Function at 0x402a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ecx, 0x13
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x4a8]
mov esi, str.00000109_0000_0000_C000_000000000046
lea edx, [ebp - 0x45a]
push ebx
sub esp, 0x500
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
movzx eax, word [esi]
mov esi, str.0000010C_0000_0000_C000_000000000046
mov word [edi], ax
mov eax, dword [str.0000010C_0000_0000_C000_000000000046]
lea edi, [ebp - 0x458]
sub ecx, edi
mov dword [ebp - 0x45a], eax
mov eax, dword [0x40e0aa]
sub esi, ecx
add ecx, 0x4e
shr ecx, 2
mov dword [ebp - 0x410], eax
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + eax - 0x4c8], ecx
add eax, 4
cmp eax, 0x20
jb 0x402a8b
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x4cc]
mov edi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x4d0], 1
mov dword [ebp - 0x4bc], 0x100
mov dword [ebp - 0x4cc], eax
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x4c0], eax
lea eax, [ebp - 0x4d0]
mov dword [esp + 0xc], eax
mov eax, dword [0x41b030]
mov dword [ebp - 0x4f8], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113e
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x4ac]
mov edi, esi
mov ecx, 9
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov dword [ebp - 0x4d0], 1
lea ebx, [eax + 0x202]
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x4f8]
mov dword [esp + 8], 3
mov dword [esp + 4], 0x110a
mov dword [esp + 0xc], eax
mov eax, dword [0x41b030]
mov dword [esp], eax
call edi
mov dword [ebp - 0x4c0], esi
sub esp, 0x10
mov dword [ebp - 0x4cc], eax
lea eax, [ebp - 0x4d0]
mov dword [esp + 0xc], eax
mov eax, dword [0x41b030]
mov dword [ebp - 0x4bc], 0x100
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113e
mov dword [esp], eax
call edi
lea eax, [ebp - 0x4a8]
sub esp, 0x10
mov dword [esp + 8], 0x4e
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.ucrtbase.dll_memcmp
lea edx, [ebp - 0x45a]
test eax, eax
je 0x402cc0
mov dword [esp + 4], edx
mov dword [esp + 8], 0x4e
mov dword [esp], ebx
call sub.ucrtbase.dll_memcmp
mov edx, eax
mov eax, dword [0x41b020]
test edx, edx
jne 0x402c70
xor edx, edx
mov dword [ebp - 0x4f0], ebx
cmp word [ebp - 0x20c], 0x7b
mov word [ebp - 0x4d4], dx
lea edx, [ebp - 0x4ec]
cmovne edx, esi
mov dword [esp + 8], eax
mov dword [ebp - 0x4ec], 0x6c0043
mov dword [ebp - 0x4f4], edx
lea edx, [ebp - 0x4f4]
mov dword [ebp - 0x4e8], 0x730061
mov dword [ebp - 0x4e4], 0x4d0073
mov dword [ebp - 0x4e0], 0x6e006f
mov dword [ebp - 0x4dc], 0x6b0069
mov dword [ebp - 0x4d8], 0x720065
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x402790
mov dword [esp + 4], 0x3fc
mov dword [esp], 0
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [ebp - 0x40c]
mov dword [ebp - 0x4e8], ebx
mov dword [ebp - 0x4ec], edx
lea edx, [ebp - 0x4ec]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x402790
mov dword [esp + 8], eax
mov dword [esp + 4], 0x406
mov dword [esp], 0
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
lea eax, [ebp - 0x4ec]
cmp word [ebp - 0x20c], 0x7b
mov dword [ebp - 0x4f0], ebx
cmovne eax, esi
mov dword [ebp - 0x4ec], 0x6c0043
mov dword [ebp - 0x4e8], 0x730061
mov dword [ebp - 0x4f4], eax
lea eax, [ebp - 0x4f4]
mov dword [esp + 0x10], eax
mov eax, dword [0x41b020]
mov dword [ebp - 0x4e4], 0x4d0073
mov dword [ebp - 0x4e0], 0x6e006f
mov dword [ebp - 0x4dc], 0x6b0069
mov dword [ebp - 0x4d8], 0x720065
mov word [ebp - 0x4d4], cx
mov dword [esp + 0xc], 0x402790
mov dword [esp + 8], eax
mov dword [esp + 4], 0x410
mov dword [esp], 0
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret