Function at 0x10017b09
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
xor esi, esi
mov ebx, ecx
push edi
cmp dword [ebp + 8], esi
je 0x10017b48
call fcn.1000ebcf
push 0xf0
push dword [ebp + 8]
mov edi, dword [eax + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x10017b48
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x10017b50
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
push esi
mov ecx, ebx
call fcn.1002290f
pop edi
pop esi
pop ebx
pop ebp
ret 4

Function at 0x10018555
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov esi, ecx
push edi
test esi, esi
je 0x100185e1
cmp dword [esi + 0x20], 0
je 0x100185e1
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100185e1
cmp dword [ebp + 8], 0
je 0x100185e1
xor edi, edi
mov ebx, edi
call fcn.1000ebcf
push str.AFX_DIALOG_LAYOUT
push dword [ebp + 8]
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 8], eax
test eax, eax
je 0x100185c5
mov ebx, dword [ebp - 4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 8]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x100185e1
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
push edi
push ebx
push esi
call fcn.10023470
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100185dd
mov ecx, esi
call fcn.100182f3
mov eax, edi
jmp 0x100185e3
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1001ca7c
Capabilities:
Get graphical window text

Disassembly:
push 4
mov eax, 0x1015386b
call fcn.10144144
mov edi, ecx
xor ebx, ebx
cmp dword [edi + 0x74], ebx
jne 0x1001caa2
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x1001cafc
lea ecx, [ebp - 0x10]
call fcn.10008e73
mov edi, dword [edi + 0x74]
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 4], ebx
mov eax, dword [edi]
mov esi, dword [eax + 0x8c]
mov ecx, esi
call dword [0x10162a70]
mov ecx, edi
call esi
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x10]
push dword [ebp + 0xc]
push esi
call sub.msvcrt.dll_wcsncpy_s
push eax
call fcn.1000941c
add esp, 0x14
test esi, esi
je 0x1001caef
push esi
call sub.msvcrt.dll_wcslen
pop ecx
mov ebx, eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.1000a420
mov eax, ebx
call fcn.10144112
ret 8

Function at 0x1001d94a
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push esi
mov esi, ecx
lea eax, [ebp - 4]
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
jne 0x1001d974
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1001d97a
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
pop esi
leave
ret
lea ecx, [esi + 0xc]
call fcn.100093b2
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push eax
call fcn.1001ff2c
int3