Function at 0x70ca0c
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x70ca15
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4012b8]
call fcn.0040a328
xor eax, eax
push ebp
push 0x70d7ca
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x70d7e8
call fcn.006ed24c
lea eax, [ebp - 0xa4]
call fcn.00604da0
mov eax, dword [ebp - 0xa4]
call fcn.00422d24
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x70d75d
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x70cb17
mov dl, 1
mov eax, dword [0x6e3f5c]
call fcn.004069f0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x70ced0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x70ced0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x70ceb5
xor eax, eax
push ebp
push 0x70ce62
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0070c9b8
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x70cb9b
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.006e77e4
inc eax
jne 0x70ce23
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x70cbb2
xor ebx, ebx
jmp 0x70cbbc
test esi, 2
je 0x70cbbc
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x70cbda
mov dword [ebp - 0xa0], 7
jmp 0x70cbfe
test esi, 0x10
je 0x70cbee
mov dword [ebp - 0xa0], 3
jmp 0x70cbfe
test esi, 0x40
je 0x70cbfe
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x70cd19
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x70d840
call fcn.00409ad4
mov eax, dword [ebp - 0xa8]
call fcn.006ed24c
cmp dword [ebp - 0x24], 0
je 0x70cc4c
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x70d87c
call fcn.00409ad4
mov eax, dword [ebp - 0xac]
call fcn.006ed24c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x70cc75
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.006e3a94
test al, al
je 0x70cd0a
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x70bb30
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.006e6180
test al, al
jne 0x70ccd7
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70d8bc
call fcn.006ed4d0
mov byte [ebp - 0x79], 0
jmp 0x70ce10
cmp bl, 1
jne 0x70ce10
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70d900
call fcn.006ed4d0
jmp 0x70ce10
mov eax, 0x70d938
call fcn.006ed24c
jmp 0x70ce10
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x70d980
call fcn.00409ad4
mov eax, dword [ebp - 0xb8]
call fcn.006ed24c
cmp dword [ebp - 0x24], 0
je 0x70cd5b
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x70d9c8
call fcn.00409ad4
mov eax, dword [ebp - 0xbc]
call fcn.006ed24c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x70cd77
mov eax, dword [ebp - 0x28]
call fcn.006041d8
test al, al
je 0x70ce06
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x70cd85
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x70bb30
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.006e644c
test al, al
jne 0x70cdda
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70da14
call fcn.006ed4d0
mov byte [ebp - 0x79], 0
jmp 0x70ce10
cmp bl, 1
jne 0x70ce10
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70d900
call fcn.006ed4d0
jmp 0x70ce10
mov eax, 0x70da58
call fcn.006ed24c
cmp dword [ebp - 0x1c], 0
je 0x70ce58
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.006e76f0
jmp 0x70ce58
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x70dab4
call fcn.006ed4d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x70ce8b
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0070b9ac
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x70cec3
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x70cb56
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x70d105
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x70d0b7
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x70d08e
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0070c9b8
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x70cf3a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x70d07d
cmp byte [ebp - 0x29], 0
jne 0x70cf46
cmp dword [ebp - 0x24], 0
jne 0x70cf4a
xor eax, eax
jmp 0x70cf4c
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x70cf81
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.0070c210
mov byte [ebp - 0x8b], al
jmp 0x70cf88
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x70cfda
cmp byte [ebp - 0x8b], 0
je 0x70d084
cmp byte [ebp - 0x8a], 0
jne 0x70cfda
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.006e3a94
test al, al
je 0x70cfda
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x70cfda
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x70d084
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x70d02e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x70d00d
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0070c318
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x70d02e
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0070c5a8
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x70d067
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70db0c
call fcn.006ed4d0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.006e7154
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x70d084
mov eax, dword [ebp - 0x18]
call fcn.0070c7bc
jmp 0x70d084
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x70d0b7
cmp byte [ebp - 0x89], 0
je 0x70d0ea
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0070b9ac
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x70d0f8
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x70cee9
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x70d685
push ebp
mov eax, dword [ebp - 0x88]
call fcn.0070c9b8
pop ecx
xor eax, eax
push ebp
push 0x70d627
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x70d1a4
je 0x70d3f1
cmp eax, 0x81
jg 0x70d186
je 0x70d217
dec eax
je 0x70d1d5
add eax, 0xfffffff1
sub eax, 2
jb case.0x70d1b2.140
sub eax, 0xe
je case.0x70d1b2.140
sub eax, 0x60
je case.0x70d1b2.140
jmp case.default.0x70d1b2
sub eax, 0x82
je 0x70d2c0
dec eax
je case.0x70d1b2.140
dec eax
je 0x70d3de
jmp case.default.0x70d1b2
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x70d1b2
jmp dword [eax*4 + 0x70d1b9]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x70db48
call fcn.00409ad4
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xd8
call fcn.0060ae60
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x41aca0]
call fcn.004283ac
call fcn.00407e74
jmp case.0x70d1b2.140
cmp byte [ebp - 0x29], 0
jne 0x70d22d
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x70ba2c
push 0x70ba38
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.006e5150
test al, al
je case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x70d1b2.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.00603d9c
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.006e7744
jmp case.0x70d1b2.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.00408bdc
cmp byte [ebp - 0x29], 0
jne 0x70d2d7
cmp dword [ebp - 0x74], 0
jne 0x70d2e2
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00408bdc
cmp byte [ebp - 0x29], 0
jne 0x70d2f4
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x70d35b
cmp byte [ebp - 0x29], 0
jne 0x70d30a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x70d1b2.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0070bcac
pop ecx
test al, al
jne case.0x70d1b2.140
mov byte [ebp - 0x79], 0
jmp case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x70d37c
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.0070c210
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00409c6c
je case.0x70d1b2.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0070bcac
pop ecx
test al, al
jne case.0x70d1b2.140
mov byte [ebp - 0x79], 0
jmp case.0x70d1b2.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.00604618
jmp case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x70d410
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.006044bc
test al, al
je case.0x70d1b2.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00604664
jmp case.0x70d1b2.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0070b71c
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.00605418
test eax, eax
je case.0x70d1b2.140
sub eax, 2
je case.0x70d1b2.140
mov byte [ebp - 0x79], 0
jmp case.0x70d1b2.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0070b71c
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.00605358
test eax, eax
jne case.0x70d1b2.140
push 2
push 0x7afbc4
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x70d4ce
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x70d1b2.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0070b71c
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.0060559c
test eax, eax
je case.0x70d1b2.140
sub eax, 2
je case.0x70d1b2.140
sub eax, 0x8f
je case.0x70d1b2.140
mov byte [ebp - 0x79], 0
jmp case.0x70d1b2.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0070b71c
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.00605358
test eax, eax
jne case.0x70d1b2.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.00605298
test al, al
je 0x70d59f
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x70d59f
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x70d1b2.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.0070c210
jmp case.0x70d1b2.140
mov byte [ebp - 0x7a], 1
jmp case.0x70d1b2.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x70db74
call fcn.004231fc
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xd8
call fcn.0060ae60
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x41aca0]
call fcn.004283ac
call fcn.00407e74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x70d650
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0070b9ac
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x70d11e
cmp byte [ebp - 0x7a], 0
je 0x70d69b
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x70d6a9
call fcn.006e7424
cmp dword [ebp - 0x78], 0
je 0x70d6b9
call dword [ebp - 0x78]
push ebp
call fcn.0070c924
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x70d767
mov eax, dword [ebp - 0x48]
call fcn.00406a20
mov eax, dword [ebp - 0x34]
call fcn.00406a20
mov eax, dword [ebp - 0x38]
call fcn.00406a20
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x70d73c
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.006e77c8
mov eax, dword [ebp - 0xe4]
call fcn.006041c4
test al, al
je 0x70d738
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.006e77c8
mov eax, dword [ebp - 0xe8]
call fcn.00409868
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x70d6ec
mov eax, dword [ebp - 0x40]
call fcn.00406a20
mov eax, dword [ebp - 0x44]
call fcn.00406a20
mov eax, dword [ebp - 0x80]
call fcn.00406a20
mov eax, dword [ebp - 0x3c]
call fcn.00406a20
ret