Function at 0x410458
Capabilities:
Enumerate gui resources

Disassembly:
push 0xc
mov eax, 0x43e868
call fcn.00429c1e
mov dword [edi + 0x58], 1
xor esi, esi
push 0xa8
mov dword [0x45531c], esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
lea eax, [edi + 0x84]
push eax
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
cmp dword [edi + 0x64], esi
je 0x4104a1
call fcn.0041da2d
mov ecx, eax
call fcn.0041d89d
cmp dword [0x455310], esi
jne 0x4104ae
call fcn.00411b6b
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
push esi
push 0x443dec
call ebx
cmp eax, esi
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
je 0x4104cf
push 0
push 0
push 0x10
push eax
call esi
push 0
push str.Q360NetFosClass
call ebx
xor ebx, ebx
cmp eax, ebx
je 0x4104e5
push ebx
push ebx
push 0x10
push eax
call esi
push 0x168
push 0x10
call fcn.0040ac34
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.360Tray_Exit
mov dword [ebp - 0x14], eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push 0x40ae6b
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [edi + 0x950]
cmp eax, ebx
je 0x410529
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
lea ecx, [edi + 0x544]
call fcn.004068fe
mov eax, dword [edi + 0x974]
cmp eax, ebx
je 0x410544
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [edi + 0x54]
cmp eax, ebx
je 0x41057e
mov eax, dword [eax + 0x70]
cmp eax, ebx
je 0x410554
call eax
mov eax, dword [edi + 0x54]
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x410560
call eax
mov esi, dword [edi + 0x54]
cmp esi, ebx
je 0x41057b
mov eax, dword [esi]
cmp eax, ebx
je 0x410574
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push esi
call fcn.00425266
pop ecx
mov dword [edi + 0x54], ebx
call fcn.0041128f
test eax, eax
je 0x4105b8
xor eax, eax
mov ebx, str.UnregWscOld
push ebx
inc eax
call fcn.00415c25
test eax, eax
je 0x4105b1
push str.safemonWscControl.exe
mov esi, str._unregas
call fcn.0040ad36
pop ecx
push 0
push ebx
call fcn.00415e7f
push str.safemonWscReg.exe
jmp 0x4105c6
cmp dword [0x4551f0], 6
jb 0x4105d1
push str.safemonWscControl.exe
mov esi, str._regas:0_1
call fcn.0040ad36
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call fcn.00414d15
mov esi, eax
mov eax, dword [esi + 8]
xor ecx, ecx
lea edx, [edi + 0x28]
test eax, eax
jle 0x4105fa
mov ebx, dword [esi + 4]
cmp dword [ebx], edx
je 0x4105fd
inc ecx
add ebx, 4
cmp ecx, eax
jl 0x4105ee
or ecx, 0xffffffff
cmp ecx, 0xffffffff
je 0x410631
test ecx, ecx
jl 0x410631
cmp ecx, eax
jge 0x410631
lea edx, [eax - 1]
cmp ecx, edx
je 0x41062e
mov edx, dword [esi + 4]
sub eax, ecx
shl eax, 2
lea ecx, [edx + ecx*4]
lea edx, [eax - 4]
push edx
lea edx, [ecx + 4]
push edx
push eax
push ecx
call fcn.004032ba
add esp, 0x10
dec dword [esi + 8]
push 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0x24
call fcn.004254b1
pop ecx
mov dword [ebp - 0x18], eax
and dword [ebp - 4], 0
test eax, eax
je 0x410656
push eax
call fcn.004186b2
mov esi, eax
jmp 0x410658
xor esi, esi
or dword [ebp - 4], 0xffffffff
push dword [edi + 0x7c]
mov ecx, esi
call fcn.004187b5
test esi, esi
je 0x410672
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
call fcn.00429cf6
ret