Function at 0x407450
Capabilities:
Enumerate pe sections
Extract resource via kernel32 functions

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x409fb0
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp dword [esi + 0xa8], ebx
jne 0x40748d
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
add esp, 0x5c
ret
xor eax, eax
push 0xf1
mov ax, word [esi + 0xa8]
push eax
call sub.MFC42.DLL_AfxFindResourceHandle
xor ecx, ecx
mov edi, eax
mov cx, word [esi + 0xa8]
push 0xf1
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
cmp eax, ebx
jne 0x4074d2
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
add esp, 0x5c
ret
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
jne 0x4074f3
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
add esp, 0x5c
ret
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
cmp edi, ebx
jne 0x407515
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
add esp, 0x5c
ret
xor edx, edx
mov dx, word [edi + 6]
shl edx, 2
push edx
call sub.MFC42.DLL_operatornew
mov ebp, eax
add esp, 4
xor eax, eax
cmp word [edi + 6], bx
mov dword [esp + 0x30], ebp
jbe 0x407556
mov edx, ebp
lea ecx, [edi + 8]
xor ebp, ebp
inc eax
mov bp, word [ecx]
add ecx, 2
mov dword [edx], ebp
xor ebp, ebp
mov bp, word [edi + 6]
add edx, 4
cmp eax, ebp
jl 0x40753a
mov ebp, dword [esp + 0x30]
xor eax, eax
mov ecx, esi
mov ax, word [edi + 6]
push eax
push ebp
call sub.MFC42.DLL_CToolBar::SetButtons
push ebp
mov edi, eax
call sub.MFC42.DLL_operatordelete
add esp, 4
cmp edi, ebx
je 0x407500
mov ecx, esi
call fcn.004081f0
mov ecx, dword [esi + 0x20]
push ebx
push ebx
push 0x418
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esi + 0xa0], eax
mov eax, dword [esi + 0xa4]
push eax
call sub.MFC42.DLL_operatordelete
mov edi, dword [esi + 0xa0]
lea edx, [edi + edi*2]
lea eax, [edi + edx*4]
shl eax, 3
push eax
call sub.MFC42.DLL_operatornew
mov edx, eax
add esp, 8
cmp edx, ebx
je 0x4075e0
dec edi
cmp edi, ebx
jl 0x4075e2
lea ecx, [edi + edi*2 + 3]
xor eax, eax
lea ecx, [edi + ecx*4 + 1]
mov edi, edx
shl ecx, 3
mov ebp, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebp
and ecx, 3
rep stosb byte es:[edi], al
jmp 0x4075e2
xor edx, edx
mov eax, dword [esi + 0xa0]
mov dword [esi + 0xa4], edx
cmp eax, ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], ebx
jle 0x407945
xor ebp, ebp
lea edx, [esp + 0x34]
lea eax, [esp + 0x38]
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x20]
push eax
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ebx
call sub.MFC42.DLL_CToolBar::GetButtonInfo
mov edx, dword [esi + 0x20]
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x40]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0x20
push eax
push ecx
push 0x441
push edx
mov dword [esp + 0x54], 0xc
call edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
mov dword [esp + 0x6c], ebx
call sub.MFC42.DLL_CString::LoadStringA
push ebx
lea ecx, [esp + 0x40]
push 0xa
push ecx
lea ecx, [esp + 0x24]
call fcn.00408be0
push 1
lea edx, [esp + 0x2c]
push 0xa
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x74], 1
call fcn.00408be0
push 2
lea eax, [esp + 0x14]
push 0xa
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x74], 2
call fcn.00408be0
push 3
lea ecx, [esp + 0x18]
push 0xa
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x74], 3
call fcn.00408be0
mov edx, dword [esp + 0x14]
mov byte [esp + 0x68], 4
cmp dword [edx - 8], ebx
jne 0x4076f0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x14]
push eax
call sub.MFC42.DLL_CString::operator_1
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 8], ebx
jne 0x407728
push 0x40f1bc
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CString::CString_2
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x14]
push edx
mov byte [esp + 0x6c], 5
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x68], 4
call fcn.00408de8
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x4077f4
push ebx
push 0x48
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x40774e
mov dword [esp + 0x30], 1
push ebx
push 0x44
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x407764
or byte [esp + 0x51], 8
push ebx
push 0x52
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x40777a
or byte [esp + 0x51], 6
push ebx
push 0x43
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x407790
or byte [esp + 0x51], 2
push ebx
push 0x47
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x4077a6
or byte [esp + 0x51], 4
push ebx
push 0x57
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x4077bc
or byte [esp + 0x51], 0x80
push ebx
push 0x4c
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x4077d8
mov ecx, dword [esi + 0xa4]
mov byte [ecx + ebp + 0x64], 1
push ebx
push 0x4e
lea ecx, [esp + 0x18]
call fcn.00408ba0
cmp eax, 0xffffffff
je 0x4077f4
mov edx, dword [esi + 0xa4]
mov byte [edx + ebp + 0x65], 1
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x20]
lea eax, [esp + 0x40]
mov dword [esp + 0x44], 0xc
push eax
push ecx
push 0x442
push edx
call edi
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
cmp dword [eax - 8], ebx
je 0x407837
push edi
mov ecx, esi
call fcn.00408450
test eax, eax
je 0x407837
mov ecx, dword [esp + 0x14]
push ecx
push edi
mov ecx, esi
call sub.MFC42.DLL_CToolBar::SetButtonText
mov edx, dword [esi + 0xa4]
mov eax, dword [esp + 0x24]
mov dword [edx + ebp], eax
mov ecx, dword [esi + 0xa4]
mov edx, dword [esp + 0x1c]
mov dword [ecx + ebp + 4], edx
mov eax, dword [esi + 0xa4]
mov byte [eax + ebp + 8], 4
mov ecx, dword [esi + 0xa4]
mov dl, byte [esp + 0x51]
xor eax, eax
mov byte [ecx + ebp + 9], dl
mov edx, dword [esp + 0x30]
mov ecx, dword [esi + 0xa4]
cmp edx, ebx
setne al
mov dword [ecx + ebp + 0xc], eax
mov edx, dword [esi + 0xa4]
mov dword [edx + ebp + 0x10], ebx
mov eax, dword [esp + 0x28]
cmp dword [eax - 8], ebx
je 0x4078a9
push 0x28
push eax
mov eax, dword [esi + 0xa4]
lea ecx, [eax + ebp + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x4078b3
mov edx, dword [esi + 0xa4]
mov byte [edx + ebp + 0x3c], bl
mov eax, dword [esp + 0x14]
cmp dword [eax - 8], ebx
je 0x4078d2
push 0x28
push eax
mov eax, dword [esi + 0xa4]
lea ecx, [eax + ebp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x4078dc
mov edx, dword [esi + 0xa4]
mov byte [edx + ebp + 0x14], bl
test byte [esp + 0x51], 1
jne 0x4078e7
inc dword [esp + 0x24]
lea ecx, [esp + 0x14]
mov byte [esp + 0x68], 3
call fcn.00408de8
lea ecx, [esp + 0x10]
mov byte [esp + 0x68], 2
call fcn.00408de8
lea ecx, [esp + 0x28]
mov byte [esp + 0x68], 1
call fcn.00408de8
lea ecx, [esp + 0x3c]
mov byte [esp + 0x68], bl
call fcn.00408de8
lea ecx, [esp + 0x18]
mov dword [esp + 0x68], 0xffffffff
call fcn.00408de8
mov eax, dword [esi + 0xa0]
inc edi
add ebp, 0x68
cmp edi, eax
mov dword [esp + 0x20], edi
jl 0x407600
mov edi, dword [esi + 0xa0]
dec edi
js 0x40797d
lea eax, [edi + edi*2]
lea ebp, [edi + eax*4]
shl ebp, 3
mov ecx, dword [esi + 0xa4]
test byte [ecx + ebp + 0xc], 1
je 0x407975
mov edx, dword [esi + 0x20]
push ebx
push edi
push 0x416
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
dec edi
sub ebp, 0x68
cmp edi, ebx
jge 0x407957
mov ecx, esi
call fcn.004079d0
mov ecx, esi
call fcn.00407fa0
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c
ret