Function at 0x4bfd00
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4bfd09
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4c0abe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4c0adc
call fcn.004bbb54
lea eax, [ebp - 0xa4]
call fcn.0048a588
mov eax, dword [ebp - 0xa4]
call fcn.00418a50
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4c0a51
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4bfe0b
mov dl, 1
mov eax, dword [0x48e820]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4c01c4
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c01c4
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4c01a9
xor eax, eax
push ebp
push 0x4c0156
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004bfcac
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4bfe8f
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00491e40
inc eax
jne 0x4c0117
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4bfea6
xor ebx, ebx
jmp 0x4bfeb0
test esi, 2
je 0x4bfeb0
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4bfece
mov dword [ebp - 0xa0], 7
jmp 0x4bfef2
test esi, 0x10
je 0x4bfee2
mov dword [ebp - 0xa0], 3
jmp 0x4bfef2
test esi, 0x40
je 0x4bfef2
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4c000d
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c0b34
call fcn.00406914
mov eax, dword [ebp - 0xa8]
call fcn.004bbb54
cmp dword [ebp - 0x24], 0
je 0x4bff40
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4c0b70
call fcn.00406914
mov eax, dword [ebp - 0xac]
call fcn.004bbb54
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4bff69
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048e384
test al, al
je 0x4bfffe
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4bee14
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004907e8
test al, al
jne 0x4bffcb
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0bb0
call fcn.004bbdd8
mov byte [ebp - 0x79], 0
jmp 0x4c0104
cmp bl, 1
jne 0x4c0104
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0bf4
call fcn.004bbdd8
jmp 0x4c0104
mov eax, 0x4c0c2c
call fcn.004bbb54
jmp 0x4c0104
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c0c74
call fcn.00406914
mov eax, dword [ebp - 0xb8]
call fcn.004bbb54
cmp dword [ebp - 0x24], 0
je 0x4c004f
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4c0cbc
call fcn.00406914
mov eax, dword [ebp - 0xbc]
call fcn.004bbb54
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4c006b
mov eax, dword [ebp - 0x28]
call fcn.004899c4
test al, al
je 0x4c00fa
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4c0079
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4bee14
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.00490ab4
test al, al
jne 0x4c00ce
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0d08
call fcn.004bbdd8
mov byte [ebp - 0x79], 0
jmp 0x4c0104
cmp bl, 1
jne 0x4c0104
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0bf4
call fcn.004bbdd8
jmp 0x4c0104
mov eax, 0x4c0d4c
call fcn.004bbb54
cmp dword [ebp - 0x1c], 0
je 0x4c014c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00491d48
jmp 0x4c014c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4c0da8
call fcn.004bbdd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c017f
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bec90
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4c01b7
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4bfe4a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c03f9
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4c03ab
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4c0382
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004bfcac
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4c022e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4c0371
cmp byte [ebp - 0x29], 0
jne 0x4c023a
cmp dword [ebp - 0x24], 0
jne 0x4c023e
xor eax, eax
jmp 0x4c0240
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4c0275
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bf504
mov byte [ebp - 0x8b], al
jmp 0x4c027c
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4c02ce
cmp byte [ebp - 0x8b], 0
je 0x4c0378
cmp byte [ebp - 0x8a], 0
jne 0x4c02ce
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048e384
test al, al
je 0x4c02ce
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4c02ce
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4c0378
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4c0322
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4c0301
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004bf60c
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4c0322
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004bf89c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4c035b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0e00
call fcn.004bbdd8
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.004917b4
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4c0378
mov eax, dword [ebp - 0x18]
call fcn.004bfab0
jmp 0x4c0378
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c03ab
cmp byte [ebp - 0x89], 0
je 0x4c03de
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bec90
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4c03ec
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4c01dd
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c0979
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004bfcac
pop ecx
xor eax, eax
push ebp
push 0x4c091b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4c0498
je 0x4c06e5
cmp eax, 0x81
jg 0x4c047a
je 0x4c050b
dec eax
je 0x4c04c9
add eax, 0xfffffff1
sub eax, 2
jb case.0x4c04a6.140
sub eax, 0xe
je case.0x4c04a6.140
sub eax, 0x60
je case.0x4c04a6.140
jmp case.default.0x4c04a6
sub eax, 0x82
je 0x4c05b4
dec eax
je case.0x4c04a6.140
dec eax
je 0x4c06d2
jmp case.default.0x4c04a6
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4c04a6
jmp dword [eax*4 + 0x4c04ad]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c0e3c
call fcn.00406914
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.0048d3fc
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x415848]
call fcn.0041c67c
call fcn.00404a74
jmp case.0x4c04a6.140
cmp byte [ebp - 0x29], 0
jne 0x4c0521
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4bed10
push 0x4bed1c
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.0048f7b8
test al, al
je case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4c04a6.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.004895b4
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.00491d9c
jmp case.0x4c04a6.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4c05cb
cmp dword [ebp - 0x74], 0
jne 0x4c05d6
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4c05e8
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4c064f
cmp byte [ebp - 0x29], 0
jne 0x4c05fe
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4c04a6.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004befa4
pop ecx
test al, al
jne case.0x4c04a6.140
mov byte [ebp - 0x79], 0
jmp case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4c0670
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bf504
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406be4
je case.0x4c04a6.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004befa4
pop ecx
test al, al
jne case.0x4c04a6.140
mov byte [ebp - 0x79], 0
jmp case.0x4c04a6.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.00489e00
jmp case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4c0704
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00489ca4
test al, al
je case.0x4c04a6.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00489e4c
jmp case.0x4c04a6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004be9f8
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048ac28
test eax, eax
je case.0x4c04a6.140
sub eax, 2
je case.0x4c04a6.140
mov byte [ebp - 0x79], 0
jmp case.0x4c04a6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004be9f8
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048ab68
test eax, eax
jne case.0x4c04a6.140
push 2
push 0x537340
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4c07c2
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4c04a6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004be9f8
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048adac
test eax, eax
je case.0x4c04a6.140
sub eax, 2
je case.0x4c04a6.140
sub eax, 0x8f
je case.0x4c04a6.140
mov byte [ebp - 0x79], 0
jmp case.0x4c04a6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004be9f8
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048ab68
test eax, eax
jne case.0x4c04a6.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0048aaa8
test al, al
je 0x4c0893
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4c0893
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4c04a6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004bf504
jmp case.0x4c04a6.140
mov byte [ebp - 0x7a], 1
jmp case.0x4c04a6.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c0e68
call fcn.00418fa4
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.0048d3fc
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x415848]
call fcn.0041c67c
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c0944
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004bec90
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4c0412
cmp byte [ebp - 0x7a], 0
je 0x4c098f
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4c099d
call fcn.00491a80
cmp dword [ebp - 0x78], 0
je 0x4c09ad
call dword [ebp - 0x78]
push ebp
call fcn.004bfc18
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c0a5b
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4c0a30
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00491e24
mov eax, dword [ebp - 0xe4]
call fcn.004899b0
test al, al
je 0x4c0a2c
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00491e24
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4c09e0
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret