Function at 0x617234
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1c
push 0
push 0
dec ecx
jne 0x61723d
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x30], eax
mov ecx, 0xa
lea eax, [ebp - 0x28]
mov edx, dword [0x4012b8]
call fcn.0040a268
xor eax, eax
push ebp
push 0x617ff2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x618010
call fcn.005f958c
lea eax, [ebp - 0xa4]
call fcn.005a3d50
mov eax, dword [ebp - 0xa4]
call fcn.00421714
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x1c], 0
mov byte [ebp - 0x7a], 0
xor eax, eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x617f85
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x80], eax
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x44], eax
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x40], eax
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x78], 0
je 0x61733f
mov dl, 1
mov eax, dword [0x5f0430]
call fcn.00406998
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x84], eax
mov ecx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [ebp - 0x29], 0
je 0x6176f8
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x6176f8
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x80
jne 0x6176dd
xor eax, eax
push ebp
push 0x61768a
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.006171e0
pop ecx
cmp dword [ebp - 0x1c], 0
je 0x6173c3
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005f3cd0
inc eax
jne 0x61764b
mov bl, 1
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 1
je 0x6173da
xor ebx, ebx
jmp 0x6173e4
test esi, 2
je 0x6173e4
mov bl, 2
mov dword [ebp - 0xa0], 1
test esi, 8
je 0x617402
mov dword [ebp - 0xa0], 7
jmp 0x617426
test esi, 0x10
je 0x617416
mov dword [ebp - 0xa0], 3
jmp 0x617426
test esi, 0x40
je 0x617426
xor eax, eax
mov dword [ebp - 0xa0], eax
test esi, 4
jne 0x617541
lea eax, [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x618030
call fcn.00409a14
mov eax, dword [ebp - 0xa8]
call fcn.005f958c
cmp dword [ebp - 0x24], 0
je 0x617474
lea eax, [ebp - 0xac]
mov ecx, dword [ebp - 0x24]
mov edx, 0x61805c
call fcn.00409a14
mov eax, dword [ebp - 0xac]
call fcn.005f958c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x61749d
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov edx, dword [ebp - 0x28]
call fcn.005ee7bc
test al, al
je 0x617532
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x6165fc
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.005f2654
test al, al
jne 0x6174ff
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x618088
call fcn.005f9810
mov byte [ebp - 0x79], 0
jmp 0x617638
cmp bl, 1
jne 0x617638
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x6180c4
call fcn.005f9810
jmp 0x617638
mov eax, 0x6180e8
call fcn.005f958c
jmp 0x617638
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 0x28]
mov edx, 0x61810c
call fcn.00409a14
mov eax, dword [ebp - 0xb8]
call fcn.005f958c
cmp dword [ebp - 0x24], 0
je 0x617583
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
mov edx, 0x618144
call fcn.00409a14
mov eax, dword [ebp - 0xbc]
call fcn.005f958c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
je 0x61759f
mov eax, dword [ebp - 0x28]
call fcn.005a3188
test al, al
je 0x61762e
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
jne 0x6175ad
xor ebx, ebx
mov eax, dword [ebp - 0x20]
push eax
push ebx
mov eax, dword [ebp - 0xa0]
push eax
push 0x6165fc
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.005f2920
test al, al
jne 0x617602
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x618178
call fcn.005f9810
mov byte [ebp - 0x79], 0
jmp 0x617638
cmp bl, 1
jne 0x617638
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x6180c4
call fcn.005f9810
jmp 0x617638
mov eax, 0x6181b4
call fcn.005f958c
cmp dword [ebp - 0x1c], 0
je 0x617680
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
call fcn.005f3bdc
jmp 0x617680
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xc8], 0x11
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xc0], 0x11
lea edx, [ebp - 0xcc]
mov ecx, 1
mov eax, 0x6181e0
call fcn.005f9810
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6176b3
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.006164c0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x6176eb
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x61737e
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x61792d
mov byte [ebp - 0x89], 0
mov eax, dword [ebp - 0x88]
cmp word [eax + 0x10], 0x82
jne 0x6178df
mov byte [ebp - 0x89], 1
xor eax, eax
push ebp
push 0x6178b6
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov eax, dword [ebp - 0x88]
call fcn.006171e0
pop ecx
cmp byte [ebp - 0x29], 0
jne 0x617762
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x6178a5
cmp byte [ebp - 0x29], 0
jne 0x61776e
cmp dword [ebp - 0x24], 0
jne 0x617772
xor eax, eax
jmp 0x617774
mov al, 1
mov byte [ebp - 0x8a], al
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 8]
test esi, 8
setne bl
test bl, bl
je 0x6177a9
test esi, 0x400
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00616bd4
mov byte [ebp - 0x8b], al
jmp 0x6177b0
mov byte [ebp - 0x8b], 0
test bl, bl
je 0x617802
cmp byte [ebp - 0x8b], 0
je 0x6178ac
cmp byte [ebp - 0x8a], 0
jne 0x617802
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.005ee7bc
test al, al
je 0x617802
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 2
jne 0x617802
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x6178ac
mov byte [ebp - 0x89], 0
cmp byte [ebp - 0x8a], 0
jne 0x617856
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je 0x617835
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00616c90
pop ecx
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x40
je 0x617856
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne al
mov edx, dword [ebp - 0x28]
call fcn.00616e98
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 4
je 0x61788f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0x11
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x618220
call fcn.005f9810
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.005f3640
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 0x10
je 0x6178ac
mov eax, dword [ebp - 0x18]
call fcn.00617020
jmp 0x6178ac
mov byte [ebp - 0x89], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6178df
cmp byte [ebp - 0x89], 0
je 0x617912
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.006164c0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x617920
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x617711
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x617ead
push ebp
mov eax, dword [ebp - 0x88]
call fcn.006171e0
pop ecx
xor eax, eax
push ebp
push 0x617e4f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 0x10]
movzx eax, si
cmp eax, 0x85
jg 0x6179cc
je 0x617c19
cmp eax, 0x81
jg 0x6179ae
je 0x617a3f
dec eax
je 0x6179fd
add eax, 0xfffffff1
sub eax, 2
jb case.0x6179da.140
sub eax, 0xe
je case.0x6179da.140
sub eax, 0x60
je case.0x6179da.140
jmp case.default.0x6179da
sub eax, 0x82
je 0x617ae8
dec eax
je case.0x6179da.140
dec eax
je 0x617c06
jmp case.default.0x6179da
add eax, 0xffffff7a
cmp eax, 6
ja case.default.0x6179da
jmp dword [eax*4 + 0x6179e1]
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x28]
mov edx, 0x618248
call fcn.00409a14
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov al, 0xd8
call fcn.005ab338
mov ecx, dword [ebp - 0xd0]
mov dl, 1
mov eax, dword [0x41994c]
call fcn.0042660c
call fcn.00407e08
jmp case.0x6179da.140
cmp byte [ebp - 0x29], 0
jne 0x617a55
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne case.0x6179da.140
mov eax, dword [ebp - 0x88]
mov ebx, dword [eax + 8]
test bl, 4
setne al
push eax
test bl, 8
setne al
push eax
push 0
push 0x61653c
push 0x616548
lea eax, [ebp - 0x48]
push eax
test bl, 2
setne cl
test bl, 0x20
setne al
mov edx, dword [ebp - 0x28]
call fcn.005f1624
test al, al
je case.0x6179da.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
je case.0x6179da.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x10
je case.0x6179da.140
push 0
mov eax, dword [ebp - 0x70]
push eax
push 5
push 0x10
call sub.shell32.dll_SHChangeNotify
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
call fcn.005a2d4c
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x3c]
call fcn.005f3c30
jmp case.0x6179da.140
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x24]
call fcn.00408b34
cmp byte [ebp - 0x29], 0
jne 0x617aff
cmp dword [ebp - 0x74], 0
jne 0x617b0a
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00408b34
cmp byte [ebp - 0x29], 0
jne 0x617b1c
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
jne 0x617b83
cmp byte [ebp - 0x29], 0
jne 0x617b32
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 2
jne case.0x6179da.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.00616778
pop ecx
test al, al
jne case.0x6179da.140
mov byte [ebp - 0x79], 0
jmp case.0x6179da.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 8
je 0x617ba4
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 4
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00616bd4
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x28]
call fcn.00409bac
je case.0x6179da.140
push ebp
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x80
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 1
setne al
push eax
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 0x20
setne cl
mov eax, dword [ebp - 0x88]
test byte [eax + 9], 8
setne dl
mov eax, dword [ebp - 0x74]
call fcn.00616778
pop ecx
test al, al
jne case.0x6179da.140
mov byte [ebp - 0x79], 0
jmp case.0x6179da.140
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.005a35c8
jmp case.0x6179da.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
je 0x617c38
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005a346c
test al, al
je case.0x6179da.140
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.005a3614
jmp case.0x6179da.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00616230
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a43c8
test eax, eax
je case.0x6179da.140
sub eax, 2
je case.0x6179da.140
mov byte [ebp - 0x79], 0
jmp case.0x6179da.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00616230
push 0
push 2
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a4308
test eax, eax
jne case.0x6179da.140
push 2
push 0x65808c
push 1
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegSetValueExW
test eax, eax
je 0x617cf6
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x6179da.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00616230
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a454c
test eax, eax
je case.0x6179da.140
sub eax, 2
je case.0x6179da.140
sub eax, 0x8f
je case.0x6179da.140
mov byte [ebp - 0x79], 0
jmp case.0x6179da.140
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x91]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 8]
call fcn.00616230
push 0
push 3
lea eax, [ebp - 0x9c]
push eax
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x98]
call fcn.005a4308
test eax, eax
jne case.0x6179da.140
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
call fcn.005a4248
test al, al
je 0x617dc7
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegDeleteValueW
test eax, eax
je 0x617dc7
mov byte [ebp - 0x79], 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_RegCloseKey
jmp case.0x6179da.140
mov eax, dword [ebp - 0x88]
test byte [eax + 8], 1
setne dl
mov eax, dword [ebp - 0x28]
call fcn.00616bd4
jmp case.0x6179da.140
mov byte [ebp - 0x7a], 1
jmp case.0x6179da.140
lea eax, [ebp - 0xe0]
push eax
movzx eax, si
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 0
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x618274
call fcn.00421bec
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov al, 0xd8
call fcn.005ab338
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x41994c]
call fcn.0042660c
call fcn.00407e08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x617e78
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
call fcn.006164c0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x88], 0
jne 0x617946
cmp byte [ebp - 0x7a], 0
je 0x617ec3
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x30]
test byte [eax + 0x1d], 0x10
je 0x617ed1
call fcn.005f3910
cmp dword [ebp - 0x78], 0
je 0x617ee1
call dword [ebp - 0x78]
push ebp
call fcn.0061714c
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x617f8f
mov eax, dword [ebp - 0x48]
call fcn.004069c8
mov eax, dword [ebp - 0x34]
call fcn.004069c8
mov eax, dword [ebp - 0x38]
call fcn.004069c8
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x617f64
inc esi
xor ebx, ebx
lea ecx, [ebp - 0xe4]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005f3cb4
mov eax, dword [ebp - 0xe4]
call fcn.005a3174
test al, al
je 0x617f60
push 0
lea ecx, [ebp - 0xe8]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.005f3cb4
mov eax, dword [ebp - 0xe8]
call fcn.004097c0
push eax
push 0x1005
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc ebx
dec esi
jne 0x617f14
mov eax, dword [ebp - 0x40]
call fcn.004069c8
mov eax, dword [ebp - 0x44]
call fcn.004069c8
mov eax, dword [ebp - 0x80]
call fcn.004069c8
mov eax, dword [ebp - 0x3c]
call fcn.004069c8
ret