Function at 0x46d00e
Capabilities:
Persist via run registry key

Disassembly:
push ebp
sub esp, 0x8c
lea ebp, [esp - 4]
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp + 0x8c], eax
push 0x9c
mov eax, 0x52daa1
call fcn.00506664
lea eax, [ebp]
push eax
mov esi, ecx
call fcn.004121f1
and dword [ebp - 4], 0
lea eax, [ebp + 0x38]
mov dword [esp], str.ProgramFiles
push eax
call fcn.004208f1
pop ecx
pop ecx
push 0x5418b4
lea eax, [ebp + 0x38]
xor edi, edi
push eax
inc edi
mov byte [ebp - 4], 1
call fcn.0040b547
push 0xffffffffffffffff
push 0
lea eax, [esi + 4]
lea ecx, [ebp + 0x38]
call fcn.0040b405
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46d0fb
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
lea eax, [ebp + 0x38]
push eax
mov ebx, 0x543368
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe_HandleGuardProcess_avg:
push eax
mov byte [ebp - 4], 2
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 3
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 1
call fcn.0040c22b
jmp 0x46d230
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 4
call fcn.0040b935
mov byte [ebp - 4], 5
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x46d12b
mov esi, dword [eax + 4]
jmp 0x46d12e
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe_HandleGuardProcess_avg:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
mov ebx, 0x543368
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp + 0x38]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push 0
push edi
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 5
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46d1df
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xb5
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push edi
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 4
call fcn.0040b8a0
mov dword [ebp - 4], edi
jmp 0x46d230
lea eax, [ebp + 0x38]
push eax
lea esi, [ebp + 0x54]
call fcn.0040be1c
push str._vprot.exe
mov eax, esi
push eax
mov byte [ebp - 4], 0xb
call fcn.0040b547
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46d2c8
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
mov eax, esi
push eax
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe_HandleGuardProcess_vprot:
push eax
mov byte [ebp - 4], 0xc
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 0xd
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0xb
call fcn.0040c22b
jmp 0x46d400
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0xe
call fcn.0040b935
mov byte [ebp - 4], 0xf
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 8
jb 0x46d2f8
mov esi, dword [eax + 4]
jmp 0x46d2fb
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe_HandleGuardProcess_vprot:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp + 0x54]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 0xf
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x11
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46d3a9
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xb8
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x12
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xe
call fcn.0040b8a0
mov dword [ebp - 4], 0xb
jmp 0x46d400
and dword [ebp - 0x20], 0
and dword [ebp - 0x1c], 0
mov edi, 0x544a1c
push edi
lea esi, [ebp + 0x1c]
mov byte [ebp - 4], 0x15
call fcn.0040b812
push edi
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x54]
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.0040b405
push eax
call fcn.0040b547
cmp dword [ebp + 0x34], 8
mov esi, dword [ebp + 0x20]
jae 0x46d43f
lea esi, [ebp + 0x20]
push str.SoftwareMicrosoftWindowsCurrentVersionRun
xor edi, edi
push reloc.OLEAUT32.dll_SysReAllocString
mov eax, 0x2001f
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.0040e49d
cmp eax, edi
jne 0x46d471
push esi
push str.vProt
lea eax, [ebp - 0x18]
push eax
call fcn.0040e68c
lea esi, [ebp - 0x18]
call fcn.0040e486
call fcn.00419eed
cmp eax, 2
jl 0x46d878
call fcn.0041f6fb
push str._AFTERINSTALL
lea esi, [ebp + 0x70]
test al, al
je 0x46d6b4
call fcn.0040b812
mov eax, esi
push 1
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x17
call fcn.004d9625
pop ecx
pop ecx
push 0
push 1
mov edi, eax
mov byte [ebp - 4], 0x16
call fcn.0040dac5
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46d591
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
push edi
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe:_Update:_SYSTEM_Account____after_RunProcessAsUser_ret:
push eax
mov byte [ebp - 4], 0x18
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 0x19
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x16
call fcn.0040c22b
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp + 0x1c]
call fcn.0040dac5
lea esi, [ebp - 0x20]
call fcn.0040e486
push ebx
push edi
lea esi, [ebp + 0x54]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x38]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp]
call fcn.0040dac5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8c]
xor ecx, ebp
call fcn.004ffa47
add ebp, 0x90
leave
ret
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x1a
call fcn.0040b935
mov byte [ebp - 4], 0x1b
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x18], 8
jb 0x46d5c1
mov esi, dword [eax + 4]
jmp 0x46d5c4
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe:_Update:_SYSTEM_Account____after_RunProcessAsUser_ret:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1d
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46d66d
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xc6
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1e
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1b
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1a
call fcn.0040b8a0
jmp 0x46d539
call fcn.0040b812
lea eax, [ebp + 0x70]
push edi
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x21
call fcn.004d9625
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp + 0x70]
mov edi, eax
mov byte [ebp - 4], 0x16
call fcn.0040dac5
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46d755
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
push edi
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe:_Update:_Administrator_Account____after_RunProcessAsUser_ret:
push eax
mov byte [ebp - 4], 0x22
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 0x23
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x16
call fcn.0040c22b
jmp 0x46d539
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x24
call fcn.0040b935
mov byte [ebp - 4], 0x25
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 0x26
cmp dword [eax + 0x18], 8
jb 0x46d785
mov esi, dword [eax + 4]
jmp 0x46d788
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe:_Update:_Administrator_Account____after_RunProcessAsUser_ret:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 0x25
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x27
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46d831
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xcb
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x28
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x25
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x24
call fcn.0040b8a0
jmp 0x46d750
call fcn.0041f6fb
test al, al
je 0x46da4e
push str._AFTERINSTALL
lea esi, [ebp + 0x70]
call fcn.0040b812
mov eax, esi
push 1
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x2b
call fcn.004d9625
pop ecx
pop ecx
push 0
push 1
mov edi, eax
mov byte [ebp - 4], 0x16
call fcn.0040dac5
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46d92b
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
push edi
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe:_Update:_WINXP_SYSTEM_Account____after_RunProcessAsUser_ret:
push eax
mov byte [ebp - 4], 0x2c
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 0x2d
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x16
call fcn.0040c22b
jmp 0x46d539
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0040b935
mov byte [ebp - 4], 0x2f
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 0x30
cmp dword [eax + 0x18], 8
jb 0x46d95b
mov esi, dword [eax + 4]
jmp 0x46d95e
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe:_Update:_WINXP_SYSTEM_Account____after_RunProcessAsUser_ret:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 0x2f
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x31
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46da07
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xd3
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x32
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x2f
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x2e
call fcn.0040b8a0
jmp 0x46d926
cmp dword [ebp + 0x6c], 8
mov ecx, dword [ebp + 0x58]
jae 0x46da5a
lea ecx, [ebp + 0x58]
push edi
push str._AFTERINSTALL
call fcn.004181de
pop ecx
pop ecx
mov edi, eax
call fcn.0040dbda
cmp byte [eax], 0
jne 0x46dae0
lea eax, [ebp - 0xa8]
push eax
call fcn.0040d9e1
push edi
push ebx
lea eax, [ebp - 0xa0]
push str.CToolbarInstaller.exe:_Update:_WINXP_Administrator_Account____RunProgramEx_ret:
push eax
mov byte [ebp - 4], 0x35
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.004126c3
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bf31
lea edi, [ebp + 0x70]
mov byte [ebp - 4], 0x36
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x16
call fcn.0040c22b
jmp 0x46d539
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x37
call fcn.0040b935
mov byte [ebp - 4], 0x38
call fcn.0040dbda
lea ecx, [ebp + 0x70]
call fcn.0040b84b
mov byte [ebp - 4], 0x39
cmp dword [eax + 0x18], 8
jb 0x46db10
mov esi, dword [eax + 4]
jmp 0x46db13
lea esi, [eax + 4]
lea eax, [ebp - 0xa0]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CToolbarInstaller.exe:_Update:_WINXP_Administrator_Account____RunProgramEx_ret:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.004126c3
push 0
push 1
lea esi, [ebp + 0x70]
mov byte [ebp - 4], 0x38
call fcn.0040dac5
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3a
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46dbbc
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040b831
push 0xd8
push str..ToolbarInstaller.cpp
push eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3b
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp + 0x70]
call fcn.0040dac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x38
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
call fcn.0040b8a0
jmp 0x46d539