Function at 0x588710
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5d6201
mov eax, dword fs:[0]
push eax
sub esp, 0x818
mov eax, dword [0x64e0a0]
xor eax, esp
mov dword [esp + 0x810], eax
push ebx
push esi
push edi
mov eax, dword [0x64e0a0]
xor eax, esp
push eax
lea eax, [esp + 0x828]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
mov dword [esp + 0x14], edi
call fcn.0042b91f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x588775
push 0x80004005
call fcn.00402470
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x18], esi
xor eax, eax
push 0x7fe
mov dword [esp + 0x834], 0
push eax
mov word [esp + 0x24], ax
lea eax, [esp + 0x26]
push eax
call fcn.00546fa0
add esp, 0xc
cmp dword [edi + 0xc], 0
jne 0x5890d0
mov edx, dword [edi + 4]
mov eax, edx
cmp eax, 0x258
ja 0x588899
je 0x5887f4
sub eax, 0x5f
je 0x5887e2
dec eax
jne case.0x5888b0.605
lea ecx, [ebx + 0x1950]
push 0x60
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 0x5f
call fcn.0057ca70
jmp case.0x5888b0.623
cmp byte [0x650ce4], 2
jne case.0x5888b0.602
mov ecx, dword [0x65c1b8]
sub esp, 8
mov dl, 3
push 0
call fcn.00593d10
add esp, 0xc
dec eax
je 0x58887b
dec eax
je case.0x5888b0.623
mov dword [ebx + 0xa0], 1
call fcn.005945b0
mov ecx, dword [0x65bfa4]
test eax, eax
je 0x58883b
mov ecx, dword [0x65c004]
cmp dword [edi + 4], 0x258
mov eax, dword [0x65bdf0]
je 0x58884e
mov eax, dword [0x65bebc]
push ecx
push eax
push ecx
lea edx, [ebx + 0x387c]
push edx
mov ecx, ebx
call fcn.0058a190
test eax, eax
je 0x5888db
cmp dword [edi + 4], 0x258
jne 0x5888b7
mov dword [ebx + 0x3850], 1
jmp case.0x5888b0.623
mov ecx, ebx
call fcn.0058a450
test eax, eax
je case.0x5888b0.623
mov dword [ebx + 0x3860], 1
jmp case.0x5888b0.623
sub eax, 0x259
cmp eax, 0xaf
ja case.0x5888b0.605
movzx eax, byte [eax + 0x5899e0]
jmp dword [eax*4 + 0x589914]
lea ecx, [ebx + 0x387c]
call fcn.0059c900
test eax, eax
je 0x5888ea
mov ecx, dword [0x65beb8]
sub esp, 8
xor dl, dl
push 0
call fcn.00593d10
add esp, 0xc
mov dword [ebx + 0xa0], 0
jmp case.0x5888b0.623
mov dword [ebx + 0x3868], 1
jmp case.0x5888b0.623
mov ecx, ebx
call fcn.0058a450
jmp case.0x5888b0.623
mov ecx, ebx
call fcn.0058a310
jmp case.0x5888b0.623
mov ecx, dword [0x65bed8]
sub esp, 8
mov dl, 1
push dword [0x65bed4]
call fcn.00593d10
add esp, 0xc
test eax, eax
je case.0x5888b0.623
push 1
mov ecx, ebx
call fcn.0058c480
cmp byte [0x650ce3], 0
je case.0x5888b0.623
push 0
push 0
mov ecx, ebx
call fcn.00593dc0
mov byte [0x650ce3], 0
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
push 1
push 0
mov ecx, ebx
call fcn.00590a70
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
push 1
push 1
mov ecx, ebx
call fcn.00590a70
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
push 1
push 2
mov ecx, ebx
call fcn.00590a70
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
push 1
push 3
mov ecx, ebx
call fcn.00590a70
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
push 1
push 4
mov ecx, ebx
call fcn.00590a70
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
cmp byte [0x650a78], 0
je case.0x5888b0.623
call fcn.0042def3
mov ecx, dword [eax + 4]
call fcn.00428ddd
mov byte [esp + 0x830], 1
push dword [ebx + 0x20]
mov edi, dword [sym.imp.USER32.dll_LockWindowUpdate]
call edi
mov eax, dword [0x650a5c]
mov ecx, ebx
mov dword [0x650a58], eax
call fcn.0058c350
push 1
push 1
mov ecx, ebx
call fcn.00593dc0
mov ecx, ebx
call fcn.0058bdd0
push 0
call edi
call fcn.0042def3
mov ecx, dword [eax + 4]
call fcn.0042908e
lea ecx, [esp + 0x13]
mov byte [esp + 0x830], 0
call fcn.00409610
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je case.0x5888b0.623
call fcn.0042def3
mov ecx, dword [eax + 4]
call fcn.00428ddd
mov byte [esp + 0x830], 2
push dword [ebx + 0x20]
mov edi, dword [sym.imp.USER32.dll_LockWindowUpdate]
call edi
cmp byte [0x650a78], 0
jne 0x588abb
mov eax, dword [0x650a58]
mov ecx, ebx
mov dword [0x650a5c], eax
call fcn.0058c2d0
push 1
push 1
mov ecx, ebx
call fcn.00593dc0
mov eax, dword [0x650a6c]
push 1
push 0
mov ecx, ebx
mov dword [0x650a58], eax
mov byte [0x650a78], 1
call fcn.00590a70
jmp 0x588a46
cmp byte [0x65145e], 0
je case.0x5888b0.623
call fcn.0042def3
mov ecx, dword [eax + 4]
call fcn.00428ddd
mov byte [esp + 0x830], 3
push dword [ebx + 0x20]
mov edi, dword [sym.imp.USER32.dll_LockWindowUpdate]
call edi
cmp byte [0x650a78], 0
jne 0x588b2e
mov eax, dword [0x650a58]
mov ecx, ebx
mov dword [0x650a5c], eax
call fcn.0058c2d0
push 1
push 1
mov ecx, ebx
call fcn.00593dc0
mov eax, dword [0x650a70]
push 1
push 0
mov ecx, ebx
mov dword [0x650a58], eax
mov byte [0x650a78], 2
call fcn.00590a70
jmp 0x588a46
cmp byte [0x650c7c], 1
jne 0x588b87
mov byte [0x650cd9], 1
mov cl, 1
call fcn.00569230
test al, al
je case.0x5888b0.623
push 0
mov ecx, ebx
call fcn.0042c17d
jmp case.0x5888b0.623
mov ecx, ebx
mov byte [0x652dfd], 0
call fcn.00589bd0
test al, al
je case.0x5888b0.623
mov eax, dword [0x650c84]
cmp dword [eax + 0x20], 0
jne case.0x5888b0.623
cmp byte [0x65145e], 0
je 0x588bbe
push 1
mov ecx, ebx
call fcn.0058c480
mov byte [0x650cd9], 1
call dword [0x649024]
test eax, eax
jne 0x588bda
xor edx, edx
call fcn.00591070
test eax, eax
jmp 0x588b73
mov ecx, ebx
mov dword [ebx + 0xa0], 1
call fcn.0058bca0
mov dword [ebx + 0xa0], 0
jmp case.0x5888b0.623
cmp byte [0x650c7c], 1
jne 0x588c11
mov byte [0x650cd9], 0
xor cl, cl
jmp 0x588b6c
mov ecx, ebx
mov byte [0x652dfd], 0
call fcn.00589bd0
test al, al
je case.0x5888b0.623
mov eax, dword [0x650c84]
cmp dword [eax + 0x20], 0
jne case.0x5888b0.623
cmp byte [0x65145e], 0
je 0x588c48
push 1
mov ecx, ebx
call fcn.0058c480
mov byte [0x650cd9], 0
call dword [0x649024]
test eax, eax
jne 0x588bda
lea edx, [eax + 1]
call fcn.00591070
test eax, eax
jmp 0x588b73
push 1
lea eax, [edx - 0x28a]
push eax
mov ecx, ebx
call fcn.00590800
jmp case.0x5888b0.623
movzx eax, byte [0x650cd5]
dec eax
cmp eax, 1
jl case.0x5888b0.623
push 1
push eax
mov ecx, ebx
call fcn.00590800
jmp case.0x5888b0.623
movzx eax, byte [0x650cd5]
inc eax
cmp eax, 9
jg case.0x5888b0.623
push 1
push eax
mov ecx, ebx
call fcn.00590800
jmp case.0x5888b0.623
cmp byte [0x650cd6], 0
je case.0x5888b0.623
mov byte [0x650cd6], 0
push 0
push 0
lea ecx, [ebx + 0xb4]
call fcn.005805d0
lea ecx, [ebx + 0x1950]
push 0
call fcn.0057b220
movzx eax, byte [0x650cd5]
push eax
mov ecx, ebx
call fcn.00590870
jmp case.0x5888b0.623
cmp byte [0x650cd6], 1
je case.0x5888b0.623
mov byte [0x650cd6], 1
jmp 0x588cd1
cmp byte [0x650cd8], 0
je case.0x5888b0.623
mov byte [0x650cd8], 0
push 0
push 0
lea ecx, [ebx + 0xb4]
call fcn.005805d0
lea ecx, [ebx + 0x1950]
push 0
call fcn.0057b220
mov ecx, ebx
call fcn.0058c3b0
jmp case.0x5888b0.623
cmp byte [0x650cd8], 1
je case.0x5888b0.623
mov byte [0x650cd8], 1
jmp 0x588d2b
cmp byte [0x650cd8], 2
je case.0x5888b0.623
mov byte [0x650cd8], 2
jmp 0x588d2b
cmp byte [0x650cd4], 2
je case.0x5888b0.623
push 0
push 0
push 0x14e
push dword [ebx + 0x22cc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [0x650cd4], 2
push 0
push 0
lea ecx, [ebx + 0xb4]
call fcn.005805d0
lea ecx, [ebx + 0x1950]
push 0
call fcn.0057b220
jmp case.0x5888b0.623
cmp byte [0x650cd4], 1
je case.0x5888b0.623
push 0
push 1
push 0x14e
push dword [ebx + 0x22cc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [0x650cd4], 1
jmp 0x588da8
cmp byte [0x650cd4], 0
je case.0x5888b0.623
push 0
push 2
push 0x14e
push dword [ebx + 0x22cc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [0x650cd4], 0
jmp 0x588da8
mov ecx, dword [ebx + 0x7f00]
call fcn.00428c30
jmp case.0x5888b0.623
call fcn.005923d0
jmp case.0x5888b0.623
cmp dword [ebx + 0x385c], 0
jne 0x588b79
cmp dword [ebx + 0xac], 0
jne 0x588b79
cmp byte [0x650ce4], 2
jne 0x588b79
mov ecx, dword [0x65bf8c]
sub esp, 8
mov dl, 3
push 0
call fcn.00593d10
add esp, 0xc
sub eax, 0
je 0x588b79
dec eax
jne case.0x5888b0.623
mov ecx, ebx
call fcn.0058a450
test eax, eax
je case.0x5888b0.623
mov dword [ebx + 0x385c], 1
jmp case.0x5888b0.623
mov ecx, ebx
call fcn.00582ff0
jmp case.0x5888b0.623
mov ecx, ebx
call fcn.00582f70
jmp case.0x5888b0.623
lea ecx, [ebx + 0xb4]
call fcn.00580380
jmp case.0x5888b0.623
mov ecx, ebx
mov dword [ebx + 0x3874], 1
call fcn.0058a370
jmp case.0x5888b0.623
mov ecx, ebx
mov dword [ebx + 0x3874], 0
call fcn.0058a370
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 4
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 5
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 1
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 2
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 3
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 6
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 7
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 8
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 9
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 0xa
call fcn.0057ca70
jmp case.0x5888b0.623
lea ecx, [ebx + 0x1950]
push 0xb
call fcn.0057ca70
jmp case.0x5888b0.623
call fcn.00582c00
jmp case.0x5888b0.623
mov eax, dword [0x675604]
mov ecx, 0x675604
call dword [eax + 0x170]
call fcn.005bd480
jmp case.0x5888b0.623
mov ecx, str.http:__go.eset.eu_versioncheck_lng1033product_nameESIproduct_version1.2.034.0product_id1SysInspector32_ENUproduct_version11.2.034.0
call fcn.00593be0
jmp case.0x5888b0.623
push dword [0x65be94]
mov edx, 0x400
lea ecx, [esp + 0x20]
call fcn.005c1c20
add esp, 4
mov edx, 0x400
push dword [0x65be98]
lea ecx, [esp + 0x20]
call fcn.005c1c80
push ecx
push dword [0x65be9c]
mov dl, 1
lea ecx, [esp + 0x28]
call fcn.00593d10
add esp, 0xc
cmp eax, 1
jne case.0x5888b0.623
push ecx
lea eax, [esp + 0x20]
push eax
call fcn.00588620
cmp word [esp + 0x1c], 0
je 0x58906c
push 1
push 0
push str.http:__go.eset.eu_onlinescanner_lng1033
lea eax, [esp + 0x28]
push eax
push 0x60e26c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.0x5888b0.623
mov ecx, 0x60e3f8
call fcn.00593be0
jmp case.0x5888b0.623
call fcn.005923f0
jmp case.0x5888b0.623
cmp edx, 0x64
jb 0x58908f
cmp edx, 0x7b
jb 0x589094
cmp edx, 0xc
jne 0x5890a5
lea ecx, [ebx + 0x1950]
push edx
call fcn.0057ca70
jmp case.0x5888b0.623
cmp edx, 0xc8
jb case.0x5888b0.623
cmp edx, 0xe8
jae case.0x5888b0.623
lea eax, [edx - 0xc8]
push eax
mov ecx, ebx
call fcn.00589c90
jmp case.0x5888b0.623
mov eax, dword [edi + 4]
cmp eax, 0x258
ja 0x5891c4
je 0x589142
sub eax, 0x5f
je 0x589117
dec eax
jne case.0x5891db.605
mov eax, dword [edi]
xor edx, edx
cmp dword [ebx + 0x1bfc], edx
mov ecx, edi
setne dl
push edx
call dword [eax]
mov edx, dword [edi]
xor eax, eax
cmp dword [0x652e08], 0x60
mov ecx, edi
sete al
push eax
call dword [edx + 4]
jmp case.0x5888b0.623
mov eax, dword [edi]
xor ecx, ecx
cmp dword [ebx + 0x1bfc], ecx
setne cl
push ecx
mov ecx, edi
call dword [eax]
mov edx, dword [edi]
xor eax, eax
cmp dword [0x652e08], 0x5f
mov ecx, edi
sete al
push eax
call dword [edx + 4]
jmp case.0x5888b0.623
mov eax, dword [ebx + 0x2c04]
push 0x400
push 2
push dword [eax + 4]
call dword [sym.imp.USER32.dll_RemoveMenu]
mov ecx, ebx
call fcn.00589e10
push dword [0x65c018]
mov eax, dword [ebx + 0x2c04]
push dword [ebx + 0x7bcc]
push 0x410
push 2
push dword [eax + 4]
call dword [sym.imp.USER32.dll_InsertMenuW]
mov ecx, dword [ebx + 0x83bc]
sub ecx, dword [ebx + 0x83b8]
mov eax, 0x66666667
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ecx, ecx
add eax, edx
cmp ecx, eax
mov eax, dword [ebx + 0x2c04]
sbb ecx, ecx
inc ecx
or ecx, 0x400
push ecx
push 2
push dword [eax + 4]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push 1
jmp 0x5898c0
sub eax, 0x259
cmp eax, 0xaf
ja case.0x5891db.605
movzx eax, byte [eax + 0x589b20]
jmp dword [eax*4 + 0x589a90]
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
mov ecx, dword [edi + 4]
movzx eax, byte [0x650cd5]
sub ecx, 0x28a
cmp eax, ecx
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov eax, dword [edi]
xor ecx, ecx
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650cd6], al
mov ecx, edi
sete al
push eax
call dword [edx + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650cd6], 1
mov ecx, edi
sete al
push eax
call dword [edx + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd4], 2
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd4], 1
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd4], 0
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
mov ecx, edi
cmp byte [0x65145e], al
jne 0x58935c
cmp byte [0x650ce4], al
setne al
push eax
call dword [edx]
jmp case.0x5888b0.623
cmp byte [0x650a78], al
setne al
push eax
call dword [edx]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
jmp case.0x5888b0.623
cmp byte [0x650d22], 0
je 0x5893d4
cmp byte [0x650ce4], 0
je 0x5893d4
cmp byte [0x65145e], 0
jne 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x650d22], 0
je 0x5893d4
lea ecx, [ebx + 0xb4]
call fcn.0057fd00
test eax, eax
jmp 0x589394
cmp dword [ebx + 0x136c], 0
jne 0x58939f
cmp word [ebx + 0x228], 0
jne 0x58939f
xor ecx, ecx
jmp 0x5898bf
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd8], 0
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd8], 1
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x650ce4], al
mov ecx, edi
setne al
push eax
call dword [edx]
cmp byte [0x650ce4], 0
je 0x589223
cmp byte [0x650cd8], 2
jne 0x589223
mov eax, dword [edi]
mov ecx, 1
push ecx
mov ecx, edi
call dword [eax + 4]
jmp case.0x5888b0.623
movzx eax, byte [0x650d22]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x651030], al
mov ecx, edi
sete al
push eax
call dword [edx]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
mov ecx, edi
cmp byte [0x65145e], al
jne 0x5894de
cmp byte [0x650ce4], al
setne al
push eax
call dword [edx]
jmp case.0x5888b0.623
cmp byte [0x650a78], al
sete al
push eax
call dword [edx]
jmp case.0x5888b0.623
mov edx, dword [edi]
xor eax, eax
cmp byte [0x65145e], al
mov ecx, edi
setne al
push eax
call dword [edx]
jmp case.0x5888b0.623
cmp byte [0x65145e], 0
je 0x5893d4
cmp byte [0x650a78], 0
jmp 0x58939d
cmp byte [0x65145e], 0
je 0x5893d4
cmp byte [0x650a78], 0
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x65145e], 0
je 0x5893d4
cmp byte [0x650a78], 1
je 0x5893d4
cmp dword [0x650a6c], 0
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x65145e], 0
je 0x5893d4
cmp byte [0x650a78], 2
je 0x5893d4
cmp dword [0x650a70], 0
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x650ce4], 0
je 0x5893d4
cmp byte [0x650cd5], 1
jbe 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x650ce4], 0
je 0x5893d4
cmp byte [0x650cd5], 9
jae 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp byte [0x650d22], 0
jne 0x58939f
cmp byte [0x650c7c], 0
jne 0x58939f
xor ecx, ecx
jmp 0x5898bf
xor ecx, ecx
cmp dword [ebx + 0x1bfc], ecx
setne cl
jmp 0x5898bf
mov edi, dword [edi]
lea ecx, [ebx + 0x1950]
push 1
call fcn.0057da60
mov ecx, dword [esp + 0x14]
push eax
call dword [edi]
mov eax, dword [ebx + 0x2c04]
push 0x400
push 2
push dword [eax + 4]
call dword [sym.imp.USER32.dll_RemoveMenu]
lea ecx, [ebx + 0x1950]
call fcn.0057ec90
push dword [0x65bd44]
mov eax, dword [ebx + 0x2c04]
push dword [ebx + 0x19d8]
push 0x410
push 2
push dword [eax + 4]
call dword [sym.imp.USER32.dll_InsertMenuW]
xor edx, edx
cmp dword [ebx + 0x1bfc], edx
je 0x58968a
cmp dword [ebx + 0x2074], edx
setne dl
mov ecx, dword [ebx + 0x2c04]
mov edi, dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
test edx, edx
sete al
or eax, 0x400
push eax
push 2
push dword [ecx + 4]
call edi
mov eax, dword [ebx + 0x2c04]
push 0x400
push 0xf
push dword [eax + 4]
call dword [sym.imp.USER32.dll_RemoveMenu]
lea ecx, [ebx + 0x1950]
call fcn.0057eda0
push dword [0x65bf98]
mov eax, dword [ebx + 0x2c04]
push dword [ebx + 0x19e4]
push 0x410
push 0xf
push dword [eax + 4]
call dword [sym.imp.USER32.dll_InsertMenuW]
mov edx, dword [ebx + 0x2c04]
xor ecx, ecx
cmp dword [ebx + 0x1bfc], ecx
setne cl
xor eax, eax
test ecx, ecx
sete al
or eax, 0x400
push eax
push 0xf
push dword [edx + 4]
call edi
jmp case.0x5888b0.623
xor ecx, ecx
cmp dword [ebx + 0x1bfc], ecx
je 0x5898bf
mov eax, dword [ebx + 0x2070]
inc eax
cmp eax, dword [ebx + 0x2074]
setl cl
jmp 0x5898bf
mov ecx, dword [ebx + 0x1bfc]
test ecx, ecx
je 0x5893d4
mov eax, dword [ebx + 0x1c00]
test eax, eax
je 0x5893d4
mov eax, dword [eax + 0x84]
test eax, eax
je 0x5893d4
cmp ecx, eax
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
xor ecx, ecx
cmp dword [ebx + 0x1bfc], ecx
je 0x5898bf
cmp dword [ebx + 0x1c00], ecx
setne cl
jmp 0x5898bf
cmp dword [ebx + 0x1bfc], 0
je 0x5893d4
mov eax, dword [ebx + 0x1c00]
test eax, eax
je 0x5893d4
cmp dword [eax + 0x38], 0xffffffff
jne 0x58939f
cmp dword [eax + 0x3c], 0xffffffff
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp dword [ebx + 0x1bfc], 0
je 0x5893d4
mov eax, dword [ebx + 0x1c00]
test eax, eax
je 0x5893d4
cmp byte [eax + 0x50], 3
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
cmp dword [ebx + 0x1bfc], 0
je 0x5893d4
mov eax, dword [ebx + 0x1c00]
test eax, eax
je 0x5893d4
push dword [eax + 4]
lea ecx, [ebx + 0x1950]
call fcn.0057d4e0
test eax, eax
jne 0x58939f
mov eax, dword [ebx + 0x1c00]
mov eax, dword [eax + 0x84]
test eax, eax
je 0x5893d4
push dword [eax + 4]
lea ecx, [ebx + 0x1950]
call fcn.0057d4e0
test eax, eax
je 0x5893d4
mov ecx, 1
jmp 0x5898bf
mov ecx, dword [ebx + 0x83bc]
sub ecx, dword [ebx + 0x83b8]
mov eax, 0x66666667
imul ecx
mov ecx, dword [edi + 4]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x5898b0
cmp ecx, 0xc8
jb 0x5898b0
add eax, 0xc8
cmp ecx, eax
jae 0x5898b0
lea eax, [ecx - 0xc8]
push eax
lea ecx, [ebx + 0x83b0]
call fcn.00407100
mov al, byte [eax + 0x20]
mov edx, dword [edi]
movzx eax, al
push eax
mov ecx, edi
call dword [edx]
jmp case.0x5888b0.623
cmp ecx, 0x64
jb 0x5898ba
cmp ecx, 0x7b
jb 0x5898bf
cmp ecx, 0xc
jne case.0x5888b0.623
push ecx
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
add esi, 0xfffffff0
mov dword [esp + 0x830], 0xffffffff
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5898eb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x828]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x810]
xor ecx, esp
call fcn.00541b41
mov esp, ebp
pop ebp
ret 4