Function at 0x10016dd5
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
xor esi, esi
mov ebx, ecx
push edi
cmp dword [ebp + 8], esi
je 0x10016e14
call fcn.1000de9e
push 0xf0
push dword [ebp + 8]
mov edi, dword [eax + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x10016e14
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x10016e1c
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
push esi
mov ecx, ebx
call fcn.10021bda
pop edi
pop esi
pop ebx
pop ebp
ret 4

Function at 0x10017821
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov esi, ecx
push edi
test esi, esi
je 0x100178ad
cmp dword [esi + 0x20], 0
je 0x100178ad
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100178ad
cmp dword [ebp + 8], 0
je 0x100178ad
xor edi, edi
mov ebx, edi
call fcn.1000de9e
push str.AFX_DIALOG_LAYOUT
push dword [ebp + 8]
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 8], eax
test eax, eax
je 0x10017891
mov ebx, dword [ebp - 4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 8]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x100178ad
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
push edi
push ebx
push esi
call fcn.1002273b
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100178a9
mov ecx, esi
call fcn.100175bf
mov eax, edi
jmp 0x100178af
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1001bd4a
Capabilities:
Get graphical window text

Disassembly:
push 4
mov eax, 0x10152a32
call fcn.10143411
mov edi, ecx
xor ebx, ebx
cmp dword [edi + 0x74], ebx
jne 0x1001bd70
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x1001bdca
lea ecx, [ebp - 0x10]
call fcn.10008143
mov edi, dword [edi + 0x74]
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 4], ebx
mov eax, dword [edi]
mov esi, dword [eax + 0x8c]
mov ecx, esi
call dword [0x10161a6c]
mov ecx, edi
call esi
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x10]
push dword [ebp + 0xc]
push esi
call sub.msvcrt.dll_wcsncpy_s
push eax
call fcn.100086ec
add esp, 0x14
test esi, esi
je 0x1001bdbd
push esi
call sub.msvcrt.dll_wcslen
pop ecx
mov ebx, eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.100096f2
mov eax, ebx
call fcn.101433df
ret 8

Function at 0x1001cc18
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push esi
mov esi, ecx
lea eax, [ebp - 4]
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
jne 0x1001cc42
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1001cc48
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
pop esi
leave
ret
lea ecx, [esi + 0xc]
call fcn.10008682
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push eax
call fcn.1001f1fa
int3