Function at 0x502d00
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x658b68
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x270
movzx eax, word [ebp + 0xc]
push ebx
push esi
mov esi, dword [0x716738]
push edi
push 0xf1
push eax
push esi
mov dword [ebp - 0x20], esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
jne 0x502d46
xor eax, eax
jmp 0x502fe8
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x502d3f
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x502d3f
movzx ebx, word [eax + 6]
mov edi, dword [ebp + 0x10]
xor eax, eax
test edi, edi
setne al
mov esi, eax
lea eax, [esi + ebx]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
call fcn.006123b0
xor edx, edx
mov eax, esp
mov dword [ebp - 0x14], eax
cmp edi, edx
je 0x502da3
mov dword [eax], 4
mov dword [eax + 4], edx
mov word [eax + 8], 0x100
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], 0xffffffff
xor edi, edi
cmp ebx, edx
jle 0x502df4
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4 + 8]
mov ecx, dword [ebp - 0x10]
movzx ecx, word [ecx + edx*2 + 8]
xor esi, esi
mov dword [eax + 4], esi
cmp cx, si
je 0x502dd6
mov dword [eax - 8], edi
inc edi
mov dword [eax - 4], ecx
lea ecx, [edi - 1]
mov word [eax], 4
mov dword [eax + 8], ecx
jmp 0x502dec
mov dword [eax - 8], 8
mov dword [eax - 4], esi
mov word [eax], 0x100
mov dword [eax + 8], 0xffffffff
inc edx
add eax, 0x14
cmp edx, ebx
jl 0x502db0
mov edx, dword [0x716734]
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 8]
push 0
push edx
mov edx, dword [ebp + 0x14]
push eax
push ecx
push 0x64
push 0x64
push 0
push 0
push edx
push 0
push str.ToolbarWindow32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
mov dword [ebp + 0x10], esi
test esi, esi
je 0x502d3f
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x14
push 0x41e
push esi
call ebx
push 0
push 0
push 0x31
push esi
call ebx
mov esi, eax
mov dword [ebp + 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp eax, ebx
jne 0x502e63
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, eax
mov dword [ebp + 0x18], esi
push 0x58
lea eax, [ebp - 0x78]
push ebx
push eax
mov dword [ebp - 0x7c], ebx
call fcn.006100a0
add esp, 0xc
lea ecx, [ebp - 0x7c]
push ecx
push 0x5c
push esi
call dword [sym.imp.GDI32.dll_GetObjectW]
movzx ebx, word [ebp + 0xc]
mov eax, dword [0x716738]
push 2
push ebx
push eax
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
movzx eax, word [eax + 0xe]
cmp eax, 4
jbe 0x502eef
mov ecx, 0xff000000
cmp eax, 0x20
jne 0x502ebc
or ecx, 0xffffffff
mov edi, dword [ebp - 0x10]
movzx edx, word [edi + 2]
mov eax, dword [0x716738]
push 0x2040
push 0
push ecx
push 1
push edx
push ebx
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov ecx, dword [ebp + 0x10]
push eax
push 0
push 0x430
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x502f19
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c]
push ecx
push edi
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp + 0x10]
push 0x413
mov dword [ebp - 0x18], 0
push edx
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [ebp - 0x10]
xor eax, eax
push 0x1fe
push eax
lea ecx, [ebp - 0x27a]
push ecx
mov word [ebp - 0x27c], ax
call fcn.006100a0
xor edx, edx
add esp, 0xc
mov dword [ebp + 0xc], 0
cmp dx, word [edi + 6]
jae 0x502fde
mov ebx, dword [ebp - 0x14]
add ebx, 4
cmp byte [ebx + 5], 1
je 0x502fc8
mov ecx, dword [ebx]
push 0xff
lea eax, [ebp - 0x27c]
push eax
push ecx
call fcn.004ff860
add esp, 0xc
xor ecx, ecx
lea edx, [ebp - 0x27c]
test eax, eax
jle 0x502fb6
lea esp, [esp]
cmp word [ebp + ecx*2 - 0x27c], 0xa
je 0x502f92
inc ecx
cmp ecx, eax
jl 0x502f80
jmp 0x502fb6
lea edx, [ebp + ecx*2 - 0x27a]
mov eax, edx
lea esi, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x502fa0
sub eax, esi
sar eax, 1
xor ecx, ecx
mov word [edx + eax*2 + 2], cx
push edx
mov edx, dword [ebp + 0x10]
push 0
push 0x44d
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0xc]
movzx ecx, word [edi + 6]
inc eax
add ebx, 0x14
mov dword [ebp + 0xc], eax
cmp eax, ecx
jl 0x502f50
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
lea esp, [ebp - 0x288]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14