Function at 0x4aa1f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x1024
call fcn.004ebbf0
mov eax, dword [0x528af4]
xor eax, esp
mov dword [esp + 0x1020], eax
push ebx
push ebp
mov ebp, dword [esp + 0x1030]
xor ebx, ebx
xor eax, eax
mov ecx, dword [ebp + 8]
cmp dword [eax + 0x5270c0], ecx
je 0x4aa230
add eax, 0x38
inc ebx
cmp eax, 0x460
jb 0x4aa218
jmp 0x4aa4e2
cmp ebx, 0xffffffff
je 0x4aa4e2
push esi
push edi
push 0x18
call fcn.004c47c0
push 0x18
mov dword [esp + 0x14], eax
call fcn.004c4810
xor edi, edi
mov dword [esp + 0x14], eax
cmp dword [0x55f6c0], 0xffffffff
mov dword [esp + 0x18], edi
je 0x4aa326
mov eax, dword [str.Toolbar_]
mov dword [esp + 0x30], eax
mov eax, dword [0x5116cc]
mov dword [esp + 0x34], eax
mov eax, dword [0x5116d0]
mov dword [esp + 0x38], eax
mov eax, dword [0x5116d4]
mov dword [esp + 0x3c], eax
mov ax, word [0x5116d8]
mov word [esp + 0x40], ax
lea eax, [ebx*8]
sub eax, ebx
mov edx, dword [eax*8 + 0x5270f4]
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4aa2a5
lea edi, [esp + 0x30]
sub edx, esi
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4aa2c0
mov ecx, edx
lea eax, [esp + 0x30]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
push 1
rep movsb byte es:[edi], byte [esi]
push 4
push eax
mov ecx, 0x55f640
call fcn.004a9110
mov esi, eax
test esi, esi
je 0x4aa324
lea eax, [esp + 0x14]
mov ecx, 0x55f624
push eax
lea eax, [esp + 0x14]
push eax
call fcn.004ab140
push dword [esp + 0x14]
push dword [esp + 0x14]
push esi
call fcn.004c4930
mov edi, eax
push esi
mov dword [esp + 0x1c], edi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x4aa326
xor edi, edi
test byte [ebp + 0x10], 1
mov esi, dword [sym.imp.USER32.dll_GetSysColor]
je 0x4aa354
push 0xd
call esi
push eax
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0xe
mov dword [esp + 0x24], eax
call esi
push eax
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x4aa360
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
push 0
push 0
push 0x50b8c4
lea ecx, [ebp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push ecx
push 2
push dword [ebp + 0x20]
add eax, 3
add dword [ecx], eax
push dword [ecx]
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_ExtTextOutW]
mov eax, 0xfffffffd
sub eax, dword [esp + 0x10]
add dword [ebp + 0x1c], eax
lea eax, [ebx*8]
sub eax, ebx
shl eax, 3
mov dword [esp + 0x1c], eax
push dword [eax + 0x5270cc]
call fcn.00488530
mov edx, eax
lea ebx, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x4aa3b6
sub edx, ebx
sar edx, 1
push edx
push eax
mov eax, dword [ebp + 0x20]
add eax, 4
push eax
mov eax, dword [esp + 0x1c]
add eax, 7
add eax, dword [ebp + 0x1c]
push eax
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_TextOutW]
test edi, edi
jne 0x4aa474
push 4
call esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
push 2
mov dword [esp + 0x2c], edi
mov esi, dword [esi + 0x5270c8]
movzx eax, si
push eax
push dword [0x56df20]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push dword [0x56df20]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x4aa42a
cmp word [eax + 0xe], 8
je 0x4aa432
mov dword [esp + 0x28], 0x800080
push 1
lea eax, [esp + 0x2c]
push eax
push 0
push esi
push dword [0x56df20]
call dword [sym.imp.COMCTL32.dll_CreateMappedBitmap]
mov edi, eax
mov dword [esp + 0x18], edi
call fcn.004c4720
test al, al
je 0x4aa474
push dword [esp + 0x14]
push dword [esp + 0x14]
push edi
call fcn.004c4930
push edi
mov esi, eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, esi
mov dword [esp + 0x18], edi
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push edi
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, eax
push ebx
call edi
push 0xcc0020
push 0
push 0
push ebx
push dword [esp + 0x24]
mov esi, eax
push dword [esp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push ebx
call edi
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [esp + 0x18]
call dword [sym.imp.GDI32.dll_DeleteObject]
test byte [ebp + 0x10], 1
pop edi
pop esi
je 0x4aa4e2
push dword [esp + 0x18]
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [esp + 0x1c]
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0x1028]
pop ebp
pop ebx
xor ecx, esp
call fcn.004ebbd8
add esp, 0x1024
ret 4