Function at 0x413188
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
cmp dword [0x686dcc], 0
jne 0x4137c1
mov dword [0x686dcc], 1
push str.ASYNCSELECT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686dd0], eax
push str.BEGINPAINT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686dd4], eax
push str.CHANGE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686dd8], eax
push str.CLICK
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686de0], eax
push 0x65831f
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686de4], eax
push str.COLORS
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686de8], eax
push str.COMMAND
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686dec], eax
push str.COMMNOTIFY
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686df0], eax
push str.CTLCOLOR
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686df4], eax
push str.DDEACK
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686df8], eax
push str.DDEEXECUTE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686dfc], eax
push str.DDEINITIATE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e00], eax
push str.DDETERMINATE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e04], eax
push 0x658317
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e08], eax
push str.DESTROY
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e0c], eax
push str.DRAWITEM
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e10], eax
push str.DROPFILES
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e14], eax
push str.DROPOVER
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e18], eax
push str.ENDPAINT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e1c], eax
push str.ERASEBKGND
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e20], eax
push str.FILLMEASURE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e24], eax
push str.FWLOSTFOCUS
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e28], eax
push str.GETDLGCODE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e2c], eax
push str.GETMINMAXINFO
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e30], eax
push str.GOTFOCUS
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e34], eax
push str.HELPF1
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e3c], eax
push 0x658386
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e40], eax
push str.HSCROLL
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e44], eax
push str.INITIATE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e48], eax
push str.KEYCHAR
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e50], eax
push str.KEYDOWN
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e54], eax
push 0x65841a
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e5c], eax
push str.INITMENUPOPUP
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e4c], eax
push str.LOSTFOCUS
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e60], eax
push str.NCACTIVATE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e64], eax
push str.NCMOUSEMOVE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e68], eax
push str.LBUTTONDOWN
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e70], eax
push str.LBUTTONUP
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e74], eax
push str.LDBLCLICK
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e78], eax
push str.MBUTTONDOWN
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e7c], eax
push str.MBUTTONUP
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e80], eax
push str.MEASUREITEM
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e84], eax
push str.MENUCHAR
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e88], eax
push str.MENUSELECT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e8c], eax
push str.MOUSEMOVE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e90], eax
push str.MOUSEWHEEL
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e94], eax
push str.MOVED
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e98], eax
push str.NOTIFY
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e6c], eax
push str.PAINT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686e9c], eax
push str.NCPAINT
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ea0], eax
push str.PALETTECHANGED
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ea4], eax
push str.QUERYDRAGICON
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ea8], eax
push str.QUERYENDSESSION
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686eac], eax
push str.QUERYNEWPALETTE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686eb0], eax
push str.RBUTTONDOWN
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686eb4], eax
push str.RBUTTONUP
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686eb8], eax
push str.RESIZE
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ebc], eax
push str.SETFOCUS
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ec4], eax
push str.VSCROLL
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ec8], eax
push str.SYSCOMMAND
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ecc], eax
push str.TASKBAR
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ec0], eax
push str.TIMER
call fcn.0045f5e8
pop ecx
push eax
call fcn.0045f80f
pop ecx
mov dword [0x686ed0], eax
mov byte [ebp - 8], 0x55
mov byte [ebp - 7], 0x50
mov byte [ebp - 6], 0x5b
mov byte [ebp - 5], 0x45
mov byte [ebp - 4], 0x43
mov byte [ebp - 3], 0x47
mov byte [ebp - 2], 0
xor eax, eax
dec byte [ebp + eax - 8]
inc eax
cmp eax, 6
jl 0x413755
lea edx, [ebp - 8]
push edx
call fcn.0045f5e8
pop ecx
test eax, eax
je 0x413772
call fcn.0046aafc
mov byte [ebp - 0x14], 0x55
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0x12], 0x43
mov byte [ebp - 0x11], 0x55
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0xe], 0x5a
mov byte [ebp - 0xd], 0x4a
mov byte [ebp - 0xc], 0x44
mov byte [ebp - 0xb], 0x50
mov byte [ebp - 0xa], 0x4f
mov byte [ebp - 9], 0
xor eax, eax
dec byte [ebp + eax - 0x14]
inc eax
cmp eax, 0xb
jl 0x4137a4
lea edx, [ebp - 0x14]
push edx
call fcn.0045f5e8
pop ecx
test eax, eax
je 0x4137c1
call fcn.0046aafc
mov esp, ebp
pop ebp
ret