Function at 0x4b6e60
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4b6e69
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4b7c1e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4b7c3c
call fcn.004b2cb4
lea eax, [ebp - 0xa4]
call fcn.00480e0c
mov eax, dword [ebp - 0xa4]
call fcn.0040eb30
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4b7bb1
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4b6f6b
mov dl, 1
mov eax, dword [0x486154]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4b7324
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b7324
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4b7309
xor eax, eax
push ebp
push 0x4b72b6
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6e0c
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4b6fef
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00489774
inc eax
jne 0x4b7277
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4b7006
xor ebx, ebx
jmp 0x4b7010
test esi, 2
je 0x4b7010
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4b702e
mov dword [ebp - 0xa0], 7
jmp 0x4b7052
test esi, 0x10
je 0x4b7042
mov dword [ebp - 0xa0], 3
jmp 0x4b7052
test esi, 0x40
je 0x4b7052
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4b716d
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b7c94
call fcn.00406914
mov eax, dword [ebp - 0xa8]
call fcn.004b2cb4
cmp dword [ebp - 0x24], 0
je 0x4b70a0
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b7cd0
call fcn.00406914
mov eax, dword [ebp - 0xac]
call fcn.004b2cb4
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b70c9
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.00485cb8
test al, al
je 0x4b715e
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b5f74
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.0048811c
test al, al
jne 0x4b712b
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7d10
call fcn.004b2f38
mov byte [ebp - 0x79], 0
jmp 0x4b7264
cmp bl, 1
jne 0x4b7264
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7d54
call fcn.004b2f38
jmp 0x4b7264
mov eax, 0x4b7d8c
call fcn.004b2cb4
jmp 0x4b7264
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b7dd4
call fcn.00406914
mov eax, dword [ebp - 0xb8]
call fcn.004b2cb4
cmp dword [ebp - 0x24], 0
je 0x4b71af
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b7e1c
call fcn.00406914
mov eax, dword [ebp - 0xbc]
call fcn.004b2cb4
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b71cb
mov eax, dword [ebp - 0x28]
call fcn.00480248
test al, al
je 0x4b725a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4b71d9
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b5f74
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.004883e8
test al, al
jne 0x4b722e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7e68
call fcn.004b2f38
mov byte [ebp - 0x79], 0
jmp 0x4b7264
cmp bl, 1
jne 0x4b7264
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7d54
call fcn.004b2f38
jmp 0x4b7264
mov eax, 0x4b7eac
call fcn.004b2cb4
cmp dword [ebp - 0x1c], 0
je 0x4b72ac
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.0048967c
jmp 0x4b72ac
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4b7f08
call fcn.004b2f38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b72df
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b5df0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b7317
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b6faa
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b7559
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4b750b
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4b74e2
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6e0c
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4b738e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b74d1
cmp byte [ebp - 0x29], 0
jne 0x4b739a
cmp dword [ebp - 0x24], 0
jne 0x4b739e
xor eax, eax
jmp 0x4b73a0
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4b73d5
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b6664
mov byte [ebp - 0x8b], al
jmp 0x4b73dc
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4b742e
cmp byte [ebp - 0x8b], 0
je 0x4b74d8
cmp byte [ebp - 0x8a], 0
jne 0x4b742e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00485cb8
test al, al
je 0x4b742e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4b742e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4b74d8
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4b7482
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4b7461
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b676c
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4b7482
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b69fc
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4b74bb
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7f60
call fcn.004b2f38
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.004890e8
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4b74d8
mov eax, dword [ebp - 0x18]
call fcn.004b6c10
jmp 0x4b74d8
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b750b
cmp byte [ebp - 0x89], 0
je 0x4b753e
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b5df0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b754c
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b733d
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b7ad9
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6e0c
pop ecx
xor eax, eax
push ebp
push 0x4b7a7b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4b75f8
je 0x4b7845
cmp eax, 0x81
jg 0x4b75da
je 0x4b766b
dec eax
je 0x4b7629
add eax, 0xfffffff1
sub eax, 2
jb case.0x4b7606.140
sub eax, 0xe
je case.0x4b7606.140
sub eax, 0x60
je case.0x4b7606.140
jmp case.default.0x4b7606
sub eax, 0x82
je 0x4b7714
dec eax
je case.0x4b7606.140
dec eax
je 0x4b7832
jmp case.default.0x4b7606
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4b7606
jmp dword [eax*4 + 0x4b760d]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b7f9c
call fcn.00406914
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.00483a48
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x40b928]
call fcn.0041275c
call fcn.00404a74
jmp case.0x4b7606.140
cmp byte [ebp - 0x29], 0
jne 0x4b7681
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4b7606.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4b5e70
push 0x4b5e7c
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.004870ec
test al, al
je case.0x4b7606.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4b7606.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4b7606.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0047fe38
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.004896d0
jmp case.0x4b7606.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b772b
cmp dword [ebp - 0x74], 0
jne 0x4b7736
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b7748
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b77af
cmp byte [ebp - 0x29], 0
jne 0x4b775e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4b7606.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b6104
pop ecx
test al, al
jne case.0x4b7606.140
mov byte [ebp - 0x79], 0
jmp case.0x4b7606.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4b77d0
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b6664
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406be4
je case.0x4b7606.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b6104
pop ecx
test al, al
jne case.0x4b7606.140
mov byte [ebp - 0x79], 0
jmp case.0x4b7606.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.00480684
jmp case.0x4b7606.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4b7864
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00480528
test al, al
je case.0x4b7606.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004806d0
jmp case.0x4b7606.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5b58
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.004814ac
test eax, eax
je case.0x4b7606.140
sub eax, 2
je case.0x4b7606.140
mov byte [ebp - 0x79], 0
jmp case.0x4b7606.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5b58
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.004813ec
test eax, eax
jne case.0x4b7606.140
push 2
push 0x508340
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4b7922
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b7606.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5b58
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.00481630
test eax, eax
je case.0x4b7606.140
sub eax, 2
je case.0x4b7606.140
sub eax, 0x8f
je case.0x4b7606.140
mov byte [ebp - 0x79], 0
jmp case.0x4b7606.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5b58
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.004813ec
test eax, eax
jne case.0x4b7606.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0048132c
test al, al
je 0x4b79f3
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4b79f3
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b7606.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b6664
jmp case.0x4b7606.140
mov byte [ebp - 0x7a], 1
jmp case.0x4b7606.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7fc8
call fcn.0040f084
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.00483a48
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x40b928]
call fcn.0041275c
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b7aa4
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b5df0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4b7572
cmp byte [ebp - 0x7a], 0
je 0x4b7aef
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4b7afd
call fcn.004893b4
cmp dword [ebp - 0x78], 0
je 0x4b7b0d
call dword [ebp - 0x78]
push ebp
call fcn.004b6d78
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b7bbb
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4b7b90
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00489758
mov eax, dword [ebp - 0xe4]
call fcn.00480234
test al, al
je 0x4b7b8c
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00489758
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4b7b40
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret