Function at 0x101766f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101c9b60
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x1023c014]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10176728
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp + 8]
cmp dword [edx], 0x205
jne 0x10176957
mov ecx, dword [eax + 0x90]
cmp ecx, dword [eax + 0x94]
je 0x10176957
mov eax, dword [eax + 0x84]
mov ecx, dword [ecx]
mov eax, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, dword [edx + 0x14]
mov edi, dword [eax + 4]
test ecx, ecx
js 0x10176957
mov eax, dword [edx + 0x18]
test eax, eax
js 0x10176957
cmp edi, ecx
jle 0x10176957
cmp esi, eax
jle 0x10176957
xor esi, esi
mov dword [ebp - 0x64], sym.HncOfficeFramework.dll_const_CHncMenu::vftable
xor edi, edi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 4], edi
mov dword [ebp - 0x40], sym.HncOfficeFramework.dll_const_CHncMenu::vftable
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
push 4
mov byte [ebp - 4], 1
mov ebx, dword [0x1023c868]
push 0x4504
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x10176836
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov ebx, eax
test ebx, ebx
je 0x10176836
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
lea ecx, [ebp - 0x64]
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHncMenu::LoadMenuIndirectW_void_const__
push ebx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x10176833
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
sub ecx, eax
sar ecx, 2
cmp ecx, 2
jbe 0x10176833
mov eax, dword [eax + 8]
test eax, eax
je 0x10176833
mov eax, dword [eax + 0xc]
mov edi, dword [ebp - 0x50]
jmp 0x10176838
mov edi, dword [ebp - 0x50]
xor eax, eax
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
jne 0x10176934
mov ebx, dword [ebp - 0x14]
mov ecx, ebx
push 6
mov dword [ebp - 0x3c], eax
call sym.HncOfficeFramework.dll_private:_int___thiscall_CHDCGridCtrl::_IsValidPaste_unsigned_int_
test eax, eax
jne 0x10176890
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x10176890
mov eax, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x14]
cmp eax, ecx
je 0x10176890
nop word [eax + eax]
mov edx, dword [eax]
cmp dword [edx + 8], 0x9ca3
je 0x10176884
add eax, 4
cmp eax, ecx
jne 0x10176870
jmp 0x10176890
mov eax, dword [edx + 4]
and eax, 0xfffffffd
or eax, 1
mov dword [edx + 4], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ecx + 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101768af
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [ebx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101768ca
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
push 0
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
push dword [ebp - 0x1c]
push 2
call sym.HncOfficeFramework.dll_public:_unsigned_int___thiscall_CHncMenu::TrackPopupMenuEx_unsigned_int__int__int__struct_HWND_____struct_tagTPMPARAMS__
cmp eax, 0x9ca3
jne 0x101768f1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, ebx
call sym.HncOfficeFramework.dll_private:_int___thiscall_CHDCGridCtrl::_ShortCutPaste_int__int__int_
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0x40], sym.HncOfficeFramework.dll_const_CHncMenu::vftable
je 0x1017690b
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x1017690b
push ecx
call fcn.10022170
test edi, edi
je 0x1017691b
test esi, esi
je 0x1017691b
push ecx
mov ecx, esi
call fcn.10022170
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0x40], sym.HncOfficeFramework.dll_const_CHncMenu::vftable
je 0x10176947
push ecx
call fcn.10022170
test edi, edi
je 0x10176957
test esi, esi
je 0x10176957
push ecx
mov ecx, esi
call fcn.10022170
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4