Function at 0x426e50
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x471012
push eax
mov dword fs:[0], esp
sub esp, 0x38
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.0046a9b7
mov edi, dword [esp + 0x58]
mov esi, dword [eax + 0xc]
mov ebx, dword [sym.imp.kernel32.dll_FindResourceA]
push 4
push edi
push esi
call ebx
test eax, eax
jne 0x426506
push 4
push edi
xor esi, esi
push esi
call ebx
test eax, eax
je 0x426530
push eax
push esi
call dword [sym.imp.kernel32.dll_LoadResource]
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x426530
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x1c]
call dword [sym.imp.user32.dll_CreateMenu]
push eax
mov ecx, ebp
call fcn.00461067
test eax, eax
jne 0x426547
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret 4
push esi
call dword [sym.imp.kernel32.dll_LockResource]
movzx ecx, word [eax + 2]
lea esi, [ecx + eax + 4]
lea ecx, [esp + 0x20]
call fcn.0045a491
mov dword [esp + 0x20], 0x477cd8
mov dword [esp + 0x50], edi
mov dword [esp + 0x34], 0x477d68
mov dword [esp + 0x38], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edi
mov edx, dword [esp + 0x28]
push ebp
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x58], 1
call fcn.0045a384
push 0xffffffffffffffff
push 1
lea ecx, [esp + 0x3c]
call fcn.00421d10
mov eax, dword [esp + 0x38]
mov dword [eax], edi
mov edi, dword [esp + 0x3c]
mov edi, edi
xor ebx, ebx
mov bx, word [esi]
add esi, 2
mov eax, ebx
and eax, 0x10
mov dword [esp + 0x18], eax
jne 0x4265d0
mov cx, word [esi]
mov word [esp + 0x14], cx
add esi, 2
jmp 0x4265d8
mov dword [esp + 0x14], 0
movzx eax, bx
test al, al
mov dword [esp + 0x58], eax
jns 0x4265ec
sub eax, 0x80
mov dword [esp + 0x58], eax
push esi
call fcn.0044a199
lea edx, [eax + eax + 2]
push edx
call fcn.00460357
push esi
push eax
mov dword [esp + 0x20], eax
call fcn.004475fc
push esi
call fcn.0044a199
add esp, 0x14
cmp word [esp + 0x18], 0
lea eax, [esi + eax*2 + 2]
mov dword [esp + 0x1c], eax
je 0x426703
test bl, bl
jns 0x426646
mov eax, dword [esp + 0x28]
dec eax
js 0x426976
cmp eax, edi
jge 0x426976
mov ecx, dword [esp + 0x38]
mov dword [ecx + eax*4], 1
push 0x54
call fcn.0046032c
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov byte [esp + 0x50], 2
je 0x426668
mov ecx, eax
call fcn.00421f40
mov esi, eax
jmp 0x42666a
xor esi, esi
mov edx, dword [ebp + 0x48]
mov dword [esi + 0x48], edx
mov eax, dword [ebp + 0x44]
mov dword [esi + 0x44], eax
mov ecx, dword [ebp + 0x3c]
mov byte [esp + 0x50], 1
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x40], 1
call dword [sym.imp.user32.dll_CreatePopupMenu]
push eax
mov ecx, esi
call fcn.00461067
mov ecx, dword [esp + 0x28]
lea eax, [ecx - 1]
test eax, eax
jl 0x426976
cmp eax, ecx
jge 0x426976
mov edx, dword [esi + 4]
mov ecx, dword [esp + 0x58]
push 0xffffffffffffffff
push edx
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + eax*4]
push edx
call fcn.004262e0
mov edx, dword [esp + 0x28]
push esi
push edx
lea ecx, [esp + 0x28]
call fcn.0045a384
test edi, edi
mov esi, edi
jl 0x426976
push 0xffffffffffffffff
inc edi
push edi
lea ecx, [esp + 0x3c]
call fcn.00421d10
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
mov dword [eax + esi*4], 0
jmp 0x426806
mov ecx, dword [esp + 0x28]
lea eax, [ecx - 1]
test eax, eax
jl 0x426976
cmp eax, ecx
jge 0x426976
movzx ecx, word [esp + 0x14]
mov edx, dword [esp + 0x58]
push 0xffffffffffffffff
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [edx + eax*4]
call fcn.004262e0
test bl, bl
jns 0x42675a
mov eax, dword [esp + 0x28]
dec eax
js 0x426976
cmp eax, edi
jge 0x426976
mov ecx, dword [esp + 0x38]
mov dword [ecx + eax*4], 1
mov ecx, dword [esp + 0x28]
lea esi, [ecx - 1]
test esi, esi
jl 0x426806
mov edx, dword [esp + 0x38]
lea eax, [edx + esi*4]
lea ebx, [esi + 1]
mov dword [esp + 0x58], eax
jmp 0x426780
mov ecx, dword [esp + 0x28]
lea ecx, [ecx]
test esi, esi
jl 0x426976
cmp esi, edi
jge 0x426976
mov edx, dword [esp + 0x58]
cmp dword [edx], 0
je 0x426806
lea eax, [ecx - 1]
test eax, eax
jl 0x426976
cmp eax, ecx
jge 0x426976
mov ecx, dword [esp + 0x24]
mov ecx, dword [ecx + eax*4]
call fcn.00425a70
push 1
push esi
lea ecx, [esp + 0x28]
call fcn.0045a446
cmp ebx, edi
jg 0x426976
mov eax, edi
sub eax, esi
dec eax
je 0x4267ec
lea edx, [eax*4]
mov eax, dword [esp + 0x58]
push edx
lea ecx, [eax + 4]
push ecx
push eax
call fcn.00447a00
add esp, 0xc
mov ecx, dword [esp + 0x58]
dec edi
dec esi
sub ecx, 4
dec ebx
test esi, esi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x58], ecx
jge 0x426779
mov edx, dword [esp + 0x10]
push edx
call fcn.0046035c
mov eax, dword [esp + 0x2c]
add esp, 4
dec eax
cmp eax, 0xffffffff
je 0x426826
mov esi, dword [esp + 0x1c]
jmp 0x4265b0
mov ecx, dword [ebp + 4]
push ecx
xor esi, esi
call dword [sym.imp.user32.dll_GetMenuItemCount]
test eax, eax
jle 0x42692e
mov ebx, dword [sym.imp.user32.dll_ModifyMenuA]
test esi, esi
jl 0x426976
cmp esi, dword [ebp + 0x10]
jge 0x426976
mov eax, dword [ebp + 0xc]
lea edi, [esi*4]
mov ecx, dword [eax + edi]
add eax, edi
lea edx, [esp + 0x58]
push edx
call fcn.004239b0
mov eax, dword [ebp + 4]
push esi
push eax
mov byte [esp + 0x58], 3
call dword [sym.imp.user32.dll_GetSubMenu]
push eax
call fcn.0046103f
test eax, eax
mov eax, dword [ebp + 0x10]
je 0x4268bf
cmp esi, eax
jge 0x426976
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edi]
add eax, edi
mov dword [ecx + 0x10], 0x410
mov edx, dword [ebp + 4]
push esi
push edx
call dword [sym.imp.user32.dll_GetSubMenu]
push eax
call fcn.0046103f
mov edi, dword [esp + 0x58]
mov eax, dword [eax + 4]
push edi
push eax
push 0x410
jmp 0x4268f5
cmp esi, eax
jge 0x426976
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edi]
add eax, edi
mov dword [ecx + 0x10], 0x400
cmp esi, dword [ebp + 0x10]
jge 0x426976
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + edi]
add eax, edi
mov edi, dword [esp + 0x58]
mov eax, dword [edx + 0x14]
push edi
push eax
push 0x400
mov eax, dword [ebp + 4]
push esi
push eax
call ebx
lea eax, [edi - 0x10]
mov byte [esp + 0x50], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42691b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [ebp + 4]
push eax
inc esi
call dword [sym.imp.user32.dll_GetMenuItemCount]
cmp esi, eax
jl 0x426840
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [ebp + 0x50], 1
mov byte [esp + 0x50], 0
je 0x42694b
push eax
call fcn.0046035c
add esp, 4
lea ecx, [esp + 0x20]
mov dword [esp + 0x50], 0xffffffff
call fcn.0045a4a8
mov ecx, dword [esp + 0x48]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x44
ret 4
call fcn.00458585
int3
movzx eax, word [esp + 4]
mov dword [esp + 4], eax
jmp 0x4264c0