Function at 0x4b636c
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4b6375
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071dc
xor eax, eax
push ebp
push 0x4b712a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4b7148
call fcn.004b21c0
lea eax, [ebp - 0xa4]
call fcn.0047f214
mov eax, dword [ebp - 0xa4]
call fcn.0040dc08
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4b70bd
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4b6477
mov dl, 1
mov eax, dword [0x4ad0a0]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4b6830
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b6830
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4b6815
xor eax, eax
push ebp
push 0x4b67c2
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6318
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4b64fb
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004b068c
inc eax
jne 0x4b6783
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4b6512
xor ebx, ebx
jmp 0x4b651c
test esi, 2
je 0x4b651c
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4b653a
mov dword [ebp - 0xa0], 7
jmp 0x4b655e
test esi, 0x10
je 0x4b654e
mov dword [ebp - 0xa0], 3
jmp 0x4b655e
test esi, 0x40
je 0x4b655e
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4b6679
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b71a0
call fcn.00406904
mov eax, dword [ebp - 0xa8]
call fcn.004b21c0
cmp dword [ebp - 0x24], 0
je 0x4b65ac
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b71dc
call fcn.00406904
mov eax, dword [ebp - 0xac]
call fcn.004b21c0
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b65d5
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.004acc04
test al, al
je 0x4b666a
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b5480
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004af068
test al, al
jne 0x4b6637
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b721c
call fcn.004b2444
mov byte [ebp - 0x79], 0
jmp 0x4b6770
cmp bl, 1
jne 0x4b6770
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7260
call fcn.004b2444
jmp 0x4b6770
mov eax, 0x4b7298
call fcn.004b21c0
jmp 0x4b6770
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b72e0
call fcn.00406904
mov eax, dword [ebp - 0xb8]
call fcn.004b21c0
cmp dword [ebp - 0x24], 0
je 0x4b66bb
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b7328
call fcn.00406904
mov eax, dword [ebp - 0xbc]
call fcn.004b21c0
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b66d7
mov eax, dword [ebp - 0x28]
call fcn.0047e650
test al, al
je 0x4b6766
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4b66e5
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b5480
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.004af334
test al, al
jne 0x4b673a
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7374
call fcn.004b2444
mov byte [ebp - 0x79], 0
jmp 0x4b6770
cmp bl, 1
jne 0x4b6770
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7260
call fcn.004b2444
jmp 0x4b6770
mov eax, 0x4b73b8
call fcn.004b21c0
cmp dword [ebp - 0x1c], 0
je 0x4b67b8
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004b0594
jmp 0x4b67b8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4b7414
call fcn.004b2444
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b67eb
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b52fc
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b6823
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b64b6
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b6a65
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4b6a17
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4b69ee
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6318
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4b689a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b69dd
cmp byte [ebp - 0x29], 0
jne 0x4b68a6
cmp dword [ebp - 0x24], 0
jne 0x4b68aa
xor eax, eax
jmp 0x4b68ac
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4b68e1
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5b70
mov byte [ebp - 0x8b], al
jmp 0x4b68e8
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4b693a
cmp byte [ebp - 0x8b], 0
je 0x4b69e4
cmp byte [ebp - 0x8a], 0
jne 0x4b693a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004acc04
test al, al
je 0x4b693a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4b693a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4b69e4
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4b698e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4b696d
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b5c78
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4b698e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b5f08
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4b69c7
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b746c
call fcn.004b2444
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.004b0000
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4b69e4
mov eax, dword [ebp - 0x18]
call fcn.004b611c
jmp 0x4b69e4
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b6a17
cmp byte [ebp - 0x89], 0
je 0x4b6a4a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b52fc
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b6a58
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b6849
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b6fe5
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6318
pop ecx
xor eax, eax
push ebp
push 0x4b6f87
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4b6b04
je 0x4b6d51
cmp eax, 0x81
jg 0x4b6ae6
je 0x4b6b77
dec eax
je 0x4b6b35
add eax, 0xfffffff1
sub eax, 2
jb case.0x4b6b12.140
sub eax, 0xe
je case.0x4b6b12.140
sub eax, 0x60
je case.0x4b6b12.140
jmp case.default.0x4b6b12
sub eax, 0x82
je 0x4b6c20
dec eax
je case.0x4b6b12.140
dec eax
je 0x4b6d3e
jmp case.default.0x4b6b12
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4b6b12
jmp dword [eax*4 + 0x4b6b19]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b74a8
call fcn.00406904
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.004ab168
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x40aa00]
call fcn.00411834
call fcn.00404a74
jmp case.0x4b6b12.140
cmp byte [ebp - 0x29], 0
jne 0x4b6b8d
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4b537c
push 0x4b5388
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.004ae038
test al, al
je case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4b6b12.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0047e240
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.004b05e8
jmp case.0x4b6b12.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b6c37
cmp dword [ebp - 0x74], 0
jne 0x4b6c42
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b6c54
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b6cbb
cmp byte [ebp - 0x29], 0
jne 0x4b6c6a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4b6b12.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b5610
pop ecx
test al, al
jne case.0x4b6b12.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4b6cdc
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5b70
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406bd4
je case.0x4b6b12.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b5610
pop ecx
test al, al
jne case.0x4b6b12.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6b12.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.0047ea8c
jmp case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4b6d70
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047e930
test al, al
je case.0x4b6b12.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047ead8
jmp case.0x4b6b12.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5064
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f8b4
test eax, eax
je case.0x4b6b12.140
sub eax, 2
je case.0x4b6b12.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6b12.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5064
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f7f4
test eax, eax
jne case.0x4b6b12.140
push 2
push 0x5023a4
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4b6e2e
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b6b12.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5064
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047fa38
test eax, eax
je case.0x4b6b12.140
sub eax, 2
je case.0x4b6b12.140
sub eax, 0x8f
je case.0x4b6b12.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6b12.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b5064
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f7f4
test eax, eax
jne case.0x4b6b12.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0047f734
test al, al
je 0x4b6eff
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4b6eff
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b6b12.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5b70
jmp case.0x4b6b12.140
mov byte [ebp - 0x7a], 1
jmp case.0x4b6b12.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b74d4
call fcn.0040e15c
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.004ab168
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x40aa00]
call fcn.00411834
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b6fb0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b52fc
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4b6a7e
cmp byte [ebp - 0x7a], 0
je 0x4b6ffb
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4b7009
call fcn.004b02cc
cmp dword [ebp - 0x78], 0
je 0x4b7019
call dword [ebp - 0x78]
push ebp
call fcn.004b6284
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b70c7
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4b709c
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004b0670
mov eax, dword [ebp - 0xe4]
call fcn.0047e63c
test al, al
je 0x4b7098
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004b0670
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4b704c
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret