Function at 0x40b59a
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x284
mov eax, dword [0x433024]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [0x4363fc]
push esi
push edi
push 0xf1
push 0x80
push ebx
mov esi, ecx
mov dword [ebp - 0x27c], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor edi, edi
cmp eax, edi
jne 0x40b5dc
xor eax, eax
jmp 0x40b8ad
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, edi
je 0x40b5d5
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
cmp ebx, edi
je 0x40b5d5
movzx eax, word [ebx + 6]
push 0x14
push eax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x264], edi
call fcn.00412507
pop ecx
pop ecx
cmp eax, 0x200
jbe 0x40b62b
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004113a4
mov eax, dword [ebp - 0x264]
jmp 0x40b637
lea eax, [ebp - 0x260]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x280], eax
cmp eax, edi
jne 0x40b65b
lea eax, [ebp - 0x260]
test eax, eax
je 0x40b5d5
lea eax, [ebp - 0x264]
call fcn.0040cdf0
jmp 0x40b5d5
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x270], edi
cmp dx, word [ebx + 6]
jae 0x40b6b4
add eax, 8
cmp word [ebx + ecx*2 + 8], di
je 0x40b693
mov edx, dword [ebp - 0x270]
inc dword [ebp - 0x270]
mov dword [eax - 8], edx
movzx edx, word [ebx + ecx*2 + 8]
mov dword [eax - 4], edx
mov word [eax], 4
jmp 0x40b6a2
mov dword [eax - 8], 8
mov dword [eax - 4], edi
mov word [eax], 0x100
mov dword [eax + 8], edi
mov dword [eax + 4], edi
movzx edx, word [ebx + 6]
inc ecx
add eax, 0x14
cmp ecx, edx
jl 0x40b66e
push edi
push dword [0x4363f8]
push 0xe800
push esi
push 0x64
push 0x64
push edi
push edi
push 0x5600094c
push edi
push str.ToolbarWindow32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x26c], eax
cmp eax, edi
jne 0x40b6f4
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x264], eax
jmp 0x40b649
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push 0x14
push 0x41e
push eax
call esi
push edi
push edi
push 0x31
push dword [ebp - 0x26c]
call esi
mov dword [ebp - 0x268], eax
cmp eax, edi
jne 0x40b729
push 0xd
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x268], eax
push 0x58
lea eax, [ebp - 0x5c]
push edi
push eax
mov dword [ebp - 0x60], edi
call fcn.00416210
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
push 0x5c
push dword [ebp - 0x268]
call dword [sym.imp.GDI32.dll_GetObjectW]
push dword [ebp - 0x60]
call fcn.0041780b
pop ecx
movzx eax, ax
push 2
mov dword [ebp - 0x268], eax
mov eax, dword [0x4363fc]
push 0x80
push eax
mov dword [ebp - 0x274], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push dword [ebp - 0x274]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
movzx eax, word [eax + 0xe]
cmp eax, 4
jbe 0x40b7d2
mov ecx, 0xff000000
cmp eax, 0x20
jne 0x40b7a2
or ecx, 0xffffffff
movzx eax, word [ebx + 2]
push 0x2040
push edi
push ecx
push 1
push eax
push 0x80
push dword [0x4363fc]
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
push eax
push edi
push 0x430
push dword [ebp - 0x26c]
call esi
jmp 0x40b80d
xor eax, eax
lea edi, [ebp - 0x274]
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x278]
push eax
push dword [ebp - 0x270]
mov dword [ebp - 0x274], 0x80
push 0x413
push dword [ebp - 0x26c]
call esi
xor edi, edi
push dword [ebp - 0x280]
push dword [ebp - 0x284]
push 0x444
push dword [ebp - 0x26c]
call esi
movzx eax, word [ebx + 4]
cmp ax, word [ebp - 0x268]
ja 0x40b83a
movzx eax, word [ebp - 0x268]
movzx ecx, word [ebx + 2]
movzx eax, ax
shl eax, 0x10
or eax, ecx
push eax
push edi
push 0x420
push dword [ebp - 0x26c]
call esi
movzx eax, word [ebx + 4]
cmp ax, word [ebp - 0x268]
ja 0x40b869
movzx eax, word [ebp - 0x268]
mov cx, word [ebx + 2]
add eax, 7
movzx eax, ax
add cx, 7
movzx ecx, cx
shl eax, 0x10
or eax, ecx
push eax
push edi
push 0x41f
push dword [ebp - 0x26c]
call esi
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x264], eax
je 0x40b8a7
lea eax, [ebp - 0x264]
call fcn.0040cdf0
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00416201
leave
ret