Function at 0x488040
Capabilities:
Create process on windows
Delete file
Move file
Self delete

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dfa66
mov eax, dword fs:[0]
push eax
mov eax, 0x17bc
call fcn.004a2ad0
mov eax, dword [0x516180]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1674], ecx
call fcn.00486f50
mov ecx, eax
call fcn.00455690
mov ecx, eax
call fcn.0048d2e0
movzx eax, al
test eax, eax
je 0x48828f
lea ecx, [ebp - 0xd0]
push ecx
call fcn.00486f50
mov ecx, eax
call fcn.00455690
mov ecx, eax
call fcn.0048d240
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd0]
call fcn.00402810
movzx edx, al
test edx, edx
je 0x488223
lea eax, [ebp - 0x1774]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 1
push 0x4e7eb0
lea ecx, [ebp - 0x220]
call fcn.00402a80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x1780]
push edx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x169c]
push eax
lea ecx, [ebp - 0x171c]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1780]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x220]
call fcn.004029e0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1774]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x171c]
push ecx
call fcn.00402ea0
add esp, 4
mov dword [ebp - 0x167c], eax
push 0x4e20
mov ecx, dword [ebp - 0x167c]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx edx, al
test edx, edx
je 0x4881f5
call sub.log4cplus.dll_class_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______cdecl_log4cplus::detail::get_macro_body_oss_void_
mov dword [ebp - 0x1678], eax
push str.browser_url_is_empty
mov eax, dword [ebp - 0x1678]
push eax
call fcn.004741d0
add esp, 8
push 0x4e7ee8
push 0x4c
push 0x4e7f0c
lea ecx, [ebp - 0x2c8]
push ecx
mov ecx, dword [ebp - 0x1678]
call fcn.00474d40
mov dword [ebp - 0x16a0], eax
mov edx, dword [ebp - 0x16a0]
mov dword [ebp - 0x16a4], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x16a4]
push eax
push 0x4e20
mov ecx, dword [ebp - 0x167c]
push ecx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int__char_const__
add esp, 0x18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c8]
call fcn.004029e0
xor edx, edx
jne 0x48814c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x171c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.00403510
jmp 0x488e6f
lea ecx, [ebp - 0x100]
call fcn.00402ad0
mov byte [ebp - 4], 7
push 0
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.00405250
add esp, 0xc
push 1
push 0
push 0
lea ecx, [ebp - 0x100]
call fcn.00403130
push eax
push 0x4e7f4c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x100]
call fcn.004029e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.00403510
jmp 0x488e6f
lea ecx, [ebp - 0x40]
call fcn.004035e0
mov dword [ebp - 4], 8
lea edx, [ebp - 0x88]
push edx
call fcn.00486f50
mov ecx, eax
call fcn.00455690
mov ecx, eax
call fcn.0048d240
mov byte [ebp - 4], 9
push 0xffffffffffffffff
push 0x2f
lea ecx, [ebp - 0x88]
call fcn.004755d0
mov dword [ebp - 0x1680], eax
cmp dword [ebp - 0x1680], 0xffffffff
je 0x48831d
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1680]
add eax, 1
push eax
lea ecx, [ebp - 0x2b0]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00403cd0
mov dword [ebp - 0x16a8], eax
mov edx, dword [ebp - 0x16a8]
push edx
lea ecx, [ebp - 0x40]
call fcn.004554e0
lea ecx, [ebp - 0x2b0]
call fcn.00403510
jmp 0x4883eb
lea eax, [ebp - 0x17c8]
push eax
lea ecx, [ebp - 0x17c0]
push ecx
call fcn.0045f650
add esp, 4
mov ecx, eax
call fcn.00460390
mov ecx, eax
call fcn.0045ed90
mov dword [ebp - 0x16b4], eax
mov edx, dword [ebp - 0x16b4]
push edx
lea ecx, [ebp - 0x1668]
call fcn.004752d0
push 0
push 0x3b9aca00
push 0
push 0
lea ecx, [ebp - 0x17b8]
call fcn.00485a60
lea eax, [ebp - 0x1668]
push eax
lea ecx, [ebp - 0x17b8]
call fcn.00481aa0
mov dword [ebp - 0x1704], eax
push str.soft
lea ecx, [ebp - 0x40]
call fcn.0040a000
mov ecx, dword [ebp - 0x1704]
push ecx
lea edx, [ebp - 0x298]
push edx
call fcn.0046ec60
add esp, 8
mov dword [ebp - 0x1700], eax
mov eax, dword [ebp - 0x1700]
mov dword [ebp - 0x16fc], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x16fc]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0046f020
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x298]
call fcn.00403510
push 0x4e7f60
lea ecx, [ebp - 0x40]
call fcn.0046f040
push 0xffffffffffffffff
push 0x4e7f68
lea ecx, [ebp - 0x40]
call fcn.004686c0
cmp eax, 0xffffffff
jne 0x48840c
push str..exe
lea ecx, [ebp - 0x40]
call fcn.0046f040
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x1a8]
call fcn.00403600
mov byte [ebp - 4], 0xb
push 1
push str.__:_____
lea ecx, [ebp - 0x17a8]
call fcn.00479c70
mov byte [ebp - 4], 0xc
push 0
push 0x4e7d0a
lea eax, [ebp - 0x17a8]
push eax
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x1c0]
push edx
call fcn.00484db0
add esp, 0x14
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x40]
call fcn.00455550
lea ecx, [ebp - 0x28]
call fcn.004035e0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x148]
push ecx
call fcn.00402450
add esp, 4
mov byte [ebp - 4], 0xf
push 0
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x148]
push eax
call fcn.004053e0
add esp, 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1784], esp
lea edx, [ebp - 0x88]
push edx
call fcn.00403600
mov dword [ebp - 0x1778], eax
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1788], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00403600
mov dword [ebp - 0x178c], eax
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1790], esp
lea edx, [ebp - 0x28]
push edx
call fcn.00403600
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x1674]
add ecx, 0x48
call fcn.00452410
mov byte [ebp - 4], 0xf
mov ecx, eax
call fcn.00456900
mov dword [ebp - 0x1794], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x280]
push eax
call fcn.00452430
add esp, 0xc
mov dword [ebp - 0x16f8], eax
mov ecx, dword [ebp - 0x16f8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004554e0
lea ecx, [ebp - 0x280]
call fcn.00403510
lea edx, [ebp - 0x58]
push edx
mov ecx, dword [ebp - 0x1674]
add ecx, 0x48
call fcn.00452410
mov ecx, eax
call fcn.004573a0
mov byte [ebp - 0x166a], 0
mov byte [ebp - 0x1669], 0
movzx eax, byte [ebp - 0x166a]
test eax, eax
jne 0x488b32
lea ecx, [ebp - 0x58]
push ecx
mov ecx, dword [ebp - 0x1674]
add ecx, 0x48
call fcn.00452410
mov ecx, eax
call fcn.00456da0
mov dword [ebp - 0x1670], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x51c7d4], eax
mov edx, dword [0x51c7d4]
sub edx, dword [0x51c7d8]
cmp edx, 0x2710
jbe 0x48872d
mov eax, dword [0x51c7d4]
mov dword [0x51c7d8], eax
lea ecx, [ebp - 0xe8]
call fcn.00402ad0
mov byte [ebp - 4], 0x13
push 0
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00405250
add esp, 0xc
lea eax, [ebp - 0x1764]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0x14
push 0x4e7f8c
lea ecx, [ebp - 0x208]
call fcn.00402a80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x208]
push ecx
lea edx, [ebp - 0x176c]
push edx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x16b8], eax
mov eax, dword [ebp - 0x16b8]
push eax
lea ecx, [ebp - 0x172c]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x176c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x208]
call fcn.004029e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1764]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x172c]
push ecx
call fcn.00402ea0
add esp, 4
mov dword [ebp - 0x1684], eax
push 0x4e20
mov ecx, dword [ebp - 0x1684]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx edx, al
test edx, edx
je 0x488707
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x16d0], eax
lea ecx, [ebp - 0xe8]
call fcn.00403130
push eax
mov eax, dword [ebp - 0x1670]
push eax
push str.state:_d_path::_ls
mov ecx, dword [ebp - 0x16d0]
push ecx
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0x10
mov dword [ebp - 0x16bc], eax
push 0x4e7fc0
push 0x8a
push 0x4e7fe4
mov edx, dword [ebp - 0x16bc]
push edx
push 0x4e20
mov eax, dword [ebp - 0x1684]
push eax
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor ecx, ecx
jne 0x488679
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x172c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xe8]
call fcn.004029e0
cmp dword [ebp - 0x1670], 4
jne 0x488ae1
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x1674]
add ecx, 0x48
call fcn.00452410
mov ecx, eax
call fcn.00456df0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x160]
call fcn.00402810
movzx ecx, al
test ecx, ecx
jne 0x488ac9
lea ecx, [ebp - 0x178]
call fcn.004035e0
mov byte [ebp - 4], 0x1a
push 0
lea edx, [ebp - 0x178]
push edx
lea eax, [ebp - 0x148]
push eax
call fcn.004053e0
add esp, 0xc
lea ecx, [ebp - 0xb8]
call fcn.00402ad0
mov byte [ebp - 4], 0x1b
push 0
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00405250
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0x268]
push edx
call fcn.00452430
add esp, 0xc
mov dword [ebp - 0x16c0], eax
mov eax, dword [ebp - 0x16c0]
push eax
lea ecx, [ebp - 0x28]
call fcn.004554e0
lea ecx, [ebp - 0x268]
call fcn.00403510
lea ecx, [ebp - 0x70]
call fcn.00402ad0
mov byte [ebp - 4], 0x1c
push 0
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00405250
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.00403130
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x488955
lea eax, [ebp - 0x1754]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x4e8024
lea ecx, [ebp - 0x1f0]
call fcn.00402a80
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1f0]
push ecx
lea edx, [ebp - 0x175c]
push edx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x16c4], eax
mov eax, dword [ebp - 0x16c4]
push eax
lea ecx, [ebp - 0x170c]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x175c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1f0]
call fcn.004029e0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1754]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00402ea0
add esp, 4
mov dword [ebp - 0x1688], eax
push 0x4e20
mov ecx, dword [ebp - 0x1688]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx edx, al
test edx, edx
je 0x48893e
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x16c8], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x70]
call fcn.00403130
push eax
push str.delete_file_failed:_ls_result:_d
mov eax, dword [ebp - 0x16c8]
push eax
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0x10
mov dword [ebp - 0x16cc], eax
push 0x4e8074
push 0xa1
push 0x4e8098
mov ecx, dword [ebp - 0x16cc]
push ecx
push 0x4e20
mov edx, dword [ebp - 0x1688]
push edx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor eax, eax
jne 0x4888b3
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x170c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x70]
call fcn.00403130
push eax
lea ecx, [ebp - 0xb8]
call fcn.00403130
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x488a9f
lea ecx, [ebp - 0x1744]
push ecx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0x22
push 0x4e80d8
lea ecx, [ebp - 0x190]
call fcn.00402a80
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x190]
push edx
lea eax, [ebp - 0x174c]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x16d4], eax
mov ecx, dword [ebp - 0x16d4]
push ecx
lea ecx, [ebp - 0x1714]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x174c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x190]
call fcn.004029e0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1744]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea edx, [ebp - 0x1714]
push edx
call fcn.00402ea0
add esp, 4
mov dword [ebp - 0x168c], eax
push 0x4e20
mov ecx, dword [ebp - 0x168c]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx eax, al
test eax, eax
je 0x488a88
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x16d8], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00403130
push eax
push str.rename_file_failed:_ls_result:_d
mov ecx, dword [ebp - 0x16d8]
push ecx
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0x10
mov dword [ebp - 0x16dc], eax
push 0x4e812c
push 0xa5
push 0x4e8150
mov edx, dword [ebp - 0x16dc]
push edx
push 0x4e20
mov eax, dword [ebp - 0x168c]
push eax
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor ecx, ecx
jne 0x4889fa
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1714]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x70]
call fcn.004029e0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb8]
call fcn.004029e0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x178]
call fcn.00403510
mov byte [ebp - 0x1669], 1
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00403510
jmp 0x488af1
cmp dword [ebp - 0x1670], 5
jne 0x488af1
mov byte [ebp - 0x1669], 0
cmp dword [ebp - 0x1670], 4
je 0x488b0f
cmp dword [ebp - 0x1670], 5
je 0x488b0f
mov dword [ebp - 0x1698], 0
jmp 0x488b19
mov dword [ebp - 0x1698], 1
mov dl, byte [ebp - 0x1698]
mov byte [ebp - 0x166a], dl
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x488578
movzx eax, byte [ebp - 0x1669]
test eax, eax
je 0x488dfd
lea ecx, [ebp - 0x118]
call fcn.00402ad0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x130]
call fcn.00402ad0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa0]
call fcn.00402ad0
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x1690], 0
push 0
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x250]
push edx
call fcn.00486f50
mov ecx, eax
call fcn.00455690
mov ecx, eax
call fcn.0048d300
mov dword [ebp - 0x16e0], eax
mov eax, dword [ebp - 0x16e0]
mov dword [ebp - 0x16e4], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x16e4]
push ecx
call fcn.00405250
add esp, 0xc
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x250]
call fcn.00403510
push 0
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00405250
add esp, 0xc
lea ecx, [ebp - 0x130]
push ecx
push 0x4e8190
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044d560
add esp, 0xc
mov dword [ebp - 0x16e8], eax
mov ecx, dword [ebp - 0x16e8]
mov dword [ebp - 0x16ec], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x16ec]
push edx
lea eax, [ebp - 0x238]
push eax
call fcn.0042ad50
add esp, 0xc
mov dword [ebp - 0x16f4], eax
mov ecx, dword [ebp - 0x16f4]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.00405c80
lea ecx, [ebp - 0x238]
call fcn.004029e0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2e0]
call fcn.004029e0
lea edx, [ebp - 0x1690]
push edx
push 1
lea ecx, [ebp - 0xa0]
call fcn.00403130
push eax
call fcn.0047b0f0
add esp, 0xc
test eax, eax
je 0x488c8e
mov byte [ebp - 0x166b], 1
jmp 0x488c95
mov byte [ebp - 0x166b], 0
mov al, byte [ebp - 0x166b]
mov byte [ebp - 0x166c], al
lea ecx, [ebp - 0x1734]
push ecx
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
mov byte [ebp - 4], 0x2c
push 0x4e8194
lea ecx, [ebp - 0x1d8]
call fcn.00402a80
mov byte [ebp - 4], 0x2d
lea edx, [ebp - 0x1d8]
push edx
lea eax, [ebp - 0x173c]
push eax
call sub.log4cplus.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getInstance_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov dword [ebp - 0x16ac], eax
mov ecx, dword [ebp - 0x16ac]
push ecx
lea ecx, [ebp - 0x1724]
call sub.log4cplus.dll_public:_void___thiscall_log4cplus::Logger::constructor_class_log4cplus::Logger__
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x173c]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1d8]
call fcn.004029e0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1734]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea edx, [ebp - 0x1724]
push edx
call fcn.00402ea0
add esp, 4
mov dword [ebp - 0x1694], eax
push 0x4e20
mov ecx, dword [ebp - 0x1694]
call sub.log4cplus.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
movzx eax, al
test eax, eax
je 0x488db9
call sub.log4cplus.dll_class_log4cplus::helpers::snprintf_buf____cdecl_log4cplus::detail::get_macro_body_snprintf_buf_void_
mov dword [ebp - 0x16b0], eax
movzx ecx, byte [ebp - 0x166c]
push ecx
mov edx, dword [ebp - 0x1690]
push edx
lea ecx, [ebp - 0xa0]
call fcn.00403130
push eax
push str.lauch:_ls_errcode:_u_result:_d
mov eax, dword [ebp - 0x16b0]
push eax
call sub.log4cplus.dll_public:_wchar_t_const____cdecl_log4cplus::helpers::snprintf_buf::print_wchar_t_const__
add esp, 0x14
mov dword [ebp - 0x16f0], eax
push str.void___thiscall_APP::Install_void_
push 0xbe
push 0x4e8204
mov ecx, dword [ebp - 0x16f0]
push ecx
push 0x4e20
mov edx, dword [ebp - 0x1694]
push edx
call sub.log4cplus.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const___int__wchar_t_const___char_const___int__char_const__
add esp, 0x18
xor eax, eax
jne 0x488d23
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1724]
call sub.log4cplus.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa0]
call fcn.004029e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x130]
call fcn.004029e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x118]
call fcn.004029e0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x58]
call fcn.00403510
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x148]
call fcn.004029e0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.00403510
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1c0]
call fcn.00403510
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x17a8]
call fcn.0047a4e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a8]
call fcn.00403510
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x88]
call fcn.00403510
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00403510
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a248b
mov esp, ebp
pop ebp
ret