Function at 0x45b174
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff44
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x74], ecx
mov byte [ebp - 1], dl
mov dword [ebp - 8], eax
mov ecx, 0xa
lea eax, [ebp - 0x48]
mov edx, 0x40107c
call fcn.00403980
xor eax, eax
push ebp
push 0x45bed7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x45bef0
call fcn.00457d10
lea eax, [ebp - 0xa0]
call fcn.0042d8c4
mov eax, dword [ebp - 0xa0]
call fcn.004072a8
mov byte [ebp - 0x75], 1
mov eax, dword [ebp - 8]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x76], 0
xor eax, eax
mov dword [ebp - 0x7c], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x14], eax
xor edx, edx
push ebp
push 0x45be82
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x7c], eax
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x10], eax
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x74], 0
je 0x45b287
mov dl, 1
mov eax, 0x453330
call fcn.00402b30
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x80], eax
mov ecx, eax
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 1], 0
je 0x45b62a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x45b62a
mov eax, dword [ebp - 0x84]
cmp word [eax + 0x10], 0x80
jne 0x45b60f
xor edx, edx
push ebp
push 0x45b5c0
push dword fs:[edx]
mov dword fs:[edx], esp
push ebp
mov eax, dword [ebp - 0x84]
call fcn.0045b120
pop ecx
cmp dword [ebp - 0x3c], 0
je 0x45b305
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x7c]
call fcn.004563b8
inc eax
jne 0x45b581
mov bl, 1
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 1
je 0x45b318
xor ebx, ebx
jmp 0x45b31e
test al, 2
je 0x45b31e
mov bl, 2
mov esi, 1
test al, 8
je 0x45b32e
mov esi, 7
jmp 0x45b33f
test al, 0x10
je 0x45b339
mov esi, 3
jmp 0x45b33f
test al, 0x40
je 0x45b33f
xor esi, esi
test al, 4
jne 0x45b467
mov edx, 0x45bf20
lea eax, [ebp - 0xa0]
call fcn.00403494
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 0x48]
call fcn.0040357c
mov eax, dword [ebp - 0xa0]
call fcn.00457d10
cmp dword [ebp - 0x44], 0
je 0x45b39f
mov edx, 0x45bf40
lea eax, [ebp - 0xa0]
call fcn.00403494
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 0x44]
call fcn.0040357c
mov eax, dword [ebp - 0xa0]
call fcn.00457d10
mov eax, dword [ebp - 0x84]
mov edi, dword [eax + 8]
test edi, 0x20
je 0x45b3c9
test edi, 0x100
setne al
mov edx, dword [ebp - 0x48]
call fcn.00452da0
test al, al
je 0x45b458
mov eax, dword [ebp - 0x40]
push eax
push ebx
push esi
push 0x45a524
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x84]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x48]
call fcn.00455010
test al, al
jne 0x45b425
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45bf64
call fcn.00457f1c
mov byte [ebp - 0x75], 0
jmp 0x45b56e
cmp bl, 1
jne 0x45b56e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45bf88
call fcn.00457f1c
jmp 0x45b56e
mov eax, 0x45bfa8
call fcn.00457d10
jmp 0x45b56e
mov edx, 0x45bfd0
lea eax, [ebp - 0xa0]
call fcn.00403494
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 0x48]
call fcn.0040357c
mov eax, dword [ebp - 0xa0]
call fcn.00457d10
cmp dword [ebp - 0x44], 0
je 0x45b4bf
mov edx, 0x45bff8
lea eax, [ebp - 0xa0]
call fcn.00403494
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 0x44]
call fcn.0040357c
mov eax, dword [ebp - 0xa0]
call fcn.00457d10
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 0x20
je 0x45b4db
mov eax, dword [ebp - 0x48]
call fcn.0042cd5c
test al, al
je 0x45b564
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 0x80
jne 0x45b4e9
xor ebx, ebx
mov eax, dword [ebp - 0x40]
push eax
push ebx
push esi
push 0x45a524
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
call fcn.00455290
test al, al
jne 0x45b538
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45c020
call fcn.00457f1c
mov byte [ebp - 0x75], 0
jmp 0x45b56e
cmp bl, 1
jne 0x45b56e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45bf88
call fcn.00457f1c
jmp 0x45b56e
mov eax, 0x45c044
call fcn.00457d10
cmp dword [ebp - 0x3c], 0
je 0x45b5b6
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x7c]
call fcn.004562c4
jmp 0x45b5b6
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0xb
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0xb
lea edx, [ebp - 0xb8]
mov ecx, 1
mov eax, 0x45c074
call fcn.00457f1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45b5e8
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0045a3f0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x45b61d
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x45b2c0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x45b848
mov byte [ebp - 0x85], 0
mov eax, dword [ebp - 0x84]
cmp word [eax + 0x10], 0x82
jne 0x45b7fd
mov byte [ebp - 0x85], 1
xor edx, edx
push ebp
push 0x45b7d5
push dword fs:[edx]
mov dword fs:[edx], esp
push ebp
mov eax, dword [ebp - 0x84]
call fcn.0045b120
pop ecx
cmp byte [ebp - 1], 0
jne 0x45b694
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 1
jne 0x45b7c4
cmp byte [ebp - 1], 0
jne 0x45b6a0
cmp dword [ebp - 0x44], 0
jne 0x45b6a4
xor eax, eax
jmp 0x45b6a6
mov al, 1
mov byte [ebp - 0x86], al
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 8
setne bl
test bl, bl
je 0x45b6d4
test ah, 4
setne dl
mov eax, dword [ebp - 0x48]
call fcn.0045ab1c
mov byte [ebp - 0x87], al
jmp 0x45b6db
mov byte [ebp - 0x87], 0
test bl, bl
je 0x45b72d
cmp byte [ebp - 0x87], 0
je 0x45b7cb
cmp byte [ebp - 0x86], 0
jne 0x45b72d
mov eax, dword [ebp - 0x84]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x48]
call fcn.00452da0
test al, al
je 0x45b72d
mov eax, dword [ebp - 0x84]
test byte [eax + 9], 2
jne 0x45b72d
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x45b7cb
mov byte [ebp - 0x85], 0
cmp byte [ebp - 0x86], 0
jne 0x45b775
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 0x10
je 0x45b75a
push ebp
test ah, 8
setne al
mov edx, dword [ebp - 0x48]
call fcn.0045abd8
pop ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 0x40
je 0x45b775
test ah, 8
setne al
mov edx, dword [ebp - 0x48]
call fcn.0045adc4
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 4
je 0x45b7ae
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0xb
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45c0a4
call fcn.00457f1c
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
call fcn.00455d9c
mov eax, dword [ebp - 0x84]
test byte [eax + 9], 0x10
je 0x45b7cb
mov eax, dword [ebp - 0x38]
call fcn.0045af54
jmp 0x45b7cb
mov byte [ebp - 0x85], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45b7fd
cmp byte [ebp - 0x85], 0
je 0x45b82d
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0045a3f0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x45b83b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x45b643
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x45bdaa
push ebp
mov eax, dword [ebp - 0x84]
call fcn.0045b120
pop ecx
xor edx, edx
push ebp
push 0x45bd50
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x84]
mov bx, word [eax + 0x10]
movzx eax, bx
cmp eax, 0x85
jg 0x45b8e7
je 0x45bb1e
cmp eax, 0x81
jg 0x45b8c9
je 0x45b965
dec eax
je 0x45b918
add eax, 0xfffffff1
sub eax, 2
jb case.0x45b8f5.140
sub eax, 0xe
je case.0x45b8f5.140
sub eax, 0x60
je case.0x45b8f5.140
jmp case.default.0x45b8f5
sub eax, 0x82
je 0x45ba07
dec eax
je case.0x45b8f5.140
dec eax
je 0x45bb0b
jmp case.default.0x45b8f5
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x45b8f5
jmp dword [eax*4 + 0x45b8fc]
mov edx, 0x45c0c4
lea eax, [ebp - 0xbc]
call fcn.00403494
lea eax, [ebp - 0xbc]
mov edx, dword [ebp - 0x48]
call fcn.0040357c
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0xa0]
mov al, 0xc2
call fcn.00451458
mov ecx, dword [ebp - 0xa0]
mov dl, 1
mov eax, 0x406400
call fcn.00408c0c
call fcn.0040311c
jmp case.0x45b8f5.140
cmp byte [ebp - 1], 0
jne 0x45b97b
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 1
jne case.0x45b8f5.140
mov eax, dword [ebp - 0x84]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x45a468
push 0x45a474
lea eax, [ebp - 0x20]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x48]
call fcn.00454100
test al, al
je case.0x45b8f5.140
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 2
je case.0x45b8f5.140
test al, 0x10
je case.0x45b8f5.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 1
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x48]
call fcn.0042c8a4
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x14]
call fcn.00456318
jmp case.0x45b8f5.140
lea eax, [ebp - 0x8c]
mov edx, dword [ebp - 0x44]
call fcn.00403494
cmp byte [ebp - 1], 0
jne 0x45ba24
cmp dword [ebp - 0x8c], 0
jne 0x45ba32
lea eax, [ebp - 0x8c]
mov edx, dword [ebp - 0x48]
call fcn.00403494
cmp byte [ebp - 1], 0
jne 0x45ba44
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 1
jne 0x45ba9b
cmp byte [ebp - 1], 0
jne 0x45ba5a
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 2
jne case.0x45b8f5.140
push ebp
mov eax, dword [ebp - 0x84]
mov ebx, dword [eax + 8]
test bl, 0x80
setne al
push eax
test bh, 1
setne al
push eax
test bl, 0x20
setne cl
test bh, 8
setne dl
mov eax, dword [ebp - 0x8c]
call fcn.0045a6d8
pop ecx
test al, al
jne case.0x45b8f5.140
mov byte [ebp - 0x75], 0
jmp case.0x45b8f5.140
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
test al, 8
je 0x45bab6
test ah, 4
setne dl
mov eax, dword [ebp - 0x48]
call fcn.0045ab1c
mov eax, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x48]
call fcn.00403684
je case.0x45b8f5.140
push ebp
mov eax, dword [ebp - 0x84]
mov ebx, dword [eax + 8]
test bl, 0x80
setne al
push eax
test bh, 1
setne al
push eax
test bl, 0x20
setne cl
test bh, 8
setne dl
mov eax, dword [ebp - 0x8c]
call fcn.0045a6d8
pop ecx
test al, al
jne case.0x45b8f5.140
mov byte [ebp - 0x75], 0
jmp case.0x45b8f5.140
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
call fcn.0042d180
jmp case.0x45b8f5.140
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 1
je 0x45bb3d
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
call fcn.0042d028
test al, al
je case.0x45b8f5.140
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
call fcn.0042d1cc
jmp case.0x45b8f5.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
call fcn.0045a130
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
mov al, byte [ebp - 0x91]
call fcn.0042dec0
test eax, eax
je case.0x45b8f5.140
sub eax, 2
je case.0x45b8f5.140
mov byte [ebp - 0x75], 0
jmp case.0x45b8f5.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
call fcn.0045a130
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
mov al, byte [ebp - 0x91]
call fcn.0042de1c
test eax, eax
jne case.0x45b8f5.140
push 1
push 0x499b58
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExA
test eax, eax
je 0x45bbf9
mov byte [ebp - 0x75], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x45b8f5.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
call fcn.0045a130
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
mov al, byte [ebp - 0x91]
call fcn.0042e014
test eax, eax
je case.0x45b8f5.140
sub eax, 2
je case.0x45b8f5.140
sub eax, 0x8f
je case.0x45b8f5.140
mov byte [ebp - 0x75], 0
jmp case.0x45b8f5.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 8]
call fcn.0045a130
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
mov al, byte [ebp - 0x91]
call fcn.0042de1c
test eax, eax
jne case.0x45b8f5.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.0042dd64
test al, al
je 0x45bcc8
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueA
test eax, eax
je 0x45bcc8
mov byte [ebp - 0x75], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x45b8f5.140
mov eax, dword [ebp - 0x84]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x48]
call fcn.0045ab1c
jmp case.0x45b8f5.140
mov byte [ebp - 0x76], 1
jmp case.0x45b8f5.140
lea eax, [ebp - 0xbc]
push eax
movzx eax, bx
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x45c0dc
call fcn.004078f4
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0xa0]
mov al, 0xc2
call fcn.00451458
mov ecx, dword [ebp - 0xa0]
mov dl, 1
mov eax, 0x406400
call fcn.00408c0c
call fcn.0040311c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45bd78
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0045a3f0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x84], 0
jne 0x45b861
cmp byte [ebp - 0x76], 0
je 0x45bdc0
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 8]
test byte [eax + 0x1d], 0x10
je 0x45bdce
call fcn.0045602c
cmp dword [ebp - 0x74], 0
je 0x45bdde
call dword [ebp - 0x74]
push ebp
call fcn.0045b08c
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45be8c
mov eax, dword [ebp - 0x20]
call fcn.00402b58
mov eax, dword [ebp - 0xc]
call fcn.00402b58
mov eax, dword [ebp - 0x10]
call fcn.00402b58
mov eax, dword [ebp - 0x14]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x45be61
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xa0]
mov edx, ebx
mov eax, dword [ebp - 0x14]
call fcn.0045639c
mov eax, dword [ebp - 0xa0]
call fcn.0042cd48
test al, al
je 0x45be5d
push 0
lea ecx, [ebp - 0xa0]
mov edx, ebx
mov eax, dword [ebp - 0x14]
call fcn.0045639c
mov eax, dword [ebp - 0xa0]
call fcn.00403738
push eax
push 0x1001
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x45be11
mov eax, dword [ebp - 0x18]
call fcn.00402b58
mov eax, dword [ebp - 0x1c]
call fcn.00402b58
mov eax, dword [ebp - 0x7c]
call fcn.00402b58
mov eax, dword [ebp - 0x14]
call fcn.00402b58
ret