Function at 0x461110
Capabilities:
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ba486
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x50dc94]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x228], esi
mov eax, dword [ebp + 8]
push eax
push 0x66
mov dword [ebp - 0x238], esi
call fcn.004b2f96
mov dword [esi], vtable.CFortiTrayDlg.0
mov dword [esi + 0xa8], 0
mov dword [esi + 0xac], 0
mov dword [esi + 0xb0], 0
mov dword [esi + 0xb4], 0
mov dword [ebp - 4], 0
mov dword [esi + 0xcc], 0
mov dword [esi + 0xc8], vtable.CBitmap.0
mov dword [esi + 0xe8], 0
mov dword [esi + 0xe4], vtable.CBitmap.0
mov dword [esi + 0xf0], 0
mov dword [esi + 0xec], vtable.CBitmap.0
mov dword [esi + 0xf8], 0
mov dword [esi + 0xf4], vtable.CBitmap.0
mov dword [esi + 0x100], 0
mov dword [esi + 0xfc], vtable.CBitmap.0
mov dword [esi + 0x108], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x110], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x118], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x120], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x128], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x130], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x138], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x140], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x148], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [esi + 0x150], 0
mov dword [esi + method.CBitmap.virtual_0], vtable.CBitmap.0
lea ecx, [esi + 0x158]
call dword [0x4c5d94]
mov dword [esi + 0x598], 0
mov dword [esi + 0x59c], 0
mov dword [esi + 0x5a0], 0
mov dword [esi + 0x5a4], 0
mov dword [esi + 0x5a8], 0
mov dword [esi + 0x5ac], 0
lea ecx, [esi + 0x5e4]
mov dword [esi + 0x5bc], 1
mov dword [esi + 0x5c0], 0
mov dword [esi + 0x5c8], 0
mov dword [esi + 0x5d0], 0
mov dword [esi + 0x5d4], 0
call dword [0x4c5d94]
lea ecx, [esi + 0x5e8]
call dword [0x4c5d94]
lea ecx, [esi + 0x5ec]
call dword [0x4c5d94]
lea ecx, [esi + 0x5f0]
call dword [0x4c5d94]
mov dword [esi + 0x5f4], 0
mov dword [esi + 0x5f8], 0
mov dword [esi + 0x5fc], 0
push 0x4cca18
push reloc.SHELL32.dll_SHChangeNotifyRegister
mov byte [ebp - 4], 0x17
xor edi, edi
mov dword [esi + 0x620], 0
call fcn.004a7eca
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x461436
lea eax, [ebp - 0x224]
mov dword [ebp - 0x224], edi
push eax
push str.Customized
push ebx
call fcn.004a7ed6
add esp, 0xc
test al, al
je 0x4613da
cmp dword [ebp - 0x224], edi
je 0x4613da
mov edi, 1
jmp 0x4613dc
xor edi, edi
push 0
lea eax, [ebp - 0x220]
push eax
push str.CustomizedSerial
push ebx
call fcn.004a7edc
add esp, 0x10
test al, al
je 0x46142d
cmp dword [ebp - 0x224], 0
je 0x46141d
push str.TRIAL
push dword [ebp - 0x220]
call dword [0x4c5ae4]
add esp, 8
test eax, eax
jne 0x46141d
lea edi, [eax + 1]
jmp 0x46141f
xor edi, edi
push dword [ebp - 0x220]
call fcn.004a7efa
add esp, 4
push ebx
call fcn.004a7ed0
add esp, 4
push 0
lea ecx, [esi + 0x640]
mov dword [esi + 0x624], edi
mov dword [esi + 0x628], 0
mov dword [esi + 0x62c], 0
mov dword [esi + 0x634], 0
mov dword [esi + 0x638], 0
mov dword [esi + 0x63c], 0
call fcn.004856a0
push 0
lea ecx, [esi + 0x800]
mov byte [ebp - 4], 0x18
mov dword [esi + 0x7f8], 0
call fcn.00453190
push 0
lea ecx, [esi + 0xc78]
mov byte [ebp - 4], 0x19
call fcn.00497cf0
mov byte [ebp - 4], 0x1a
call fcn.004b32f4
push 0xa7
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [esi + 0xb8], eax
call fcn.004a8274
test eax, eax
je 0x4614d5
push 0x20000005
jmp 0x4614da
push 0x20000020
call fcn.004ae6e6
add esp, 4
mov dword [esi + 0xbc], eax
lea eax, [ebp - 0x220]
push eax
call fcn.0045b1f0
add esp, 4
push eax
lea ecx, [esi + 0x158]
mov byte [ebp - 4], 0x1b
call dword [0x4c5f78]
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1a
call dword [0x4c5d9c]
call fcn.004a7fd8
test eax, eax
je 0x461561
push 0x7f06
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
push 4
mov dword [esi + 0xc0], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 0x10
push 0x10
push dword [esi + 0xc0]
call fcn.004a827a
add esp, 0x10
mov dword [esi + 0xc4], eax
lea ecx, [esi + 0xc8]
push eax
call fcn.004b3300
call fcn.004a81cc
mov dword [esi + 0x5b0], eax
call fcn.004a81d8
mov dword [esi + 0x5b4], eax
mov dword [esi + 0xdc], 0
call fcn.004a81c6
push 0
push 0
push 0
push 0
mov dword [esi + 0xd8], eax
mov dword [esi + 0xd0], 0
mov dword [esi + 0xe0], 0
mov dword [esi + 0x154], 0
mov dword [esi + 0x160], 0
mov dword [esi + 0x15c], 0
mov dword [esi + 0x5b8], 0
mov dword [esi + 0x604], 0
mov dword [esi + 0x60c], 0
mov dword [esi + 0x614], 0
mov dword [esi + 0x5d8], 0
mov dword [esi + 0x5dc], 0
mov dword [esi + 0x5e0], 0
mov dword [esi + 0x618], 0
mov dword [esi + 0x61c], 0
mov dword [esi + 0x5cc], 0
mov dword [esi + 0x630], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [esi + 0x600], eax
lea eax, [ebp - 0x24c]
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push 0
push 0
push 1
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
push str.Global_IPSEC_PROCESS_EXIT_77DA0D01_E524_4446_A811_6D81300C274C
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x234], 0xc
push 0
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x234]
push 1
push eax
mov dword [ebp - 0x22c], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
mov dword [esi + 0x610], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [esi + 0x608], eax
test eax, eax
jne 0x4616df
test byte [0x50f810], 8
je 0x4616df
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateMutext_m_hSslConnectionMutex_failed._error_d
push str.__error
push 0x222
push 0
push 0
call fcn.00421090
add esp, 0x18
call fcn.0049c980
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
test eax, eax
je 0x461745
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004b493e
push str..pipeFC_886C0338_4742_41e3_B721_9BAB02678391
lea eax, [ebp - 0x21c]
push 0x4d86e4
push eax
call fcn.00406420
push 0
push 0
push dword [ebp - 0x228]
lea eax, [ebp - 0x21c]
push 0
push 0x80d1
push eax
call fcn.004a8142
add esp, 0x30
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ae9c0
mov esp, ebp
pop ebp
ret 4