Function at 0x1810525a
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, dword [0x18195008]
xor eax, esp
mov dword [esp + 0x40], eax
movzx eax, word [ebp + 8]
push ebx
push esi
push edi
push 0xf0
push eax
push dword [0x18199698]
mov dword [esp + 0x34], ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
and dword [esp + 0x24], 0
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x181052b6
push eax
push dword [0x18199698]
call ebx
test eax, eax
je 0x181052b6
push eax
call esi
mov dword [esp + 0x24], eax
movzx ecx, word [ebp + 8]
push 5
push ecx
push dword [0x18199698]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x181055cd
push eax
push dword [0x18199698]
call ebx
test eax, eax
je 0x181055c6
push eax
call esi
mov edx, eax
test edx, edx
je 0x181055c6
movzx ecx, word [edx + 2]
xor eax, eax
mov ebx, 0xffff
mov esi, ecx
cmp cx, bx
mov dword [esp + 0x18], esi
sete al
mov dword [esp + 0x34], eax
xor eax, eax
cmp cx, bx
mov ecx, edx
sete al
lea eax, [eax*8 + 8]
movzx eax, word [eax + edx]
mov dword [esp + 0x2c], eax
call fcn.1810127c
mov ebx, eax
mov eax, dword [esp + 0x28]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x20], edx
cmp ax, word [esp + 0x2c]
jae 0x181055cd
mov ecx, 0xffff
cmp si, cx
sete al
dec eax
and eax, 0xfffffffa
add eax, 0x18
mov dword [esp + 0x38], eax
cmp si, cx
jne 0x18105370
mov ecx, dword [ebx + 0x14]
jmp 0x18105374
movzx ecx, word [ebx + 0x10]
add eax, ebx
mov dword [esp + 0x30], eax
cmp word [eax], 0x7b
jne 0x18105585
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x10]
and dword [esp + 0x10], 0
push eax
call fcn.18101367
pop ecx
mov edi, eax
xor ecx, ecx
mov dword [esp + 0xc], ecx
test edi, edi
je 0x18105404
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x181055a5
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x1810559c
push edi
push dword [esp + 0x14]
mov edx, edi
mov ecx, eax
call fcn.180031a7
push eax
call fcn.180032d5
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [esp + 0xc]
push eax
push 1
push esi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov edi, eax
test edi, edi
js 0x181055aa
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x18]
and dword [esp + 0x1c], 0
lea edx, [esp + 0x1c]
call fcn.1810153f
mov edi, eax
test edi, edi
js 0x1810553e
and dword [esp + 0x10], 0
call fcn.181048b0
mov edi, 0xffff
cmp si, di
jne 0x18105436
movzx eax, word [ebx + 0xc]
jmp 0x1810543a
movzx eax, word [ebx + 8]
movsx ecx, ax
mov dword [esp + 0x3c], ecx
jne 0x18105449
movzx eax, word [ebx + 0xe]
jmp 0x1810544d
movzx eax, word [ebx + 0xa]
movsx edx, ax
mov dword [esp + 0x40], edx
jne 0x1810545c
movzx eax, word [ebx + 0x10]
jmp 0x18105460
movzx eax, word [ebx + 0xc]
cwde
add eax, ecx
mov dword [esp + 0x44], eax
cmp si, di
jne 0x18105472
movzx eax, word [ebx + 0x12]
jmp 0x18105476
movzx eax, word [ebx + 0xe]
mov edi, dword [esp + 0x28]
cwde
add eax, edx
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, 0xffff
cmp si, ax
jne 0x181054a4
mov eax, dword [ebx + 0x14]
lea edx, [ebx + 8]
mov ecx, dword [ebx + 4]
jmp 0x181054ac
movzx eax, word [ebx + 0x10]
xor ecx, ecx
mov edx, ebx
push ecx
push eax
mov eax, dword [edx]
push ecx
or eax, 0x10000
push eax
push ecx
lea eax, [esp + 0x50]
push eax
push dword [edi + 4]
lea ecx, [esp + 0x2c]
push str.AtlAxWinLic140
call fcn.180069cc
mov esi, dword [esp + 0x10]
test esi, esi
je 0x18105537
mov eax, 0xffff
cmp word [esp + 0x18], ax
jne 0x181054f0
cmp dword [ebx], 0
je 0x181054f0
push dword [ebx]
push esi
call dword [sym.imp.USER32.dll_SetWindowContextHelpId]
push dword [esp + 0x1c]
lea ecx, [esp + 0x14]
sub esp, 0x10
push dword [esp + 0x20]
push dword [esp + 0x48]
call fcn.18105bd9
mov edi, eax
test edi, edi
js 0x181055ba
xor eax, eax
push 0x13
push eax
push eax
push eax
push eax
mov eax, dword [esp + 0x34]
movzx eax, ax
neg eax
sbb eax, eax
and eax, dword [esp + 0x28]
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [esp + 0x14], esi
jmp 0x1810553e
call fcn.18003422
mov edi, eax
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x18105556
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
mov ecx, ebx
call fcn.1810130b
mov edx, dword [esp + 0x20]
mov ebx, eax
inc edx
mov dword [esp + 0x20], edx
cmp dx, word [esp + 0x2c]
jae 0x181055cd
mov eax, dword [esp + 0x38]
mov ecx, 0xffff
jmp 0x18105366
test dx, dx
je 0x1810555a
push 2
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
jmp 0x1810555a
call fcn.18003422
mov edi, eax
jmp 0x181055aa
mov edi, 0x8007000e
mov eax, dword [esp + 0xc]
test eax, eax
je 0x181055cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x181055cd
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x181055aa
call fcn.18003422
mov edi, eax
mov ecx, dword [esp + 0x4c]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.18120ca0
mov esp, ebp
pop ebp
ret 4