Function at 0x41f510
Capabilities:
Change the wallpaper

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2ec
mov eax, dword [0x5b3940]
xor eax, esp
mov dword [esp + 0x2e8], eax
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 0x1c]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], eax
test eax, eax
jne 0x41f587
mov ebx, dword [sym.imp.USER32.dll_GetSysColor]
xor esi, esi
add edi, 0xb4
nop
push esi
call ebx
mov dword [edi - 0x7c], eax
mov eax, dword [edi]
mov dword [edi], 0
test eax, eax
je 0x41f569
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
inc esi
add edi, 4
cmp esi, 0x1f
jl 0x41f550
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2e8]
xor ecx, esp
call fcn.0050bb49
mov esp, ebp
pop ebp
ret
mov esi, str.SYSMETRICS
call fcn.00453740
push 0x1f4
lea ecx, [esp + 0xfc]
mov ebx, eax
push 0
push ecx
mov dword [esp + 0x2c], ebx
call fcn.0050bed0
add esp, 0xc
push 0
lea edx, [esp + 0xfc]
push edx
push 0x1f4
push 0x29
mov dword [esp + 0x108], 0x1f4
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea esi, [edi + 4]
mov ecx, esi
mov dword [esp + 0x24], esi
call fcn.004f53b3
lea eax, [esp + 0x110]
push eax
mov ecx, esi
call fcn.00415890
lea esi, [edi + 0x14]
mov ecx, esi
mov dword [esp + 0x28], esi
call fcn.004f53b3
lea ecx, [esp + 0x174]
push ecx
mov ecx, esi
call fcn.00415890
lea esi, [edi + 0xc]
mov ecx, esi
call fcn.004f53b3
lea edx, [esp + 0x1d8]
push edx
mov ecx, esi
call fcn.00415890
push 0
lea eax, [edi + 0x130]
push eax
push 0
push 5
mov dword [eax], 1
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 5
call esi
push 6
mov dword [edi + 0x134], eax
call esi
push 0x2d
mov dword [edi + 0x138], eax
call esi
push 0x2e
mov dword [edi + 0x13c], eax
call esi
push 0x15
mov dword [edi + 0x140], eax
call esi
push 3
mov dword [edi + 0x144], eax
call esi
push 2
mov dword [edi + 0x148], eax
call esi
push 0x14
mov dword [edi + 0x14c], eax
call esi
mov dword [edi + 0x150], eax
mov eax, dword [edi + 0x1c]
mov ecx, dword [eax + 0x40]
push 4
mov dword [esp + 0x34], ecx
call esi
push 0x33
mov dword [edi + 0x154], eax
mov dword [edi + 0x15c], eax
call esi
test byte [esp + 0x30], 1
mov dword [edi + 0x158], eax
mov dword [edi + 0x160], eax
je 0x41f965
mov edi, dword [esp + 0x18]
shl ebx, 0xe
lea edx, [esp + 0x10]
add edi, 8
mov dword [esp + 0x14], ebx
add ebx, 0x4b5
push edx
mov dword [esp + 0x30], edi
call fcn.00432760
test eax, eax
jne 0x41f719
lea eax, [esp + 0x10]
push eax
call fcn.00432760
test eax, eax
jne 0x41f719
mov ecx, dword [esp + 0x18]
mov ebx, dword [ecx + 0x44]
lea edx, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x4b5
push edx
call fcn.00432760
test eax, eax
je 0x41f735
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f735
cmp dword [eax], 2
jne 0x41f735
mov eax, dword [eax + 8]
mov esi, dword [esp + 0x1c]
mov dword [esi + 0x154], eax
jmp 0x41f739
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
inc dword [esi + 0x154]
lea ecx, [esp + 0x10]
add ebx, 0x4b7
push ecx
call fcn.00432760
test eax, eax
jne 0x41f783
lea edx, [esp + 0x10]
push edx
call fcn.00432760
test eax, eax
jne 0x41f783
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0x44]
lea ecx, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x4b7
push ecx
call fcn.00432760
test eax, eax
je 0x41f799
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f799
cmp dword [eax], 2
jne 0x41f799
mov edx, dword [eax + 8]
mov dword [esi + 0x158], edx
mov ebx, dword [esp + 0x14]
inc dword [esi + 0x158]
lea eax, [esp + 0x10]
add ebx, 0x4b2
push eax
call fcn.00432760
test eax, eax
jne 0x41f7e3
lea ecx, [esp + 0x10]
push ecx
call fcn.00432760
test eax, eax
jne 0x41f7e3
mov edx, dword [esp + 0x18]
mov ebx, dword [edx + 0x44]
lea eax, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x4b2
push eax
call fcn.00432760
test eax, eax
je 0x41f803
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f803
cmp dword [eax], 2
jne 0x41f803
mov eax, dword [eax + 8]
test eax, eax
jle 0x41f803
mov dword [esi + 0x14c], eax
mov dword [esi + 0x144], eax
mov ebx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
add ebx, 0x4b3
push ecx
call fcn.00432760
test eax, eax
jne 0x41f847
lea edx, [esp + 0x10]
push edx
call fcn.00432760
test eax, eax
jne 0x41f847
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0x44]
lea ecx, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x4b3
push ecx
call fcn.00432760
test eax, eax
je 0x41f867
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f867
cmp dword [eax], 2
jne 0x41f867
mov eax, dword [eax + 8]
test eax, eax
jle 0x41f867
mov dword [esi + 0x150], eax
mov dword [esi + 0x148], eax
mov ebx, dword [esp + 0x14]
lea edx, [esp + 0x10]
add ebx, 0x321
push edx
call fcn.00432760
test eax, eax
jne 0x41f8ab
lea eax, [esp + 0x10]
push eax
call fcn.00432760
test eax, eax
jne 0x41f8ab
mov ecx, dword [esp + 0x18]
mov ebx, dword [ecx + 0x44]
lea edx, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x321
push edx
call fcn.00432760
test eax, eax
je 0x41f8e7
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f8e7
cmp dword [eax], 6
jne 0x41f8e7
mov esi, dword [eax + 8]
mov ecx, 0x17
lea edi, [esp + 0x98]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x24]
mov ecx, esi
call fcn.004f53b3
lea eax, [esp + 0x98]
push eax
mov ecx, esi
call fcn.00415890
mov edi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
add ebx, 0x322
push ecx
call fcn.00432760
test eax, eax
jne 0x41f92b
lea edx, [esp + 0x10]
push edx
call fcn.00432760
test eax, eax
jne 0x41f92b
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0x44]
lea ecx, [esp + 0x10]
shl ebx, 0xe
add ebx, 0x322
push ecx
call fcn.00432760
test eax, eax
je 0x41f95d
mov eax, dword [esp + 0x10]
test eax, eax
je 0x41f95d
cmp dword [eax], 6
jne 0x41f95d
mov esi, dword [eax + 8]
mov ecx, 0x17
lea edi, [esp + 0x38]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x28]
mov ecx, esi
call fcn.004f53b3
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.00415890
mov ebx, dword [esp + 0x20]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
add eax, 8
shl ebx, 0xe
add ebx, 0x641
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 0x641
mov dword [esp + 0x20], 0x577d60
mov dword [esp + 0x10], ebx
lea esi, [edi + 0xb4]
mov dword [esp + 0x30], 0x1f
mov ecx, dword [esi - 0x7c]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x2c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x38], ecx
mov dword [esi - 0x7c], 0xffffffff
call fcn.00432760
test eax, eax
jne 0x41f9e9
lea eax, [esp + 0x28]
push eax
call fcn.00432760
test eax, eax
jne 0x41f9e9
mov ecx, dword [esp + 0x18]
mov ebx, dword [ecx + 0x44]
shl ebx, 0xe
add ebx, dword [esp + 0x24]
lea edx, [esp + 0x28]
push edx
call fcn.00432760
test eax, eax
je 0x41fa02
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41fa02
cmp dword [eax], 4
jne 0x41fa02
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 8]
mov edi, dword [ecx + 0x24]
jmp 0x41fa0f
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov eax, dword [edx]
mov edi, dword [ecx + 0x1c]
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00420000
mov ecx, dword [esp + 0x14]
mov dword [esi - 0x7c], ecx
cmp dword [esp + 0x34], ecx
jne 0x41fa2e
cmp dword [esi], 0
jne 0x41fa4e
mov eax, dword [esi]
mov dword [esi], 0
test eax, eax
je 0x41fa45
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [esi], eax
add dword [esp + 0x20], 4
mov eax, 1
add dword [esp + 0x24], eax
add dword [esp + 0x10], eax
add esi, 4
sub dword [esp + 0x30], eax
jne 0x41f99b
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x78]
mov edx, dword [esi + 0x88]
mov ecx, dword [esi + 0x90]
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0x20]
mov dword [esi + 0x2c], edx
mov edx, dword [esi + 0x8c]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x34], edx
test eax, eax
je 0x41faa0
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esi + 0x74]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x24]
test eax, eax
je 0x41fac2
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0x24], 0
mov ecx, dword [esp + 0x2f4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0050bb49
mov esp, ebp
pop ebp
ret