Function at 0x4b40cc
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4b40d5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071dc
xor eax, eax
push ebp
push 0x4b4e88
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4b4ea8
call fcn.004aff20
lea eax, [ebp - 0xa4]
call fcn.0047f140
mov eax, dword [ebp - 0xa4]
call fcn.0040de38
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4b4e1b
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4b41d7
mov dl, 1
mov eax, dword [0x4ab24c]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4b4590
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b4590
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4b4575
xor eax, eax
push ebp
push 0x4b4522
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b4078
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4b425b
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004ae608
inc eax
jne 0x4b44e3
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4b4272
xor ebx, ebx
jmp 0x4b427c
test esi, 2
je 0x4b427c
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4b429a
mov dword [ebp - 0xa0], 7
jmp 0x4b42be
test esi, 0x10
je 0x4b42ae
mov dword [ebp - 0xa0], 3
jmp 0x4b42be
test esi, 0x40
je 0x4b42be
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4b43d9
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b4f00
call fcn.00406904
mov eax, dword [ebp - 0xa8]
call fcn.004aff20
cmp dword [ebp - 0x24], 0
je 0x4b430c
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b4f3c
call fcn.00406904
mov eax, dword [ebp - 0xac]
call fcn.004aff20
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b4335
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.004aadb0
test al, al
je 0x4b43ca
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b31e0
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004ad0a4
test al, al
jne 0x4b4397
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b4f7c
call fcn.004b01a4
mov byte [ebp - 0x79], 0
jmp 0x4b44d0
cmp bl, 1
jne 0x4b44d0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b4fc0
call fcn.004b01a4
jmp 0x4b44d0
mov eax, 0x4b4ff8
call fcn.004aff20
jmp 0x4b44d0
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b5040
call fcn.00406904
mov eax, dword [ebp - 0xb8]
call fcn.004aff20
cmp dword [ebp - 0x24], 0
je 0x4b441b
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b5088
call fcn.00406904
mov eax, dword [ebp - 0xbc]
call fcn.004aff20
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b4437
mov eax, dword [ebp - 0x28]
call fcn.0047e57c
test al, al
je 0x4b44c6
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4b4445
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b31e0
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.004ad370
test al, al
jne 0x4b449a
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b50d4
call fcn.004b01a4
mov byte [ebp - 0x79], 0
jmp 0x4b44d0
cmp bl, 1
jne 0x4b44d0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b4fc0
call fcn.004b01a4
jmp 0x4b44d0
mov eax, 0x4b5118
call fcn.004aff20
cmp dword [ebp - 0x1c], 0
je 0x4b4518
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004ae510
jmp 0x4b4518
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4b5174
call fcn.004b01a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b454b
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b305c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b4583
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b4216
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b47c5
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4b4777
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4b474e
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b4078
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4b45fa
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b473d
cmp byte [ebp - 0x29], 0
jne 0x4b4606
cmp dword [ebp - 0x24], 0
jne 0x4b460a
xor eax, eax
jmp 0x4b460c
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4b4641
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b38d0
mov byte [ebp - 0x8b], al
jmp 0x4b4648
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4b469a
cmp byte [ebp - 0x8b], 0
je 0x4b4744
cmp byte [ebp - 0x8a], 0
jne 0x4b469a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004aadb0
test al, al
je 0x4b469a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4b469a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4b4744
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4b46ee
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4b46cd
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b39d8
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4b46ee
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b3c68
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4b4727
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b51cc
call fcn.004b01a4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.004ae03c
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4b4744
mov eax, dword [ebp - 0x18]
call fcn.004b3e7c
jmp 0x4b4744
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4777
cmp byte [ebp - 0x89], 0
je 0x4b47aa
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b305c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b47b8
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b45a9
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b4d43
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b4078
pop ecx
xor eax, eax
push ebp
push 0x4b4ce5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4b4864
je 0x4b4aaf
cmp eax, 0x81
jg 0x4b4846
je 0x4b48d7
dec eax
je 0x4b4895
add eax, 0xfffffff1
sub eax, 2
jb case.0x4b4872.140
sub eax, 0xe
je case.0x4b4872.140
sub eax, 0x60
je case.0x4b4872.140
jmp case.default.0x4b4872
sub eax, 0x82
je 0x4b497e
dec eax
je case.0x4b4872.140
dec eax
je 0x4b4a9c
jmp case.default.0x4b4872
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4b4872
jmp dword [eax*4 + 0x4b4879]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b5208
call fcn.00406904
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xb6
call fcn.004a9314
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x40aca8]
call fcn.00411a64
call fcn.00404a74
jmp case.0x4b4872.140
cmp byte [ebp - 0x29], 0
jne 0x4b48ed
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4b4872.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0x4b30dc
push 0x4b30e8
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.004ac090
test al, al
je case.0x4b4872.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4b4872.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4b4872.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0047e16c
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.004ae564
jmp case.0x4b4872.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b4995
cmp dword [ebp - 0x74], 0
jne 0x4b49a0
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b49b2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b4a19
cmp byte [ebp - 0x29], 0
jne 0x4b49c8
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4b4872.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b3370
pop ecx
test al, al
jne case.0x4b4872.140
mov byte [ebp - 0x79], 0
jmp case.0x4b4872.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4b4a3a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b38d0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406bd4
je case.0x4b4872.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b3370
pop ecx
test al, al
jne case.0x4b4872.140
mov byte [ebp - 0x79], 0
jmp case.0x4b4872.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.0047e9b8
jmp case.0x4b4872.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4b4ace
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047e85c
test al, al
je case.0x4b4872.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047ea04
jmp case.0x4b4872.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b2dc4
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f72c
test eax, eax
je case.0x4b4872.140
sub eax, 2
je case.0x4b4872.140
mov byte [ebp - 0x79], 0
jmp case.0x4b4872.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b2dc4
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f66c
test eax, eax
jne case.0x4b4872.140
push 2
push 0x4fe37c
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4b4b8c
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b4872.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b2dc4
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f8b0
test eax, eax
je case.0x4b4872.140
sub eax, 2
je case.0x4b4872.140
sub eax, 0x8f
je case.0x4b4872.140
mov byte [ebp - 0x79], 0
jmp case.0x4b4872.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b2dc4
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f66c
test eax, eax
jne case.0x4b4872.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0047f5ac
test al, al
je 0x4b4c5d
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4b4c5d
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b4872.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b38d0
jmp case.0x4b4872.140
mov byte [ebp - 0x7a], 1
jmp case.0x4b4872.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b5234
call fcn.0040e38c
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xb6
call fcn.004a9314
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x40aca8]
call fcn.00411a64
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4d0e
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b305c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4b47de
cmp byte [ebp - 0x7a], 0
je 0x4b4d59
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4b4d67
call fcn.004ae308
cmp dword [ebp - 0x78], 0
je 0x4b4d77
call dword [ebp - 0x78]
push ebp
call fcn.004b3fe4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b4e25
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4b4dfa
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004ae5ec
mov eax, dword [ebp - 0xe4]
call fcn.0047e568
test al, al
je 0x4b4df6
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004ae5ec
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4b4daa
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret