Function at 0x414a98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x43e03f
call fcn.004311b8
sub esp, 0x3a8
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 0x20], esi
push 1
lea ecx, [ebp - 0x6c]
pop ebx
mov dword [ebp - 4], ebx
call fcn.00415029
lea eax, [ebp + 0xc]
push esi
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
mov dword [ebp - 0x94], 0x4406d4
mov dword [ebp - 0x74], 0x4406cc
call fcn.0040294b
push esi
push esi
push 3
push 0x80
push ebx
lea eax, [ebp - 0x94]
push SysReAllocStringLen
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.004150cd
lea ecx, [ebp - 0x94]
mov edi, eax
mov byte [ebp - 4], 2
call fcn.00401ced
cmp edi, esi
je 0x414b6f
mov edi, dword [ebp + 8]
lea eax, [ebp - 0xd]
push esi
push eax
push 0x44dbd4
mov ecx, edi
mov dword [edi], 0x4404dc
mov dword [edi + 0x20], 0x4404d4
call fcn.00403c78
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x6c], 0x4406c8
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.004156b9
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.00401ced
and byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.00401ced
mov eax, edi
jmp 0x415015
push esi
push esi
push 0x4e
lea ecx, [ebp - 0x6c]
call fcn.0041520f
and byte [ebp - 0xe4], 0
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0xe3]
push 0x27
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xe4]
lea ecx, [ebp - 0x6c]
push eax
call fcn.0041c31f
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x94]
call fcn.00403951
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
push str.This_program_cannot_be_run_in_DOS_mode.
and ecx, eax
mov byte [ebp - 4], 5
push ecx
call fcn.0041c2fc
pop ecx
mov byte [ebp - 0xd], al
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x94]
call fcn.00401ced
cmp byte [ebp - 0xd], 0
push esi
je 0x414bf5
push 2
push 0xffffffffffffffb0
jmp 0x414c03
push esi
push esi
lea ecx, [ebp - 0x6c]
call fcn.0041520f
push esi
push esi
push 0x40
lea ecx, [ebp - 0x6c]
call fcn.0041520f
lea eax, [ebp - 0x134]
push 0x50
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041c3a2
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0xe]
push esi
push eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 0x4404dc
mov dword [ebp - 0x9c], 0x4404d4
call fcn.00402614
movzx eax, word [ebp - 0x24]
push eax
mov byte [ebp - 4], 6
movzx eax, word [ebp - 0x26]
push eax
movzx eax, word [ebp - 0x28]
push eax
movzx eax, word [ebp - 0x2a]
push eax
movzx eax, word [ebp - 0x2e]
push eax
movzx eax, word [ebp - 0x30]
push eax
lea eax, [ebp - 0xbc]
push 0x448bb8
push eax
call fcn.0041b00d
add esp, 0x20
lea eax, [ebp - 0xbc]
push 0x448bb4
push eax
push str._AM_INSTALLTIME_
lea eax, [ebp - 0xe9]
push 5
push eax
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_TIMESTAMP
call fcn.00403951
lea eax, [ebp - 0x314]
push eax
call fcn.004148b7
add esp, 0x34
push eax
lea eax, [ebp - 0xee]
push 5
push eax
sub esp, 0x28
lea eax, [ebp - 0x16]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_PRICE
mov byte [ebp - 4], 7
call fcn.00403951
lea eax, [ebp - 0x2c4]
push eax
call fcn.004148b7
add esp, 0x34
push eax
lea eax, [ebp - 0xf4]
push 6
push eax
sub esp, 0x28
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x19]
push ebx
push eax
push str.AM_CURRENCY
call fcn.00403951
lea eax, [ebp - 0x274]
push eax
call fcn.004148b7
add esp, 0x34
push eax
push 0x10
pop esi
lea eax, [ebp - 0x104]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x17]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_AFFILIATE
mov byte [ebp - 4], 9
call fcn.00403951
lea eax, [ebp - 0x224]
push eax
call fcn.004148b7
add esp, 0x34
push eax
lea eax, [ebp - 0x114]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x1b]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_TRACKINGID
mov byte [ebp - 4], 0xa
call fcn.00403951
lea eax, [ebp - 0x1d4]
push eax
call fcn.004148b7
add esp, 0x34
push eax
lea eax, [ebp - 0x124]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x1a]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_OTP
mov byte [ebp - 4], 0xb
call fcn.00403951
lea eax, [ebp - 0x184]
push eax
call fcn.004148b7
add esp, 0x34
push eax
lea eax, [ebp - 0x134]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push str.AM_CONTENTID
mov byte [ebp - 4], 0xc
call fcn.00403951
lea eax, [ebp - 0x29c]
push eax
call fcn.004148b7
add esp, 0x34
mov esi, eax
lea eax, [ebp - 0x15]
push ebx
push eax
push 0x448b44
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xd
call fcn.00403951
push esi
push eax
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 0xe
push eax
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x2ec]
push eax
mov byte [ebp - 4], 0xf
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x1fc]
push eax
mov byte [ebp - 4], 0x10
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x33c]
push eax
mov byte [ebp - 4], 0x11
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x1ac]
push eax
mov byte [ebp - 4], 0x12
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x3b4]
push eax
mov byte [ebp - 4], 0x13
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0x14
call fcn.0041c425
add esp, 0xc
push eax
lea eax, [ebp - 0x364]
push eax
mov byte [ebp - 4], 0x15
call fcn.0041c178
add esp, 0xc
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x16
call fcn.0041c425
add esp, 0xc
push eax
mov byte [ebp - 4], 0x17
push dword [ebp + 8]
call fcn.0041c178
add esp, 0xc
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x16
call fcn.00401ced
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x15
call fcn.00401ced
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x14
call fcn.00401ced
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x13
call fcn.00401ced
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x12
call fcn.00401ced
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x11
call fcn.00401ced
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x10
call fcn.00401ced
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0xf
call fcn.00401ced
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0xe
call fcn.00401ced
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xd
call fcn.00401ced
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0xc
call fcn.00401ced
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xb
call fcn.00401ced
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0xa
call fcn.00401ced
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 9
call fcn.00401ced
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 8
call fcn.00401ced
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 7
call fcn.00401ced
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 6
call fcn.00401ced
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.00401ced
mov dword [ebp - 0x6c], 0x4406c8
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x18
call fcn.004156b9
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.00401ced
and byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.00401ced
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret