Function at 0x4b64ac
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4b64b5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071dc
xor eax, eax
push ebp
push 0x4b726a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4b7288
call fcn.004b2300
lea eax, [ebp - 0xa4]
call fcn.0047f214
mov eax, dword [ebp - 0xa4]
call fcn.0040dc08
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4b71fd
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4b65b7
mov dl, 1
mov eax, dword [0x4ad1e0]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4b6970
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b6970
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4b6955
xor eax, eax
push ebp
push 0x4b6902
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6458
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4b663b
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004b07cc
inc eax
jne 0x4b68c3
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4b6652
xor ebx, ebx
jmp 0x4b665c
test esi, 2
je 0x4b665c
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4b667a
mov dword [ebp - 0xa0], 7
jmp 0x4b669e
test esi, 0x10
je 0x4b668e
mov dword [ebp - 0xa0], 3
jmp 0x4b669e
test esi, 0x40
je 0x4b669e
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4b67b9
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b72e0
call fcn.00406904
mov eax, dword [ebp - 0xa8]
call fcn.004b2300
cmp dword [ebp - 0x24], 0
je 0x4b66ec
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b731c
call fcn.00406904
mov eax, dword [ebp - 0xac]
call fcn.004b2300
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b6715
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.004acd44
test al, al
je 0x4b67aa
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b55c0
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004af1a8
test al, al
jne 0x4b6777
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b735c
call fcn.004b2584
mov byte [ebp - 0x79], 0
jmp 0x4b68b0
cmp bl, 1
jne 0x4b68b0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b73a0
call fcn.004b2584
jmp 0x4b68b0
mov eax, 0x4b73d8
call fcn.004b2300
jmp 0x4b68b0
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b7420
call fcn.00406904
mov eax, dword [ebp - 0xb8]
call fcn.004b2300
cmp dword [ebp - 0x24], 0
je 0x4b67fb
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4b7468
call fcn.00406904
mov eax, dword [ebp - 0xbc]
call fcn.004b2300
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4b6817
mov eax, dword [ebp - 0x28]
call fcn.0047e650
test al, al
je 0x4b68a6
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4b6825
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4b55c0
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.004af474
test al, al
jne 0x4b687a
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b74b4
call fcn.004b2584
mov byte [ebp - 0x79], 0
jmp 0x4b68b0
cmp bl, 1
jne 0x4b68b0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b73a0
call fcn.004b2584
jmp 0x4b68b0
mov eax, 0x4b74f8
call fcn.004b2300
cmp dword [ebp - 0x1c], 0
je 0x4b68f8
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.004b06d4
jmp 0x4b68f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4b7554
call fcn.004b2584
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b692b
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b543c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b6963
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b65f6
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b6ba5
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4b6b57
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4b6b2e
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6458
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4b69da
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b6b1d
cmp byte [ebp - 0x29], 0
jne 0x4b69e6
cmp dword [ebp - 0x24], 0
jne 0x4b69ea
xor eax, eax
jmp 0x4b69ec
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4b6a21
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5cb0
mov byte [ebp - 0x8b], al
jmp 0x4b6a28
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4b6a7a
cmp byte [ebp - 0x8b], 0
je 0x4b6b24
cmp byte [ebp - 0x8a], 0
jne 0x4b6a7a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004acd44
test al, al
je 0x4b6a7a
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4b6a7a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4b6b24
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4b6ace
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4b6aad
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b5db8
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4b6ace
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004b6048
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4b6b07
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b75ac
call fcn.004b2584
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.004b0140
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4b6b24
mov eax, dword [ebp - 0x18]
call fcn.004b625c
jmp 0x4b6b24
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b6b57
cmp byte [ebp - 0x89], 0
je 0x4b6b8a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b543c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4b6b98
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4b6989
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4b7125
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004b6458
pop ecx
xor eax, eax
push ebp
push 0x4b70c7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4b6c44
je 0x4b6e91
cmp eax, 0x81
jg 0x4b6c26
je 0x4b6cb7
dec eax
je 0x4b6c75
add eax, 0xfffffff1
sub eax, 2
jb case.0x4b6c52.140
sub eax, 0xe
je case.0x4b6c52.140
sub eax, 0x60
je case.0x4b6c52.140
jmp case.default.0x4b6c52
sub eax, 0x82
je 0x4b6d60
dec eax
je case.0x4b6c52.140
dec eax
je 0x4b6e7e
jmp case.default.0x4b6c52
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4b6c52
jmp dword [eax*4 + 0x4b6c59]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4b75e8
call fcn.00406904
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.004ab2a8
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x40aa00]
call fcn.00411834
call fcn.00404a74
jmp case.0x4b6c52.140
cmp byte [ebp - 0x29], 0
jne 0x4b6ccd
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4b54bc
push 0x4b54c8
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.004ae178
test al, al
je case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4b6c52.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0047e240
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.004b0728
jmp case.0x4b6c52.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b6d77
cmp dword [ebp - 0x74], 0
jne 0x4b6d82
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4b6d94
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4b6dfb
cmp byte [ebp - 0x29], 0
jne 0x4b6daa
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4b6c52.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b5750
pop ecx
test al, al
jne case.0x4b6c52.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4b6e1c
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5cb0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406bd4
je case.0x4b6c52.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004b5750
pop ecx
test al, al
jne case.0x4b6c52.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6c52.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.0047ea8c
jmp case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4b6eb0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047e930
test al, al
je case.0x4b6c52.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0047ead8
jmp case.0x4b6c52.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b51a4
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f8b4
test eax, eax
je case.0x4b6c52.140
sub eax, 2
je case.0x4b6c52.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6c52.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b51a4
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f7f4
test eax, eax
jne case.0x4b6c52.140
push 2
push 0x5023a4
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4b6f6e
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b6c52.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b51a4
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047fa38
test eax, eax
je case.0x4b6c52.140
sub eax, 2
je case.0x4b6c52.140
sub eax, 0x8f
je case.0x4b6c52.140
mov byte [ebp - 0x79], 0
jmp case.0x4b6c52.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004b51a4
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0047f7f4
test eax, eax
jne case.0x4b6c52.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0047f734
test al, al
je 0x4b703f
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4b703f
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4b6c52.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004b5cb0
jmp case.0x4b6c52.140
mov byte [ebp - 0x7a], 1
jmp case.0x4b6c52.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4b7614
call fcn.0040e15c
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.004ab2a8
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x40aa00]
call fcn.00411834
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b70f0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004b543c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4b6bbe
cmp byte [ebp - 0x7a], 0
je 0x4b713b
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4b7149
call fcn.004b040c
cmp dword [ebp - 0x78], 0
je 0x4b7159
call dword [ebp - 0x78]
push ebp
call fcn.004b63c4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b7207
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4b71dc
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004b07b0
mov eax, dword [ebp - 0xe4]
call fcn.0047e63c
test al, al
je 0x4b71d8
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.004b07b0
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4b718c
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret