Function at 0x40afc0
Capabilities:
Enumerate files on windows
Persist via run registry key
Query environment variable
Query or enumerate registry key

Disassembly:
push ebp
mov eax, 0x212c
mov ebp, esp
push edi
push esi
push ebx
call fcn.0041a2f0
sub esp, eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x20d4], sym.___gxx_personality_sj0
mov dword [ebp - 0x20cc], eax
lea eax, [ebp - 0x20ec]
mov dword [ebp - 0x20d0], 0x4f13e4
mov dword [ebp - 0x20c8], 0x40bb0a
mov dword [ebp - 0x20c4], esp
mov dword [esp], eax
call dbg._Unwind_SjLj_Register
mov eax, dword [ebp + 8]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
lea eax, [ebp - 0x20b4]
mov dword [esp + 0x10], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [esp], 0x80000001
mov dword [ebp - 0x20fc], eax
mov dword [ebp - 0x20e8], 1
call eax
sub esp, 0x14
test eax, eax
jne 0x40b130
lea edi, [ebp - 0x2014]
mov ecx, 0x3ff
mov dword [ebp - 0x2018], 0
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2078]
mov dword [ebp - 0x20b0], 0x1000
mov dword [ebp - 0x20ac], 0
mov dword [ebp - 0x2090], 0x1000
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x2094]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x2098]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x209c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x20a0]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x20a4]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x20a8]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x20ac]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x20b0]
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [esp + 0xc], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20b4]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov edx, dword [ebp - 0x20a0]
sub esp, 0x30
test edx, edx
jne 0x40b5f0
lea eax, [ebp - 0x20b4]
mov dword [esp + 0xc], 0x20019
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [esp], 0x80000002
mov eax, dword [ebp - 0x20fc]
mov dword [ebp - 0x20e8], 1
call eax
sub esp, 0x14
test eax, eax
je 0x40b7c8
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x20fc], eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x20f8], eax
mov dword [esp], str.appdata
call sym._getenv
mov dword [ebp - 0x20f0], eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._sMicrosoftInternet_ExplorerQuick_Launch
mov eax, dword [ebp - 0x20f8]
mov dword [esp], eax
call sym.sprintf_char__char_const__..._
mov ebx, dword [ebp - 0x20fc]
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x20f8]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 1
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x20f8], eax
sub esp, 8
cmp eax, 0xffffffff
jne 0x40b2ba
jmp 0x40b53a
lea edx, [eax + 8]
lea ecx, [ebp - 0x2028]
mov dword [eax], edx
mov edx, dword [ebp - 0x2030]
cmp edx, ecx
je 0x40b8a0
mov dword [eax], edx
mov edx, dword [ebp - 0x2028]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x202c]
mov dword [eax + 4], edx
mov eax, dword [ebp + 8]
add dword [eax + 4], 0x18
mov eax, dword [ebp - 0x2048]
lea edi, [ebp - 0x2040]
cmp eax, edi
je 0x40b244
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2060]
lea esi, [ebp - 0x2058]
cmp eax, esi
je 0x40b25c
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2090]
lea edi, [ebp - 0x2088]
cmp eax, edi
je 0x40b274
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2078]
lea esi, [ebp - 0x2070]
cmp eax, esi
je 0x40b28c
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x20fc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20f8]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 1
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
sub esp, 8
test eax, eax
je 0x40b528
test byte [ebp - 0x2018], 0x10
jne 0x40b28c
lea eax, [ebp - 0x2070]
lea ecx, [ebp - 0x2078]
mov dword [ebp - 0x2078], eax
mov byte [esp + 8], 0
mov dword [esp + 4], 0x4f646a
mov dword [esp], str.MicrosoftInternet_ExplorerQuick_Launch_
mov dword [ebp - 0x20e8], 1
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char_const__char_const__char_const__std::forward_iterator_tag_
mov esi, dword [ebp - 0x20f0]
lea eax, [ebp - 0x2088]
sub esp, 0xc
mov dword [ebp - 0x2090], eax
mov eax, 0xffffffff
test esi, esi
je 0x40b324
mov dword [esp], esi
call sym._strlen
add eax, dword [ebp - 0x20f0]
lea ecx, [ebp - 0x2090]
mov dword [ebp - 0x20f4], ecx
mov byte [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20f0]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 8
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char_const__char_const__char_const__std::forward_iterator_tag_
mov esi, dword [ebp - 0x2090]
lea ebx, [ebp - 0x2088]
mov edi, dword [ebp - 0x208c]
sub esp, 0xc
mov edx, dword [ebp - 0x2074]
cmp esi, ebx
mov ebx, 0xf
cmovne ebx, dword [ebp - 0x2088]
lea ecx, [edi + edx]
mov eax, ebx
mov ebx, dword [ebp - 0x2078]
cmp ecx, eax
jbe 0x40b3a5
lea eax, [ebp - 0x2070]
cmp ebx, eax
mov eax, 0xf
cmovne eax, dword [ebp - 0x2070]
cmp ecx, eax
jbe 0x40b558
mov dword [esp + 4], edx
mov dword [esp], ebx
mov ecx, dword [ebp - 0x20f4]
mov dword [ebp - 0x20e8], 9
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_append_char_const__unsigned_int_
sub esp, 8
lea edi, [ebp - 0x2058]
lea edx, [eax + 8]
mov dword [ebp - 0x2060], edi
mov ecx, dword [eax]
cmp ecx, edx
je 0x40b5c0
mov dword [ebp - 0x2060], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2058], ecx
mov ecx, dword [eax + 4]
lea ebx, [ebp - 0x1fec]
mov dword [ebp - 0x205c], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [eax], edx
mov edx, ebx
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x40b40a
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x3fffffff
sbb edx, 3
sub eax, dword [ebp - 0x205c]
sub edx, ebx
cmp edx, eax
ja 0x40baf4
mov dword [esp + 4], edx
lea ecx, [ebp - 0x2060]
mov dword [esp], ebx
mov dword [ebp - 0x20e8], 0xa
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_append_char_const__unsigned_int_
lea edi, [ebp - 0x2040]
lea ecx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x2048], edi
mov edx, dword [eax]
cmp edx, ecx
je 0x40b590
mov dword [ebp - 0x2048], edx
mov edx, dword [eax + 8]
mov dword [ebp - 0x2040], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2044], edx
mov dword [eax], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
lea eax, [ebp - 0x2048]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2030]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 0xb
call sym.GetShortcutPath_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 8]
mov eax, dword [eax + 4]
cmp eax, dword [edi + 8]
jne 0x40b1f8
lea ebx, [ebp - 0x2030]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x20e8], 0xc
call sym.__ZNSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS5_EE17_M_realloc_insertIJS5_EEEvN9__gnu_cxx17__normal_it
mov eax, dword [ebp - 0x2030]
lea edx, [ebp - 0x2028]
sub esp, 8
cmp eax, edx
je 0x40b22c
mov dword [esp], eax
call sym.operator_delete_void_
jmp 0x40b22c
mov eax, dword [ebp - 0x20f8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
sub esp, 4
lea eax, [ebp - 0x20ec]
mov dword [esp], eax
call sym.__Unwind_SjLj_Unregister
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], edi
lea ecx, [ebp - 0x2078]
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x20e8], 9
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_replace_unsigned_int__unsigned_int__char_const__unsigned_int_
sub esp, 0x10
jmp 0x40b3c4
mov edx, dword [eax + 8]
mov dword [ebp - 0x2040], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x203c], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x2038], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x2034], edx
jmp 0x40b496
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2058], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2054], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x2050], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x204c], ecx
jmp 0x40b3ec
mov dword [ebp - 0x20f0], 0
lea eax, [ebp - 0x2090]
mov dword [ebp - 0x20f4], eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x20f8], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov dword [ebp - 0x2100], eax
jmp 0x40b639
add dword [ebp - 0x20f0], 1
mov eax, dword [ebp - 0x20f0]
cmp dword [ebp - 0x20a0], eax
jbe 0x40b130
mov dword [ebp - 0x2090], 0x1000
mov byte [ebp - 0x1018], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov eax, dword [ebp - 0x20f4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x20f8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20f0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20b4]
mov dword [esp], eax
mov eax, dword [ebp - 0x2100]
mov dword [ebp - 0x20e8], 1
call eax
sub esp, 0x20
test eax, eax
jne 0x40b620
mov eax, dword [ebp - 0x20f8]
lea ecx, [ebp - 0x2030]
mov dword [esp], eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const___clone_.isra.0_
sub esp, 4
lea ecx, [ebp - 0x2048]
mov dword [esp], str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [ebp - 0x20e8], 2
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const___clone_.isra.0_
sub esp, 4
lea eax, [ebp - 0x2060]
lea edi, [ebp - 0x2030]
lea ebx, [ebp - 0x2048]
mov dword [ebp - 0x2104], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x80000001
mov dword [esp], eax
mov dword [ebp - 0x20e8], 3
call sym.GetRegistryKeyValue_HKEY____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
je 0x40b736
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2030]
lea edx, [ebp - 0x2028]
cmp eax, edx
je 0x40b74e
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2104]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 4
call sym.FilterProgramName_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x40baa0
lea eax, [ecx + 8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2060]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x205c]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char__char__char__std::forward_iterator_tag_
mov eax, dword [ebp + 8]
sub esp, 0xc
add dword [eax + 4], 0x18
mov eax, dword [ebp - 0x2060]
lea edx, [ebp - 0x2058]
cmp eax, edx
je 0x40b620
mov dword [esp], eax
call sym.operator_delete_void_
jmp 0x40b620
lea edi, [ebp - 0x2014]
mov ecx, 0x3ff
mov dword [ebp - 0x2018], 0
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2078]
mov dword [ebp - 0x20b0], 0x1000
mov dword [ebp - 0x20ac], 0
mov dword [ebp - 0x2090], 0x1000
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x2094]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x2098]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x209c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x20a0]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x20a4]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x20a8]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x20ac]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x20b0]
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [esp + 0xc], 0
mov dword [ebp - 0x20fc], eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20b4]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov eax, dword [ebp - 0x20a0]
sub esp, 0x30
test eax, eax
jne 0x40b8d0
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x20f8], eax
jmp 0x40b18e
mov edx, dword [ebp - 0x2028]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2024]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x2020]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x201c]
mov dword [eax + 0x14], edx
jmp 0x40b21c
mov dword [ebp - 0x20f0], 0
lea eax, [ebp - 0x2090]
mov dword [ebp - 0x20f4], eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x20f8], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov dword [ebp - 0x2100], eax
jmp 0x40b919
add dword [ebp - 0x20f0], 1
mov eax, dword [ebp - 0x20f0]
cmp dword [ebp - 0x20a0], eax
jbe 0x40b18e
mov dword [ebp - 0x2090], 0x1000
mov byte [ebp - 0x1018], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov eax, dword [ebp - 0x20f4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x20f8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20f0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20b4]
mov dword [esp], eax
mov eax, dword [ebp - 0x2100]
mov dword [ebp - 0x20e8], 1
call eax
sub esp, 0x20
test eax, eax
jne 0x40b900
mov eax, dword [ebp - 0x20f8]
lea ecx, [ebp - 0x2030]
mov dword [esp], eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const___clone_.isra.0_
sub esp, 4
lea ecx, [ebp - 0x2048]
mov dword [esp], str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [ebp - 0x20e8], 5
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const___clone_.isra.0_
sub esp, 4
lea eax, [ebp - 0x2060]
lea edi, [ebp - 0x2030]
lea ebx, [ebp - 0x2048]
mov dword [ebp - 0x2104], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x80000002
mov dword [esp], eax
mov dword [ebp - 0x20e8], 6
call sym.GetRegistryKeyValue_HKEY____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
je 0x40ba16
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2030]
lea edx, [ebp - 0x2028]
cmp eax, edx
je 0x40ba2e
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2104]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 7
call sym.FilterProgramName_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x40bad0
lea eax, [ecx + 8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2060]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x205c]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char__char__char__std::forward_iterator_tag_
mov eax, dword [ebp + 8]
sub esp, 0xc
add dword [eax + 4], 0x18
mov eax, dword [ebp - 0x2060]
lea edx, [ebp - 0x2058]
cmp eax, edx
je 0x40b900
mov dword [esp], eax
call sym.operator_delete_void_
jmp 0x40b900
mov eax, dword [ebp - 0x2104]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x20e8], 4
call sym.__ZNSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS5_EE17_M_realloc_insertIJRKS5_EEEvN9__gnu_cxx17__normal_
sub esp, 8
jmp 0x40b7a3
mov eax, dword [ebp - 0x2104]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x20e8], 7
call sym.__ZNSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS5_EE17_M_realloc_insertIJRKS5_EEEvN9__gnu_cxx17__normal_
sub esp, 8
jmp 0x40ba7f
mov dword [esp], 0x4f62d4
mov dword [ebp - 0x20e8], 0xa
call method.std.__throw_length_error_char_const_
add ebp, 0x18
mov eax, dword [ebp - 0x20e4]
cmp dword [ebp - 0x20e8], 0xb
mov dword [ebp - 0x20f0], eax
ja case.default.0x40bb28
mov eax, dword [ebp - 0x20e8]
jmp dword [eax*4 + 0x4f646c]
ud2
mov eax, dword [ebp - 0x2030]
lea edx, [ebp - 0x2028]
cmp eax, edx
je case.0x40bb28.14
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
je case.0x40bb28.15
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2060]
lea edx, [ebp - 0x2058]
cmp eax, edx
je case.0x40bb28.16
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2090]
lea edx, [ebp - 0x2088]
cmp eax, edx
je case.0x40bb28.17
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2078]
lea edx, [ebp - 0x2070]
cmp eax, edx
je case.0x40bb28.24
mov dword [esp], eax
call sym.operator_delete_void_
mov ecx, dword [ebp + 8]
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector__
mov eax, dword [ebp - 0x20f0]
mov dword [esp], eax
mov dword [ebp - 0x20e8], 0xffffffff
call dbg._Unwind_SjLj_Resume
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 0x2040]
cmp eax, edx
je case.0x40bb28.23
mov dword [esp], eax
call sym.operator_delete_void_
mov eax, dword [ebp - 0x2030]
lea edx, [ebp - 0x2028]
cmp eax, edx
jne 0x40bba1
jmp case.0x40bb28.24
mov eax, dword [ebp - 0x2060]
lea edx, [ebp - 0x2058]
cmp eax, edx
jne 0x40bba1
jmp case.0x40bb28.24