Function at 0x419480
Capabilities:
Create thread
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x4f73ae
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x52b360]
xor eax, esp
mov dword [esp + 0x448], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52b360]
xor eax, esp
push eax
lea eax, [esp + 0x460]
mov dword fs:[0], eax
mov ebp, ecx
call fcn.00463300
call fcn.00471f50
mov eax, dword [ebp + 4]
xor esi, esi
cmp eax, esi
je 0x4194dd
push 0x64
push 0x2711
push ebp
call fcn.004131f0
mov eax, dword [ebp + 4]
cmp eax, esi
je 0x4194f4
push 0x1d4c0
push 0x2710
push ebp
call fcn.004131f0
mov eax, dword [ebp + 4]
cmp eax, esi
je 0x41950b
push 0x3e8
push 0x2716
push ebp
call fcn.004131f0
call fcn.0043ba30
mov eax, dword [ebp + 4]
cmp eax, esi
je 0x41951c
mov eax, dword [eax + 4]
jmp 0x41951e
xor eax, eax
mov ecx, dword [0x532c28]
cmp ecx, esi
je 0x41952b
push eax
call ecx
call fcn.004633b0
mov dword [esp + 0x34], 0x425
call fcn.00480c70
push str.DtlWallPaperWallPaperDTLWallPaper.db
lea ecx, [esp + 0x1c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x455], 0x41b2f0
mov dword [esp + 0x459], ebp
mov byte [esp + 0x454], 1
call fcn.00460d90
mov edi, 8
add esp, 4
cmp dword [eax + 0x18], edi
jb 0x41957f
mov ecx, dword [eax + 4]
jmp 0x419582
lea ecx, [eax + 4]
lea edx, [esp + 0x40]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, si
jne 0x419586
cmp dword [esp + 0x30], edi
jb 0x4195aa
mov eax, dword [esp + 0x1c]
push eax
call fcn.004c8f17
add esp, 4
xor ecx, ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], cx
xor eax, eax
nop
movzx ecx, word [eax + 0x4feab8]
mov word [esp + eax + 0x248], cx
add eax, 2
cmp cx, si
jne 0x4195c0
mov eax, dword [0x532df0]
cmp eax, esi
je 0x4195e7
lea edx, [esp + 0x34]
push edx
call eax
push 1
mov esi, ebp
call fcn.0041bce0
call fcn.0047f2c0
movzx eax, al
push eax
call fcn.0048d140
mov edi, eax
call fcn.0048d1b0
call fcn.0047f3c0
mov bl, al
call fcn.0048d140
mov esi, eax
mov byte [esi + 0x60], bl
test bl, bl
je 0x419620
cmp dword [esi + 0x5c], 2
jmp 0x419624
cmp dword [esi + 0x5c], 3
je 0x419647
mov eax, dword [esi + 4]
test eax, eax
je 0x419636
push 0x65
push esi
push eax
call fcn.00413280
mov eax, dword [esi + 4]
test eax, eax
je 0x419647
push 0xa
push 0x65
push esi
call fcn.004131f0
call fcn.00495110
mov esi, eax
call fcn.004955a0
call fcn.0047f220
mov bl, al
call fcn.00495110
mov esi, eax
mov eax, dword [esi + 4]
test eax, eax
je 0x41966d
mov eax, dword [eax + 4]
jmp 0x41966f
xor eax, eax
xor ecx, ecx
test bl, bl
setne cl
push ecx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x24]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
lea ecx, [ebp + 0x140]
call fcn.004604b0
push 0x4c
call fcn.004c8f3d
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x468], 0
test eax, eax
je 0x4196bd
push eax
call fcn.0045f590
mov esi, eax
jmp 0x4196bf
xor esi, esi
mov dword [esp + 0x468], 0xffffffff
mov dword [ebp + 0x1a8], esi
call fcn.0046b880
push 0
push 0
push 1
push 0
mov byte [esi + 0xc], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push esi
push 0x46b810
push 0
push 0
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 4], eax
mov edi, dword [ebp + 0x4c]
test edi, edi
je 0x419770
mov esi, dword [edi + 0x94]
mov dword [edi + 0x9c], 1
test esi, esi
je 0x41972f
call fcn.00489b90
mov ecx, dword [edi + 0x94]
push 1
push ecx
call fcn.00410a60
mov edi, dword [edi + 0x98]
test edi, edi
je 0x419741
push 0
push edi
call fcn.00410a60
mov edx, dword [ebp + 0x4c]
push 1
push edx
call fcn.00410a60
mov ebp, dword [ebp + 0x40]
test ebp, ebp
je 0x419770
mov ecx, dword [ebp + 0xd8]
test ecx, ecx
je 0x419770
mov al, byte [ecx + 0x38]
test al, 4
je 0x419770
and al, 0xfb
mov byte [ecx + 0x38], al
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
call edx
mov ecx, dword [esp + 0x460]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x448]
xor ecx, esp
call fcn.004c8f08
add esp, 0x458
ret 4