Function at 0x62a3dc
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x62a3e5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4012b8]
call fcn.0040bf08
xor eax, eax
push ebp
push 0x62b1c3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x62b1e4
call fcn.00615a90
lea eax, [ebp - 0xa4]
call fcn.005c61d8
mov eax, dword [ebp - 0xa4]
call fcn.00424018
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x62b156
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x62a4e7
mov dl, 1
mov eax, dword [0x60c41c]
call fcn.00408414
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x62a8b8
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x62a8b8
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x62a89d
xor eax, eax
push ebp
push 0x62a84a
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0062a388
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x62a56b
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.00610040
inc eax
jne 0x62a80b
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x62a582
xor ebx, ebx
jmp 0x62a58c
test esi, 2
je 0x62a58c
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x62a5aa
mov dword [ebp - 0xa0], 7
jmp 0x62a5ce
test esi, 0x10
je 0x62a5be
mov dword [ebp - 0xa0], 3
jmp 0x62a5ce
test esi, 0x40
je 0x62a5ce
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x62a6f5
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x62b23c
call fcn.0040b4c8
mov eax, dword [ebp - 0xa8]
call fcn.00615a90
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x62a628
cmp dword [ebp - 0x24], 0
je 0x62a628
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x62b278
call fcn.0040b4c8
mov eax, dword [ebp - 0xac]
call fcn.00615a90
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x62a651
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.0060bf54
test al, al
je 0x62a6e6
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x629500
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.0060e9cc
test al, al
jne 0x62a6b3
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b2b8
call fcn.00615d14
mov byte [ebp - 0x79], 0
jmp 0x62a7f8
cmp bl, 1
jne 0x62a7f8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b2fc
call fcn.00615d14
jmp 0x62a7f8
mov eax, 0x62b334
call fcn.00615a90
jmp 0x62a7f8
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x62b37c
call fcn.0040b4c8
mov eax, dword [ebp - 0xb8]
call fcn.00615a90
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x62a743
cmp dword [ebp - 0x24], 0
je 0x62a743
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x62b3c4
call fcn.0040b4c8
mov eax, dword [ebp - 0xbc]
call fcn.00615a90
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x62a75f
mov eax, dword [ebp - 0x28]
call fcn.005c5610
test al, al
je 0x62a7ee
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x62a76d
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x629500
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.0060ec98
test al, al
jne 0x62a7c2
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b410
call fcn.00615d14
mov byte [ebp - 0x79], 0
jmp 0x62a7f8
cmp bl, 1
jne 0x62a7f8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b2fc
call fcn.00615d14
jmp 0x62a7f8
mov eax, 0x62b454
call fcn.00615a90
cmp dword [ebp - 0x1c], 0
je 0x62a840
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.0060ff4c
jmp 0x62a840
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x62b4b0
call fcn.00615d14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x62a873
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00629380
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x62a8ab
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x62a526
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x62aafa
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x62aaac
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x62aa83
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0062a388
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x62a922
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x62aa72
cmp byte [ebp - 0x29], 0
jne 0x62a92e
cmp dword [ebp - 0x24], 0
jne 0x62a932
xor eax, eax
jmp 0x62a934
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x62a969
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00629be0
mov byte [ebp - 0x8b], al
jmp 0x62a970
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x62a9c2
cmp byte [ebp - 0x8b], 0
je 0x62aa79
cmp byte [ebp - 0x8a], 0
jne 0x62a9c2
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0060bf54
test al, al
je 0x62a9c2
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x62a9c2
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x62aa79
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x62aa16
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x62a9f5
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00629ce8
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x62aa16
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00629f78
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x62aa5c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b508
call fcn.00615d14
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x20
setne cl
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.0060f9a0
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x62aa79
mov eax, dword [ebp - 0x18]
call fcn.0062a18c
jmp 0x62aa79
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x62aaac
cmp byte [ebp - 0x89], 0
je 0x62aadf
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00629380
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x62aaed
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x62a8d1
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x62b07e
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0062a388
pop ecx
xor eax, eax
push ebp
push 0x62b020
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x62ab99
je 0x62ade8
cmp eax, 0x81
jg 0x62ab7b
je 0x62ac0e
dec eax
je 0x62abca
add eax, 0xfffffff1
sub eax, 2
jb case.0x62aba7.140
sub eax, 0xe
je case.0x62aba7.140
sub eax, 0x60
je case.0x62aba7.140
jmp case.default.0x62aba7
sub eax, 0x82
je 0x62acb7
dec eax
je case.0x62aba7.140
dec eax
je 0x62add5
jmp case.default.0x62aba7
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x62aba7
jmp dword [eax*4 + 0x62abae]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x62b544
call fcn.0040b4c8
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov ax, 0xea
call fcn.005cc284
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x41ba84]
call fcn.00429000
call fcn.004098c4
jmp case.0x62aba7.140
cmp byte [ebp - 0x29], 0
jne 0x62ac24
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x62aba7.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x6293fc
push 0x629408
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.0060d628
test al, al
je case.0x62aba7.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x62aba7.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x62aba7.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.005c51d4
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.0060ffa0
jmp case.0x62aba7.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.0040a5f0
cmp byte [ebp - 0x29], 0
jne 0x62acce
cmp dword [ebp - 0x74], 0
jne 0x62acd9
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040a5f0
cmp byte [ebp - 0x29], 0
jne 0x62aceb
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x62ad52
cmp byte [ebp - 0x29], 0
jne 0x62ad01
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x62aba7.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0062967c
pop ecx
test al, al
jne case.0x62aba7.140
mov byte [ebp - 0x79], 0
jmp case.0x62aba7.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x62ad73
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00629be0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.0040b660
je case.0x62aba7.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0062967c
pop ecx
test al, al
jne case.0x62aba7.140
mov byte [ebp - 0x79], 0
jmp case.0x62aba7.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.005c5a50
jmp case.0x62aba7.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x62ae07
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005c58f4
test al, al
je case.0x62aba7.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005c5a9c
jmp case.0x62aba7.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.006290f0
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005c6850
test eax, eax
je case.0x62aba7.140
sub eax, 2
je case.0x62aba7.140
mov byte [ebp - 0x79], 0
jmp case.0x62aba7.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.006290f0
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005c6790
test eax, eax
jne case.0x62aba7.140
push 2
push 0x6cc0c0
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x62aec5
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x62aba7.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.006290f0
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005c69d4
test eax, eax
je case.0x62aba7.140
sub eax, 2
je case.0x62aba7.140
sub eax, 0x8f
je case.0x62aba7.140
mov byte [ebp - 0x79], 0
jmp case.0x62aba7.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.006290f0
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005c6790
test eax, eax
jne case.0x62aba7.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.005c66d0
test al, al
je 0x62af96
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x62af96
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x62aba7.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00629be0
jmp case.0x62aba7.140
mov byte [ebp - 0x7a], 1
jmp case.0x62aba7.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x62b570
call fcn.004244f0
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov ax, 0xea
call fcn.005cc284
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x41ba84]
call fcn.00429000
call fcn.004098c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x62b049
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00629380
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x62ab13
cmp byte [ebp - 0x7a], 0
je 0x62b094
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x62b0a2
call fcn.0060fc80
cmp dword [ebp - 0x78], 0
je 0x62b0b2
call dword [ebp - 0x78]
push ebp
call fcn.0062a2f4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x62b160
mov eax, dword [ebp - 0x48]
call fcn.00408444
mov eax, dword [ebp - 0x34]
call fcn.00408444
mov eax, dword [ebp - 0x38]
call fcn.00408444
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x62b135
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00610024
mov eax, dword [ebp - 0xe4]
call fcn.005c55fc
test al, al
je 0x62b131
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00610024
mov eax, dword [ebp - 0xe8]
call fcn.0040b278
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x62b0e5
mov eax, dword [ebp - 0x40]
call fcn.00408444
mov eax, dword [ebp - 0x44]
call fcn.00408444
mov eax, dword [ebp - 0x80]
call fcn.00408444
mov eax, dword [ebp - 0x3c]
call fcn.00408444
ret