Function at 0x4be1b4
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4be1bd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4bef72
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4bef90
call fcn.004ba008
lea eax, [ebp - 0xa4]
call fcn.00488160
mov eax, dword [ebp - 0xa4]
call fcn.00415e84
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4bef05
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4be2bf
mov dl, 1
mov eax, dword [0x48d4a8]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4be678
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4be678
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4be65d
xor eax, eax
push ebp
push 0x4be60a
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004be160
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4be343
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00490ac8
inc eax
jne 0x4be5cb
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4be35a
xor ebx, ebx
jmp 0x4be364
test esi, 2
je 0x4be364
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4be382
mov dword [ebp - 0xa0], 7
jmp 0x4be3a6
test esi, 0x10
je 0x4be396
mov dword [ebp - 0xa0], 3
jmp 0x4be3a6
test esi, 0x40
je 0x4be3a6
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4be4c1
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4befe8
call fcn.00406914
mov eax, dword [ebp - 0xa8]
call fcn.004ba008
cmp dword [ebp - 0x24], 0
je 0x4be3f4
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4bf024
call fcn.00406914
mov eax, dword [ebp - 0xac]
call fcn.004ba008
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4be41d
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048d00c
test al, al
je 0x4be4b2
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4bd2c8
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.0048f470
test al, al
jne 0x4be47f
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf064
call fcn.004ba28c
mov byte [ebp - 0x79], 0
jmp 0x4be5b8
cmp bl, 1
jne 0x4be5b8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf0a8
call fcn.004ba28c
jmp 0x4be5b8
mov eax, 0x4bf0e0
call fcn.004ba008
jmp 0x4be5b8
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4bf128
call fcn.00406914
mov eax, dword [ebp - 0xb8]
call fcn.004ba008
cmp dword [ebp - 0x24], 0
je 0x4be503
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4bf170
call fcn.00406914
mov eax, dword [ebp - 0xbc]
call fcn.004ba008
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4be51f
mov eax, dword [ebp - 0x28]
call fcn.0048759c
test al, al
je 0x4be5ae
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4be52d
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4bd2c8
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.0048f73c
test al, al
jne 0x4be582
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf1bc
call fcn.004ba28c
mov byte [ebp - 0x79], 0
jmp 0x4be5b8
cmp bl, 1
jne 0x4be5b8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf0a8
call fcn.004ba28c
jmp 0x4be5b8
mov eax, 0x4bf200
call fcn.004ba008
cmp dword [ebp - 0x1c], 0
je 0x4be600
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004909d0
jmp 0x4be600
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4bf25c
call fcn.004ba28c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4be633
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bd144
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4be66b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4be2fe
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4be8ad
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4be85f
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4be836
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004be160
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4be6e2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4be825
cmp byte [ebp - 0x29], 0
jne 0x4be6ee
cmp dword [ebp - 0x24], 0
jne 0x4be6f2
xor eax, eax
jmp 0x4be6f4
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4be729
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bd9b8
mov byte [ebp - 0x8b], al
jmp 0x4be730
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4be782
cmp byte [ebp - 0x8b], 0
je 0x4be82c
cmp byte [ebp - 0x8a], 0
jne 0x4be782
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048d00c
test al, al
je 0x4be782
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4be782
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4be82c
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4be7d6
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4be7b5
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004bdac0
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4be7d6
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004bdd50
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4be80f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf2b4
call fcn.004ba28c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.0049043c
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4be82c
mov eax, dword [ebp - 0x18]
call fcn.004bdf64
jmp 0x4be82c
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4be85f
cmp byte [ebp - 0x89], 0
je 0x4be892
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bd144
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4be8a0
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4be691
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4bee2d
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004be160
pop ecx
xor eax, eax
push ebp
push 0x4bedcf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4be94c
je 0x4beb99
cmp eax, 0x81
jg 0x4be92e
je 0x4be9bf
dec eax
je 0x4be97d
add eax, 0xfffffff1
sub eax, 2
jb case.0x4be95a.140
sub eax, 0xe
je case.0x4be95a.140
sub eax, 0x60
je case.0x4be95a.140
jmp case.default.0x4be95a
sub eax, 0x82
je 0x4bea68
dec eax
je case.0x4be95a.140
dec eax
je 0x4beb86
jmp case.default.0x4be95a
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4be95a
jmp dword [eax*4 + 0x4be961]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4bf2f0
call fcn.00406914
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.0048ad9c
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x412c7c]
call fcn.00419ab0
call fcn.00404a74
jmp case.0x4be95a.140
cmp byte [ebp - 0x29], 0
jne 0x4be9d5
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4be95a.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4bd1c4
push 0x4bd1d0
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048e440
test al, al
je case.0x4be95a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4be95a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4be95a.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0048718c
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.00490a24
jmp case.0x4be95a.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4bea7f
cmp dword [ebp - 0x74], 0
jne 0x4bea8a
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4bea9c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4beb03
cmp byte [ebp - 0x29], 0
jne 0x4beab2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4be95a.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004bd458
pop ecx
test al, al
jne case.0x4be95a.140
mov byte [ebp - 0x79], 0
jmp case.0x4be95a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4beb24
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bd9b8
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406be4
je case.0x4be95a.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004bd458
pop ecx
test al, al
jne case.0x4be95a.140
mov byte [ebp - 0x79], 0
jmp case.0x4be95a.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.004879d8
jmp case.0x4be95a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4bebb8
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0048787c
test al, al
je case.0x4be95a.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00487a24
jmp case.0x4be95a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004bceac
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.00488800
test eax, eax
je case.0x4be95a.140
sub eax, 2
je case.0x4be95a.140
mov byte [ebp - 0x79], 0
jmp case.0x4be95a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004bceac
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.00488740
test eax, eax
jne case.0x4be95a.140
push 2
push 0x51f340
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4bec76
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4be95a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004bceac
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.00488984
test eax, eax
je case.0x4be95a.140
sub eax, 2
je case.0x4be95a.140
sub eax, 0x8f
je case.0x4be95a.140
mov byte [ebp - 0x79], 0
jmp case.0x4be95a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004bceac
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.00488740
test eax, eax
jne case.0x4be95a.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.00488680
test al, al
je 0x4bed47
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4bed47
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4be95a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bd9b8
jmp case.0x4be95a.140
mov byte [ebp - 0x7a], 1
jmp case.0x4be95a.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4bf31c
call fcn.004163d8
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.0048ad9c
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x412c7c]
call fcn.00419ab0
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bedf8
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bd144
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4be8c6
cmp byte [ebp - 0x7a], 0
je 0x4bee43
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4bee51
call fcn.00490708
cmp dword [ebp - 0x78], 0
je 0x4bee61
call dword [ebp - 0x78]
push ebp
call fcn.004be0cc
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bef0f
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4beee4
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00490aac
mov eax, dword [ebp - 0xe4]
call fcn.00487588
test al, al
je 0x4beee0
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00490aac
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4bee94
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret