Function at 0x4456b0
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47e188
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x138
mov eax, dword [0x4b41e0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x104], eax
mov esi, dword [ebx + 8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 4], 0
lea edi, [eax + 0x138]
movaps xmm0, xmmword [0x4aa050]
push ecx
push dword [eax + 0x58]
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x5c], 0xd
push dword [eax + 0x84]
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x58], 0
push dword [eax + 0x4c]
mov dword [ebp - 0x100], edi
push edi
call fcn.0041b290
mov eax, dword [ebp - 0x104]
mov dword [ebp - 4], 1
mov eax, dword [eax + 0x88]
test eax, eax
jne 0x44576f
mov eax, dword [edi + 0x230]
jmp 0x44579a
cmp eax, 0xffffffff
jne 0x445777
mov eax, dword [edi + 0x40]
mov edx, dword [edi + 0x3c]
test edx, edx
je 0x445798
cmp eax, 1
jl 0x445798
cmp eax, dword [edi + 0x40]
jg 0x445798
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x445798
mov eax, dword [edx + eax*8 + 4]
jmp 0x44579a
xor eax, eax
push 0
push 0
push 0x1004
mov dword [ebp - 0x110], eax
push eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x118], eax
call eax
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x114], eax
cmp dword [edx + 0x99c], esi
ja 0x4457d4
lea ecx, [esi + 1]
mov dword [edx + 0x99c], ecx
lea esi, [esi + esi*2]
shl esi, 5
add esi, dword [edx + 0x9a4]
mov eax, dword [esi + 0x54]
test eax, eax
je 0x447028
cmp word [eax], 0
je 0x447028
mov ecx, dword [edx + 0x88]
cmp ecx, 0xffffffff
jne 0x445805
mov ecx, dword [edi + 0x40]
jmp 0x445820
mov edx, dword [edi + 0x3c]
test edx, edx
je 0x445840
cmp ecx, 1
jl 0x445840
cmp ecx, dword [edi + 0x40]
jg 0x445840
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x445840
mov edx, 0x3c
lea ecx, [ecx + ecx*8]
mov eax, edi
push 4
push 4
push 0x1036
mov eax, dword [eax + edx]
push dword [eax + ecx*8 + 4]
call dword [ebp - 0x118]
cmp dword [esi + 0x54], 0
lea eax, [esi + 0x5c]
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0
movq qword [ebp - 0x140], xmm0
mov dword [ebp - 0x40], eax
jne 0x445883
push 2
call fcn.0046a22b
mov dword [esi + 0x54], eax
add esp, 4
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x40]
mov dword [esi + 0x58], ecx
mov ecx, dword [esi + 0x54]
mov esi, ecx
mov dword [ebp - 0x28], esi
jmp 0x44588b
mov ecx, dword [esi + 0x54]
mov esi, ecx
mov dword [ebp - 0x28], ecx
mov dl, 1
mov dword [ebp - 0x18], ecx
mov byte [eax], dl
mov edi, str.Monitoring_
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + str.HKCUSoftwareClearDiskInfo], 0
jne 0x4458a0
xor edx, edx
nop
inc edx
cmp word [edx*2 + str.Monitoring_], 0
jne 0x4458b0
add edx, eax
test ecx, ecx
jne 0x4458ca
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], esi
jmp 0x4458e1
xor eax, eax
cmp word [ecx], ax
je 0x4458df
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], esi
inc eax
cmp word [ecx + eax*2], 0
jne 0x4458d7
add edx, eax
mov dword [ebp - 0x2c], edx
lea eax, [edx + 1]
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov esi, str.HKCUSoftwareClearDiskInfo
mov dword [ebp - 0x12c], eax
add esp, 4
mov ecx, eax
mov edx, 0x48
sub esi, eax
mov word [ecx], dx
add ecx, 2
movzx eax, word [esi + ecx]
mov edx, eax
test ax, ax
jne 0x445914
mov esi, dword [ebp - 0x28]
mov eax, 0x5c
nop dword [eax]
mov word [ecx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add ecx, 2
test ax, ax
jne 0x445930
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x445963
movzx eax, word [eax]
mov edx, eax
test ax, ax
je 0x445963
mov word [ecx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add ecx, 2
test ax, ax
jne 0x445952
xor eax, eax
mov word [ecx], ax
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x1c], 1
movq qword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x34], 1
mov byte [ebp - 4], 5
mov edx, 0xf003f
push ecx
mov byte [ebp - 0x138], 1
call fcn.00405480
mov esi, eax
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 6
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test esi, esi
je 0x445c0a
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
cmp dword [ebp - 0x2c], 1
jbe 0x445c0a
xor eax, eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x114], eax
jle 0x445c21
nop dword [eax]
mov ecx, dword [ebp - 0x100]
push 1
push eax
mov eax, dword [ebp - 0x104]
push dword [eax + 0x88]
call fcn.00419c90
mov edi, eax
mov eax, dword [ebp - 0x24]
test edi, edi
jne 0x445a7e
test eax, eax
je 0x445a60
push eax
call fcn.00469e73
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a22b
mov edi, eax
add esp, 4
xor eax, eax
mov word [edi], ax
jmp 0x445a92
test eax, eax
je 0x445a8b
push eax
call fcn.00469e73
add esp, 4
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], edi
test edi, edi
je 0x445be9
cmp word [edi], 0
je 0x445be9
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 0x1c], 1
test eax, eax
je 0x445abf
push eax
call fcn.00469e73
add esp, 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x3c], 0
push eax
push 0
lea eax, [ebp - 0x30]
mov dword [ebp - 0x38], 0
push eax
push 0
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push esi
mov byte [ebp - 0x34], 1
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x18], 0
call edi
test eax, eax
jne 0x445bef
mov eax, dword [ebp - 0x30]
cmp eax, 1
je 0x445b13
cmp eax, 2
je 0x445b13
cmp eax, 7
jne 0x445bef
mov edi, dword [ebp - 0x18]
xor ecx, ecx
add edi, 4
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x18], edi
mov edx, 2
shr edi, 1
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x3c], eax
xor ecx, ecx
mov byte [ebp - 0x34], 1
mov word [eax + edi*2], cx
mov word [eax], cx
mov dword [eax + edi*2 - 4], ecx
lea ecx, [ebp - 0x18]
push ecx
push eax
push 0
push 0
push dword [ebp - 0x24]
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x445be9
cmp dword [ebp - 0x30], 7
mov ecx, dword [ebp - 0x3c]
jne 0x445ba1
cmp edi, 3
jbe 0x445ba1
mov byte [ebp - 0x34], 1
add edi, 0xffffffff
je 0x445ba1
lea esi, [eax + 0xa]
xor edx, edx
cmp dx, word [ecx + eax*2]
jne 0x445b99
cmp word [ecx + eax*2 + 2], dx
je 0x445b99
mov word [ecx + eax*2], si
inc eax
cmp eax, edi
jb 0x445b86
mov esi, dword [ebp - 0x28]
xor eax, eax
cmp word [ecx], ax
je 0x445bb0
inc eax
cmp word [ecx + eax*2], 0
jne 0x445ba8
mov dword [ebp - 0x38], eax
test eax, eax
je 0x445be9
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xa0], 0xf000
push eax
push dword [ebp - 0x11c]
mov dword [ebp - 0xa4], 0x2000
push 0x102b
push dword [ebp - 0x110]
call dword [ebp - 0x118]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp eax, dword [ebp - 0x114]
jl 0x445a30
jmp 0x445c21
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x104]
push dword [ebp - 0x110]
call fcn.00447090
mov dword [ebp - 0x44], 0
test esi, esi
je 0x445c50
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], 0
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x40], 4
push eax
lea eax, [ebp - 0x48]
push eax
push 0
push str.Status
push esi
call edi
mov edi, dword [ebp - 0x100]
lea eax, [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0x104]
mov ecx, edi
push dword [eax + 0x84]
call fcn.00418bd0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push 0x40
push dword [eax + 0x30]
call fcn.00417b80
mov eax, dword [ebp - 0x104]
push ecx
push 0
push dword [ebp - 0xb4]
mov dword [edi + 0x1f0], 0x430
mov ecx, edi
push dword [ebp - 0xb8]
mov dword [eax + 0x360], 0xfffefc
push 0x55
push 2
mov dword [eax + 0x35c], 0x301020
call fcn.00415cc0
movsd xmm0, qword [0x4a9c50]
mov dword [edi + 0x1f0], 0x400
mov dword [ebp - 0x40], eax
xor eax, eax
movsd qword [edi + 0x170], xmm0
mov dword [edi + 0x178], 0x384
mov byte [edi + 0x17c], 1
mov byte [edi + 0x1be], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445d00
inc eax
lea ecx, [edi + 0x17e]
push eax
push str.Arial
push 0x20
push ecx
call fcn.0046d113
add esp, 0x10
mov ecx, edi
call fcn.0041a8f0
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
jne 0x445d3e
mov dword [ebp - 0x2c], 0
jmp 0x445db7
mov ecx, dword [ebp - 0x100]
mov edx, 0x50000101
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov eax, 0x50020101
push 0x16
push 0x133
push 0xa
push 0xa
cmove eax, edx
push eax
push str.Disk_Monitoring_Setup
push 0x49f194
push 0
call edi
test eax, eax
jne 0x445d8e
mov dword [ebp - 0x2c], eax
jmp 0x445db7
mov ecx, dword [ebp - 0x100]
push eax
push 0xd
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9f10]
mov dword [ebp - 0x2c], eax
lea edx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x3c]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x100]
xor eax, eax
movsd xmm0, qword [0x4a9c28]
movsd qword [ecx + 0x170], xmm0
mov dword [ecx + 0x178], 0x190
mov byte [ecx + 0x17c], 1
mov byte [ecx + 0x1be], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445df0
inc eax
push eax
push str.Arial
lea eax, [ecx + 0x17e]
push 0x20
push eax
call fcn.0046d113
mov ecx, dword [ebp - 0x100]
add esp, 0x10
call fcn.0041a8f0
mov edx, 0x50000100
test al, al
je 0x445e94
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov eax, 0x50020100
push 0x50
push 0x133
push 0x2d
push 0xa
cmove eax, edx
push eax
push str.Select__in_the_list_to_the_right__the_attributes_you_want_to_monitor._Whenever_the_values_of_those_attributes_change__you_will_be_notified._Click_the_preset_links_below_to_help_with_the_selection.
push 0x49f194
push 0
call edi
test eax, eax
je 0x445e94
mov ecx, dword [ebp - 0x100]
push eax
push 0xd
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9fe0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x100]
xor eax, eax
movsd xmm0, qword [0x4a9c40]
movsd qword [ecx + 0x170], xmm0
mov dword [ecx + 0x178], 0x384
mov byte [ecx + 0x17c], 1
mov byte [ecx + 0x1be], 0
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445ec4
inc eax
push eax
push str.Arial
lea eax, [ecx + 0x17e]
push 0x20
push eax
call fcn.0046d113
mov ecx, dword [ebp - 0x100]
add esp, 0x10
call fcn.0041a8f0
test al, al
je 0x445f69
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov ecx, 0x50000100
mov eax, 0x50020100
push 0x14
push 0xc8
push 0x82
push 0x14
cmove eax, ecx
push eax
push str.Presets:
push 0x49f194
push 0
call edi
mov edi, dword [ebp - 0x100]
test eax, eax
je 0x445f6f
push eax
push 0xd
mov ecx, edi
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e70]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x445f6f
mov edi, dword [ebp - 0x100]
movsd xmm0, qword [0x4a9c30]
xor eax, eax
movsd qword [edi + 0x170], xmm0
mov dword [edi + 0x178], 0x190
mov byte [edi + 0x17c], 1
mov byte [edi + 0x1be], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445fa0
inc eax
push eax
push str.Arial
lea eax, [edi + 0x17e]
push 0x20
push eax
call fcn.0046d113
add esp, 0x10
mov ecx, edi
call fcn.0041a8f0
mov edi, 0x50030000
mov edx, 0x50010000
test al, al
jne 0x445fee
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x124], 0
jmp 0x446072
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov eax, edi
push 0x12
push 0x133
push 0xa0
push 0xa
cmove eax, edx
push eax
push str._a_Tick_recommended_attributes__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x446046
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x100]
jmp 0x446072
mov ecx, dword [ebp - 0x100]
push eax
push 0x1f
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e20]
mov dword [ebp - 0x124], eax
lea edx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x3c]
movups xmmword [ecx + edx*8 + 0x24], xmm0
push ecx
push dword [ebp - 0x124]
mov ecx, eax
call fcn.00416a80
mov ecx, dword [ebp - 0x100]
call fcn.0041a8f0
test al, al
jne 0x4460a4
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x128], 0
jmp 0x44612d
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov ecx, 0x50010000
mov eax, edi
push 0x12
push 0x133
push 0xbe
push 0xa
cmove eax, ecx
push eax
push str._a_Tick_all_critical_attributes__a_
push str.SysLink
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x446101
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x100]
jmp 0x44612d
mov ecx, dword [ebp - 0x100]
push eax
push 0x1f
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e30]
mov dword [ebp - 0x128], eax
lea edx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x3c]
movups xmmword [ecx + edx*8 + 0x24], xmm0
push ecx
push dword [ebp - 0x128]
mov ecx, eax
call fcn.00416a80
mov ecx, dword [ebp - 0x100]
call fcn.0041a8f0
test al, al
jne 0x446165
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x11c], 0
jmp 0x4461ee
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov eax, 0x50010000
push 0x12
push 0x133
push 0xdc
push 0xa
cmove edi, eax
push edi
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
push str._a_Untick_all_attributes__a_
push str.SysLink
push 0
call edi
test eax, eax
jne 0x4461c2
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x100]
jmp 0x4461ee
mov ecx, dword [ebp - 0x100]
push eax
push 0x1f
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e40]
mov dword [ebp - 0x11c], eax
lea edx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x3c]
movups xmmword [ecx + edx*8 + 0x24], xmm0
push ecx
push dword [ebp - 0x11c]
mov ecx, eax
call fcn.00416a80
mov ecx, dword [ebp - 0x100]
xor eax, eax
movsd xmm0, qword [0x4a9c40]
movsd qword [ecx + 0x170], xmm0
mov dword [ecx + 0x178], 0x384
mov byte [ecx + 0x17c], 1
mov byte [ecx + 0x1be], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x446230
inc eax
push eax
push str.Arial
lea eax, [ecx + 0x17e]
push 0x20
push eax
call fcn.0046d113
mov ecx, dword [ebp - 0x100]
add esp, 0x10
call fcn.0041a8f0
test al, al
je 0x4462d5
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov ecx, 0x50000100
mov eax, 0x50020100
push 0x14
push 0xc8
push 0x104
push 0x14
cmove eax, ecx
push eax
push str.Notification_mode:
push 0x49f194
push 0
call edi
mov edi, dword [ebp - 0x100]
test eax, eax
je 0x4462db
push eax
push 0xd
mov ecx, edi
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e80]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x4462db
mov edi, dword [ebp - 0x100]
movsd xmm0, qword [0x4a9c30]
xor eax, eax
movsd qword [edi + 0x170], xmm0
mov dword [edi + 0x178], 0x190
mov byte [edi + 0x17c], 1
mov byte [edi + 0x1be], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x446310
inc eax
push eax
push str.Arial
lea eax, [edi + 0x17e]
push 0x20
push eax
call fcn.0046d113
push 0x122
push ecx
push str.Strict___Notify_even_minor_changes
mov ecx, edi
call fcn.00415c20
sub esp, 8
mov dword [ebp - 0x134], eax
mov ecx, edi
push str.Notify_all_changes_to_the_selected_attributes__even_minor_ones
push 0xffffffffffffffff
call fcn.00418970
sub esp, 0x10
push 0x140
push ecx
push str.Passive___Notify_only_major_changes
mov ecx, edi
call fcn.00415c20
mov ecx, dword [ebp - 0x100]
sub esp, 8
mov edi, eax
push str.Notify_only_important_changes_to_the_selected_attributes__skip_the_minor_ones
push 0xffffffffffffffff
call fcn.00418970
cmp dword [ebp - 0x44], 1
mov ecx, dword [ebp - 0x100]
cmove edi, dword [ebp - 0x134]
push 4
push edi
call fcn.00417b80
mov ecx, dword [ebp - 0x100]
xor eax, eax
movsd xmm0, qword [0x4a9c40]
movsd qword [ecx + 0x170], xmm0
mov dword [ecx + 0x178], 0x384
mov byte [ecx + 0x17c], 1
mov byte [ecx + 0x1be], 0
nop
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x4463d0
inc eax
lea edi, [ecx + 0x17e]
push eax
push str.Arial
push 0x20
push edi
call fcn.0046d113
mov ecx, dword [ebp - 0x100]
add esp, 0x10
call fcn.0041a8f0
test al, al
je 0x44647b
mov ecx, dword [ebp - 0x100]
push 0
push dword [ecx + 0x11c]
mov eax, dword [ecx + 0x40]
inc eax
cmp byte [ecx + 0x248], 0
push eax
push dword [ecx + 0x234]
mov ecx, 0x50000100
mov eax, 0x50020100
push 0x14
push 0xc8
push 0x168
push 0x14
cmove eax, ecx
push eax
push str.Monitoring_Setup:
push 0x49f194
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x44647b
mov ecx, dword [ebp - 0x100]
push eax
push 0xd
call fcn.0041a6e0
movaps xmm0, xmmword [0x4a9e90]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax + 0x3c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x100]
movsd xmm0, qword [0x4a9c30]
movsd qword [eax + 0x170], xmm0
mov dword [eax + 0x178], 0x190
mov byte [eax + 0x17c], 1
mov byte [eax + 0x1be], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x4464b0
inc eax
push eax
push str.Arial
push 0x20
push edi
call fcn.0046d113
mov edi, dword [ebp - 0x100]
add esp, 4
mov ecx, edi
push 0x133
push 0x186
push 0xa
push str.Set_monitoring_options_after_applying
call fcn.004141c0
sub esp, 8
mov dword [ebp - 0x144], eax
mov ecx, edi
push str.Go_to_Monitoring_Setup_after_Saving_and_applying
push 0xffffffffffffffff
call fcn.00418970
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movq qword [ebp - 0x54], xmm0
call fcn.00426850
push 0
push 1
push 1
push 0
push ecx
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x4c], 1
lea ecx, [ecx + 0x96c]
call fcn.004017a0
push eax
lea ecx, [ebp - 0x54]
call fcn.00402320
test eax, eax
mov eax, dword [ebp - 0x54]
setg byte [ebp - 0x11d]
test eax, eax
je 0x44655a
push eax
call fcn.00469e73
add esp, 4
cmp byte [ebp - 0x11d], 0
jne 0x44656e
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.00417b80
push ecx
push 0xffffffffffffffff
push 0x1c
push 0x85
push 0x1ae
push 0x14
push str.Cancel
mov ecx, edi
call fcn.004140f0
push ecx
mov ecx, dword [ebp - 0xb8]
push 0xffffffffffffffff
push 0x1c
push 0x85
push 0x1ae
add ecx, 0xffffff67
mov dword [ebp - 0x130], eax
push ecx
push str.Save_and_apply
mov ecx, edi
call fcn.004140f0
push eax
mov ecx, edi
mov dword [ebp - 0x48], eax
call fcn.00410470
push 2
push dword [ebp - 0x40]
mov ecx, edi
mov dword [ebp - 0x30], 0xffffffff
call fcn.00417b80
mov ecx, dword [ebp - 0x104]
push 0
call fcn.0043fc50
test eax, eax
je 0x446bb7
nop dword [eax]
mov ecx, dword [ebp - 0x104]
mov eax, dword [ecx + 0xc0]
cmp eax, 0xfffffffa
je 0x446bb0
cmp dword [ecx + 0xf0], edi
jne 0x446b91
cmp eax, dword [ebp - 0x130]
je 0x446bb7
cmp eax, dword [ebp - 0x124]
jne 0x446b14
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x114], eax
jle 0x446b91
mov esi, dword [ebp - 0x24]
nop dword [eax]
push eax
push dword [ecx + 0x88]
mov ecx, edi
call fcn.00419b70
cmp eax, 1
je 0x446ae0
cmp eax, 3
je 0x446ae0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push 0
push dword [ebp - 0x18]
push dword [eax + 0x88]
call fcn.00419c90
mov edi, eax
test edi, edi
jne 0x4466a9
test esi, esi
je 0x44668b
push esi
call fcn.00469e73
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a22b
mov esi, eax
add esp, 4
xor eax, eax
mov word [esi], ax
jmp 0x4466bf
test esi, esi
je 0x4466b6
push esi
call fcn.00469e73
add esp, 4
mov esi, edi
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], esi
cmp esi, str.2.11
je 0x4466f5
test esi, esi
je 0x4467a4
mov edi, str.2.11
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x44674b
cmp word [edi], ax
jne 0x446750
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xa0], 0xf000
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0xa4], 0x2000
push 0x102b
push dword [ebp - 0x110]
call dword [ebp - 0x118]
mov edi, dword [ebp - 0x100]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, dword [ebp - 0x114]
jl 0x446640
mov esi, dword [ebp - 0x28]
jmp 0x446b91
cmp ax, word [edi]
je 0x446796
xor edx, edx
cmp dx, ax
jne 0x44675f
mov dword [ebp - 0x108], edx
jmp 0x446771
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x446781
xor eax, eax
jmp 0x44678d
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x4467a4
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x4466e5
cmp esi, 0x4a6a70
je 0x4466f5
test esi, esi
je 0x44682f
mov edi, 0x4a6a70
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x4467d9
cmp word [edi], ax
je 0x4466f5
jmp 0x4467de
cmp ax, word [edi]
je 0x446824
xor edx, edx
cmp dx, ax
jne 0x4467ed
mov dword [ebp - 0x108], edx
jmp 0x4467ff
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44680f
xor eax, eax
jmp 0x44681b
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x44682f
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x4467c3
cmp esi, 0x4a6a78
je 0x4466f5
test esi, esi
je 0x4468be
mov edi, 0x4a6a78
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446868
cmp word [edi], ax
je 0x4466f5
jmp 0x44686d
cmp ax, word [edi]
je 0x4468b3
xor edx, edx
cmp dx, ax
jne 0x44687c
mov dword [ebp - 0x108], edx
jmp 0x44688e
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44689e
xor eax, eax
jmp 0x4468aa
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x4468be
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x446852
cmp esi, 0x4a6a80
je 0x4466f5
test esi, esi
je 0x44694d
mov edi, 0x4a6a80
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x4468f7
cmp word [edi], ax
je 0x4466f5
jmp 0x4468fc
cmp ax, word [edi]
je 0x446942
xor edx, edx
cmp dx, ax
jne 0x44690b
mov dword [ebp - 0x108], edx
jmp 0x44691d
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44692d
xor eax, eax
jmp 0x446939
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x44694d
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x4468e1
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x100]
push 1
push dword [ebp - 0x18]
push dword [eax + 0x88]
call fcn.00419c90
mov edi, eax
test edi, edi
jne 0x44699a
test esi, esi
je 0x44697c
push esi
call fcn.00469e73
add esp, 4
push 2
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a22b
mov esi, eax
add esp, 4
xor eax, eax
mov word [esi], ax
jmp 0x4469b0
test esi, esi
je 0x4469a7
push esi
call fcn.00469e73
add esp, 4
mov esi, edi
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
mov dword [ebp - 0x24], esi
cmp esi, str.Temperature
je 0x4466f5
test esi, esi
je 0x446a4c
mov edi, str.Temperature
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
nop word [eax + eax]
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x4469f6
cmp word [edi], ax
je 0x4466f5
jmp 0x4469fb
cmp ax, word [edi]
je 0x446a41
xor edx, edx
cmp dx, ax
jne 0x446a0a
mov dword [ebp - 0x108], edx
jmp 0x446a1c
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x446a2c
xor eax, eax
jmp 0x446a38
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x446a4c
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x4469e0
cmp esi, str.Failure_predicted
je 0x4466f5
test esi, esi
je 0x446724
mov edi, str.Failure_predicted
mov eax, esi
sub eax, edi
mov dword [ebp - 0x10c], eax
nop
movzx eax, word [eax + edi]
mov ecx, eax
test ax, ax
jne 0x446a86
cmp word [edi], ax
je 0x4466f5
jmp 0x446a8b
cmp ax, word [edi]
je 0x446ad5
xor edx, edx
cmp dx, ax
jne 0x446a9a
mov dword [ebp - 0x108], edx
jmp 0x446aac
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0x108], eax
movzx eax, word [edi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x446abc
xor eax, eax
jmp 0x446ac8
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0x108], ax
jne 0x446724
mov eax, dword [ebp - 0x10c]
add edi, 2
jmp 0x446a70
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xa0], 0xf000
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0xa4], 0x2000
push 0x102b
push dword [ebp - 0x110]
call dword [ebp - 0x118]
jmp 0x44672a
cmp eax, dword [ebp - 0x128]
jne 0x446b35
push dword [ebp - 0x114]
push dword [ebp - 0x110]
call fcn.00447090
mov ecx, dword [ebp - 0x104]
jmp 0x446b91
cmp eax, dword [ebp - 0x11c]
jne 0x446b8c
xor edi, edi
cmp dword [ebp - 0x114], edi
jle 0x446b91
mov esi, dword [ebp - 0x110]
nop dword [eax]
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xa0], 0xf000
push eax
push edi
push 0x102b
push esi
mov dword [ebp - 0xa4], 0x1000
call dword [ebp - 0x118]
inc edi
cmp edi, dword [ebp - 0x114]
jl 0x446b50
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x104]
jmp 0x446b91
cmp eax, dword [ebp - 0x48]
je 0x446ba7
push 0
call fcn.0043fc50
test eax, eax
je 0x446bb7
mov edi, dword [ebp - 0x100]
jmp 0x4465f0
mov dword [ebp - 0x30], 1
jmp 0x446bb7
mov dword [ebp - 0x30], 0xfffffffe
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 0x138], 1
test esi, esi
je 0x446bd2
push esi
call edi
mov dword [ebp - 0x28], 0
push ecx
mov ecx, dword [ebp - 0x12c]
or edx, 0xffffffff
call fcn.00405480
cmp dword [ebp - 0x30], 0
mov esi, eax
mov dword [ebp - 0x28], esi
jg 0x446c07
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x100]
push 8
push dword [eax + 0x30]
call fcn.00417b80
jmp 0x446dda
mov byte [ebp - 0x138], 1
test esi, esi
je 0x446c1c
push esi
call edi
mov dword [ebp - 0x28], 0
push ecx
mov ecx, dword [ebp - 0x12c]
or edx, 0xffffffff
call fcn.00405480
cmp dword [ebp - 0x114], 0
mov esi, eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x18], 0
jle 0x446da7
nop word [eax + eax]
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x100]
mov eax, dword [eax + 0x88]
lea edi, [ecx + 0x40]
cmp eax, 0xffffffff
jne 0x446c6c
mov eax, dword [edi]
mov ecx, dword [ecx + 0x3c]
test ecx, ecx
je 0x446d30
cmp eax, 1
jl 0x446d30
cmp eax, dword [edi]
jg 0x446d30
lea eax, [eax + eax*8]
shl eax, 3
mov dword [ebp - 0x10c], eax
cmp dword [ecx + eax + 0xc], 0
je 0x446d30
cmp dword [ecx + eax], 0xf
jne 0x446d30
push 0x2000
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0xe8], eax
xor ecx, ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0xf4], 1
mov word [eax], cx
mov word [eax + 0x1ffe], cx
lea eax, [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x100]
push dword [ebp - 0x18]
mov dword [ebp - 0xe4], 0x1000
push 0x1073
mov eax, dword [eax + 0x3c]
push dword [eax + ecx + 4]
call dword [ebp - 0x118]
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x446d1a
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x1c], 1
jmp 0x446d3a
push 0
lea ecx, [ebp - 0x24]
call fcn.00401a20
push 0xf000
push dword [ebp - 0x18]
push 0x102c
push dword [ebp - 0x110]
call dword [ebp - 0x118]
shr eax, 0xd
test al, 1
jne 0x446e48
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x446d7a
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x24], eax
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov word [eax], cx
mov byte [ebp - 0x1c], 1
test esi, esi
je 0x446d8e
test eax, eax
je 0x446d8e
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x446c50
mov ecx, dword [ebp - 0x100]
push 4
push dword [ebp - 0x134]
call fcn.00418ca0
neg eax
sbb eax, eax
add eax, 2
mov dword [ebp - 0x44], eax
test esi, esi
je 0x446dda
push 4
lea eax, [ebp - 0x44]
push eax
push 4
push 0
push str.Status
push esi
call edi
mov ecx, dword [ebp - 0x100]
push 4
push dword [ebp - 0x144]
call fcn.00418ca0
push ecx
push dword [ebp - 0x48]
mov ecx, dword [ebp - 0x100]
mov edi, eax
push dword [ebp - 0x2c]
call fcn.00416a10
push dword [ebp - 0x40]
mov ecx, dword [ebp - 0x100]
call fcn.00415f90
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x100]
push 0x20
push dword [eax + 0x30]
call fcn.00417b80
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 0x88]
mov eax, dword [ebp - 0x100]
cmp ecx, 0xffffffff
jne 0x446f87
mov ecx, dword [eax + 0x40]
jmp 0x446fae
mov eax, dword [ebp - 0x104]
mov eax, dword [eax + 0x88]
cmp eax, 0xffffffff
jne 0x446e5b
mov eax, dword [edi]
mov ecx, dword [ebp - 0x100]
mov ecx, dword [ecx + 0x3c]
test ecx, ecx
je 0x446f16
cmp eax, 1
jl 0x446f16
cmp eax, dword [edi]
jg 0x446f16
lea edi, [eax + eax*8]
cmp dword [ecx + edi*8 + 0xc], 0
je 0x446f16
cmp dword [ecx + edi*8], 0xf
jne 0x446f16
push 0x2000
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x9c], eax
xor ecx, ecx
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xa8], 2
mov word [eax], cx
mov word [eax + 0x1ffe], cx
lea eax, [ebp - 0xb0]
push eax
mov eax, dword [ebp - 0x100]
push dword [ebp - 0x18]
mov dword [ebp - 0x98], 0x1000
push 0x1073
mov eax, dword [eax + 0x3c]
push dword [eax + edi*8 + 4]
call dword [ebp - 0x118]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x446f00
push eax
call fcn.00469e73
add esp, 4
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x34], 1
jmp 0x446f23
push 0
lea ecx, [ebp - 0x3c]
call fcn.00401a20
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x446d8e
cmp word [ecx], 0
je 0x446d8e
test edx, edx
je 0x446d8e
cmp word [edx], 0
je 0x446d8e
mov byte [ebp - 0x34], 1
mov byte [ebp - 0x1c], 1
test esi, esi
je 0x446d8e
xor eax, eax
nop dword [eax]
cmp word [edx + eax*2 + 2], 0
lea eax, [eax + 1]
jne 0x446f60
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [eax*2 + 2]
push eax
push edx
push 1
push 0
push ecx
push esi
call edi
jmp 0x446d94
mov edx, dword [eax + 0x3c]
test edx, edx
je 0x446fd2
cmp ecx, 1
jl 0x446fd2
cmp ecx, dword [eax + 0x40]
jg 0x446fd2
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x446fd2
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x100], eax
lea edx, [ecx + ecx*8]
mov eax, 0x3c
mov ecx, dword [ebp - 0x100]
push 0
push 4
push 0x1036
mov eax, dword [ecx + eax]
push dword [eax + edx*8 + 4]
call dword [ebp - 0x118]
test edi, edi
je 0x446fe5
mov ecx, dword [ebp - 0x104]
call fcn.0044be70
mov edi, eax
jmp 0x446fe8
mov edi, dword [ebp - 0x30]
test esi, esi
je 0x446ff8
cmp esi, 0xffffffff
je 0x446ff8
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x447008
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x447018
push eax
call fcn.00469e73
add esp, 4
push dword [ebp - 0x12c]
call fcn.00469e73
add esp, 4
jmp 0x44702a
xor edi, edi
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x74]
test ecx, ecx
je 0x447053
test esi, esi
je 0x447060
push dword [ebp - 0x5c]
lea eax, [ebp - 0x74]
push dword [ebp - 0x6c]
push eax
call fcn.0040f3f0
call fcn.004038e0
test esi, esi
je 0x447060
push esi
call fcn.00469e73
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469e65
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8