Function at 0x4ea694
Capabilities:
Parse pe header

Disassembly:
push 0x108
mov eax, 0x56d990
call fcn.0054d478
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
call fcn.00462c28
mov al, byte [eax]
test al, al
jne 0x4ea7a8
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
and dword [ebp - 4], 0
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__start
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xfc]
call fcn.00407660
lea eax, [ebp - 0x40]
xor ebx, ebx
push eax
mov ecx, str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerUser_Preferences
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x74], ebx
call fcn.004165e0
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x40]
cmp dword [eax - 0xc], ebx
jne 0x4ea9c7
call fcn.00462c28
cmp byte [eax], bl
jne 0x4ea8bd
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__FullKey_is_empty
push eax
mov byte [ebp - 4], 0xa
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xb
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 9
call fcn.00407660
lea ecx, [ebp - 0x40]
call fcn.00409cb0
xor al, al
call fcn.0054d4d4
ret 4
lea eax, [ebp - 0xf4]
push eax
mov dword [ebp - 4], 2
call fcn.004068d0
mov byte [ebp - 4], 3
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x4ea7db
mov esi, dword [eax + 4]
jmp 0x4ea7de
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__start
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.00409c40
lea eax, [ebp - 0x70]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4ea86e
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0xf4
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 2
call fcn.004067e0
or dword [ebp - 4], 0xffffffff
jmp 0x4ea70c
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0xc
call fcn.004068d0
mov byte [ebp - 4], 0xd
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x18], 8
jb 0x4ea8ed
mov esi, dword [eax + 4]
jmp 0x4ea8f0
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__FullKey_is_empty
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xd
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4ea980
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0xfe
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x10
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xd
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0xc
call fcn.004067e0
jmp 0x4ea796
lea esi, [ebp - 0x44]
call fcn.00403ee0
lea eax, [ebp - 0x48]
push eax
mov ecx, str.HKEY_
mov byte [ebp - 4], 0x13
call fcn.004165e0
mov byte [ebp - 4], 0x14
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov eax, dword [eax - 0xc]
mov ecx, dword [ecx - 0xc]
sub ecx, eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x40]
call fcn.004ebcb4
mov byte [ebp - 4], 0x15
mov ecx, dword [eax]
mov esi, dword [ebp - 0x44]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x4eaa40
cmp dword [esi + 0xc], ebx
jl 0x4eaa32
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x4eaa32
call fcn.004048c0
mov edi, eax
mov eax, esi
call fcn.00409c70
add edi, 0x10
mov dword [ebp - 0x44], edi
jmp 0x4eaa40
mov ebx, dword [ecx - 0xc]
push ecx
lea eax, [ebp - 0x44]
call fcn.00404820
xor ebx, ebx
lea ecx, [ebp - 0x6c]
call fcn.00409cb0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x13
call fcn.00409cb0
mov esi, dword [ebp - 0x38]
lea eax, [esi + 8]
push eax
mov eax, dword [ebp - 0x44]
call fcn.00406690
push ebx
push ebx
add esi, 4
push esi
push ebx
push ebx
push 4
push 4
lea esi, [ebp - 0x44]
call fcn.0045acf0
push eax
call dword [sym.imp.ADVAPI32.dll_GetNamedSecurityInfoW]
cmp eax, ebx
je 0x4eabfb
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eaaf1
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__GetNamedSecurityInfo_FAIL
push eax
mov byte [ebp - 4], 0x16
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x17
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x13
call fcn.00407660
lea ecx, [ebp - 0x44]
call fcn.00409cb0
jmp 0x4ea796
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x18
call fcn.004068d0
mov byte [ebp - 4], 0x19
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x1a
cmp dword [eax + 0x18], 8
jb 0x4eab21
mov esi, dword [eax + 4]
jmp 0x4eab24
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__GetNamedSecurityInfo_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x19
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1b
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eabb4
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x109
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1c
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x19
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x18
call fcn.004067e0
jmp 0x4eaae4
mov eax, dword [ebp - 0x40]
mov edi, dword [eax - 0xc]
mov ecx, 0x5952a8
lea esi, [ebp - 0x40]
call fcn.00403f00
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x48]
push eax
dec ecx
mov eax, esi
call fcn.004ebcb4
lea eax, [ebp - 0x74]
push eax
push 0x40000
push ebx
mov byte [ebp - 4], 0x1f
push dword [ebp - 0x48]
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4eaf35
call fcn.00462c28
cmp byte [eax], 0
jne 0x4ead18
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__RegOpenKeyEx_FAIL
push eax
mov byte [ebp - 4], 0x20
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x21
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x1f
call fcn.00407660
mov edi, 0x2710
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eae30
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__return_false
push eax
mov byte [ebp - 4], 0x32
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x34]
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x1f
call fcn.00407660
lea ecx, [ebp - 0x48]
call fcn.00409cb0
jmp 0x4eaae4
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x22
call fcn.004068d0
mov byte [ebp - 4], 0x23
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x24
cmp dword [eax + 0x18], 8
jb 0x4ead48
mov esi, dword [eax + 4]
jmp 0x4ead4b
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__RegOpenKeyEx_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x23
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov edi, 0x2710
push edi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x25
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eaddb
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x111
push str..PathPermissions.cpp
push eax
push edi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x26
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x23
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x22
call fcn.004067e0
mov dword [ebp - 4], 0x1f
jmp 0x4eaca9
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x34
call fcn.004068d0
mov byte [ebp - 4], 0x35
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x36
cmp dword [eax + 0x18], 8
jb 0x4eae60
mov esi, dword [eax + 4]
jmp 0x4eae63
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__return_false
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x35
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push edi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x37
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eaeee
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x11a
push str..PathPermissions.cpp
push eax
push edi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x38
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x35
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0xf4]
call fcn.004067e0
jmp 0x4ead0b
lea eax, [ebp - 0x100]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x4eb096
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eaf97
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__OpenProcessToken_FAIL
push eax
mov byte [ebp - 4], 0x3b
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x3c
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004068d0
mov byte [ebp - 4], 0x3e
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x3f
cmp dword [eax + 0x18], 8
jb 0x4eafc7
mov esi, dword [eax + 4]
jmp 0x4eafca
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__OpenProcessToken_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3e
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x40
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb05a
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x120
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x41
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x3e
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x3d
jmp 0x4eaefe
mov esi, dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
lea eax, [ebp - 0x68]
push eax
xor edi, edi
push edi
push edi
push 1
push dword [ebp - 0x100]
call esi
push dword [ebp - 0x68]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push edi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call edi
lea ecx, [ebp - 0x68]
push ecx
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
push eax
push 1
push dword [ebp - 0x100]
call esi
mov eax, dword [ebp - 0x6c]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov esi, eax
add esi, 0x10
push esi
push 0
call ebx
push eax
call edi
mov edi, eax
test edi, edi
jne 0x4eb23d
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb13e
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__HeapAlloc_NULL
push eax
mov byte [ebp - 4], 0x44
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x45
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x46
call fcn.004068d0
mov byte [ebp - 4], 0x47
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x48
cmp dword [eax + 0x18], 8
jb 0x4eb16e
mov esi, dword [eax + 4]
jmp 0x4eb171
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__HeapAlloc_NULL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x47
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x49
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb201
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x131
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x4a
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x47
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x46
jmp 0x4eaefe
push 2
push esi
push edi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x4eb392
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb293
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__InitializeAcl_FAIL
push eax
mov byte [ebp - 4], 0x4d
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x4e
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x4f
call fcn.004068d0
mov byte [ebp - 4], 0x50
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x51
cmp dword [eax + 0x18], 8
jb 0x4eb2c3
mov esi, dword [eax + 4]
jmp 0x4eb2c6
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__InitializeAcl_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x50
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x52
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb356
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x136
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x53
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x50
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x4f
jmp 0x4eaefe
mov eax, dword [ebp - 0x6c]
push dword [eax]
push 0xf003f
push 2
push edi
call dword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x4eb4f0
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb3f1
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__AddAccessAllowedAce_FAIL
push eax
mov byte [ebp - 4], 0x56
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x57
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x58
call fcn.004068d0
mov byte [ebp - 4], 0x59
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x5a
cmp dword [eax + 0x18], 8
jb 0x4eb421
mov esi, dword [eax + 4]
jmp 0x4eb424
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__AddAccessAllowedAce_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x59
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x5b
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb4b4
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x13d
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x5c
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x59
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x58
jmp 0x4eaefe
push 1
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x4eb64a
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb54b
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__InitializeSecurityDescriptor_FAIL
push eax
mov byte [ebp - 4], 0x5f
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x60
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x61
call fcn.004068d0
mov byte [ebp - 4], 0x62
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x63
cmp dword [eax + 0x18], 8
jb 0x4eb57b
mov esi, dword [eax + 4]
jmp 0x4eb57e
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__InitializeSecurityDescriptor_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x62
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x64
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb60e
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x143
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x65
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x62
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x61
jmp 0x4eaefe
xor esi, esi
push esi
push edi
push 1
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x4eb7a8
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb6a9
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__SetSecurityDescriptorDacl_FAIL
push eax
mov byte [ebp - 4], 0x68
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x69
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x6a
call fcn.004068d0
mov byte [ebp - 4], 0x6b
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x6c
cmp dword [eax + 0x18], 8
jb 0x4eb6d9
mov esi, dword [eax + 4]
jmp 0x4eb6dc
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__SetSecurityDescriptorDacl_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x6b
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x6d
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb76c
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x149
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x6e
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x6b
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x6a
jmp 0x4eaefe
lea eax, [ebp - 0x114]
push eax
push 4
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
cmp eax, esi
je 0x4eb905
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb806
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__RegSetKeySecurity_FAIL
push eax
mov byte [ebp - 4], 0x71
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
mov byte [ebp - 4], 0x72
jmp 0x4eacec
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x73
call fcn.004068d0
mov byte [ebp - 4], 0x74
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x75
cmp dword [eax + 0x18], 8
jb 0x4eb836
mov esi, dword [eax + 4]
jmp 0x4eb839
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__RegSetKeySecurity_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x74
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x76
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eb8c9
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x14f
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x77
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x74
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x73
jmp 0x4eaefe
push esi
push edi
push esi
push esi
push 4
push 4
lea esi, [ebp - 0x44]
call fcn.0045acf0
push eax
call dword [sym.imp.ADVAPI32.dll_SetNamedSecurityInfoW]
test eax, eax
je 0x4ebaad
call fcn.00462c28
cmp byte [eax], 0
jne 0x4eb9a3
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__SetNamedSecurityInfo_FAIL
push eax
mov byte [ebp - 4], 0x7a
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x7b
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x1f
call fcn.00407660
xor bl, bl
lea ecx, [ebp - 0x48]
call fcn.00409cb0
lea ecx, [ebp - 0x44]
call fcn.00409cb0
lea ecx, [ebp - 0x40]
call fcn.00409cb0
mov al, bl
jmp 0x4ea7a0
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x7c
call fcn.004068d0
mov byte [ebp - 4], 0x7d
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x7e
cmp dword [eax + 0x18], 8
jb 0x4eb9d3
mov esi, dword [eax + 4]
jmp 0x4eb9d6
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__SetNamedSecurityInfo_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x7d
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x7f
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4eba66
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x156
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x80
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x7d
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x7c
call fcn.004067e0
jmp 0x4eb982
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00462c28
cmp byte [eax], 0
jne 0x4ebb27
lea eax, [ebp - 0xfc]
push eax
call fcn.00409b60
lea eax, [ebp - 0xf4]
push str.CPathPermissions:GrantRegKeyAccess__end__return_true
push eax
mov byte [ebp - 4], 0x83
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xfc]
call fcn.00407170
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x84
call fcn.00406a80
lea ecx, [ebp - 0x34]
call fcn.00409c40
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x1f
call fcn.00407660
mov bl, 1
jmp 0x4eb984
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x85
call fcn.004068d0
mov byte [ebp - 4], 0x86
call fcn.00462c28
lea esi, [ebp - 0x64]
call fcn.00406720
mov byte [ebp - 4], 0x87
cmp dword [eax + 0x18], 8
jb 0x4ebb57
mov esi, dword [eax + 4]
jmp 0x4ebb5a
lea esi, [eax + 4]
lea eax, [ebp - 0xf4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CPathPermissions:GrantRegKeyAccess__end__return_true
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x86
call fcn.00409c40
lea eax, [ebp - 0x3c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x88
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4ebbea
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0xf4]
call fcn.00406700
push 0x15f
push str..PathPermissions.cpp
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x89
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x64]
call fcn.00409c40
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x86
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x85
call fcn.004067e0
jmp 0x4ebb20