Function at 0x4a8880
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x57c7da
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
mov eax, dword [esp + 0x50]
push ebx
push ebp
push esi
push edi
mov ebp, ecx
push eax
push 0x9b
mov dword [esp + 0x18], ebp
call fcn.00558efd
xor ebx, ebx
lea ecx, [ebp + 0x60]
mov dword [esp + 0x58], ebx
call fcn.00556651
lea ecx, [ebp + 0x68]
mov byte [esp + 0x58], 1
call fcn.004b3690
lea ecx, [ebp + 0xc8]
mov byte [esp + 0x58], 2
call fcn.004b3690
lea ecx, [ebp + 0x128]
mov byte [esp + 0x58], 3
call fcn.004b3690
lea ecx, [ebp + 0x188]
mov byte [esp + 0x58], 4
call fcn.004b3690
lea ecx, [ebp + 0x1e8]
mov byte [esp + 0x58], 5
call fcn.004b3690
lea ecx, [ebp + 0x248]
mov byte [esp + 0x58], 6
call fcn.004b6c60
lea ecx, [ebp + 0x4ac]
mov byte [esp + 0x58], 7
call fcn.004b3690
lea ecx, [ebp + 0x50c]
mov byte [esp + 0x58], 8
call fcn.00434de0
lea ecx, [ebp + 0x764]
mov byte [esp + 0x58], 9
call fcn.004b3690
lea ecx, [ebp + 0x7c4]
mov byte [esp + 0x58], 0xa
call fcn.00434de0
lea ecx, [ebp + 0xa1c]
mov byte [esp + 0x58], 0xb
call fcn.00434de0
lea ecx, [ebp + 0xc74]
mov byte [esp + 0x58], 0xc
call fcn.00481420
lea ecx, [ebp + 0xd48]
mov byte [esp + 0x58], 0xd
call fcn.00481300
lea ecx, [ebp + 0xdf0]
mov byte [esp + 0x58], 0xe
call fcn.00434de0
lea ecx, [ebp + 0x1048]
mov byte [esp + 0x58], 0xf
call fcn.00434de0
lea ecx, [ebp + 0x12a0]
mov byte [esp + 0x58], 0x10
call fcn.004b3690
mov byte [esp + 0x58], 0x11
lea ecx, [ebp + 0x1300]
call fcn.004b3690
lea ecx, [ebp + 0x1360]
mov byte [esp + 0x58], 0x12
call fcn.004b3690
lea ecx, [ebp + 0x13c4]
mov byte [esp + 0x58], 0x13
call fcn.004ddae0
lea ecx, [ebp + 0x1408]
mov byte [esp + 0x58], 0x14
call fcn.004f65b0
lea ecx, [ebp + 0x145c]
mov byte [esp + 0x58], 0x15
call fcn.004f65b0
lea ecx, [ebp + 0x14b0]
mov byte [esp + 0x58], 0x16
call fcn.004b3690
lea ecx, [ebp + 0x1510]
mov byte [esp + 0x58], 0x17
call fcn.004b3690
lea ecx, [ebp + 0x1570]
mov byte [esp + 0x58], 0x18
call fcn.00556651
lea ecx, [ebp + 0x1578]
mov byte [esp + 0x58], 0x19
call fcn.005567a3
mov dword [ebp + 0x15d4], ebx
mov dword [ebp + method.CFont.virtual_0], vtable.CFont.0
mov dword [ebp + 0x15dc], ebx
mov dword [ebp + method.CFont.virtual_0], vtable.CFont.0
mov edx, 0x1f4
mov edi, 0x5d66ec
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x15e0], 0xfffffff2
mov dword [ebp + 0x15e4], ebx
mov dword [ebp + 0x15e8], ebx
mov dword [ebp + 0x15ec], ebx
mov dword [ebp + 0x15f0], edx
mov byte [ebp + 0x15f4], bl
mov byte [ebp + 0x15f5], bl
mov byte [ebp + 0x15f6], bl
mov byte [ebp + 0x15f7], 0x86
mov byte [ebp + 0x15f8], bl
mov byte [ebp + 0x15f9], 0x10
mov byte [ebp + 0x15fa], bl
mov byte [ebp + 0x15fb], 0x20
mov dword [ebp + 0x161c], ebx
repne scasb al, byte es:[edi]
not ecx
lea esi, [ebp + 0x15fc]
sub edi, ecx
mov eax, ecx
mov dword [esp + 0x60], esi
mov esi, edi
mov edi, dword [esp + 0x60]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x1620], 0xfffffff2
mov dword [ebp + 0x1624], ebx
mov dword [ebp + 0x1628], ebx
mov dword [ebp + 0x162c], ebx
mov dword [ebp + 0x1630], edx
mov byte [ebp + 0x1634], bl
mov byte [ebp + 0x1635], bl
mov byte [ebp + 0x1636], bl
mov byte [ebp + 0x1637], 0x86
mov edi, 0x5d66ec
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp + 0x1638], bl
mov byte [ebp + 0x1639], 0x10
mov byte [ebp + 0x163a], bl
mov byte [ebp + 0x163b], 0x20
mov dword [ebp + 0x165c], ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp + 0x163c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + method.CGopherLocator.virtual_0], 0x589990
mov dword [ebp + 0x1664], ebx
mov dword [ebp + 0x1670], ebx
mov dword [ebp + 0x166c], ebx
mov dword [ebp + 0x1668], ebx
push ebx
lea ecx, [ebp + 0x1684]
mov byte [esp + 0x5c], 0x1d
call fcn.0044b5d0
lea ecx, [ebp + 0x1acc]
mov byte [esp + 0x58], 0x1e
call fcn.00437790
lea ecx, [ebp + 0x1d9c]
mov byte [esp + 0x58], 0x1f
call fcn.0044a260
push ebx
lea ecx, [ebp + 0x1e70]
mov byte [esp + 0x5c], 0x20
call fcn.004e1080
mov ecx, dword [0x5e8e38]
mov dword [ebp + 0x1f3c], ecx
mov edx, dword [0x5e8e38]
mov dword [ebp + 0x1f40], edx
mov eax, dword [0x5e8e38]
mov dword [ebp + 0x1f44], eax
lea edx, [ebp + 0x15e0]
mov edi, 0x5d66ec
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp], method.CDialog.virtual_0
mov dword [edx], 0xfffffff2
mov dword [ebp + 0x15e4], ebx
mov dword [ebp + 0x15e8], ebx
mov dword [ebp + 0x15ec], ebx
mov dword [ebp + 0x15f0], 0x1f4
mov byte [ebp + 0x15f4], bl
mov byte [ebp + 0x15f5], bl
mov byte [ebp + 0x15f6], bl
mov byte [ebp + 0x15f7], 0x86
mov byte [ebp + 0x15f8], bl
mov byte [ebp + 0x15f9], 0x10
mov byte [ebp + 0x15fa], bl
mov byte [ebp + 0x15fb], 0x20
repne scasb al, byte es:[edi]
not ecx
lea esi, [ebp + 0x15fc]
sub edi, ecx
mov eax, ecx
mov dword [esp + 0x60], esi
mov esi, edi
mov edi, dword [esp + 0x60]
mov byte [esp + 0x58], 0x24
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0x5d66ec
push 0x20
push ebx
push ebx
push ebx
mov ecx, eax
push 1
push ebx
and ecx, 3
push ebx
push ebx
push 0x2bc
rep movsb byte es:[edi], byte [esi]
push ebx
mov ecx, 0xf
mov esi, edx
lea edi, [ebp + 0x1620]
push ebx
push ebx
rep movsd dword es:[edi], dword [esi]
push 0xc
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
lea ecx, [ebp + 0x15d8]
call fcn.00560a0b
mov ecx, 0xf
lea esi, [ebp + 0x15e0]
lea edi, [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
lea ecx, [ebp + 0x15d0]
call fcn.00560a0b
mov eax, 1
push 0x5d7984
lea ecx, [ebp + 0x1f3c]
mov dword [ebp + 0x1e5c], ebx
mov dword [ebp + 0x1e60], ebx
mov dword [ebp + 0x1e58], eax
mov dword [ebp + 0x1e64], ebx
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x1e68], ebx
mov dword [ebp + 0x1e6c], ebx
mov dword [ebp + 0x1f28], ebx
mov dword [ebp + 0x1f30], eax
mov dword [ebp + 0x1f34], eax
mov dword [ebp + 0x1f38], ebx
call fcn.005597b5
push 0x5d7978
lea ecx, [ebp + 0x1f40]
call fcn.005597b5
push 0x5ed678
lea ecx, [ebp + 0x1f44]
call fcn.005597b5
mov ecx, dword [esp + 0x50]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4c
ret 4