Function at 0x140144870
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x2050
call fcn.14021e520
sub rsp, rax
mov rbx, r8
mov rsi, rdx
mov r14, rcx
mov ecx, 0xfffffff4
call sub.KERNEL32.dll_GetStdHandle
test rax, rax
je 0x1401448b4
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x1401448e4
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
jmp 0x1401448be
movabs rax, 0x600000000
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 0
mov qword [r14], 1
add rsp, 0x2050
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
mov rcx, r12
call sub.KERNEL32.dll_GetConsoleMode
test eax, eax
je 0x140144961
cmp rbx, 0x1000
mov r8d, 0x1000
cmovb r8, rbx
lea rcx, [rsp + 0x28]
mov rdx, rsi
call fcn.140023550
cmp dword [rsp + 0x28], 1
jne 0x1401449a9
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x140144ca0
cmp r8, rbx
ja 0x140144de5
lea rcx, [rsp + 0x50]
mov rdx, rsi
call fcn.140023550
cmp dword [rsp + 0x50], 1
je 0x140144dfc
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
jmp 0x1401449b3
mov dword [rsp + 0x50], 0
mov eax, 0xffffffff
cmp rbx, rax
mov r8d, 0xffffffff
cmovb r8d, ebx
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x50]
mov rcx, r12
mov rdx, rsi
call sub.KERNEL32.dll_WriteFile
test eax, eax
je 0x140144c80
mov eax, dword [rsp + 0x50]
xor ecx, ecx
xor edx, edx
jmp 0x140144c90
mov r15, qword [rsp + 0x30]
mov r13, qword [rsp + 0x38]
xor esi, esi
lea rcx, [rsp + 0x50]
mov edi, 0x2000
mov r8d, 0x2000
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r15
add r8, r13
xor ebx, ebx
test si, si
je 0x1401449f0
nop dword [rax]
xor eax, eax
test rdi, rdi
jne 0x140144ae0
jmp 0x140144afd
cmp r15, r8
je 0x140144b04
lea rcx, [r15 + 1]
mov al, byte [r15]
movzx esi, al
test sil, sil
js 0x140144a1b
mov r15, rcx
xor eax, eax
test rdi, rdi
jne 0x140144ae0
jmp 0x140144afd
cmp rcx, r8
je 0x140144a62
movzx ecx, byte [r15 + 1]
add r15, 2
and ecx, 0x3f
mov edx, esi
and edx, 0x1f
cmp sil, 0xdf
jbe 0x140144a72
cmp r15, r8
je 0x140144a77
movzx esi, byte [r15]
add r15, 1
and esi, 0x3f
shl ecx, 6
or ecx, esi
cmp al, 0xf0
jb 0x140144a85
cmp r15, r8
je 0x140144a8e
movzx eax, byte [r15]
add r15, 1
and eax, 0x3f
jmp 0x140144a90
xor ecx, ecx
mov r15, r8
mov edx, esi
and edx, 0x1f
cmp sil, 0xdf
ja 0x140144a37
shl edx, 6
jmp 0x140144a88
xor esi, esi
mov r15, r8
shl ecx, 6
or ecx, esi
cmp al, 0xf0
jae 0x140144a50
shl edx, 0xc
or ecx, edx
mov esi, ecx
jmp 0x140144aa7
xor eax, eax
and edx, 7
shl edx, 0x12
shl ecx, 6
or ecx, edx
or ecx, eax
mov esi, ecx
cmp ecx, 0x110000
je 0x140144b04
cmp esi, 0xffff
jbe 0x1401449e0
add esi, 0xffff0000
mov ecx, esi
shr ecx, 0xa
or ecx, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov eax, esi
mov esi, ecx
test rdi, rdi
je 0x140144afd
nop dword [rax]
mov word [rsp + rbx*2 + 0x50], si
add rbx, 1
add rdi, 0xfffffffffffffffe
mov esi, eax
test si, si
jne 0x1401449e0
jmp 0x1401449f0
mov ebx, 0x1000
jmp 0x140144b11
cmp rbx, 0x1001
jae 0x140144e31
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rsi, [rsp + 0x50]
lea r9, [rsp + 0x28]
mov rcx, r12
mov rdx, rsi
mov r8d, ebx
call sub.KERNEL32.dll_WriteConsoleW
test eax, eax
je 0x1401448a9
mov r15d, dword [rsp + 0x28]
cmp rbx, r15
je 0x140144dc4
jbe 0x140144e47
movzx eax, word [rsp + r15*2 + 0x50]
add eax, 0x2312
movzx eax, ax
cmp eax, 0x311
ja 0x140144ba4
lea rdx, [rsp + r15*2]
add rdx, 0x50
add r15, 1
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x28]
mov rcx, r12
mov r8d, 1
call sub.KERNEL32.dll_WriteConsoleW
test eax, eax
jne 0x140144ba4
call sub.KERNEL32.dll_GetLastError
cmp rbx, r15
jb 0x140144e5b
test r15, r15
je 0x140144d7b
lea rcx, [r15 + r15]
add rcx, 0xfffffffffffffffe
mov r8, rcx
shr r8, 1
add r8, 1
test rcx, rcx
je 0x140144d80
lea rdx, [rsp + 0x50]
mov rcx, r8
and rcx, 0xfffffffffffffffe
neg rcx
xor r13d, r13d
jmp 0x140144c01
add r13, rdx
lea rdx, [rsi + 4]
add rcx, 2
je 0x140144d75
mov rsi, rdx
movzx ebx, word [rdx]
mov edx, 1
mov edi, 1
cmp ebx, 0x80
jb 0x140144c43
movzx eax, bx
mov edi, 2
cmp eax, 0x800
jb 0x140144c43
add ebx, 0x2312
movzx eax, bx
xor ebx, ebx
cmp eax, 0x311
seta bl
lea rdi, [rbx + rbx]
add rdi, 1
add r13, rdi
movzx ebx, word [rsi + 2]
cmp ebx, 0x80
jb 0x140144bf0
movzx eax, bx
mov edx, 2
cmp eax, 0x800
jb 0x140144bf0
add ebx, 0x2312
movzx eax, bx
xor edx, edx
cmp eax, 0x311
seta dl
add rdx, rdx
add rdx, 1
jmp 0x140144bf0
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
xor ecx, ecx
mov edx, 1
mov qword [r14], rdx
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], rcx
jmp 0x1401448d1
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, 0x4f
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140144e6f
mov rsi, rax
movups xmm0, xmmword [0x140273668]
movups xmmword [rax + 0x3f], xmm0
movups xmm0, xmmword [0x140273659]
movups xmmword [rax + 0x30], xmm0
movups xmm0, xmmword [0x140273649]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [0x140273639]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [0x140273629]
movups xmmword [rax], xmm0
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, 0x18
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140144dd4
mov rdi, rax
mov qword [rax], rsi
movaps xmm0, xmmword [0x140220df0]
movups xmmword [rax + 8], xmm0
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, 0x18
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140144dd4
mov qword [rax], rdi
lea rcx, [0x140272fb0]
mov qword [rax + 8], rcx
mov byte [rax + 0x10], 0xc
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x53]
mov dword [rax + 0x11], ecx
mov dword [rax + 0x14], edx
mov qword [r14 + 0x10], rax
mov qword [r14 + 8], 2
jmp 0x1401448ca
add rsi, 4
jmp 0x140144d83
xor r13d, r13d
jmp 0x140144dc4
xor r13d, r13d
test r8b, 1
je 0x140144dc4
movzx eax, word [rsi]
mov ecx, 1
cmp eax, 0x80
jb 0x140144dc1
movzx edx, ax
mov ecx, 2
cmp edx, 0x800
jb 0x140144dc1
add eax, 0x2312
movzx eax, ax
xor ecx, ecx
cmp eax, 0x311
seta cl
add rcx, rcx
add rcx, 1
add r13, rcx
mov qword [r14 + 8], r13
mov qword [r14], 0
jmp 0x1401448d1
mov ecx, 0x18
mov edx, 8
call fcn.1400182a0
ud2
lea rax, str.library_std_src_syswindows_stdio.rslibrary_std_srciomod.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.1400201a0
ud2
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x40], xmm0
lea rax, str.library_std_src_syswindows_stdio.rslibrary_std_srciomod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1402af842]
lea r9, [0x140273690]
lea r8, [rsp + 0x40]
mov edx, 0x2b
call fcn.140022590
ud2
lea r8, str.library_std_src_syswindows_stdio.rslibrary_std_srciomod.rs
mov edx, 0x1000
mov rcx, rbx
call fcn.1400201a0
ud2
lea r8, str.library_std_src_syswindows_stdio.rslibrary_std_srciomod.rs
mov rcx, r15
mov rdx, rbx
call fcn.14001fa20
ud2
lea r8, str.library_std_src_syswindows_stdio.rslibrary_std_srciomod.rs
mov rcx, r15
mov rdx, rbx
call fcn.1400201a0
ud2
mov ecx, 0x4f
mov edx, 1
call fcn.1400182a0
ud2