Function at 0x428180
Capabilities:
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x718
mov eax, dword [0x43ffa8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x6c8], eax
lea eax, [ebp - 0x6f0]
push eax
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x6f0], 0
call fcn.004294c0
add esp, 4
test al, al
jne 0x4281d2
mov dword [ebp - 0x6d8], 1
jmp 0x428ef4
mov eax, dword [ebp - 0x6f0]
push ebx
push esi
push edi
test eax, eax
je 0x4281e3
mov edi, dword [eax]
jmp 0x4281e5
xor edi, edi
push edi
lea ecx, [ebp - 0x6c4]
call fcn.0041f530
push 0x104
push edi
call dword [sym.imp.MSVCR120.dll_wcsnlen]
mov ebx, eax
add esp, 8
xor esi, esi
test ebx, ebx
je 0x428227
jmp 0x428210
movzx eax, word [edi + esi*2]
push eax
call dword [sym.imp.MSVCR120.dll_tolower]
mov word [edi + esi*2], ax
add esp, 4
inc esi
cmp esi, ebx
jb 0x428210
push edi
lea ecx, [ebp - 0x6ac]
call fcn.0041f530
push 0xffffffffffffffff
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6d4]
mov dword [ebp - 0x6d4], 0x2e
push eax
lea ecx, [ebp - 0x6ac]
call fcn.0042a2b0
push eax
lea ecx, [ebp - 0x6ac]
call fcn.00420690
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6d4]
mov dword [ebp - 0x6d4], 0x5c
push eax
lea ecx, [ebp - 0x6ac]
call fcn.0042a2b0
push eax
push 0
lea ecx, [ebp - 0x6ac]
call fcn.00420690
push 0x10
xor eax, eax
mov dword [ebp - 0x680], 7
push str._acroiefavclient
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x684], 0
mov word [ebp - 0x694], ax
call fcn.004203a0
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6cc], 0
call fcn.00429960
cmp dword [ebp + 0x10], 0
mov dword [ebp - 0x6d0], eax
jle 0x428413
mov edi, dword [ebp - 0x6c8]
add edi, 8
jmp 0x428300
mov edx, dword [edi - 8]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
cmp word [edx], ax
jne 0x428329
xor ecx, ecx
jmp 0x42833f
mov ecx, edx
lea esi, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428330
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.004203a0
push 8
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
mov ebx, eax
lea ecx, [ebp - 0x6d0]
mov eax, dword [edi - 4]
add esp, 4
mov dword [ebx], eax
mov eax, dword [edi]
mov dword [ebx + 4], eax
lea eax, [ebp - 0x64c]
push eax
call fcn.00429ad0
mov esi, eax
cmp esi, dword [ebp - 0x6d0]
je 0x4283a5
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x42838c
mov eax, dword [eax]
push ecx
push eax
push dword [ebp - 0x63c]
lea ecx, [ebp - 0x64c]
push 0
call fcn.004204a0
test eax, eax
jns 0x4283ed
lea eax, [ebp - 0x64c]
mov dword [ebp - 0x6d4], eax
lea ecx, [ebp - 0x6d0]
lea eax, [ebp - 0x6dd]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0x4406a4
call fcn.00425630
push eax
add eax, 0x10
lea ecx, [ebp - 0x6d0]
push eax
push esi
lea eax, [ebp - 0x6c8]
push eax
call fcn.00425950
mov esi, dword [ebp - 0x6c8]
mov dword [esi + 0x28], ebx
cmp dword [ebp - 0x638], 8
jb 0x428407
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
add edi, 0xc
dec dword [ebp + 0x10]
jne 0x428300
push 0xf003f
push dword [0x43c038]
xor eax, eax
lea ecx, [ebp - 0x718]
xor ebx, ebx
mov dword [ebp - 0x700], eax
push SysReAllocString
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], eax
call fcn.004239d0
test eax, eax
jne 0x428d58
push eax
push eax
push 0x2001f
push eax
push eax
push dword [0x43c03c]
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0x70c], ebx
push dword [ebp - 0x718]
mov dword [ebp - 0x708], ebx
mov dword [ebp - 0x704], ebx
call fcn.004229b0
test eax, eax
jne 0x428d34
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
mov dword [ebp - 0x6f4], ebx
call fcn.00433c26
add esp, 0xc
mov dword [ebp - 0x6d4], 0x104
lea eax, [ebp - 0x6e8]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x414]
push eax
push ebx
push dword [ebp - 0x70c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x428a0f
mov dword [ebp - 0x668], 7
mov dword [ebp - 0x66c], eax
mov word [ebp - 0x67c], ax
cmp word [ebp - 0x414], ax
jne 0x428518
xor ecx, ecx
jmp 0x428530
lea ecx, [ebp - 0x414]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428521
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x67c]
call fcn.004203a0
mov edx, dword [0x43c038]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
cmp word [edx], ax
jne 0x42856f
xor ecx, ecx
jmp 0x428583
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428574
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.004203a0
mov edx, dword [str.MenuExt]
xor eax, eax
mov dword [ebp - 0x650], 7
mov dword [ebp - 0x654], 0
mov word [ebp - 0x664], ax
cmp word [edx], ax
jne 0x4285bc
xor ecx, ecx
jmp 0x4285d0
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4285c1
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x664]
call fcn.004203a0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00421140
cmp dword [ebp - 0x650], 8
jb 0x42860a
push dword [ebp - 0x664]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
push 0x5c
push 1
lea ecx, [ebp - 0x64c]
call fcn.00429d90
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00421140
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi + 4]
cmp byte [esi + 0xd], 0
jne 0x4286cb
cmp dword [ebp - 0x668], 8
lea eax, [ebp - 0x67c]
push dword [ebp - 0x66c]
cmovae eax, dword [ebp - 0x67c]
lea ecx, [esi + 0x10]
push eax
push dword [ecx + 0x10]
push 0
call fcn.004204a0
test eax, eax
jns 0x428673
mov esi, dword [esi + 8]
jmp 0x428677
mov edi, esi
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
je 0x428642
cmp edi, dword [ebp - 0x6d0]
je 0x4286cb
cmp dword [edi + 0x24], 8
lea eax, [edi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x428693
mov eax, dword [eax]
push ecx
push eax
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x67c]
push 0
call fcn.004204a0
test eax, eax
js 0x4286cb
cmp edi, dword [ebp - 0x6d0]
je 0x4286cb
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x700]
call fcn.0042a1c0
jmp 0x4289aa
cmp dword [ebp - 0x638], 8
lea eax, [ebp - 0x64c]
push 0x20019
cmovae eax, dword [ebp - 0x64c]
lea ecx, [ebp - 0x628]
push eax
push SysReAllocString
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0
call fcn.004239d0
mov edi, dword [ebp - 0x628]
test eax, eax
jne 0x42898b
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0x6c8], 0x208
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x6dc]
push eax
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x42898b
mov eax, dword [ebp - 0x6dc]
cmp eax, 1
je 0x42876a
cmp eax, 2
je 0x42876a
mov eax, 0xd
jmp 0x428797
mov eax, dword [ebp - 0x6c8]
test eax, eax
je 0x42878c
test al, 1
jne 0x428785
shr eax, 1
cmp word [ebp + eax*2 - 0x20e], 0
je 0x428795
mov eax, 0xd
jmp 0x428797
xor eax, eax
mov word [ebp - 0x20c], ax
xor eax, eax
test eax, eax
jne 0x42898b
mov ebx, dword [sym.imp.MSVCR120.dll_tolower]
xor esi, esi
jmp 0x4287b0
movzx eax, word [ebp + esi*2 - 0x20c]
push eax
call ebx
mov word [ebp + esi*2 - 0x20c], ax
add esp, 4
inc esi
cmp esi, 0x104
jb 0x4287b0
xor eax, eax
mov dword [ebp - 0x650], 7
mov dword [ebp - 0x654], 0
mov word [ebp - 0x664], ax
cmp word [ebp - 0x20c], ax
jne 0x4287f9
xor ecx, ecx
jmp 0x428811
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428802
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x664]
call fcn.004203a0
push 6
push 0
push str.res:__
lea ecx, [ebp - 0x664]
call fcn.004212e0
test eax, eax
jne 0x42896e
push 6
push eax
lea ecx, [ebp - 0x664]
call fcn.00420690
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0x6c8], 0x2f
push eax
lea ecx, [ebp - 0x664]
call fcn.0042a2b0
mov ecx, eax
mov eax, dword [ebp - 0x654]
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x664]
call fcn.00420690
cmp dword [ebp - 0x650], 8
lea ecx, [ebp - 0x61c]
push 0x104
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x42891c
xor esi, esi
movzx eax, word [ebp + esi*2 - 0x61c]
push eax
call ebx
mov word [ebp + esi*2 - 0x61c], ax
add esp, 4
inc esi
cmp esi, 0x104
jb 0x4288b2
cmp dword [ebp - 0x698], 8
lea eax, [ebp - 0x6ac]
mov ebx, dword [sym.imp.MSVCR120.dll_wcsstr]
cmovae eax, dword [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x61c]
push eax
call ebx
add esp, 8
test eax, eax
jne 0x42895c
cmp dword [ebp - 0x680], 8
lea eax, [ebp - 0x694]
cmovae eax, dword [ebp - 0x694]
push eax
lea eax, [ebp - 0x61c]
push eax
call ebx
jmp 0x428955
cmp dword [ebp - 0x654], 0
jbe 0x42896e
cmp dword [ebp - 0x680], 8
lea ecx, [ebp - 0x694]
lea eax, [ebp - 0x664]
cmovae ecx, dword [ebp - 0x694]
cmp dword [ebp - 0x650], 8
push ecx
cmovae eax, dword [ebp - 0x664]
push eax
call dword [sym.imp.MSVCR120.dll_wcsstr]
add esp, 8
test eax, eax
je 0x42896e
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x700]
call fcn.0042a1c0
cmp dword [ebp - 0x650], 8
jb 0x428985
push dword [ebp - 0x664]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ebx, dword [ebp - 0x6f4]
test edi, edi
je 0x4289a0
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
inc ebx
mov dword [ebp - 0x6d4], 0x104
cmp dword [ebp - 0x638], 8
mov dword [ebp - 0x6f4], ebx
jb 0x4289d2
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x638], 7
cmp dword [ebp - 0x668], 8
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
jb 0x4284c4
push dword [ebp - 0x67c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
jmp 0x4284c4
mov esi, dword [ebp - 0x700]
mov ebx, dword [ebp - 0x6fc]
cmp esi, ebx
je 0x428a3f
nop
cmp dword [esi + 0x14], 8
jb 0x428a2a
mov eax, dword [esi]
jmp 0x428a2c
mov eax, esi
push eax
lea ecx, [ebp - 0x70c]
call fcn.00423e30
add esi, 0x18
cmp esi, ebx
jne 0x428a20
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi]
cmp esi, edi
je 0x428d3a
nop
cmp dword [esi + 0x24], 8
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x6c8], eax
lea eax, [esi + 0x10]
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0
mov dword [ebp - 0x6e4], 0
jb 0x428a82
mov eax, dword [eax]
push 0
push 0
push 0x2001f
push 0
push 0
push eax
push dword [ebp - 0x70c]
lea ecx, [ebp - 0x6ec]
call fcn.004229b0
mov ecx, dword [ebp - 0x6ec]
test eax, eax
jne 0x428ce0
push 6
xor eax, eax
mov dword [ebp - 0x620], 7
push str.res:__
lea ecx, [ebp - 0x634]
mov dword [ebp - 0x624], 0
mov word [ebp - 0x634], ax
call fcn.004203a0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x634]
call fcn.00421140
mov ecx, dword [ebp - 0x624]
or eax, 0xffffffff
sub eax, ecx
cmp eax, 1
jbe 0x428d4d
lea ebx, [ecx + 1]
cmp ebx, 0x7ffffffe
ja 0x428d4d
mov edx, dword [ebp - 0x620]
cmp edx, ebx
jae 0x428ba9
push ecx
push ebx
lea ecx, [ebp - 0x634]
call fcn.0041fc20
mov edx, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x624]
test ebx, ebx
je 0x428b7b
cmp edx, 8
lea eax, [ebp - 0x634]
mov edx, 0x2f
cmovae eax, dword [ebp - 0x634]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x634]
cmp dword [ebp - 0x620], 8
mov dword [ebp - 0x624], ebx
cmovae eax, dword [ebp - 0x634]
xor ecx, ecx
mov word [eax + ebx*2], cx
mov edx, dword [ebp - 0x6c8]
xor eax, eax
mov dword [ebp - 0x638], 7
mov dword [ebp - 0x63c], 0
mov word [ebp - 0x64c], ax
mov edx, dword [edx]
cmp word [edx], ax
jne 0x428bca
xor ecx, ecx
jmp 0x428bdf
test ebx, ebx
jne 0x428b42
cmp edx, 8
mov dword [ebp - 0x624], ebx
lea eax, [ebp - 0x634]
cmovae eax, dword [ebp - 0x634]
xor ecx, ecx
mov word [eax], cx
jmp 0x428b7b
mov ecx, edx
lea ebx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428bd0
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64c]
call fcn.004203a0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x634]
call fcn.00421140
cmp dword [ebp - 0x638], 8
jb 0x428c19
push dword [ebp - 0x64c]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp dword [ebp - 0x620], 8
jb 0x428ca4
mov edx, dword [ebp - 0x634]
test edx, edx
jne 0x428caa
mov ebx, dword [ebp - 0x6ec]
mov eax, dword [ebp - 0x6c8]
push 4
mov eax, dword [eax + 4]
mov dword [ebp - 0x6dc], eax
lea eax, [ebp - 0x6dc]
push eax
push 4
push 0
push str.Contexts
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x620], 8
jb 0x428c75
push dword [ebp - 0x634]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ecx, dword [ebp - 0x6ec]
cmp byte [esi + 0xd], 0
jne 0x428d07
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x428cec
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x428d07
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x428c98
jmp 0x428d07
lea edx, [ebp - 0x634]
mov ecx, edx
lea ebx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428cb0
sub ecx, ebx
mov ebx, dword [ebp - 0x6ec]
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push edx
push 1
push 0
push 0
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x428c36
mov dword [ebp - 0x6d8], 1
jmp 0x428c7b
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x428d05
cmp esi, dword [eax + 8]
jne 0x428d05
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x428cf5
mov esi, eax
test ecx, ecx
je 0x428d1c
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0
cmp esi, edi
jne 0x428a50
mov ebx, dword [ebp - 0x6fc]
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x70c]
test eax, eax
je 0x428d68
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x428d62
push str.string_too_long
call dword [sym.imp.MSVCP120.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x6d8], 1
mov edi, dword [ebp - 0x6d0]
mov esi, dword [edi]
cmp esi, edi
je 0x428dcc
mov edi, edi
push dword [esi + 0x28]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp byte [esi + 0xd], 0
jne 0x428dc2
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x428da0
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x428dc2
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x428d94
jmp 0x428dc2
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x428dc0
lea esp, [esp]
cmp esi, dword [eax + 8]
jne 0x428dc0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x428db0
mov esi, eax
cmp esi, edi
jne 0x428d70
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x718]
test eax, eax
je 0x428de3
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x700]
test eax, eax
je 0x428e32
mov esi, eax
cmp eax, ebx
je 0x428e23
cmp dword [esi + 0x14], 8
jb 0x428e03
push dword [esi]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
add esi, 0x18
cmp esi, ebx
jne 0x428df3
mov eax, dword [ebp - 0x700]
push eax
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
mov edi, dword [ebp - 0x6d0]
add esp, 4
push edi
push dword [edi]
lea eax, [ebp - 0x6dc]
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00429e50
push dword [ebp - 0x6d0]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp dword [ebp - 0x680], 8
pop edi
pop esi
pop ebx
jb 0x428e6f
push dword [ebp - 0x694]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x680], 7
cmp dword [ebp - 0x698], 8
mov dword [ebp - 0x684], 0
mov word [ebp - 0x694], ax
jb 0x428ea3
push dword [ebp - 0x6ac]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x698], 7
cmp dword [ebp - 0x6b0], 8
mov dword [ebp - 0x69c], 0
mov word [ebp - 0x6ac], ax
jb 0x428ed7
push dword [ebp - 0x6c4]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x6b0], 7
mov dword [ebp - 0x6b4], 0
mov word [ebp - 0x6c4], ax
lea ecx, [ebp - 0x6f0]
call fcn.00425f90
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x6d8]
xor ecx, ebp
call fcn.00433bb2
mov esp, ebp
pop ebp
ret 0x10