Function at 0x4c19d0
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x4c19d9
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4c278e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4c27ac
call fcn.004bd824
lea eax, [ebp - 0xa4]
call fcn.0048c084
mov eax, dword [ebp - 0xa4]
call fcn.00419668
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4c2721
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x4c1adb
mov dl, 1
mov eax, dword [0x4904f0]
call fcn.00404068
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x4c1e94
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c1e94
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x4c1e79
xor eax, eax
push ebp
push 0x4c1e26
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004c197c
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x4c1b5f
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00493b10
inc eax
jne 0x4c1de7
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x4c1b76
xor ebx, ebx
jmp 0x4c1b80
test esi, 2
je 0x4c1b80
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x4c1b9e
mov dword [ebp - 0xa0], 7
jmp 0x4c1bc2
test esi, 0x10
je 0x4c1bb2
mov dword [ebp - 0xa0], 3
jmp 0x4c1bc2
test esi, 0x40
je 0x4c1bc2
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x4c1cdd
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c2804
call fcn.00406914
mov eax, dword [ebp - 0xa8]
call fcn.004bd824
cmp dword [ebp - 0x24], 0
je 0x4c1c10
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4c2840
call fcn.00406914
mov eax, dword [ebp - 0xac]
call fcn.004bd824
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4c1c39
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.00490054
test al, al
je 0x4c1cce
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4c0ae4
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004924b8
test al, al
jne 0x4c1c9b
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c2880
call fcn.004bdaa8
mov byte [ebp - 0x79], 0
jmp 0x4c1dd4
cmp bl, 1
jne 0x4c1dd4
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c28c4
call fcn.004bdaa8
jmp 0x4c1dd4
mov eax, 0x4c28fc
call fcn.004bd824
jmp 0x4c1dd4
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c2944
call fcn.00406914
mov eax, dword [ebp - 0xb8]
call fcn.004bd824
cmp dword [ebp - 0x24], 0
je 0x4c1d1f
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x4c298c
call fcn.00406914
mov eax, dword [ebp - 0xbc]
call fcn.004bd824
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x4c1d3b
mov eax, dword [ebp - 0x28]
call fcn.0048b4c0
test al, al
je 0x4c1dca
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x4c1d49
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x4c0ae4
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.00492784
test al, al
jne 0x4c1d9e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c29d8
call fcn.004bdaa8
mov byte [ebp - 0x79], 0
jmp 0x4c1dd4
cmp bl, 1
jne 0x4c1dd4
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c28c4
call fcn.004bdaa8
jmp 0x4c1dd4
mov eax, 0x4c2a1c
call fcn.004bd824
cmp dword [ebp - 0x1c], 0
je 0x4c1e1c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00493a18
jmp 0x4c1e1c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x4c2a78
call fcn.004bdaa8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c1e4f
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004c0960
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4c1e87
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4c1b1a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c20c9
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x4c207b
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x4c2052
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004c197c
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x4c1efe
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4c2041
cmp byte [ebp - 0x29], 0
jne 0x4c1f0a
cmp dword [ebp - 0x24], 0
jne 0x4c1f0e
xor eax, eax
jmp 0x4c1f10
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x4c1f45
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004c11d4
mov byte [ebp - 0x8b], al
jmp 0x4c1f4c
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x4c1f9e
cmp byte [ebp - 0x8b], 0
je 0x4c2048
cmp byte [ebp - 0x8a], 0
jne 0x4c1f9e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00490054
test al, al
je 0x4c1f9e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x4c1f9e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4c2048
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x4c1ff2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x4c1fd1
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004c12dc
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x4c1ff2
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.004c156c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x4c202b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c2ad0
call fcn.004bdaa8
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.00493484
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x4c2048
mov eax, dword [ebp - 0x18]
call fcn.004c1780
jmp 0x4c2048
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c207b
cmp byte [ebp - 0x89], 0
je 0x4c20ae
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004c0960
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4c20bc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x4c1ead
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4c2649
push ebp
mov eax, dword [ebp - 0x88]
call fcn.004c197c
pop ecx
xor eax, eax
push ebp
push 0x4c25eb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x4c2168
je 0x4c23b5
cmp eax, 0x81
jg 0x4c214a
je 0x4c21db
dec eax
je 0x4c2199
add eax, 0xfffffff1
sub eax, 2
jb case.0x4c2176.140
sub eax, 0xe
je case.0x4c2176.140
sub eax, 0x60
je case.0x4c2176.140
jmp case.default.0x4c2176
sub eax, 0x82
je 0x4c2284
dec eax
je case.0x4c2176.140
dec eax
je 0x4c23a2
jmp case.default.0x4c2176
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x4c2176
jmp dword [eax*4 + 0x4c217d]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x4c2b0c
call fcn.00406914
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xc2
call fcn.0048f0cc
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x416460]
call fcn.0041d294
call fcn.00404a74
jmp case.0x4c2176.140
cmp byte [ebp - 0x29], 0
jne 0x4c21f1
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x4c2176.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x4c09e0
push 0x4c09ec
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.00491488
test al, al
je case.0x4c2176.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x4c2176.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x4c2176.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0048b0b0
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.00493a6c
jmp case.0x4c2176.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4c229b
cmp dword [ebp - 0x74], 0
jne 0x4c22a6
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040649c
cmp byte [ebp - 0x29], 0
jne 0x4c22b8
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x4c231f
cmp byte [ebp - 0x29], 0
jne 0x4c22ce
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x4c2176.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004c0c74
pop ecx
test al, al
jne case.0x4c2176.140
mov byte [ebp - 0x79], 0
jmp case.0x4c2176.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x4c2340
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004c11d4
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00406be4
je case.0x4c2176.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.004c0c74
pop ecx
test al, al
jne case.0x4c2176.140
mov byte [ebp - 0x79], 0
jmp case.0x4c2176.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.0048b8fc
jmp case.0x4c2176.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x4c23d4
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0048b7a0
test al, al
je case.0x4c2176.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0048b948
jmp case.0x4c2176.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004c06c8
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048c724
test eax, eax
je case.0x4c2176.140
sub eax, 2
je case.0x4c2176.140
mov byte [ebp - 0x79], 0
jmp case.0x4c2176.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004c06c8
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048c664
test eax, eax
jne case.0x4c2176.140
push 2
push 0x540340
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x4c2492
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4c2176.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004c06c8
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048c8a8
test eax, eax
je case.0x4c2176.140
sub eax, 2
je case.0x4c2176.140
sub eax, 0x8f
je case.0x4c2176.140
mov byte [ebp - 0x79], 0
jmp case.0x4c2176.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.004c06c8
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
movzx eax, byte [ebp - 0x91]
call fcn.0048c664
test eax, eax
jne case.0x4c2176.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0048c5a4
test al, al
je 0x4c2563
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x4c2563
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x4c2176.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.004c11d4
jmp case.0x4c2176.140
mov byte [ebp - 0x7a], 1
jmp case.0x4c2176.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4c2b38
call fcn.00419bbc
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xc2
call fcn.0048f0cc
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x416460]
call fcn.0041d294
call fcn.00404a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2614
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.004c0960
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x4c20e2
cmp byte [ebp - 0x7a], 0
je 0x4c265f
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x4c266d
call fcn.00493750
cmp dword [ebp - 0x78], 0
je 0x4c267d
call dword [ebp - 0x78]
push ebp
call fcn.004c18e8
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c272b
mov eax, dword [ebp - 0x48]
call fcn.00404098
mov eax, dword [ebp - 0x34]
call fcn.00404098
mov eax, dword [ebp - 0x38]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4c2700
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00493af4
mov eax, dword [ebp - 0xe4]
call fcn.0048b4ac
test al, al
je 0x4c26fc
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00493af4
mov eax, dword [ebp - 0xe8]
call fcn.004064d4
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x4c26b0
mov eax, dword [ebp - 0x40]
call fcn.00404098
mov eax, dword [ebp - 0x44]
call fcn.00404098
mov eax, dword [ebp - 0x80]
call fcn.00404098
mov eax, dword [ebp - 0x3c]
call fcn.00404098
ret