Function at 0x401460
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x50
push ebx
push ebp
push esi
mov esi, ecx
lea eax, [esp + 0x14]
push edi
mov edi, dword [sym.imp.kernel32.dll_GetStringTypeW]
lea ecx, [esp + 0x20]
mov bl, 0x65
push eax
push ecx
mov byte [esp + 0x28], 0x4b
mov byte [esp + 0x29], 0x45
mov byte [esp + 0x2a], 0x52
mov byte [esp + 0x2b], 0x4e
mov byte [esp + 0x2c], 0x45
mov byte [esp + 0x2d], 0x4c
mov byte [esp + 0x2e], 0x33
mov byte [esp + 0x2f], 0x32
mov byte [esp + 0x30], 0x2e
mov byte [esp + 0x31], 0x64
mov byte [esp + 0x32], 0x6c
mov byte [esp + 0x33], 0x6c
mov byte [esp + 0x34], 0
mov byte [esp + 0x20], 0x53
mov byte [esp + 0x21], 0x6c
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0x70
mov byte [esp + 0x25], 0
call edi
mov ebp, dword [sym.imp.kernel32.dll_GetConsoleNlsMode]
push eax
call ebp
mov dword [esp + 0x14], eax
lea edx, [esp + 0x30]
lea eax, [esp + 0x20]
push edx
push eax
mov byte [esp + 0x38], 0x45
mov byte [esp + 0x39], 0x6e
mov byte [esp + 0x3a], 0x74
mov byte [esp + 0x3b], bl
mov byte [esp + 0x3c], 0x72
mov byte [esp + 0x3d], 0x43
mov byte [esp + 0x3e], 0x72
mov byte [esp + 0x3f], 0x69
mov byte [esp + 0x40], 0x74
mov byte [esp + 0x41], 0x69
mov byte [esp + 0x42], 0x63
mov byte [esp + 0x43], 0x61
mov byte [esp + 0x44], 0x6c
mov byte [esp + 0x45], 0x53
mov byte [esp + 0x46], bl
mov byte [esp + 0x47], 0x63
mov byte [esp + 0x48], 0x74
mov byte [esp + 0x49], 0x69
mov byte [esp + 0x4a], 0x6f
mov byte [esp + 0x4b], 0x6e
mov byte [esp + 0x4c], 0
call edi
push eax
call ebp
mov dword [esp + 0x10], eax
mov byte [esp + 0x48], 0x4c
mov byte [esp + 0x49], bl
mov byte [esp + 0x4a], 0x61
mov byte [esp + 0x4b], 0x76
mov byte [esp + 0x4c], bl
mov byte [esp + 0x4d], 0x43
mov byte [esp + 0x4e], 0x72
mov byte [esp + 0x4f], 0x69
mov byte [esp + 0x50], 0x74
mov byte [esp + 0x51], 0x69
mov byte [esp + 0x52], 0x63
mov byte [esp + 0x53], 0x61
mov byte [esp + 0x54], 0x6c
mov byte [esp + 0x55], 0x53
mov byte [esp + 0x56], bl
mov byte [esp + 0x57], 0x63
mov byte [esp + 0x58], 0x74
lea ecx, [esp + 0x48]
lea edx, [esp + 0x20]
push ecx
push edx
mov byte [esp + 0x61], 0x69
mov byte [esp + 0x62], 0x6f
mov byte [esp + 0x63], 0x6e
mov byte [esp + 0x64], 0
call edi
push eax
call ebp
lea ebx, [esi + 0x10]
mov ebp, eax
push ebx
call dword [esp + 0x14]
mov ecx, esi
call fcn.00401680
mov edi, dword [esp + 0x68]
cmp edi, eax
jbe 0x401604
push 0
call dword [esp + 0x18]
push ebx
call ebp
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x50
ret 8
mov ecx, esi
call fcn.00401690
cmp edi, eax
jbe 0x401618
mov ecx, esi
call fcn.00401690
mov edi, eax
test edi, edi
je 0x40165a
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x64]
push edi
push eax
push ecx
call dword [sym.imp.msvcrt.dll_Ordinal_736]
mov edx, dword [esi + 4]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x68], edx
call fcn.00401680
sub eax, edi
push eax
mov eax, dword [esp + 0x6c]
lea ecx, [eax + edi]
push ecx
push eax
call dword [sym.imp.msvcrt.dll_Ordinal_736]
mov eax, dword [esi + 8]
add esp, 0xc
sub eax, edi
mov dword [esi + 8], eax
mov ecx, esi
call fcn.00401690
push eax
mov ecx, esi
call fcn.004018c0
push ebx
call ebp
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret 8