Function at 0x432307
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x25c
mov eax, 0x50a333
call fcn.005060cc
mov dword [ebp - 0x264], ecx
mov esi, dword [0xd584c8]
push 0xf1
movzx eax, dx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
test eax, eax
jne 0x43233d
xor eax, eax
jmp 0x432591
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x432336
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
mov dword [ebp - 0x260], ebx
test ebx, ebx
je 0x432336
movzx eax, word [ebx + 6]
xor ecx, ecx
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x250], ecx
mov dword [ebp - 4], ecx
mov ecx, eax
push 0x14
pop edx
call fcn.0040783e
cmp eax, 0x200
jbe 0x432390
push eax
lea ecx, [ebp - 0x250]
call fcn.004070ee
jmp 0x43239c
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x258], eax
test eax, eax
je 0x432572
xor ecx, ecx
mov edi, ecx
mov edx, ecx
cmp cx, word [ebx + 6]
jae 0x43244c
lea esi, [eax + 0x10]
and dword [esi - 4], 0
xor eax, eax
and dword [esi], 0
cmp word [ebx + edx*2 + 8], ax
mov eax, dword [ebp - 0x258]
je 0x4323f3
mov dword [ecx + eax], edi
inc edi
xor eax, eax
mov byte [ebp - 0x251], 4
mov byte [ebp - 0x252], al
movzx eax, word [ebx + edx*2 + 8]
jmp 0x432409
mov dword [ecx + eax], 8
xor eax, eax
mov byte [ebp - 0x252], 1
mov byte [ebp - 0x251], al
mov dword [ebp - 0x25c], eax
inc edx
mov eax, dword [ebp - 0x258]
add esi, 0x14
mov ebx, dword [ebp - 0x25c]
mov dword [ecx + eax + 4], ebx
mov bl, byte [ebp - 0x251]
mov byte [ecx + eax + 8], bl
mov bl, byte [ebp - 0x252]
mov byte [ecx + eax + 9], bl
add ecx, 0x14
mov ebx, dword [ebp - 0x260]
movzx eax, word [ebx + 6]
cmp edx, eax
jl 0x4323c3
xor eax, eax
push eax
push dword [0xd584c4]
push 0xe800
push dword [ebp - 0x264]
push 0x64
push 0x64
push eax
push eax
push 0x5600194c
push eax
push str.ToolbarWindow32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
test edi, edi
je 0x432572
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
push eax
push 0x14
push 0x41e
push edi
call esi
xor eax, eax
push eax
push eax
push 0x31
push edi
call esi
mov esi, eax
test esi, esi
jne 0x4324ae
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, eax
xor eax, eax
push 0x3c
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004f1a90
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
push 0x3c
push esi
call dword [sym.imp.GDI32.dll_GetObjectA]
push dword [ebp - 0x4c]
call fcn.004f8f4d
pop ecx
push 2
push 0xa
push 0x21
push pe_nt_image_headers32
push pe_nt_image_headers32
movzx esi, ax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push eax
xor eax, eax
push eax
push 0x430
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 0x258]
push dword [ebp - 0x268]
push 0x414
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
movzx ecx, word [ebx + 4]
mov eax, esi
cmp cx, si
mov edx, ecx
cmovbe edx, eax
movzx eax, word [ebx + 2]
movzx ecx, dx
shl ecx, 0x10
or ecx, eax
xor eax, eax
push ecx
push eax
push 0x420
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
movzx ecx, word [ebx + 4]
mov eax, esi
cmp cx, si
mov edx, ecx
push 7
cmovbe edx, eax
mov ax, word [ebx + 2]
pop esi
add dx, si
add ax, si
movzx ecx, dx
movzx eax, ax
shl ecx, 0x10
or ecx, eax
xor eax, eax
push ecx
push eax
push 0x41f
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x432576
xor eax, eax
mov edi, eax
lea eax, [ebp - 0x24c]
cmp dword [ebp - 0x250], eax
je 0x43258f
lea ecx, [ebp - 0x250]
call fcn.004070c2
mov eax, edi
call fcn.00506076
ret