lea ecx, [esi + 0x7aac]
mov byte [ebp - 4], 0x4f
call fcn.004c887a
lea ecx, [esi + 0x795c]
mov byte [ebp - 4], 0x4e
call fcn.004c887a
lea ecx, [esi + 0x780c]
mov byte [ebp - 4], 0x4d
call fcn.004c887a
lea ecx, [esi + 0x76bc]
mov byte [ebp - 4], 0x4c
call fcn.004c887a
lea ecx, [esi + 0x756c]
mov byte [ebp - 4], 0x4b
call fcn.004c887a
lea ecx, [esi + 0x741c]
mov byte [ebp - 4], 0x4a
call fcn.004c887a
lea ecx, [esi + 0x72cc]
mov byte [ebp - 4], 0x49
call fcn.004c887a
lea ecx, [esi + 0x717c]
mov byte [ebp - 4], 0x48
call fcn.004c887a
lea ecx, [esi + 0x702c]
mov byte [ebp - 4], 0x47
call fcn.004c887a
lea ecx, [esi + 0x6edc]
mov byte [ebp - 4], 0x46
call fcn.004c887a
lea ecx, [esi + 0x6d8c]
mov byte [ebp - 4], 0x45
call fcn.004c887a
lea ecx, [esi + 0x6c3c]
mov byte [ebp - 4], 0x44
call fcn.004c887a
mov ebx, fcn.004c887a
push ebx
push 3
mov edi, 0x150
push edi
lea eax, [esi + 0x684c]
push eax
mov byte [ebp - 4], 0x43
call fcn.00517c7e
lea ecx, [esi + 0x66fc]
mov byte [ebp - 4], 0x42
call fcn.004c887a
lea ecx, [esi + 0x65ac]
mov byte [ebp - 4], 0x41
call fcn.004c887a
lea ecx, [esi + 0x645c]
mov byte [ebp - 4], 0x40
call fcn.004c887a
lea ecx, [esi + 0x630c]
mov byte [ebp - 4], 0x3f
call fcn.004c887a
lea ecx, [esi + 0x61bc]
mov byte [ebp - 4], 0x3e
call fcn.004c887a
lea ecx, [esi + 0x606c]
mov byte [ebp - 4], 0x3d
call fcn.004c887a
lea ecx, [esi + 0x5f1c]
mov byte [ebp - 4], 0x3c
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x5c7c]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x59dc]
push eax
mov byte [ebp - 4], 0x3a
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x573c]
push eax
mov byte [ebp - 4], 0x39
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x549c]
push eax
mov byte [ebp - 4], 0x38
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x51fc]
push eax
mov byte [ebp - 4], 0x37
call fcn.00517c7e
mov byte [ebp - 4], 0x36
push ebx
push 2
push edi
lea eax, [esi + 0x4f5c]
push eax
call fcn.00517c7e
lea ecx, [esi + 0x4e0c]
mov byte [ebp - 4], 0x35
call fcn.004c887a
lea ecx, [esi + 0x4cbc]
mov byte [ebp - 4], 0x34
call fcn.004c887a
lea ecx, [esi + 0x4b6c]
mov byte [ebp - 4], 0x33
call fcn.004c887a
lea ecx, [esi + 0x4a1c]
mov byte [ebp - 4], 0x32
call fcn.004c887a
lea ecx, [esi + 0x48cc]
mov byte [ebp - 4], 0x31
call fcn.004c887a
lea ecx, [esi + 0x477c]
mov byte [ebp - 4], 0x30
call fcn.004c887a
lea ecx, [esi + 0x462c]
mov byte [ebp - 4], 0x2f
call fcn.004c887a
lea ecx, [esi + 0x44dc]
mov byte [ebp - 4], 0x2e
call fcn.004c887a
lea ecx, [esi + 0x438c]
mov byte [ebp - 4], 0x2d
call fcn.004c887a
lea ecx, [esi + 0x423c]
mov byte [ebp - 4], 0x2c
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x3f9c]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00517c7e
lea ecx, [esi + 0x3e4c]
mov byte [ebp - 4], 0x2a
call fcn.004c887a
lea ecx, [esi + 0x3cfc]
mov byte [ebp - 4], 0x29
call fcn.004c887a
lea ecx, [esi + 0x3bac]
mov byte [ebp - 4], 0x28
call fcn.004c887a
lea ecx, [esi + 0x3a5c]
mov byte [ebp - 4], 0x27
call fcn.004c887a
lea ecx, [esi + 0x390c]
mov byte [ebp - 4], 0x26
call fcn.004c887a
lea ecx, [esi + 0x37bc]
mov byte [ebp - 4], 0x25
call fcn.004c887a
lea ecx, [esi + 0x366c]
mov byte [ebp - 4], 0x24
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x33cc]
push eax
mov byte [ebp - 4], 0x23
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x312c]
push eax
mov byte [ebp - 4], 0x22
call fcn.00517c7e
lea ecx, [esi + 0x2fdc]
mov byte [ebp - 4], 0x21
call fcn.004c887a
lea ecx, [esi + 0x2e8c]
mov byte [ebp - 4], 0x20
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x2bec]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00517c7e
lea ecx, [esi + 0x2a9c]
mov byte [ebp - 4], 0x1e
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x27fc]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00517c7e
lea ecx, [esi + 0x26ac]
mov byte [ebp - 4], 0x1c
call fcn.004c887a
lea ecx, [esi + 0x255c]
mov byte [ebp - 4], 0x1b
call fcn.004c887a
lea ecx, [esi + 0x240c]
mov byte [ebp - 4], 0x1a
call fcn.004c887a
lea ecx, [esi + 0x22bc]
mov byte [ebp - 4], 0x19
call fcn.004c887a
lea ecx, [esi + 0x216c]
mov byte [ebp - 4], 0x18
call fcn.004c887a
lea ecx, [esi + 0x201c]
mov byte [ebp - 4], 0x17
call fcn.004c887a
lea ecx, [esi + 0x1ecc]
mov byte [ebp - 4], 0x16
call fcn.004c887a
lea ecx, [esi + 0x1d7c]
mov byte [ebp - 4], 0x15
call fcn.004c887a
lea ecx, [esi + 0x1c2c]
mov byte [ebp - 4], 0x14
call fcn.004c887a
push ebx
push 2
push edi
lea eax, [esi + 0x198c]
push eax
mov byte [ebp - 4], 0x13
call fcn.00517c7e
lea ecx, [esi + 0x183c]
mov byte [ebp - 4], 0x12
call fcn.004c887a
lea ecx, [esi + 0x16ec]
mov byte [ebp - 4], 0x11
call fcn.004c887a
lea ecx, [esi + 0x159c]
mov byte [ebp - 4], 0x10
call fcn.004c887a
lea ecx, [esi + 0x14a4]
mov byte [ebp - 4], 0xf
call fcn.00442ceb
lea ecx, [esi + 0x13ac]
mov byte [ebp - 4], 0xe
call fcn.00442ceb
lea ecx, [esi + 0x12b4]
mov byte [ebp - 4], 0xd
call fcn.00442ceb
lea ecx, [esi + 0x11bc]
mov byte [ebp - 4], 0xc
call fcn.00442ceb
lea ecx, [esi + 0x10c4]
mov byte [ebp - 4], 0xb
call fcn.00442ceb
lea ecx, [esi + 0xfcc]
mov byte [ebp - 4], 0xa
call fcn.00442ceb
lea ecx, [esi + 0xed4]
mov byte [ebp - 4], 9
call fcn.00442ceb
lea ecx, [esi + 0xddc]
mov byte [ebp - 4], 8
call fcn.00442ceb
mov ebx, fcn.00442ceb
push ebx
push 2
add edi, 0xffffffa8
push edi
lea eax, [esi + 0xbec]
push eax
mov byte [ebp - 4], 7
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x9fc]
push eax
mov byte [ebp - 4], 6
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x80c]
push eax
mov byte [ebp - 4], 5
call fcn.00517c7e
push ebx
push 2
push edi
lea eax, [esi + 0x61c]
push eax
mov byte [ebp - 4], 4
call fcn.00517c7e
lea ecx, [esi + 0x524]
mov byte [ebp - 4], 3
call fcn.00442ceb
lea ecx, [esi + 0x42c]
mov byte [ebp - 4], 2
call fcn.00442ceb
lea ecx, [esi + 0x334]
mov byte [ebp - 4], 1
call fcn.00442ceb
lea ecx, [esi + 0x23c]
mov byte [ebp - 4], 0
call fcn.00442ceb
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.0046a39e
call fcn.0051411f
ret