Function at 0x401a1a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x414300
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x41b490]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push esi
push edi
mov eax, dword [0x41b490]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], ax
push 0x418014
lea esi, [esp + 0x18]
mov dword [esp + 0xec], ebx
call fcn.004024ac
push str.TEMP
lea esi, [esp + 0xc0]
mov byte [esp + 0xec], 1
call fcn.004024ac
lea eax, [esp + 0x14]
push eax
mov eax, esi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0xf0], 2
call fcn.004014c9
pop ecx
pop ecx
push 1
xor edi, edi
call fcn.00402fc6
push 1
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 5
call fcn.00402fc6
cmp dword [esp + 0x60], 8
mov eax, dword [esp + 0x4c]
jae 0x401ae3
lea eax, [esp + 0x4c]
push ebx
push eax
call fcn.004058d1
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x401afc
lea eax, [esp + 0x4c]
push eax
call fcn.004016a1
pop ecx
lea eax, [esp + 0x4c]
call fcn.004018b9
lea eax, [esp + 0x68]
push eax
lea edi, [esp + 0x50]
call fcn.004039ef
mov byte [esp + 0xec], 6
lea eax, [esp + 0x6c]
mov dword [esp], str.adds
push eax
call fcn.004024d7
lea eax, [esp + 0x68]
call fcn.004018b9
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x6c]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 7
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 6
call fcn.00402fc6
push str.xx.crx
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push str.adds
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x66
mov ecx, esi
mov byte [esp + 0xf0], 8
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 6
call fcn.00402fc6
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x6c]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 9
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 6
call fcn.00402fc6
push str.xx.oex
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push str.adds
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x67
mov ecx, esi
mov byte [esp + 0xf0], 0xa
call fcn.004018d0
pop ecx
pop ecx
mov byte [esp + 0xe8], 6
push 1
call fcn.00402fc6
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x6c]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0xb
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 6
call fcn.00402fc6
push str.xx.xpi
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push str.adds
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x68
mov ecx, esi
mov byte [esp + 0xf0], 0xc
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 6
call fcn.00402fc6
lea eax, [esp + 0xa0]
push eax
lea edi, [esp + 0x50]
call fcn.004039ef
mov byte [esp + 0xec], 0xd
lea eax, [esp + 0xa4]
mov dword [esp], 0x418054
push eax
call fcn.004024d7
lea eax, [esp + 0xa0]
call fcn.004018b9
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0xa4]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0xe
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 0xd
call fcn.00402fc6
push str.chr_pref.json
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push 0x418054
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x69
mov ecx, esi
mov byte [esp + 0xf0], 0xf
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 0xd
call fcn.00402fc6
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0xa4]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0x10
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 0xd
call fcn.00402fc6
push str.ff_set.json
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push 0x418054
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x6a
mov ecx, esi
mov byte [esp + 0xf0], 0x11
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 0xd
call fcn.00402fc6
lea eax, [esp + 0x84]
push eax
lea edi, [esp + 0x50]
call fcn.004039ef
mov byte [esp + 0xec], 0x12
lea eax, [esp + 0x88]
mov dword [esp], 0x41805c
push eax
call fcn.004024d7
lea eax, [esp + 0x84]
call fcn.004018b9
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x88]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0x13
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
push str.op_data.xml
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push 0x41805c
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x6b
mov ecx, esi
mov byte [esp + 0xf0], 0x14
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x88]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0x15
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
push str.op_wid.xml
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push 0x41805c
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x6c
mov ecx, esi
mov byte [esp + 0xf0], 0x16
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x88]
call fcn.004039ef
pop ecx
mov ebx, eax
lea eax, [esp + 0x30]
mov byte [esp + 0xe8], 0x17
call fcn.00402ebc
push 1
xor edi, edi
lea esi, [esp + 0x18]
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
push str.task.xml
lea eax, [esp + 0x34]
push eax
call fcn.004024d7
push 0x41805c
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x6d
mov ecx, esi
mov byte [esp + 0xf0], 0x18
call fcn.004018d0
pop ecx
pop ecx
push 1
mov byte [esp + 0xec], 0x12
call fcn.00402fc6
mov esi, str.rmAds.bat
push esi
lea eax, [esp + 0x34]
call fcn.00403872
test al, al
je 0x401fc4
cmp dword [esp + 0x44], 8
mov eax, dword [esp + 0x30]
jae 0x401fb0
lea eax, [esp + 0x30]
sub esi, eax
push 9
sar esi, 1
lea eax, [esp + 0x34]
push esi
mov ecx, eax
call fcn.00402f04
jmp 0x402008
push 0
push 9
pop ebx
lea eax, [esp + 0x34]
call fcn.0040362c
test al, al
je 0x402008
cmp dword [esp + 0x44], 8
mov edi, dword [esp + 0x30]
jae 0x401fe5
lea edi, [esp + 0x30]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp dword [esp + 0x44], 8
mov eax, dword [esp + 0x30]
mov dword [esp + 0x40], 9
jae 0x402002
lea eax, [esp + 0x30]
xor ecx, ecx
mov word [eax + 0x12], cx
push 0x418120
lea esi, [esp + 0x18]
call fcn.004024ac
lea eax, [esp + 0x30]
push eax
push 0x6e
mov ecx, esi
mov byte [esp + 0xf0], 0x19
call fcn.004018d0
pop ecx
xor ebx, ebx
pop ecx
inc ebx
push ebx
xor edi, edi
call fcn.00402fc6
push ebx
lea esi, [esp + 0x88]
call fcn.00402fc6
push ebx
lea esi, [esp + 0xa4]
call fcn.00402fc6
push ebx
lea esi, [esp + 0x6c]
call fcn.00402fc6
push ebx
lea esi, [esp + 0x50]
call fcn.00402fc6
push ebx
lea esi, [esp + 0x34]
call fcn.00402fc6
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.00404822
mov esp, ebp
pop ebp
ret