Function at 0x417370
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x489a73
mov eax, dword fs:[0]
push eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b47a8]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x24]
xor esi, esi
push esi
push 0x66
mov ecx, ebx
call fcn.00451578
mov dword [esp + 0x1c], esi
mov dword [ebx], vtable.ChjjmDlg.0
mov eax, vtable.CBrush.0
mov dword [ebx + 0x7c], esi
mov dword [ebx + 0x78], eax
mov dword [ebx + 0x84], esi
mov dword [ebx + 0x80], eax
mov edi, vtable.CBitmap.0
mov dword [ebx + 0x8c], esi
mov dword [ebx + 0x88], edi
lea eax, [ebx + 0xcc]
push eax
mov byte [esp + 0x20], 3
call fcn.0040f390
lea ecx, [ebx + 0x724]
push ecx
mov byte [esp + 0x20], 4
call fcn.004376f0
lea edx, [ebx + 0xd34]
push edx
mov byte [esp + 0x20], 5
call fcn.0043c990
lea eax, [ebx + 0x127c]
push eax
mov byte [esp + 0x20], 6
call fcn.0040c270
lea ecx, [ebx + 0x16f4]
push ecx
mov byte [esp + 0x20], 7
call fcn.0040dea0
lea edx, [ebx + 0x1b1c]
push edx
mov byte [esp + 0x20], 8
call fcn.0043abf0
mov byte [esp + 0x1c], 9
call fcn.0044d630
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x41745b
push 0x80004005
call fcn.00401db0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx + 0x229c], eax
lea ecx, [ebx + 0x22a8]
push ecx
mov byte [esp + 0x20], 0xa
call fcn.0040a490
lea ecx, [ebx + 0x2308]
mov byte [esp + 0x1c], 0xb
call fcn.0044dd71
lea ecx, [ebx + 0x231c]
mov byte [esp + 0x1c], 0xc
call fcn.0044dd71
lea ecx, [ebx + 0x2330]
mov byte [esp + 0x1c], 0xd
call fcn.0045071b
lea ecx, [ebx + 0x2344]
mov byte [esp + 0x1c], 0xe
call fcn.0045071b
lea ecx, [ebx + 0x2358]
mov byte [esp + 0x1c], 0xf
call fcn.0044e11b
lea ecx, [ebx + 0x236c]
mov byte [esp + 0x1c], 0x10
call fcn.0044e11b
lea ecx, [ebx + 0x2380]
mov byte [esp + 0x1c], 0x11
call fcn.0044dd71
lea ecx, [ebx + 0x2394]
mov byte [esp + 0x1c], 0x12
call fcn.0044dd71
lea ecx, [ebx + 0x23a8]
mov byte [esp + 0x1c], 0x13
call fcn.0045071b
lea ecx, [ebx + 0x23bc]
mov byte [esp + 0x1c], 0x14
call fcn.0045071b
lea ecx, [ebx + 0x23d0]
mov byte [esp + 0x1c], 0x15
call fcn.0044e11b
lea ecx, [ebx + 0x23e4]
mov byte [esp + 0x1c], 0x16
call fcn.0044e11b
mov byte [esp + 0x1c], 0x17
call fcn.0044d630
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x41755d
push 0x80004005
call fcn.00401db0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx + 0x260c], eax
mov byte [esp + 0x1c], 0x18
call fcn.0044d630
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x41758e
push 0x80004005
call fcn.00401db0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx + 0x2610], eax
mov byte [esp + 0x1c], 0x19
call fcn.0044d630
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x4175bf
push 0x80004005
call fcn.00401db0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx + 0x2618], eax
mov byte [esp + 0x1c], 0x1a
call fcn.0044d630
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x4175f0
push 0x80004005
call fcn.00401db0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx + 0x261c], eax
lea ebp, [ebx + 0x2630]
mov ecx, ebp
mov byte [esp + 0x1c], 0x1b
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x26d8]
mov ecx, ebp
mov byte [esp + 0x1c], 0x1c
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x2780]
mov ecx, ebp
mov byte [esp + 0x1c], 0x1d
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x2828]
mov ecx, ebp
mov byte [esp + 0x1c], 0x1e
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x28d0]
mov ecx, ebp
mov byte [esp + 0x1c], 0x1f
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x2978]
mov ecx, ebp
mov byte [esp + 0x1c], 0x20
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x2a20]
mov ecx, ebp
mov byte [esp + 0x1c], 0x21
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea ebp, [ebx + 0x2ac8]
mov ecx, ebp
mov byte [esp + 0x1c], 0x22
call fcn.00448115
mov dword [ebp + 0x58], esi
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x68], esi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x6c], edi
mov dword [ebp], vtable.CMyButton.0
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], esi
lea edi, [ebx + 0x2b70]
mov ecx, edi
mov byte [esp + 0x1c], 0x23
call fcn.00448115
mov dword [edi], vtable.CStatic.0
lea ecx, [ebx + 0x2bc4]
push ecx
mov byte [esp + 0x20], 0x24
call fcn.00425280
lea edx, [ebx + 0x2cb0]
push edx
mov byte [esp + 0x20], 0x25
call fcn.00425280
lea edi, [ebx + 0x2d9c]
mov byte [esp + 0x1c], 0x26
mov ecx, edi
call fcn.00448115
mov dword [edi], vtable.CStatic.0
lea edi, [ebx + 0x2df0]
mov ecx, edi
mov byte [esp + 0x1c], 0x27
call fcn.00448115
mov dword [edi], vtable.CStatic.0
lea edi, [ebx + 0x2e44]
mov ecx, edi
mov byte [esp + 0x1c], 0x28
call fcn.00448115
mov dword [edi], vtable.CStatic.0
lea edi, [ebx + 0x2e98]
mov ecx, edi
mov byte [esp + 0x1c], 0x29
call fcn.00448115
mov dword [edi], vtable.CStatic.0
mov byte [esp + 0x1c], 0x2a
call fcn.004533ca
call fcn.004533ca
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
push esi
mov ebp, 1
push 0x494704
lea ecx, [ebx + 0x229c]
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x2404], ebp
mov dword [ebx + 0x2408], esi
call fcn.004068a0
push esi
push 0x494704
mov ecx, 0x4b9140
mov dword [0x4b90b0], esi
mov dword [0x4b8f48], esi
mov dword [0x4b90a8], esi
call fcn.004068a0
push esi
push 0x494704
mov ecx, 0x4b9144
call fcn.004068a0
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9170
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9184
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9198
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b91ac
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b91c0
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b91d4
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b91e8
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b91fc
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9210
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9224
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9238
call fcn.0046713b
push 0xffffffffffffffff
push esi
mov ecx, 0x4b924c
call fcn.0046713b
mov edi, 0x4b61ac
mov dword [0x4b90a4], esi
call fcn.00415e20
push 0xffffffffffffffff
push esi
mov ecx, 0x4b90cc
mov dword [0x4b90c0], esi
mov dword [0x4b9094], esi
mov dword [0x4b9090], esi
mov dword [0x4b908c], esi
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b90e0
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b90f4
call fcn.0044de30
push 0xffffffffffffffff
push esi
mov ecx, 0x4b9108
call fcn.0044de30
push 0x55
push str.MICROSOFT_7701091_6666888_16826688...___com8.21EC2020_3AEA_1069_A2DD_08002B30309D
mov ecx, 0x4b9260
mov dword [0x4b9070], esi
call fcn.004068a0
push esi
push 0x494704
mov ecx, 0x4b92a8
call fcn.004068a0
push esi
push 0x494704
mov ecx, 0x4b92b0
call fcn.004068a0
push esi
push 0x494704
lea ecx, [ebx + 0x261c]
mov dword [0x4b8f50], ebp
mov dword [0x4b8f4c], esi
mov dword [ebx + 0x23f8], esi
mov dword [ebx + 0x2614], esi
call fcn.004068a0
push esi
push 0x494704
lea ecx, [ebx + 0x2618]
call fcn.004068a0
push 0x14
push str.http:__www.dt189.com
mov ecx, 0x4b92bc
mov dword [ebx + 0x2624], esi
mov dword [ebx + 0x2620], esi
mov dword [ebx + 0x2628], esi
call fcn.004068a0
push 0x4b9074
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, ebx
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 4