Function at 0x4a31c0
Capabilities:
Contain obfuscated stackstrings
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5017da
mov eax, dword fs:[0]
push eax
sub esp, 0x464
mov eax, dword [0x53e200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x308]
call fcn.0048b8e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x30c]
push eax
mov ecx, dword [ebp - 0x314]
add ecx, 4
call fcn.004a9240
jmp 0x4a322e
push 0
lea ecx, [ebp - 0x370]
push ecx
lea ecx, [ebp - 0x30c]
call fcn.004a2aa0
lea edx, [ebp - 0x3b0]
push edx
mov ecx, dword [ebp - 0x314]
add ecx, 4
call fcn.004a9330
push eax
lea ecx, [ebp - 0x30c]
call fcn.00411150
movzx eax, al
test eax, eax
je 0x4a3a21
lea ecx, [ebp - 0x328]
call fcn.004a22f0
mov byte [ebp - 4], 1
xor ecx, ecx
mov byte [ebp - 0x30d], cl
movzx edx, byte [ebp - 0x30d]
push edx
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x328]
call fcn.004a9200
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x328]
push edx
lea eax, [ebp - 0x3b8]
push eax
call fcn.004a1860
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x7c
mov ecx, eax
call fcn.004a9300
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x3a4]
push edx
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x7c
mov ecx, eax
call fcn.004a9200
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3c0]
push ecx
call fcn.004a1c40
add esp, 0x18
lea edx, [ebp - 0x328]
push edx
call fcn.004a7d50
add esp, 4
movzx eax, al
test eax, eax
je 0x4a346f
lea ecx, [ebp - 0x390]
push ecx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 2
push 0x50b118
lea ecx, [ebp - 0x1bc]
call fcn.00406420
mov byte [ebp - 4], 3
lea edx, [ebp - 0x1bc]
push edx
lea eax, [ebp - 0x3a0]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x344], eax
mov ecx, dword [ebp - 0x344]
push ecx
lea ecx, [ebp - 0x36c]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3a0]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1bc]
call fcn.00406380
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x390]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea edx, [ebp - 0x36c]
push edx
call fcn.00401cb0
add esp, 4
mov dword [ebp - 0x31c], eax
push 0x4e20
mov ecx, dword [ebp - 0x31c]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx eax, al
test eax, eax
je 0x4a3444
call sub.log4cplus.dll_class_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______cdecl_log4cplus::detail::get_macro_body_oss_void_
mov dword [ebp - 0x320], eax
push 0x50b47c
mov ecx, dword [ebp - 0x320]
push ecx
call fcn.0048dde0
add esp, 8
push str.auto___thiscall_APP::GetDesktopLnkConfig::_lambda_fd501e67de8228e7436299e7962b2be3_::__::_lambda_28fad13e355d613300d10b36b4b01da9_::operator____void__const
push 0x167
push str.C:dcodesDuilib_ScreenShotDuilib_ScreenShotScreenshot_app_app.cpp
lea edx, [ebp - 0x2ac]
push edx
mov ecx, dword [ebp - 0x320]
call fcn.0048e950
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x34c]
push ecx
push 0x4e20
mov edx, dword [ebp - 0x31c]
push edx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int__char_const__
add esp, 0x18
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2ac]
call fcn.00406380
xor eax, eax
jne 0x4a3394
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x36c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.004a28a0
jmp 0x4a321a
lea ecx, [ebp - 0x28]
call fcn.004073b0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x18
mov ecx, eax
call fcn.004061b0
movzx ecx, al
test ecx, ecx
jne 0x4a37a6
lea ecx, [ebp - 0xd0]
call fcn.004073b0
mov byte [ebp - 4], 9
lea edx, [ebp - 0xd0]
push edx
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x18
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004872a0
add esp, 0xc
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa0]
call fcn.00406470
mov byte [ebp - 4], 0xb
push 0
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xd0]
push edx
call fcn.00406960
add esp, 0xc
lea eax, [ebp - 0x380]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0xc
push 0x50b118
lea ecx, [ebp - 0x1ec]
call fcn.00406420
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1ec]
push ecx
lea edx, [ebp - 0x388]
push edx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
push eax
lea ecx, [ebp - 0x35c]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x388]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1ec]
call fcn.00406380
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x380]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x35c]
push ecx
call fcn.00401cb0
add esp, 4
mov dword [ebp - 0x318], eax
push 0x4e20
mov ecx, dword [ebp - 0x318]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx edx, al
test edx, edx
je 0x4a3600
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x354], eax
lea ecx, [ebp - 0xa0]
call fcn.004064a0
push eax
push str.icon_err_desc:_ls
mov eax, dword [ebp - 0x354]
push eax
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0xc
mov dword [ebp - 0x330], eax
push str.auto___thiscall_APP::GetDesktopLnkConfig::_lambda_fd501e67de8228e7436299e7962b2be3_::__::_lambda_28fad13e355d613300d10b36b4b01da9_::operator____void__const
push 0x173
push str.C:dcodesDuilib_ScreenShotDuilib_ScreenShotScreenshot_app_app.cpp
mov ecx, dword [ebp - 0x330]
push ecx
push 0x4e20
mov edx, dword [ebp - 0x318]
push edx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor eax, eax
jne 0x4a3579
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x35c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x40]
call fcn.004061b0
movzx ecx, al
test ecx, ecx
jne 0x4a377c
push 0
push str.404_Not_Found
lea ecx, [ebp - 0x40]
call fcn.0049cab0
cmp eax, 0xffffffff
jne 0x4a377c
lea edx, [ebp - 0x144]
push edx
call fcn.00405df0
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x30
push eax
lea ecx, [ebp - 0x58]
call fcn.004073d0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xe8]
call fcn.004073b0
mov byte [ebp - 4], 0x13
push 0
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x144]
push ecx
call fcn.00406af0
add esp, 0xc
push 0xffffffffffffffff
push str..ico
lea ecx, [ebp - 0x58]
call fcn.004a9370
cmp eax, 0xffffffff
jne 0x4a36b8
push str..ico
lea ecx, [ebp - 0x58]
call fcn.004870a0
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call fcn.0049d310
add esp, 0xc
mov dword [ebp - 0x334], eax
mov edx, dword [ebp - 0x334]
push edx
lea ecx, [ebp - 0x28]
call fcn.00483990
lea ecx, [ebp - 0x2c4]
call fcn.00405590
push 1
lea ecx, [ebp - 0x470]
call fcn.004a2160
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x28]
call fcn.00405650
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x40
push 0x30
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x470]
call fcn.004a94d0
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x470]
push edx
call fcn.00481c70
add esp, 8
lea ecx, [ebp - 0x470]
call fcn.004a9280
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x470]
call fcn.004a4980
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xe8]
call fcn.00405590
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x58]
call fcn.00405590
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00406380
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa0]
call fcn.00406380
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40]
call fcn.00405590
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd0]
call fcn.00405590
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x30
push eax
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
push eax
call fcn.004a4c50
add esp, 0xc
lea ecx, [ebp - 0x12c]
call fcn.0048b8e0
mov byte [ebp - 4], 0x15
push 0x50b570
lea ecx, [ebp - 0x204]
call fcn.004055e0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x4c
push eax
lea ecx, [ebp - 0x204]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x204]
call fcn.00405590
push 0x50b578
lea ecx, [ebp - 0x1a4]
call fcn.004055e0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x30c]
call fcn.00411ca0
add eax, 0x64
push eax
lea edx, [ebp - 0x1a4]
push edx
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1a4]
call fcn.00405590
push 0x50b580
lea ecx, [ebp - 0x174]
call fcn.004055e0
mov byte [ebp - 4], 0x18
push str.bxwzbz
lea ecx, [ebp - 0x18c]
call fcn.004055e0
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x18c]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18c]
call fcn.00405590
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x174]
call fcn.00405590
push 0x50b58c
lea ecx, [ebp - 0x21c]
call fcn.004055e0
mov byte [ebp - 4], 0x1a
push str.zsbz
lea ecx, [ebp - 0x15c]
call fcn.004055e0
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x15c]
call fcn.00405590
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x21c]
call fcn.00405590
push 0x50b598
lea ecx, [ebp - 0x24c]
call fcn.004055e0
mov byte [ebp - 4], 0x1c
push str.azbz
lea ecx, [ebp - 0x234]
call fcn.004055e0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x24c]
push ecx
lea edx, [ebp - 0x234]
push edx
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x234]
call fcn.00405590
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x24c]
call fcn.00405590
push 0x50b598
lea ecx, [ebp - 0x1d4]
call fcn.004055e0
mov byte [ebp - 4], 0x1e
push str.gxbz
lea ecx, [ebp - 0x264]
call fcn.004055e0
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.0048c0d0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x264]
call fcn.00405590
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1d4]
call fcn.00405590
lea edx, [ebp - 0x12c]
push edx
lea ecx, [ebp - 0x308]
call fcn.0048be30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x12c]
call fcn.0048bb80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00405590
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.004a28a0
jmp 0x4a321a
lea ecx, [ebp - 0x70]
call fcn.004073b0
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x308]
push ecx
mov edx, dword [ebp - 0x314]
mov eax, dword [edx]
add eax, 0x418
push eax
mov ecx, dword [ebp - 0x314]
mov edx, dword [ecx]
add edx, 0x400
push edx
lea eax, [ebp - 0x294]
push eax
call fcn.004909a0
add esp, 0x14
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x88]
call fcn.00406470
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xb8]
call fcn.00406470
mov byte [ebp - 4], 0x23
push 0
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x294]
push edx
call fcn.00406960
add esp, 0xc
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x70]
push ecx
call fcn.00406960
add esp, 0xc
lea edx, [ebp - 0x398]
push edx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0x24
push 0x50b118
lea ecx, [ebp - 0x27c]
call fcn.00406420
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x378]
push ecx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x338], eax
mov edx, dword [ebp - 0x338]
push edx
lea ecx, [ebp - 0x364]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x378]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x27c]
call fcn.00406380
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x398]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x364]
push eax
call fcn.00401cb0
add esp, 4
mov dword [ebp - 0x32c], eax
push 0x4e20
mov ecx, dword [ebp - 0x32c]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx ecx, al
test ecx, ecx
je 0x4a3bc8
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x33c], eax
lea ecx, [ebp - 0xb8]
call fcn.004064a0
push eax
lea ecx, [ebp - 0x88]
call fcn.004064a0
push eax
push str.sc_ds_r:_ls_err_desc:_ls
mov edx, dword [ebp - 0x33c]
push edx
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0x10
mov dword [ebp - 0x340], eax
push str.auto___thiscall_APP::GetDesktopLnkConfig::_lambda_fd501e67de8228e7436299e7962b2be3_::__::_lambda_28fad13e355d613300d10b36b4b01da9_::operator____void__const
push 0x19b
push str.C:dcodesDuilib_ScreenShotDuilib_ScreenShotScreenshot_app_app.cpp
mov eax, dword [ebp - 0x340]
push eax
push 0x4e20
mov ecx, dword [ebp - 0x32c]
push ecx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor edx, edx
jne 0x4a3b35
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x364]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
call fcn.004a4fd0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xb8]
call fcn.00406380
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x88]
call fcn.00406380
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x294]
call fcn.00405590
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.00405590
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.0048bb80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c626c
mov esp, ebp
pop ebp
ret