Function at 0x610aa4
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x610aad
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4012b8]
call fcn.0040a268
xor eax, eax
push ebp
push 0x611862
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x611880
call fcn.005f3590
lea eax, [ebp - 0xa4]
call fcn.005a394c
mov eax, dword [ebp - 0xa4]
call fcn.004216cc
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x6117f5
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x610baf
mov dl, 1
mov eax, dword [0x5ea330]
call fcn.00406998
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x610f68
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x610f68
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x610f4d
xor eax, eax
push ebp
push 0x610efa
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00610a50
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x610c33
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005edbb8
inc eax
jne 0x610ebb
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x610c4a
xor ebx, ebx
jmp 0x610c54
test esi, 2
je 0x610c54
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x610c72
mov dword [ebp - 0xa0], 7
jmp 0x610c96
test esi, 0x10
je 0x610c86
mov dword [ebp - 0xa0], 3
jmp 0x610c96
test esi, 0x40
je 0x610c96
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x610db1
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x6118d8
call fcn.00409a14
mov eax, dword [ebp - 0xa8]
call fcn.005f3590
cmp dword [ebp - 0x24], 0
je 0x610ce4
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x611914
call fcn.00409a14
mov eax, dword [ebp - 0xac]
call fcn.005f3590
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x610d0d
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.005e9e68
test al, al
je 0x610da2
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x60fbc8
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.005ec554
test al, al
jne 0x610d6f
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611954
call fcn.005f3814
mov byte [ebp - 0x79], 0
jmp 0x610ea8
cmp bl, 1
jne 0x610ea8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611998
call fcn.005f3814
jmp 0x610ea8
mov eax, 0x6119d0
call fcn.005f3590
jmp 0x610ea8
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x611a18
call fcn.00409a14
mov eax, dword [ebp - 0xb8]
call fcn.005f3590
cmp dword [ebp - 0x24], 0
je 0x610df3
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x611a60
call fcn.00409a14
mov eax, dword [ebp - 0xbc]
call fcn.005f3590
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x610e0f
mov eax, dword [ebp - 0x28]
call fcn.005a2d84
test al, al
je 0x610e9e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x610e1d
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x60fbc8
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.005ec820
test al, al
jne 0x610e72
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611aac
call fcn.005f3814
mov byte [ebp - 0x79], 0
jmp 0x610ea8
cmp bl, 1
jne 0x610ea8
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611998
call fcn.005f3814
jmp 0x610ea8
mov eax, 0x611af0
call fcn.005f3590
cmp dword [ebp - 0x1c], 0
je 0x610ef0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005edac4
jmp 0x610ef0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x611b4c
call fcn.005f3814
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x610f23
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0060fa48
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x610f5b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x610bee
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x61119d
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x61114f
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x611126
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00610a50
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x610fd2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x611115
cmp byte [ebp - 0x29], 0
jne 0x610fde
cmp dword [ebp - 0x24], 0
jne 0x610fe2
xor eax, eax
jmp 0x610fe4
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x611019
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.006102a8
mov byte [ebp - 0x8b], al
jmp 0x611020
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x611072
cmp byte [ebp - 0x8b], 0
je 0x61111c
cmp byte [ebp - 0x8a], 0
jne 0x611072
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.005e9e68
test al, al
je 0x611072
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x611072
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x61111c
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x6110c6
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x6110a5
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.006103b0
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x6110c6
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00610640
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x6110ff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611ba4
call fcn.005f3814
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.005ed528
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x61111c
mov eax, dword [ebp - 0x18]
call fcn.00610854
jmp 0x61111c
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x61114f
cmp byte [ebp - 0x89], 0
je 0x611182
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0060fa48
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x611190
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x610f81
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x61171d
push ebp
mov eax, dword [ebp - 0x88]
call fcn.00610a50
pop ecx
xor eax, eax
push ebp
push 0x6116bf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x61123c
je 0x611489
cmp eax, 0x81
jg 0x61121e
je 0x6112af
dec eax
je 0x61126d
add eax, 0xfffffff1
sub eax, 2
jb case.0x61124a.140
sub eax, 0xe
je case.0x61124a.140
sub eax, 0x60
je case.0x61124a.140
jmp case.default.0x61124a
sub eax, 0x82
je 0x611358
dec eax
je case.0x61124a.140
dec eax
je 0x611476
jmp case.default.0x61124a
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x61124a
jmp dword [eax*4 + 0x611251]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x611be0
call fcn.00409a14
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xd5
call fcn.005aaf4c
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x41991c]
call fcn.004265c4
call fcn.00407e08
jmp case.0x61124a.140
cmp byte [ebp - 0x29], 0
jne 0x6112c5
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x61124a.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x60fac4
push 0x60fad0
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.005eb524
test al, al
je case.0x61124a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x61124a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x61124a.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.005a2948
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.005edb18
jmp case.0x61124a.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.00408b34
cmp byte [ebp - 0x29], 0
jne 0x61136f
cmp dword [ebp - 0x74], 0
jne 0x61137a
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00408b34
cmp byte [ebp - 0x29], 0
jne 0x61138c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x6113f3
cmp byte [ebp - 0x29], 0
jne 0x6113a2
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x61124a.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0060fd44
pop ecx
test al, al
jne case.0x61124a.140
mov byte [ebp - 0x79], 0
jmp case.0x61124a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x611414
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.006102a8
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00409bac
je case.0x61124a.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.0060fd44
pop ecx
test al, al
jne case.0x61124a.140
mov byte [ebp - 0x79], 0
jmp case.0x61124a.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.005a31c4
jmp case.0x61124a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x6114a8
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005a3068
test al, al
je case.0x61124a.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005a3210
jmp case.0x61124a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0060f7b8
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a3fc4
test eax, eax
je case.0x61124a.140
sub eax, 2
je case.0x61124a.140
mov byte [ebp - 0x79], 0
jmp case.0x61124a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0060f7b8
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a3f04
test eax, eax
jne case.0x61124a.140
push 2
push 0x652f84
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x611566
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x61124a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0060f7b8
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a4148
test eax, eax
je case.0x61124a.140
sub eax, 2
je case.0x61124a.140
sub eax, 0x8f
je case.0x61124a.140
mov byte [ebp - 0x79], 0
jmp case.0x61124a.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.0060f7b8
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a3f04
test eax, eax
jne case.0x61124a.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.005a3e44
test al, al
je 0x611637
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x611637
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x61124a.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.006102a8
jmp case.0x61124a.140
mov byte [ebp - 0x7a], 1
jmp case.0x61124a.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x611c0c
call fcn.00421ba4
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xd5
call fcn.005aaf4c
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x41991c]
call fcn.004265c4
call fcn.00407e08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6116e8
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.0060fa48
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x6111b6
cmp byte [ebp - 0x7a], 0
je 0x611733
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x611741
call fcn.005ed7f8
cmp dword [ebp - 0x78], 0
je 0x611751
call dword [ebp - 0x78]
push ebp
call fcn.006109bc
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6117ff
mov eax, dword [ebp - 0x48]
call fcn.004069c8
mov eax, dword [ebp - 0x34]
call fcn.004069c8
mov eax, dword [ebp - 0x38]
call fcn.004069c8
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x6117d4
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005edb9c
mov eax, dword [ebp - 0xe4]
call fcn.005a2d70
test al, al
je 0x6117d0
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005edb9c
mov eax, dword [ebp - 0xe8]
call fcn.004097c0
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x611784
mov eax, dword [ebp - 0x40]
call fcn.004069c8
mov eax, dword [ebp - 0x44]
call fcn.004069c8
mov eax, dword [ebp - 0x80]
call fcn.004069c8
mov eax, dword [ebp - 0x3c]
call fcn.004069c8
ret