Function at 0x100174f4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
xor esi, esi
mov ebx, ecx
push edi
cmp dword [ebp + 8], esi
je 0x10017533
call fcn.1000e5bc
push 0xf0
push dword [ebp + 8]
mov edi, dword [eax + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x10017533
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x1001753b
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
push esi
mov ecx, ebx
call fcn.100222fa
pop edi
pop esi
pop ebx
pop ebp
ret 4

Function at 0x10017f40
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov esi, ecx
push edi
test esi, esi
je 0x10017fcc
cmp dword [esi + 0x20], 0
je 0x10017fcc
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10017fcc
cmp dword [ebp + 8], 0
je 0x10017fcc
xor edi, edi
mov ebx, edi
call fcn.1000e5bc
push str.AFX_DIALOG_LAYOUT
push dword [ebp + 8]
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 8], eax
test eax, eax
je 0x10017fb0
mov ebx, dword [ebp - 4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 8]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x10017fcc
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
push edi
push ebx
push esi
call fcn.10022e5b
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10017fc8
mov ecx, esi
call fcn.10017cde
mov eax, edi
jmp 0x10017fce
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1001c467
Capabilities:
Get graphical window text

Disassembly:
push 4
mov eax, 0x10153242
call fcn.10143b41
mov edi, ecx
xor ebx, ebx
cmp dword [edi + 0x74], ebx
jne 0x1001c48d
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x1001c4e7
lea ecx, [ebp - 0x10]
call fcn.10008863
mov edi, dword [edi + 0x74]
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 4], ebx
mov eax, dword [edi]
mov esi, dword [eax + 0x8c]
mov ecx, esi
call dword [0x10162a6c]
mov ecx, edi
call esi
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x10]
push dword [ebp + 0xc]
push esi
call sub.msvcrt.dll_wcsncpy_s
push eax
call fcn.10008e0c
add esp, 0x14
test esi, esi
je 0x1001c4da
push esi
call sub.msvcrt.dll_wcslen
pop ecx
mov ebx, eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.10009e10
mov eax, ebx
call fcn.10143b0f
ret 8

Function at 0x1001d336
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push esi
mov esi, ecx
lea eax, [ebp - 4]
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
jne 0x1001d360
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1001d366
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
pop esi
leave
ret
lea ecx, [esi + 0xc]
call fcn.10008da2
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push eax
call fcn.1001f918
int3