Function at 0x4e6a40
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ecx
push ebx
mov ebx, edx
test ebx, ebx
mov dword [esp + 4], ecx
jl 0x4e6f5e
cmp ebx, 3
jg 0x4e6f5e
push ebp
call fcn.004e0630
mov ebp, dword [sym.imp.USER32.dll_CreatePopupMenu]
call ebp
test eax, eax
mov dword [0x5ee9a0], eax
jne 0x4e6a7c
pop ebp
xor ecx, ecx
pop ebx
add esp, 4
jmp fcn.0041f0a0
cmp ebx, 3
push esi
mov esi, dword [sym.imp.USER32.dll_AppendMenuA]
push edi
jne 0x4e6ad9
xor edx, edx
mov ecx, 0xf2a
call fcn.0041f1a0
push eax
mov eax, dword [0x5ee9a0]
push 0x1b90
push 0
push eax
call esi
xor edx, edx
mov ecx, 0xf2b
call fcn.0041f1a0
mov ecx, dword [0x5ee9a0]
push eax
push 0x1b91
push 0
push ecx
call esi
mov edx, dword [0x5ee9a0]
push 0x5a4bec
push 0
push 0x800
push edx
call esi
jmp 0x4e6aeb
test ebx, ebx
je 0x4e6aeb
cmp ebx, 1
je 0x4e6aeb
cmp ebx, 2
jne 0x4e6c01
call ebp
mov edi, eax
test edi, edi
je 0x4e6c01
xor edx, edx
mov ecx, 0x17dd
call fcn.0041f1a0
push eax
push 0x1b58
push 0
push edi
call esi
xor edx, edx
mov ecx, 0x17de
call fcn.0041f1a0
push eax
push 0x1b59
push 0
push edi
call esi
test ebx, ebx
jne 0x4e6ba5
push 0x5a4bec
push ebx
push 0x800
push edi
call esi
xor edx, edx
mov ecx, 0x17e1
call fcn.0041f1a0
push eax
push 0x1b5a
push ebx
push edi
call esi
xor edx, edx
mov ecx, 0x17e2
call fcn.0041f1a0
push eax
push 0x1b5b
push ebx
push edi
call esi
xor edx, edx
mov ecx, 0x17e3
call fcn.0041f1a0
push eax
push 0x1b5c
push ebx
push edi
call esi
xor edx, edx
mov ecx, 0x17e4
call fcn.0041f1a0
push eax
push 0x1b5d
push ebx
push edi
call esi
xor edx, edx
mov ecx, 0x17e5
call fcn.0041f1a0
push eax
push 0x1b5e
push ebx
push edi
call esi
xor edx, edx
mov ecx, 0x17e7
call fcn.0041f1a0
push eax
mov eax, dword [0x5ee9a0]
push edi
push 0x10
push eax
call esi
test ebx, ebx
jne 0x4e6c05
mov eax, dword [0x5c59fc]
test eax, eax
push 8
je 0x4e6beb
mov ecx, dword [eax + 0x974]
mov edx, dword [0x5ee9a0]
add ecx, 0x1b5a
push ecx
push edx
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x4e6eb7
mov eax, dword [0x5ee9a0]
push 0x1b5c
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x4e6eb7
test ebx, ebx
je 0x4e6c60
cmp ebx, 1
je 0x4e6c73
cmp ebx, 2
jne 0x4e6c60
call ebp
mov edi, eax
test edi, edi
je 0x4e6c73
xor edx, edx
mov ecx, 0x17dd
call fcn.0041f1a0
push eax
push 0x1b62
push 0
push edi
call esi
xor edx, edx
mov ecx, 0x17de
call fcn.0041f1a0
push eax
push 0x1b63
push 0
push edi
call esi
xor edx, edx
mov ecx, 0x180a
call fcn.0041f1a0
mov ecx, dword [0x5ee9a0]
push eax
push edi
push 0x10
push ecx
call esi
jmp 0x4e6c73
cmp ebx, 1
je 0x4e6c73
cmp ebx, 2
je 0x4e6c73
cmp ebx, 3
jne 0x4e6eb7
call ebp
mov ebp, dword [sym.imp.USER32.dll_CheckMenuItem]
mov edi, eax
test edi, edi
je 0x4e6d6a
cmp ebx, 1
je 0x4e6c8f
cmp ebx, 2
jne 0x4e6ca6
xor edx, edx
mov ecx, 0xf20
call fcn.0041f1a0
push eax
push 0x1b64
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf21
call fcn.0041f1a0
push eax
push 0x1b65
push 0
push edi
call esi
cmp ebx, 1
je 0x4e6cc7
cmp ebx, 2
jne 0x4e6cde
xor edx, edx
mov ecx, 0xf22
call fcn.0041f1a0
push eax
push 0x1b66
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf23
call fcn.0041f1a0
push eax
push 0x1b67
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf1f
call fcn.0041f1a0
mov edx, dword [0x5ee9a0]
push eax
push edi
push 0x10
push edx
call esi
xor ecx, ecx
cmp ebx, 1
jne 0x4e6d1c
mov eax, dword [0x5bfdd8]
jmp 0x4e6d32
cmp ebx, 2
jne 0x4e6d28
mov eax, dword [0x5bfe00]
jmp 0x4e6d32
cmp ebx, 3
jne 0x4e6d3f
mov eax, dword [0x5bfe4c]
cmp eax, 1
jne 0x4e6d3b
xor ecx, ecx
jmp 0x4e6d59
test eax, eax
jne 0x4e6d46
mov ecx, 2
jmp 0x4e6d59
cmp eax, 2
jne 0x4e6d52
mov ecx, 1
jmp 0x4e6d59
cmp eax, 3
jne 0x4e6d59
mov ecx, eax
mov eax, dword [0x5ee9a0]
push 8
add ecx, 0x1b64
push ecx
push eax
call ebp
cmp ebx, 3
jne 0x4e6eb7
mov ecx, dword [0x5ee9a0]
push 0x5a4bec
push 0
push 0x800
push ecx
call esi
xor edx, edx
mov ecx, 0xf24
call fcn.0041f1a0
mov edx, dword [0x5ee9a0]
push eax
push 0x1b8a
push 0
push edx
call esi
xor edx, edx
mov ecx, 0xf25
call fcn.0041f1a0
push eax
mov eax, dword [0x5ee9a0]
push 0x1b8b
push 0
push eax
call esi
mov eax, dword [0x5bfe50]
test eax, eax
je 0x4e6dda
mov ecx, dword [0x5ee9a0]
push 8
push 0x1b8a
push ecx
call ebp
mov eax, dword [0x5bfe54]
test eax, eax
je 0x4e6df3
mov edx, dword [0x5ee9a0]
push 8
push 0x1b8b
push edx
call ebp
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edi, eax
test edi, edi
je 0x4e6eb7
mov eax, dword [0x5ee9a0]
push 0x5a4bec
push 0
push 0x800
push eax
call esi
xor edx, edx
mov ecx, 0xf27
call fcn.0041f1a0
push eax
push 0x1b8d
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf28
call fcn.0041f1a0
push eax
push 0x1b8e
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf29
call fcn.0041f1a0
push eax
push 0x1b8f
push 0
push edi
call esi
xor edx, edx
mov ecx, 0xf26
call fcn.0041f1a0
mov ecx, dword [0x5ee9a0]
push eax
push edi
push 0x10
push ecx
call esi
mov eax, dword [0x5bfe58]
cmp eax, 1
jne 0x4e6e8f
mov edx, dword [0x5ee9a0]
push 8
push 0x1b8d
push edx
jmp 0x4e6eb5
test eax, eax
jne 0x4e6ea2
mov eax, dword [0x5ee9a0]
push 8
push 0x1b8e
push eax
jmp 0x4e6eb5
cmp eax, 2
jne 0x4e6eb7
mov ecx, dword [0x5ee9a0]
push 8
push 0x1b8f
push ecx
call ebp
mov edx, dword [0x5ee9a0]
push 0x5a4bec
push 0
push 0x800
push edx
call esi
xor edx, edx
mov ecx, 0xefc
call fcn.0041f1a0
push eax
mov eax, dword [0x5ee9a0]
push 0x1b6c
push 0
push eax
call esi
test ebx, ebx
pop edi
pop esi
jne 0x4e6f07
mov ecx, dword [esp + 8]
push ecx
mov ecx, dword [0x5f92f0]
mov edx, 0xd
call fcn.004e65c0
pop ebp
pop ebx
pop ecx
ret
cmp ebx, 1
jne 0x4e6f25
mov edx, dword [esp + 8]
mov ecx, dword [0x5f7ff4]
push edx
mov edx, 0xe
call fcn.004e65c0
pop ebp
pop ebx
pop ecx
ret
cmp ebx, 2
jne 0x4e6f43
mov eax, dword [esp + 8]
mov ecx, dword [0x5f6bf8]
push eax
mov edx, 0xf
call fcn.004e65c0
pop ebp
pop ebx
pop ecx
ret
cmp ebx, 3
jne 0x4e6f5d
mov ecx, dword [esp + 8]
push ecx
mov ecx, dword [0x5f8b80]
mov edx, 0x1e
call fcn.004e65c0
pop ebp
pop ebx
pop ecx
ret