Function at 0x4e2eb0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
cmp ecx, 0xd
je 0x4e2ec8
cmp ecx, 0xe
je 0x4e2ec8
cmp ecx, 0xf
je 0x4e2ec8
cmp ecx, 0x1e
jne 0x4e3256
cmp edx, 0x1b8a
jne 0x4e2ef0
mov ecx, dword [0x5bfe50]
xor eax, eax
test ecx, ecx
sete al
xor edx, edx
xor ecx, ecx
mov dword [0x5bfe50], eax
call fcn.0054ffc0
jmp fcn.004c0690
cmp edx, 0x1b8b
jne 0x4e2f1b
mov eax, dword [0x5bfe54]
xor ecx, ecx
test eax, eax
sete cl
mov edx, 1
mov dword [0x5bfe54], ecx
xor ecx, ecx
call fcn.0054ffc0
jmp fcn.004c0690
cmp edx, 0x1b8d
jne 0x4e2f43
mov eax, 1
cmp dword [0x5bfe58], eax
je 0x4e2f3e
xor edx, edx
xor ecx, ecx
mov dword [0x5bfe58], eax
call fcn.0054ffc0
jmp fcn.004c0690
cmp edx, 0x1b8e
jne 0x4e2f6c
mov eax, dword [0x5bfe58]
test eax, eax
je 0x4e2f67
xor edx, edx
xor ecx, ecx
mov dword [0x5bfe58], 0
call fcn.0054ffc0
jmp fcn.004c0690
cmp edx, 0x1b8f
jne 0x4e2f7b
mov eax, 2
jmp 0x4e2f28
cmp edx, 0x1b90
jne 0x4e2f8f
mov edx, 3
xor ecx, ecx
jmp fcn.0054ffc0
cmp edx, 0x1b91
jne 0x4e2fa3
mov edx, 4
xor ecx, ecx
jmp fcn.0054ffc0
cmp edx, 0x1b64
jl 0x4e305a
cmp edx, 0x1b67
jg 0x4e305a
cmp edx, 0x1b64
jne 0x4e2fca
mov eax, 1
jmp 0x4e2ff6
cmp edx, 0x1b65
jne 0x4e2fd9
mov eax, 2
jmp 0x4e2ff6
cmp edx, 0x1b66
jne 0x4e2fe5
xor eax, eax
jmp 0x4e2ff6
cmp edx, 0x1b67
jne 0x4e2f3e
mov eax, 3
cmp ecx, 0xe
jne 0x4e3016
cmp eax, dword [0x5bfdd8]
je 0x4e2f3e
mov dword [0x5bfdd8], eax
call fcn.004e8020
jmp fcn.004c0690
cmp ecx, 0xf
jne 0x4e3036
cmp eax, dword [0x5bfe00]
je 0x4e2f3e
mov dword [0x5bfe00], eax
call fcn.004e8020
jmp fcn.004c0690
cmp ecx, 0x1e
jne 0x4e2f3e
cmp eax, dword [0x5bfe4c]
je 0x4e2f3e
mov dword [0x5bfe4c], eax
call fcn.004e8020
jmp fcn.004c0690
cmp edx, 0x1b6c
jne 0x4e3086
mov edx, dword [0x5f92ec]
push 2
push 0x9f
push 0x111
push edx
mov dword [0x5f21a0], 6
call dword [sym.imp.USER32.dll_PostMessageA]
ret
cmp ecx, 0xd
jne 0x4e30d9
mov eax, dword [0x5c59fc]
test eax, eax
je 0x4e3256
cmp edx, 0x1b58
mov ecx, dword [eax]
jne 0x4e30a7
jmp fcn.0041d290
cmp edx, 0x1b59
jne 0x4e30b4
jmp fcn.0041d420
add edx, 0xffffe4a6
call fcn.0041d4e0
mov eax, dword [0x5c59fc]
mov ecx, dword [eax + 0x960]
test ecx, ecx
je 0x4e3256
mov ecx, dword [eax]
jmp fcn.0041c060
cmp ecx, 0xe
push ebx
jne 0x4e30fa
cmp edx, 0x1b58
je 0x4e30f3
cmp edx, 0x1b59
jne 0x4e324d
mov ebx, 0x5f6c08
jmp 0x4e3153
cmp ecx, 0xf
jne 0x4e3131
cmp edx, 0x1b58
je 0x4e312a
cmp edx, 0x1b59
je 0x4e312a
cmp edx, 0x1b62
je 0x4e3123
cmp edx, 0x1b63
jne 0x4e324d
mov ebx, 0x5f8118
jmp 0x4e3153
mov ebx, 0x5f8000
jmp 0x4e3153
cmp ecx, 0x1e
jne 0x4e324d
cmp edx, 0x1b58
je 0x4e314e
cmp edx, 0x1b59
jne 0x4e324d
mov ebx, 0x5f8b98
cmp edx, 0x1b58
je 0x4e3184
cmp edx, 0x1b62
je 0x4e3184
cmp edx, 0x1b59
je 0x4e3177
cmp edx, 0x1b63
jne 0x4e324d
mov ecx, ebx
mov edx, 1
pop ebx
jmp fcn.00423ea0
mov cl, byte [ebx + 0x10]
test cl, cl
lea eax, [ebx + 0x10]
je 0x4e31a1
mov edx, 0x5f5cd0
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4e3195
jmp 0x4e31b9
push 0x5c7410
push str._s.bmp
push 0x5f5cd0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 4
push 0
xor edx, edx
mov ecx, 0x13ed
call fcn.0041f1a0
mov ecx, dword [ebx]
push eax
mov edx, 6
call fcn.0052b920
test eax, eax
je 0x4e3255
xor eax, eax
mov cl, byte [eax + 0x5f5cd0]
mov byte [eax + 0x5c7410], cl
inc eax
test cl, cl
jne 0x4e31e0
xor eax, eax
mov cl, byte [eax + 0x5f5cd0]
mov byte [eax + 0x5eef00], cl
inc eax
test cl, cl
jne 0x4e31f3
mov eax, 0x5f5e50
mov edx, eax
jmp 0x4e3210
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4e3210
push esi
push edi
mov edi, 0x5eef00
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4e3221
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
mov edx, 0x5eef00
mov ecx, ebx
call fcn.00423fd0
test eax, eax
pop edi
pop esi
jne 0x4e3255
xor ecx, ecx
pop ebx
jmp fcn.0041f0a0
pop ebx
ret