Function at 0x40db77
Capabilities:
Get common file path
Persist via run registry key
Query environment variable

Disassembly:
push 0x314
mov eax, 0x471238
call fcn.0045986c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x27c], eax
call fcn.0040a3c3
mov al, byte [eax]
test al, al
jne 0x40dc61
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
and dword [ebp - 4], 0
lea eax, [ebp - 0x318]
push str.CSystemCommands::GetSafeEnv____bool____start
push eax
call fcn.00406795
pop ecx
pop ecx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 1
call fcn.004064f6
push 0
push 1
mov esi, edi
call fcn.0040866c
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x320]
call fcn.00406bd8
push 0x4791e4
push dword [ebp - 0x27c]
mov ebx, 0x2710
call fcn.00406295
cmp dword [ebp - 0x264], 0
je 0x40e720
mov eax, dword [ebp - 0x264]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40dc30
sub eax, edx
je 0x40e720
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x40dd9a
xor eax, eax
jmp 0x40ddb5
lea eax, [ebp - 0x318]
push eax
mov dword [ebp - 4], 2
call fcn.004063dd
mov byte [ebp - 4], 3
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x40dc97
mov esi, dword [eax + 4]
jmp 0x40dc9a
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv____bool____start
push eax
call fcn.00406795
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 3
call fcn.0040866c
lea eax, [ebp - 0x278]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40dd45
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x50a
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 2
call fcn.00406348
or dword [ebp - 4], 0xffffffff
jmp 0x40dc05
lea eax, [edi + edi]
call fcn.0045f060
mov dword [ebp - 0x10], esp
mov esi, esp
push 3
push edi
push dword [ebp - 0x264]
call fcn.0040ac0e
push eax
lea esi, [ebp - 0x258]
call fcn.004062ba
push 0x12
pop edi
mov dword [ebp - 4], edi
call fcn.0040a3c3
cmp byte [eax], 0
jne 0x40de87
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
mov eax, esi
push eax
push ecx
push 0x4792c8
push ecx
lea eax, [ebp - 0x318]
push str.CSystemCommands::GetSafeEnv__varName
push eax
mov byte [ebp - 4], 0x13
call fcn.00406795
add esp, 0xc
push eax
call fcn.00406795
add esp, 0xc
push eax
call fcn.00406a28
pop ecx
pop ecx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x14
call fcn.004064f6
push 0
push 1
mov esi, edi
call fcn.0040866c
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x12
call fcn.00406bd8
mov esi, 0x104
push esi
call fcn.00453a19
xor edi, edi
pop ecx
mov dword [ebp - 0x26c], eax
cmp eax, edi
jne 0x40dfd6
push edi
push 1
lea esi, [ebp - 0x258]
call fcn.0040866c
xor al, al
lea esp, [ebp - 0x330]
call fcn.004598c8
ret
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 4], 0x15
call fcn.004063dd
mov byte [ebp - 4], 0x16
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x18], 8
jb 0x40deba
mov esi, dword [eax + 4]
jmp 0x40debd
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv__varName
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x4792c8
push eax
call fcn.00406795
pop ecx
pop ecx
lea ecx, [ebp - 0x258]
push ecx
push eax
call fcn.00406a28
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 0x16
call fcn.0040866c
lea eax, [ebp - 0x278]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40df7f
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x516
push str..SystemCommands.cpp
push eax
push ebx
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x19
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x16
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x15
call fcn.00406348
mov dword [ebp - 4], edi
jmp 0x40de4f
push esi
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov ebx, eax
mov dword [ebp - 0x274], ebx
cmp ebx, esi
jbe 0x40e20f
call fcn.0040a3c3
cmp byte [eax], 0
jne 0x40e079
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
push ebx
push ecx
push 0x4792c8
push ecx
lea eax, [ebp - 0x318]
push str.CSystemCommands::GetSafeEnv__need_to_re_allocate_string_to
push eax
mov byte [ebp - 4], 0x1c
call fcn.00406795
add esp, 0xc
push eax
call fcn.00406795
add esp, 0xc
push eax
call fcn.00404699
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x1d
call fcn.004064f6
push 0
push 1
mov esi, edi
call fcn.0040866c
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x12
call fcn.00406bd8
jmp 0x40e1ca
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004063dd
mov byte [ebp - 4], 0x1f
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x18], 8
jb 0x40e0ac
mov esi, dword [eax + 4]
jmp 0x40e0af
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv__need_to_re_allocate_string_to
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x4792c8
push eax
call fcn.00406795
pop ecx
pop ecx
push ebx
push eax
call fcn.00404699
push edi
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 0x1f
call fcn.0040866c
lea eax, [ebp - 0x260]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40e16c
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x51e
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x22
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push edi
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x1f
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x1e
call fcn.00406348
mov dword [ebp - 4], 0x12
jmp 0x40e1ca
push dword [ebp - 0x26c]
call fcn.00456056
pop ecx
push ebx
call fcn.00453a19
pop ecx
mov dword [ebp - 0x26c], eax
test eax, eax
jne 0x40e1ff
xor bl, bl
push 0
push 1
lea esi, [ebp - 0x258]
call fcn.0040866c
mov al, bl
jmp 0x40de7b
push ebx
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov ebx, eax
push dword [ebp - 0x26c]
test ebx, ebx
je 0x40e265
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x40e22e
xor eax, eax
jmp 0x40e249
lea eax, [edi + edi]
call fcn.0045f060
mov dword [ebp - 0x10], esp
mov esi, esp
push 3
push edi
push dword [ebp - 0x26c]
call fcn.0040ac0e
push eax
push dword [ebp - 0x27c]
call fcn.00406295
push dword [ebp - 0x26c]
call fcn.00456056
pop ecx
mov bl, 1
jmp 0x40e1e9
call fcn.00456056
pop ecx
call fcn.0040a3c3
cmp byte [eax], 0
jne 0x40e310
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
lea eax, [ebp - 0x318]
push str.CSystemCommands::GetSafeEnv__GetEnvironmentVariableA_fails
push eax
mov byte [ebp - 4], 0x25
call fcn.00406795
pop ecx
pop ecx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x26
call fcn.004064f6
push 0
push 1
mov esi, edi
call fcn.0040866c
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x12
call fcn.00406bd8
push dword [ebp - 0x264]
lea eax, [ebp - 0x268]
push eax
xor ebx, ebx
call fcn.0040ee82
push str.APPDATA
lea eax, [ebp - 0x268]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0040eec7
test eax, eax
jne 0x40e44c
push ebx
push 0x1c
jmp 0x40e47e
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 4], 0x27
call fcn.004063dd
mov byte [ebp - 4], 0x28
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 0x29
cmp dword [eax + 0x18], 8
jb 0x40e343
mov esi, dword [eax + 4]
jmp 0x40e346
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv__GetEnvironmentVariableA_fails
push eax
call fcn.00406795
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 0x28
call fcn.0040866c
lea eax, [ebp - 0x260]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x2a
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40e3f1
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x532
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x2b
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x28
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x27
call fcn.00406348
mov dword [ebp - 4], 0x12
jmp 0x40e2d7
push str.COMMONAPPDATA
lea eax, [ebp - 0x268]
push eax
call fcn.0040eec7
test eax, eax
jne 0x40e466
push ebx
push 0x23
jmp 0x40e47e
push str.ProgramFiles
lea eax, [ebp - 0x268]
push eax
call fcn.0040eec7
test eax, eax
jne 0x40e490
push ebx
push 0x26
lea eax, [ebp - 0x220]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov edi, eax
jmp 0x40e50d
push str.LOCALAPPDATA
lea eax, [ebp - 0x268]
push eax
call fcn.0040eec7
test eax, eax
jne 0x40e70c
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
push SysReAllocString
mov eax, 0x20019
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
call fcn.0040ae09
cmp eax, ebx
jne 0x40e500
push str.Local_AppData
lea eax, [ebp - 0x270]
push eax
lea esi, [ebp - 0x274]
lea edi, [ebp - 0x220]
call fcn.0040ae8e
lea esi, [ebp - 0x270]
call fcn.0040adf2
xor edi, edi
inc edi
jmp 0x40e502
xor edi, edi
lea esi, [ebp - 0x270]
call fcn.0040adf2
cmp edi, 1
jne 0x40e70c
lea eax, [ebp - 0x220]
push eax
push dword [ebp - 0x27c]
call fcn.00406295
call fcn.0040a3c3
cmp byte [eax], 0
jne 0x40e5c5
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
push dword [ebp - 0x27c]
lea eax, [ebp - 0x318]
push ecx
push 0x4792c8
push ecx
push str.CSystemCommands::GetSafeEnv__using_SHGetSpecialFolderPath__returns:
push eax
mov byte [ebp - 4], 0x2f
call fcn.00406795
add esp, 0xc
push eax
call fcn.00406795
add esp, 0xc
push eax
call fcn.00406a28
pop ecx
pop ecx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x30
call fcn.004064f6
push ebx
push 1
mov esi, edi
call fcn.0040866c
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x2e
call fcn.00406bd8
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.00406115
jmp 0x40e261
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 4], 0x31
call fcn.004063dd
mov byte [ebp - 4], 0x32
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 0x33
cmp dword [eax + 0x18], 8
jb 0x40e5f8
mov esi, dword [eax + 4]
jmp 0x40e5fb
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv__using_SHGetSpecialFolderPath__returns:
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x4792c8
push eax
call fcn.00406795
pop ecx
pop ecx
push dword [ebp - 0x27c]
push eax
call fcn.00406a28
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 0x32
call fcn.0040866c
lea eax, [ebp - 0x260]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x34
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40e6bf
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x55c
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x35
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x32
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x31
call fcn.00406348
jmp 0x40e5b2
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.00406115
push ebx
jmp 0x40de6c
call fcn.0040a3c3
cmp byte [eax], 0
jne 0x40e790
lea eax, [ebp - 0x320]
push eax
call fcn.00408287
lea eax, [ebp - 0x318]
push str.CSystemCommands::GetSafeEnv____varName__NULL__quits
push eax
mov dword [ebp - 4], 9
call fcn.00406795
pop ecx
pop ecx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040677b
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0xa
call fcn.004064f6
push 0
push 1
mov esi, edi
call fcn.0040866c
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x320]
call fcn.00406bd8
jmp 0x40de79
lea eax, [ebp - 0x318]
push eax
mov dword [ebp - 4], 0xb
call fcn.004063dd
mov byte [ebp - 4], 0xc
call fcn.0040a3c3
lea ecx, [ebp - 0x298]
call fcn.004062f3
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x40e7c6
mov esi, dword [eax + 4]
jmp 0x40e7c9
lea esi, [eax + 4]
lea eax, [ebp - 0x318]
push 0x479278
push eax
call fcn.00406795
pop ecx
pop ecx
push esi
push eax
call fcn.00406795
pop ecx
pop ecx
push 0x479270
push eax
call fcn.00406795
pop ecx
pop ecx
push str.CSystemCommands::GetSafeEnv____varName__NULL__quits
push eax
call fcn.00406795
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x298]
mov byte [ebp - 4], 0xc
call fcn.0040866c
lea eax, [ebp - 0x260]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x40e86f
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x318]
call fcn.004062d9
push 0x50f
push str..SystemCommands.cpp
push eax
push ebx
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x298]
call fcn.0040866c
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0xb
call fcn.00406348
jmp 0x40de79