Function at 0x412455
Capabilities:
Enumerate gui resources
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x224
mov eax, dword [0x44d08c]
xor eax, esp
mov dword [esp + 0x220], eax
push ebx
push esi
xor esi, esi
push edi
mov ebx, ecx
cmp dword [ebp + 8], esi
je 0x4124ed
cmp dword [ebx + 0x70], esi
jne 0x412683
xor edi, edi
inc edi
mov dword [ebx + 0x70], edi
mov dword [ebx + 0x74], esi
call fcn.0041269a
cmp eax, 2
je 0x412680
cmp eax, 0x18
jne 0x4124a3
mov dword [ebx + 0x74], edi
push eax
mov ecx, ebx
call fcn.00412760
cmp dword [ebx + 0x74], esi
jne 0x4124ed
push esi
push 0x443dec
call dword [sym.imp.USER32.dll_FindWindowW]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
cmp eax, esi
je 0x4124cd
push esi
push esi
push 0x10
push eax
call edi
push esi
push str.Q360FWMainClass
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x412680
push esi
push esi
push 0x10
push eax
call edi
jmp 0x412680
lea ecx, [ebx + 0x94c]
push esi
call fcn.0041531a
push esi
push esi
push 0xc98
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
push esi
push str.Q360FWMainClass
call edi
cmp eax, esi
je 0x412526
push esi
push esi
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 4
pop eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
push eax
push str.OpenALLProtect
push str.SOFTWARE360Safe_safemon
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x28], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x412561
mov dword [esp + 0x10], esi
cmp dword [esp + 0x10], esi
je 0x41257f
push 1
lea ecx, [ebx + 0x94c]
call fcn.00415d5c
push esi
push str.OpenALLProtect
call fcn.00415e7f
lea eax, [ebx + 0x84]
push eax
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push esi
push str.Q360SafeMainClass
call edi
cmp eax, esi
je 0x4125a9
push esi
push 0x73
push 0x597
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
push 0x206
mov word [esp + 0x24], ax
lea eax, [esp + 0x26]
push esi
push eax
call fcn.004253c0
add esp, 0xc
push 0xc3ba
lea eax, [esp + 0x1c]
push eax
call fcn.00409ada
mov edx, dword [eax]
lea ecx, [esp + 0x20]
push ecx
mov eax, 0x104
call fcn.0040570c
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
call fcn.004054cf
lea edx, [esp + 0x20]
xor ecx, ecx
call fcn.0040f7f0
push 4
lea eax, [esp + 0x14]
push eax
push 4
push str.manexit
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x28], 1
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push esi
push str.Q360NetFosClass
call edi
cmp eax, esi
je 0x412637
push esi
push esi
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push esi
push 0x443dec
call edi
cmp eax, esi
je 0x41264e
push esi
push esi
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x168
push 0x10
call fcn.0040ac34
pop ecx
pop ecx
push str.360hipspopwnd
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0x4123c2
call dword [sym.imp.USER32.dll_EnumWindows]
push esi
push esi
push 0x10
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebx + 0x70], esi
mov ecx, dword [esp + 0x22c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00425271
mov esp, ebp
pop ebp
ret 4