Function at 0x419820
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x54c540
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push esi
push edi
mov eax, dword [0x5a4e60]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov esi, ecx
call fcn.0040e4f0
xor ebx, ebx
push 0x580e70
mov dword [esi + 0x9c], 0x1e
mov dword [esi + 0xac], 4
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
call fcn.0040e360
mov ecx, dword [0x5ad4d4]
push ebx
push ebx
push 0x84
call fcn.0040d160
mov ecx, dword [0x5ad4d4]
add esp, 4
push 1
push ebx
push 0x83
mov edi, eax
call fcn.0040d160
add esp, 4
mov ecx, edi
push eax
xor edx, edx
mov edi, esi
call fcn.0040e610
mov eax, dword [esi + 0x4ac]
cmp dword [eax - 0xc], ebx
jle 0x419b8f
push 0x35
push str.http:__client.5054399.com_update_ConfigQshaogamer.htm
lea ecx, [esi + 0x4b0]
call fcn.00404630
mov eax, dword [esi + 0x4ac]
push eax
push 0x57ce08
lea ecx, [esi + 0x4b0]
call fcn.00403890
lea edi, [esi + 0x4b8]
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov eax, dword [esi + 0x4ac]
push eax
push 0x104
push edi
call fcn.00523249
add esp, 0xc
push str..exe
push 0x104
push edi
call fcn.00523249
add esp, 0xc
push ebx
push ebx
push esi
push 0x419ca0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
lea ecx, [esi + 0x778]
mov dword [esi + 0x6d0], eax
call fcn.00426495
mov ecx, dword [0x5ad4d4]
push 0x85
call fcn.0040d160
add esp, 4
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], vtable.CBitmap.0
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x64], ebx
call fcn.0042c1ee
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x24]
push ecx
push 0x18
push edx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [esp + 0x28]
cdq
and edx, 3
lea ebx, [edx + eax]
mov eax, dword [esp + 0x2c]
lea ecx, [esi + 0x80c]
sar ebx, 2
mov dword [esp + 0x10], eax
call fcn.00427df9
mov ecx, dword [esp + 0x10]
push 0
push 4
push 0x19
push ecx
push ebx
lea ecx, [esi + 0x80c]
call fcn.00427f3c
mov edx, dword [esp + 0x18]
mov eax, dword [esi + 0x810]
push 0xff00ff
push edx
push eax
call fcn.0042af32
mov eax, dword [eax + 0x78]
mov ecx, dword [eax]
call fcn.004082a0
mov ecx, dword [esp + 0x10]
push 6
push ecx
push ebx
push 0
push 0
push 0
lea ecx, [esi + 0x778]
call fcn.00426659
mov eax, dword [esi + 0x798]
lea edx, [esi + 0x7f4]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x14]
call fcn.0042c21c
mov dword [esp + 0x60], 0xffffffff
mov ebx, vtable.CBitmap.0
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
call fcn.004084b0
mov ecx, dword [0x5ad4d4]
push 0x85
call fcn.0040d160
add esp, 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], ebx
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x64], 1
call fcn.0042c1ee
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x3c]
push ecx
push 0x18
push edx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [esp + 0x40]
cdq
and edx, 3
lea ebx, [edx + eax]
mov eax, dword [esp + 0x44]
lea ecx, [esi + 0x944]
sar ebx, 2
mov dword [esp + 0x10], eax
call fcn.00427df9
mov ecx, dword [esp + 0x10]
push 0
push 4
push 0x19
push ecx
push ebx
lea ecx, [esi + 0x944]
call fcn.00427f3c
mov edx, dword [esp + 0x20]
mov eax, dword [esi + 0x948]
push 0xff00ff
push edx
push eax
call fcn.0042af32
mov eax, dword [eax + 0x78]
mov ecx, dword [eax]
call fcn.004082a0
mov ecx, dword [esp + 0x10]
push 6
push ecx
push ebx
push 0
push 0
push 0
lea ecx, [esi + 0x8b0]
call fcn.00426659
mov eax, dword [esi + 0x8d0]
lea edx, [esi + 0x92c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x1c]
call fcn.0042c21c
mov dword [esp + 0x60], 0xffffffff
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], vtable.CBitmap.0
call fcn.004084b0
push 0
lea ecx, [esi + 0xa5c]
push 0x57d27c
call fcn.00404630
mov ecx, dword [esi + 0xa08]
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [esi + 0xa7c], 0x565148
mov dword [esi + 0xa68], 0x10
mov ecx, dword [0x5ad4d4]
push 0x99
call fcn.0040d160
mov ecx, dword [0x5ad4d4]
add esp, 4
push 0x98
mov edi, eax
call fcn.0040d160
add esp, 4
add esi, 0x6d4
mov ecx, edi
call fcn.004103a0
mov eax, 1
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret