Function at 0x446690
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0x64
push 0xffffffffffffffff
push 0x57dbd7
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x601328]
xor eax, ebp
mov dword [ebp + 0x60], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor edi, edi
mov dword [ebp - 0x14], edi
call fcn.004a9c22
test al, al
je 0x446716
lea eax, [ebp + 0x44]
push eax
call fcn.004d4fd4
add esp, 4
mov dword [ebp - 4], edi
mov edi, eax
mov dword [ebp - 0x14], 1
call fcn.004d4dd9
mov edi, 0x603668
mov esi, eax
mov ebx, edx
call fcn.004d4dd9
sub esi, eax
sbb ebx, edx
mov dword [ebp - 0x38], ebx
js 0x446714
jg 0x44670e
test esi, esi
jb 0x446714
mov bl, 1
xor edi, edi
jmp 0x446718
xor edi, edi
xor bl, bl
mov dword [ebp - 4], 0xffffffff
test byte [ebp - 0x14], 1
je 0x446737
cmp dword [ebp + 0x5c], 8
jb 0x446737
mov ecx, dword [ebp + 0x48]
push ecx
call fcn.00546771
add esp, 4
test bl, bl
je 0x446779
cmp dword [0x605b80], edi
je 0x4469de
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0x6036d4
push edi
push 0x6036cc
push 0x46e0b2
push edi
push edi
mov dword [0x6036d8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x6036d0], eax
jmp 0x4469de
test byte [0x605dc4], 1
mov esi, 1
lea ebx, [esi + 6]
jne 0x4467c4
or dword [0x605dc4], esi
xor edx, edx
push 0x605dac
mov byte [0x605d8c], 0
mov dword [0x605da8], ebx
mov dword [0x605da4], edi
mov word [0x605d94], dx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x58dfb5
call fcn.00547e47
add esp, 4
cmp byte [0x605d8c], 0
jne 0x446853
lea eax, [ebp - 0xc4]
push eax
call fcn.00409b60
lea ecx, [ebp - 0xbc]
push str.VProt::CDNTThread::DNTUpdateConfig_DNT_config_is_up_do_date__no_need_for_update
push ecx
mov dword [ebp - 4], esi
call fcn.00407390
add esp, 8
lea ecx, [ebp + 0x44]
lea eax, [ebp - 0xc4]
call fcn.00407170
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 2
call fcn.00406a80
cmp dword [ebp + 0x5c], 8
jb 0x446820
mov edx, dword [ebp + 0x48]
push edx
call fcn.00546771
add esp, 4
xor eax, eax
lea ecx, [ebp - 0x70]
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x58], edi
mov word [ebp + 0x48], ax
mov dword [ebp - 4], 0xffffffff
call fcn.004075b0
lea ecx, [ebp - 0x70]
push ecx
mov dword [ebp - 0x70], vtable.std::ios_base.0
call fcn.0054517b
add esp, 4
jmp 0x4469e3
lea edx, [ebp - 0xbc]
push edx
mov dword [ebp - 4], 3
call fcn.004068d0
mov byte [ebp - 4], 4
test byte [0x605dc4], 1
jne 0x4468ac
or dword [0x605dc4], esi
xor eax, eax
push 0x605dac
mov byte [0x605d8c], 0
mov dword [0x605da8], ebx
mov dword [0x605da4], edi
mov word [0x605d94], ax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x58dfb5
call fcn.00547e47
add esp, 4
lea esi, [ebp - 0x34]
mov eax, 0x605d8c
call fcn.00406720
mov byte [ebp - 4], 5
cmp dword [eax + 0x18], 8
jb 0x4468c8
mov esi, dword [eax + 4]
jmp 0x4468cb
lea esi, [eax + 4]
lea ecx, [ebp - 0xbc]
push 0x5950f8
push ecx
call fcn.00407390
add esp, 8
push esi
push eax
call fcn.00407390
add esp, 8
push 0x5950f0
push eax
call fcn.00407390
add esp, 8
push str.VProt::CDNTThread::DNTUpdateConfig_DNT_config_is_up_do_date__no_need_for_update
push eax
call fcn.00407390
mov esi, 8
add esp, 8
mov byte [ebp - 4], 4
cmp dword [ebp - 0x1c], esi
jb 0x44691f
mov edx, dword [ebp - 0x30]
push edx
call fcn.00546771
add esp, 4
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
add esp, 4
push 0x2710
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x44697a
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0xbc]
call fcn.00406700
push 0x393
push str..WinMain.cpp
push eax
push 0x2710
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
cmp dword [ebp - 0x1c], esi
jb 0x44697a
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00546771
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call fcn.00406750
lea edx, [ebp - 0x70]
push edx
mov dword [ebp - 0x70], vtable.std::ios_base.0
call fcn.0054517b
add esp, 4
mov dword [ebp - 4], 0xffffffff
jmp 0x4469e3
mov ebx, 7
push str.iexplore.exe
call fcn.00467ed8
add esp, 4
test al, al
jne 0x446a97
xor eax, eax
mov dword [ebp], vtable.CRegistry.0
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x18], edi
mov word [ebp + 8], ax
mov dword [ebp - 4], 0xa
xor ecx, ecx
push 0xffffffffffffffff
mov word [ebp + 0x28], cx
push edi
mov eax, 0x603614
lea ecx, [ebp + 0x24]
mov dword [ebp + 0x20], SysStringLen
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x38], edi
call fcn.00406f00
mov byte [ebp - 4], 0xb
push 1
mov edx, 0x603614
lea ecx, [ebp]
mov byte [ebp + 0x40], 0
call fcn.0046ed61
mov dword [ebp - 4], 0xc
xor edx, edx
push 9
mov eax, str.DNTTabs
lea esi, [ebp - 0x34]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], dx
call fcn.00406bf0
lea eax, [ebp]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.00470028
cmp dword [ebp - 0x1c], 8
jb 0x446a8f
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00546771
add esp, 4
lea ecx, [ebp]
call fcn.00415ec0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x60]
xor ecx, ebp
call fcn.0054677c
add ebp, 0x64
mov esp, ebp
pop ebp
ret 0x10