Function at 0x180011ff0
Capabilities:
Change the wallpaper
Download url
Receive data

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x660
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180080080]
xor rax, rsp
mov qword [rbp + 0x5f0], rax
mov rsi, r8
mov qword [rbp + 0x40], rdx
mov r13, rcx
xor edi, edi
mov dword [rbp + 8], edi
lea rbx, [rdi - 1]
movabs r14, 0xa73f02c722994d74
movabs r12, 0x641ac45a42f06d5b
cmp qword [r8 + 0x10], rdi
je 0x180012228
movabs rax, 0x6435eb6032841933
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x58], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x5c0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x5c8], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
mov r8d, 7
cmp qword [rsi + 0x10], r8
cmovb r8, qword [rsi + 0x10]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800120d4
mov rdx, qword [rsi]
lea rcx, [rbp + 0x80]
call fcn.1800047f0
nop
mov edi, 5
mov dword [rbp + 8], edi
lea rcx, [rbp + 0x50]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x1800120f0
lea rcx, [rbp + 0x80]
mov r15, qword [rbp + 0x98]
cmp r15, 0xf
cmova rcx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
cmp r8, rax
jne 0x18001213b
lea rdx, [rbp + 0x50]
call fcn.180064610
test eax, eax
jne 0x18001213b
mov r14, qword [rbp + 0xf8]
xor r12b, r12b
jmp 0x180012239
movabs rax, 0x4b35fe2932841933
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 8
cmp qword [rsi + 0x10], r8
cmovb r8, qword [rsi + 0x10]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800121bd
mov rdx, qword [rsi]
lea rcx, [rbp + 0xe0]
call fcn.1800047f0
mov edi, 0x17
mov dword [rbp + 8], edi
lea rcx, [rbp + 0x60]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1800121e0
lea rcx, [rbp + 0xe0]
mov r14, qword [rbp + 0xf8]
cmp r14, 0xf
cmova rcx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
cmp r8, rax
jne 0x18001222f
lea rdx, [rbp + 0x60]
call fcn.180064610
test eax, eax
jne 0x18001222f
mov r15, qword [rbp + 0x98]
xor r12b, r12b
jmp 0x180012239
mov r14, qword [rbp + 0xf8]
mov r12b, 1
mov r15, qword [rbp + 0x98]
test dil, 2
je 0x180012297
and edi, 0xfffffffd
mov dword [rbp + 8], edi
cmp r14, 0xf
jbe 0x180012280
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001227b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a74
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180075d70]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
test dil, 1
je 0x1800122f5
and edi, 0xfffffffe
mov dword [rbp + 8], edi
cmp r15, 0xf
jbe 0x1800122de
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800122d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a7a
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180075d70]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
test r12b, r12b
je 0x180012522
lea rax, [rbp + 0xe0]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0xa3aab342394020b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
movabs rax, 0xc35675a650e9281d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa8], rcx
movabs rax, 0xd25a0254a0c2c5c1
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb0], rcx
movabs rax, 0xaa93dc8174a98f6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x1e6a0fe9056b8ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rdx, 0xfd8f082b0c50be68
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs r15, 0x641ac45a42f06d5b
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs r14, 0xa73f02c722994d74
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0xbc336e74d9b5aaad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rcx, 0xdaf2a8a11bcdaf06
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0x1e6a0fe902fccaf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xc0]
vxorps xmm0, xmm0, xmmword [rbp + 0x5a0]
vmovdqa xmmword [rbp + 0xc0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x20], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x30], xmm1
lea rax, [rbp + 0xa0]
vzeroupper
inc rbx
cmp byte [rax + rbx], 0
jne 0x180012487
mov r8, rbx
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x20]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0x20]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a68
jmp 0x180012a33
movabs rax, 0x147bb4362e911a07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xa73f65b748b73f11
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs r15, 0x641ac45a42f06d5b
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs r14, 0xa73f02c722994d74
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov rcx, rbx
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1800125a0
movabs rax, 0x7fffffffffffffff
mov rdx, qword [0x1800843e0]
sub rax, rdx
cmp rax, rcx
jb 0x180012a80
lea r9, [0x1800843d0]
cmp qword [0x1800843e8], 0xf
cmova r9, qword [0x1800843d0]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x550]
call fcn.180010e50
or dword [rbp + 8], 8
lea r8, [rbp + 0x550]
cmp qword [rbp + 0x568], 0xf
cmova r8, qword [rbp + 0x550]
cmp qword [rsi + 0x18], 0xf
jbe 0x180012621
mov rsi, qword [rsi]
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x180012854
lea r8, [rbp + 0x550]
cmp qword [rbp + 0x568], 0xf
cmova r8, qword [rbp + 0x550]
xor edx, edx
lea ecx, [rdx + 0x14]
lea r9d, [rdx + 3]
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
mov rdx, qword [rbp + 0x568]
cmp rdx, 0xf
jbe 0x1800126a7
inc rdx
mov rcx, qword [rbp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800126a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a86
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180075d70]
movdqu xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x550], 0
lea rax, [rbp + 0x120]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x120]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0x1e3aa52e27800c0f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0xd21f63ab43ed3e1b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rax, 0xdd5d011daed4dede
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x30], rcx
movabs rcx, 0xdaf2a8a11bcdaf06
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0xbc336e74d9b5aaad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xa0], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0xb0], xmm1
lea rax, [rbp + 0x20]
vzeroupper
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800127b0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a6e
jmp 0x180012a33
mov rdx, qword [rbp + 0x568]
cmp rdx, 0xf
jbe 0x180012895
inc rdx
mov rcx, qword [rbp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012890
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a86
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180075d70]
movdqu xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x550], 0
lea rax, [rbp + 0x120]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x120]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0x87ba02f62950415
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0xd44a22a24bea6d1b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rax, 0xdd474e17b0c2cbd9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x30], rcx
movabs rax, 0xdaf2a8a162b9ca76
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0xbc336e74d9b5aaad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rcx, 0xdaf2a8a11bcdaf06
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xa0], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0xb0], xmm1
lea rax, [rbp + 0x20]
vzeroupper
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800129a0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a62
call fcn.18003aaa4
mov rcx, qword [rbp + 0x5f0]
xor rcx, rsp
call fcn.18003a6d0
mov rbx, qword [rsp + 0x6b8]
add rsp, 0x660
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18004167c
int3
call fcn.18004167c
int3
call fcn.18004167c
nop
call fcn.18004167c
nop
call fcn.18004167c
int3
call fcn.1800047d0
int3
call fcn.18004167c
int3