Function at 0x427450
Capabilities:
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x718
mov eax, dword [0x43ffa8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x6c8], eax
lea eax, [ebp - 0x6f0]
push eax
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x6f0], 0
call fcn.00428790
add esp, 4
test al, al
jne 0x4274a2
mov dword [ebp - 0x6d8], 1
jmp 0x4281c4
mov eax, dword [ebp - 0x6f0]
push ebx
push esi
push edi
test eax, eax
je 0x4274b3
mov edi, dword [eax]
jmp 0x4274b5
xor edi, edi
push edi
lea ecx, [ebp - 0x6c4]
call fcn.0041f530
push 0x104
push edi
call dword [sym.imp.MSVCR120.dll_wcsnlen]
mov ebx, eax
add esp, 8
xor esi, esi
test ebx, ebx
je 0x4274f7
jmp 0x4274e0
movzx eax, word [edi + esi*2]
push eax
call dword [sym.imp.MSVCR120.dll_tolower]
mov word [edi + esi*2], ax
add esp, 4
inc esi
cmp esi, ebx
jb 0x4274e0
push edi
lea ecx, [ebp - 0x6ac]
call fcn.0041f530
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6d4]
mov dword [ebp - 0x6d4], 0x2e
push eax
lea ecx, [ebp - 0x6ac]
call fcn.00429750
push eax
lea ecx, [ebp - 0x6ac]
call fcn.00420680
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6d4]
mov dword [ebp - 0x6d4], 0x5c
push eax
lea ecx, [ebp - 0x6ac]
call fcn.00429750
push eax
push 0
lea ecx, [ebp - 0x6ac]
call fcn.00420680
push 0x10
xor eax, eax
mov dword [ebp - 0x680], 7
push str._acroiefavclient
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x684], 0
mov word [ebp - 0x694], ax
call fcn.00420390
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6cc], 0
call fcn.00428c30
cmp dword [ebp + 0x10], 0
mov dword [ebp - 0x6d0], eax
jle 0x4276e3
mov edi, dword [ebp - 0x6c8]
add edi, 8
jmp 0x4275d0
mov edx, dword [edi - 8]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
cmp word [edx], ax
jne 0x4275f9
xor ecx, ecx
jmp 0x42760f
mov ecx, edx
lea esi, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427600
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.00420390
push 8
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
mov ebx, eax
lea ecx, [ebp - 0x6d0]
mov eax, dword [edi - 4]
add esp, 4
mov dword [ebx], eax
mov eax, dword [edi]
mov dword [ebx + 4], eax
lea eax, [ebp - 0x64c]
push eax
call fcn.00428da0
mov esi, eax
cmp esi, dword [ebp - 0x6d0]
je 0x427675
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x42765c
mov eax, dword [eax]
push ecx
push eax
push dword [ebp - 0x63c]
lea ecx, [ebp - 0x64c]
push 0
call fcn.00420490
test eax, eax
jns 0x4276bd
lea eax, [ebp - 0x64c]
mov dword [ebp - 0x6d4], eax
lea ecx, [ebp - 0x6d0]
lea eax, [ebp - 0x6dd]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0x4406a0
call fcn.00424970
push eax
add eax, 0x10
lea ecx, [ebp - 0x6d0]
push eax
push esi
lea eax, [ebp - 0x6c8]
push eax
call fcn.00424c90
mov esi, dword [ebp - 0x6c8]
mov dword [esi + 0x28], ebx
cmp dword [ebp - 0x638], 8
jb 0x4276d7
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
add edi, 0xc
dec dword [ebp + 0x10]
jne 0x4275d0
push 0xf003f
push dword [0x43c038]
xor eax, eax
lea ecx, [ebp - 0x718]
xor ebx, ebx
mov dword [ebp - 0x700], eax
push SysReAllocString
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], eax
call fcn.00422d80
test eax, eax
jne 0x428028
push eax
push eax
push 0x2001f
push eax
push eax
push dword [0x43c03c]
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0x70c], ebx
push dword [ebp - 0x718]
mov dword [ebp - 0x708], ebx
mov dword [ebp - 0x704], ebx
call fcn.00421d70
test eax, eax
jne 0x428004
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
mov dword [ebp - 0x6f4], ebx
call fcn.0043373c
add esp, 0xc
mov dword [ebp - 0x6d4], 0x104
lea eax, [ebp - 0x6e8]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x414]
push eax
push ebx
push dword [ebp - 0x70c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x427cdf
mov dword [ebp - 0x668], 7
mov dword [ebp - 0x66c], eax
mov word [ebp - 0x67c], ax
cmp word [ebp - 0x414], ax
jne 0x4277e8
xor ecx, ecx
jmp 0x427800
lea ecx, [ebp - 0x414]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4277f1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x67c]
call fcn.00420390
mov edx, dword [str.SoftwareMicrosoftInternet_Explorer_]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
cmp word [edx], ax
jne 0x42783f
xor ecx, ecx
jmp 0x427853
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427844
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.00420390
mov edx, dword [str.MenuExt]
xor eax, eax
mov dword [ebp - 0x650], 7
mov dword [ebp - 0x654], 0
mov word [ebp - 0x664], ax
cmp word [edx], ax
jne 0x42788c
xor ecx, ecx
jmp 0x4278a0
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427891
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x664]
call fcn.00420390
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00429060
cmp dword [ebp - 0x650], 8
jb 0x4278da
push dword [ebp - 0x664]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
push 0x5c
push 1
lea ecx, [ebp - 0x64c]
call fcn.00429120
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00429060
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi + 4]
cmp byte [esi + 0xd], 0
jne 0x42799b
cmp dword [ebp - 0x668], 8
lea eax, [ebp - 0x67c]
push dword [ebp - 0x66c]
cmovae eax, dword [ebp - 0x67c]
lea ecx, [esi + 0x10]
push eax
push dword [ecx + 0x10]
push 0
call fcn.00420490
test eax, eax
jns 0x427943
mov esi, dword [esi + 8]
jmp 0x427947
mov edi, esi
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
je 0x427912
cmp edi, dword [ebp - 0x6d0]
je 0x42799b
cmp dword [edi + 0x24], 8
lea eax, [edi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x427963
mov eax, dword [eax]
push ecx
push eax
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x67c]
push 0
call fcn.00420490
test eax, eax
js 0x42799b
cmp edi, dword [ebp - 0x6d0]
je 0x42799b
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x700]
call fcn.00429660
jmp 0x427c7a
cmp dword [ebp - 0x638], 8
lea eax, [ebp - 0x64c]
push 0x20019
cmovae eax, dword [ebp - 0x64c]
lea ecx, [ebp - 0x628]
push eax
push SysReAllocString
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0
call fcn.00422d80
mov edi, dword [ebp - 0x628]
test eax, eax
jne 0x427c5b
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0x6c8], 0x208
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x6dc]
push eax
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x427c5b
mov eax, dword [ebp - 0x6dc]
cmp eax, 1
je 0x427a3a
cmp eax, 2
je 0x427a3a
mov eax, 0xd
jmp 0x427a67
mov eax, dword [ebp - 0x6c8]
test eax, eax
je 0x427a5c
test al, 1
jne 0x427a55
shr eax, 1
cmp word [ebp + eax*2 - 0x20e], 0
je 0x427a65
mov eax, 0xd
jmp 0x427a67
xor eax, eax
mov word [ebp - 0x20c], ax
xor eax, eax
test eax, eax
jne 0x427c5b
mov ebx, dword [sym.imp.MSVCR120.dll_tolower]
xor esi, esi
jmp 0x427a80
movzx eax, word [ebp + esi*2 - 0x20c]
push eax
call ebx
mov word [ebp + esi*2 - 0x20c], ax
add esp, 4
inc esi
cmp esi, 0x104
jb 0x427a80
xor eax, eax
mov dword [ebp - 0x650], 7
mov dword [ebp - 0x654], 0
mov word [ebp - 0x664], ax
cmp word [ebp - 0x20c], ax
jne 0x427ac9
xor ecx, ecx
jmp 0x427ae1
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427ad2
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x664]
call fcn.00420390
push 6
push 0
push str.res:__
lea ecx, [ebp - 0x664]
call fcn.00429550
test eax, eax
jne 0x427c3e
push 6
push eax
lea ecx, [ebp - 0x664]
call fcn.00420680
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0x6c8], 0x2f
push eax
lea ecx, [ebp - 0x664]
call fcn.00429750
mov ecx, eax
mov eax, dword [ebp - 0x654]
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x664]
call fcn.00420680
cmp dword [ebp - 0x650], 8
lea ecx, [ebp - 0x61c]
push 0x104
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x427bec
xor esi, esi
movzx eax, word [ebp + esi*2 - 0x61c]
push eax
call ebx
mov word [ebp + esi*2 - 0x61c], ax
add esp, 4
inc esi
cmp esi, 0x104
jb 0x427b82
cmp dword [ebp - 0x698], 8
lea eax, [ebp - 0x6ac]
mov ebx, dword [sym.imp.MSVCR120.dll_wcsstr]
cmovae eax, dword [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x61c]
push eax
call ebx
add esp, 8
test eax, eax
jne 0x427c2c
cmp dword [ebp - 0x680], 8
lea eax, [ebp - 0x694]
cmovae eax, dword [ebp - 0x694]
push eax
lea eax, [ebp - 0x61c]
push eax
call ebx
jmp 0x427c25
cmp dword [ebp - 0x654], 0
jbe 0x427c3e
cmp dword [ebp - 0x680], 8
lea ecx, [ebp - 0x694]
lea eax, [ebp - 0x664]
cmovae ecx, dword [ebp - 0x694]
cmp dword [ebp - 0x650], 8
push ecx
cmovae eax, dword [ebp - 0x664]
push eax
call dword [sym.imp.MSVCR120.dll_wcsstr]
add esp, 8
test eax, eax
je 0x427c3e
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x700]
call fcn.00429660
cmp dword [ebp - 0x650], 8
jb 0x427c55
push dword [ebp - 0x664]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ebx, dword [ebp - 0x6f4]
test edi, edi
je 0x427c70
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
inc ebx
mov dword [ebp - 0x6d4], 0x104
cmp dword [ebp - 0x638], 8
mov dword [ebp - 0x6f4], ebx
jb 0x427ca2
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x638], 7
cmp dword [ebp - 0x668], 8
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
jb 0x427794
push dword [ebp - 0x67c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
jmp 0x427794
mov esi, dword [ebp - 0x700]
mov ebx, dword [ebp - 0x6fc]
cmp esi, ebx
je 0x427d0f
nop
cmp dword [esi + 0x14], 8
jb 0x427cfa
mov eax, dword [esi]
jmp 0x427cfc
mov eax, esi
push eax
lea ecx, [ebp - 0x70c]
call fcn.004231e0
add esi, 0x18
cmp esi, ebx
jne 0x427cf0
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi]
cmp esi, edi
je 0x42800a
nop
cmp dword [esi + 0x24], 8
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x6c8], eax
lea eax, [esi + 0x10]
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0
mov dword [ebp - 0x6e4], 0
jb 0x427d52
mov eax, dword [eax]
push 0
push 0
push 0x2001f
push 0
push 0
push eax
push dword [ebp - 0x70c]
lea ecx, [ebp - 0x6ec]
call fcn.00421d70
mov ecx, dword [ebp - 0x6ec]
test eax, eax
jne 0x427fb0
push 6
xor eax, eax
mov dword [ebp - 0x620], 7
push str.res:__
lea ecx, [ebp - 0x634]
mov dword [ebp - 0x624], 0
mov word [ebp - 0x634], ax
call fcn.00420390
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x634]
call fcn.00429060
mov ecx, dword [ebp - 0x624]
or eax, 0xffffffff
sub eax, ecx
cmp eax, 1
jbe 0x42801d
lea ebx, [ecx + 1]
cmp ebx, 0x7ffffffe
ja 0x42801d
mov edx, dword [ebp - 0x620]
cmp edx, ebx
jae 0x427e79
push ecx
push ebx
lea ecx, [ebp - 0x634]
call fcn.0041fc10
mov edx, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x624]
test ebx, ebx
je 0x427e4b
cmp edx, 8
lea eax, [ebp - 0x634]
mov edx, 0x2f
cmovae eax, dword [ebp - 0x634]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x634]
cmp dword [ebp - 0x620], 8
mov dword [ebp - 0x624], ebx
cmovae eax, dword [ebp - 0x634]
xor ecx, ecx
mov word [eax + ebx*2], cx
mov edx, dword [ebp - 0x6c8]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
mov edx, dword [edx]
cmp word [edx], ax
jne 0x427e9a
xor ecx, ecx
jmp 0x427eaf
test ebx, ebx
jne 0x427e12
cmp edx, 8
mov dword [ebp - 0x624], ebx
lea eax, [ebp - 0x634]
cmovae eax, dword [ebp - 0x634]
xor ecx, ecx
mov word [eax], cx
jmp 0x427e4b
mov ecx, edx
lea ebx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427ea0
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.00420390
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x634]
call fcn.00429060
cmp dword [ebp - 0x638], 8
jb 0x427ee9
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp dword [ebp - 0x620], 8
jb 0x427f74
mov edx, dword [ebp - 0x634]
test edx, edx
jne 0x427f7a
mov ebx, dword [ebp - 0x6ec]
mov eax, dword [ebp - 0x6c8]
push 4
mov eax, dword [eax + 4]
mov dword [ebp - 0x6dc], eax
lea eax, [ebp - 0x6dc]
push eax
push 4
push 0
push str.Contexts
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x620], 8
jb 0x427f45
push dword [ebp - 0x634]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ecx, dword [ebp - 0x6ec]
cmp byte [esi + 0xd], 0
jne 0x427fd7
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x427fbc
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x427fd7
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x427f68
jmp 0x427fd7
lea edx, [ebp - 0x634]
mov ecx, edx
lea ebx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427f80
sub ecx, ebx
mov ebx, dword [ebp - 0x6ec]
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push edx
push 1
push 0
push 0
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x427f06
mov dword [ebp - 0x6d8], 1
jmp 0x427f4b
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x427fd5
cmp esi, dword [eax + 8]
jne 0x427fd5
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x427fc5
mov esi, eax
test ecx, ecx
je 0x427fec
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0
cmp esi, edi
jne 0x427d20
mov ebx, dword [ebp - 0x6fc]
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x70c]
test eax, eax
je 0x428038
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x428032
push str.string_too_long
call dword [sym.imp.MSVCP120.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x6d8], 1
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi]
cmp esi, edi
je 0x42809c
mov edi, edi
push dword [esi + 0x28]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp byte [esi + 0xd], 0
jne 0x428092
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x428070
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x428092
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x428064
jmp 0x428092
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x428090
lea esp, [esp]
cmp esi, dword [eax + 8]
jne 0x428090
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x428080
mov esi, eax
cmp esi, edi
jne 0x428040
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x718]
test eax, eax
je 0x4280b3
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x700]
test eax, eax
je 0x428102
mov esi, eax
cmp eax, ebx
je 0x4280f3
cmp dword [esi + 0x14], 8
jb 0x4280d3
push dword [esi]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
add esi, 0x18
cmp esi, ebx
jne 0x4280c3
mov eax, dword [ebp - 0x700]
push eax
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
mov edi, dword [ebp - 0x6d0]
add esp, 4
push edi
push dword [edi]
lea eax, [ebp - 0x6dc]
push eax
lea ecx, [ebp - 0x6d0]
call fcn.004291e0
push dword [ebp - 0x6d0]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp dword [ebp - 0x680], 8
pop edi
pop esi
pop ebx
jb 0x42813f
push dword [ebp - 0x694]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x680], 7
cmp dword [ebp - 0x698], 8
mov dword [ebp - 0x684], 0
mov word [ebp - 0x694], ax
jb 0x428173
push dword [ebp - 0x6ac]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x698], 7
cmp dword [ebp - 0x6b0], 8
mov dword [ebp - 0x69c], 0
mov word [ebp - 0x6ac], ax
jb 0x4281a7
push dword [ebp - 0x6c4]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x6b0], 7
mov dword [ebp - 0x6b4], 0
mov word [ebp - 0x6c4], ax
lea ecx, [ebp - 0x6f0]
call fcn.004252d0
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x6d8]
xor ecx, ebp
call fcn.0043342a
mov esp, ebp
pop ebp
ret 0x10