Function at 0x618e30
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x618e39
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4012b8]
call fcn.0040979c
xor eax, eax
push ebp
push 0x619bee
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x619c0c
call fcn.005faf10
lea eax, [ebp - 0xa4]
call fcn.0059b0bc
mov eax, dword [ebp - 0xa4]
call fcn.00423028
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x619b81
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x618f3b
mov dl, 1
mov eax, dword [0x5f1c80]
call fcn.00406070
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x6192f4
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x6192f4
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x6192d9
xor eax, eax
push ebp
push 0x619286
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00618ddc
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x618fbf
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005f5508
inc eax
jne 0x619247
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x618fd6
xor ebx, ebx
jmp 0x618fe0
test esi, 2
je 0x618fe0
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x618ffe
mov dword [ebp - 0xa0], 7
jmp 0x619022
test esi, 0x10
je 0x619012
mov dword [ebp - 0xa0], 3
jmp 0x619022
test esi, 0x40
je 0x619022
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x61913d
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x619c64
call fcn.00408f70
mov eax, dword [ebp - 0xa8]
call fcn.005faf10
cmp dword [ebp - 0x24], 0
je 0x619070
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x619ca0
call fcn.00408f70
mov eax, dword [ebp - 0xac]
call fcn.005faf10
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x619099
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.005f17b8
test al, al
je 0x61912e
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x617f40
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.005f3e98
test al, al
jne 0x6190fb
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619ce0
call fcn.005fb194
mov byte [ebp - 0x79], 0
jmp 0x619234
cmp bl, 1
jne 0x619234
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619d24
call fcn.005fb194
jmp 0x619234
mov eax, 0x619d5c
call fcn.005faf10
jmp 0x619234
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x619da4
call fcn.00408f70
mov eax, dword [ebp - 0xb8]
call fcn.005faf10
cmp dword [ebp - 0x24], 0
je 0x61917f
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x619dec
call fcn.00408f70
mov eax, dword [ebp - 0xbc]
call fcn.005faf10
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x61919b
mov eax, dword [ebp - 0x28]
call fcn.0059a50c
test al, al
je 0x61922a
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x6191a9
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x617f40
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.005f4164
test al, al
jne 0x6191fe
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619e38
call fcn.005fb194
mov byte [ebp - 0x79], 0
jmp 0x619234
cmp bl, 1
jne 0x619234
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619d24
call fcn.005fb194
jmp 0x619234
mov eax, 0x619e7c
call fcn.005faf10
cmp dword [ebp - 0x1c], 0
je 0x61927c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005f5410
jmp 0x61927c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x619ed8
call fcn.005fb194
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6192af
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00617dc0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x6192e7
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x618f7a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x619529
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x6194db
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x6194b2
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00618ddc
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x61935e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x6194a1
cmp byte [ebp - 0x29], 0
jne 0x61936a
cmp dword [ebp - 0x24], 0
jne 0x61936e
xor eax, eax
jmp 0x619370
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x6193a5
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00618634
mov byte [ebp - 0x8b], al
jmp 0x6193ac
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x6193fe
cmp byte [ebp - 0x8b], 0
je 0x6194a8
cmp byte [ebp - 0x8a], 0
jne 0x6193fe
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.005f17b8
test al, al
je 0x6193fe
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x6193fe
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x6194a8
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x619452
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x619431
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.0061873c
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x619452
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.006189cc
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x61948b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619f30
call fcn.005fb194
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.005f4e78
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x6194a8
mov eax, dword [ebp - 0x18]
call fcn.00618be0
jmp 0x6194a8
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6194db
cmp byte [ebp - 0x89], 0
je 0x61950e
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00617dc0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x61951c
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x61930d
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x619aa9
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00618ddc
pop ecx
xor eax, eax
push ebp
push 0x619a4b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x6195c8
je 0x619815
cmp eax, 0x81
jg 0x6195aa
je 0x61963b
dec eax
je 0x6195f9
add eax, 0xfffffff1
sub eax, 2
jb case.0x6195d6.140
sub eax, 0xe
je case.0x6195d6.140
sub eax, 0x60
je case.0x6195d6.140
jmp case.default.0x6195d6
sub eax, 0x82
je 0x6196e4
dec eax
je case.0x6195d6.140
dec eax
je 0x619802
jmp case.default.0x6195d6
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x6195d6
jmp dword [eax*4 + 0x6195dd]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x619f6c
call fcn.00408f70
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xd8
call fcn.005a1198
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x41d264]
call fcn.00427be0
call fcn.00407354
jmp case.0x6195d6.140
cmp byte [ebp - 0x29], 0
jne 0x619651
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x6195d6.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x617e3c
push 0x617e48
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.005f2e68
test al, al
je case.0x6195d6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x6195d6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x6195d6.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.0059a0cc
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.005f5464
jmp case.0x6195d6.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.00408080
cmp byte [ebp - 0x29], 0
jne 0x6196fb
cmp dword [ebp - 0x74], 0
jne 0x619706
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00408080
cmp byte [ebp - 0x29], 0
jne 0x619718
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x61977f
cmp byte [ebp - 0x29], 0
jne 0x61972e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x6195d6.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.006180d0
pop ecx
test al, al
jne case.0x6195d6.140
mov byte [ebp - 0x79], 0
jmp case.0x6195d6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x6197a0
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00618634
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00409108
je case.0x6195d6.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.006180d0
pop ecx
test al, al
jne case.0x6195d6.140
mov byte [ebp - 0x79], 0
jmp case.0x6195d6.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.0059a950
jmp case.0x6195d6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x619834
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0059a7f4
test al, al
je case.0x6195d6.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0059a99c
jmp case.0x6195d6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00617b30
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.0059b74c
test eax, eax
je case.0x6195d6.140
sub eax, 2
je case.0x6195d6.140
mov byte [ebp - 0x79], 0
jmp case.0x6195d6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00617b30
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.0059b68c
test eax, eax
jne case.0x6195d6.140
push 2
push 0x65abdc
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x6198f2
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x6195d6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00617b30
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.0059b8d0
test eax, eax
je case.0x6195d6.140
sub eax, 2
je case.0x6195d6.140
sub eax, 0x8f
je case.0x6195d6.140
mov byte [ebp - 0x79], 0
jmp case.0x6195d6.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00617b30
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.0059b68c
test eax, eax
jne case.0x6195d6.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0059b5cc
test al, al
je 0x6199c3
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x6199c3
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey_1
jmp case.0x6195d6.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00618634
jmp case.0x6195d6.140
mov byte [ebp - 0x7a], 1
jmp case.0x6195d6.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x619f98
call fcn.0042359c
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xd8
call fcn.005a1198
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x41d264]
call fcn.00427be0
call fcn.00407354
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x619a74
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.00617dc0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x619542
cmp byte [ebp - 0x7a], 0
je 0x619abf
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x619acd
call fcn.005f5144
cmp dword [ebp - 0x78], 0
je 0x619add
call dword [ebp - 0x78]
push ebp
call fcn.00618d48
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x619b8b
mov eax, dword [ebp - 0x48]
call fcn.004060a0
mov eax, dword [ebp - 0x34]
call fcn.004060a0
mov eax, dword [ebp - 0x38]
call fcn.004060a0
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x619b60
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005f54ec
mov eax, dword [ebp - 0xe4]
call fcn.0059a4f8
test al, al
je 0x619b5c
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005f54ec
mov eax, dword [ebp - 0xe8]
call fcn.00408d1c
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x619b10
mov eax, dword [ebp - 0x40]
call fcn.004060a0
mov eax, dword [ebp - 0x44]
call fcn.004060a0
mov eax, dword [ebp - 0x80]
call fcn.004060a0
mov eax, dword [ebp - 0x3c]
call fcn.004060a0
ret