Function at 0x140012800
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x150
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov r14, rdx
mov rbp, rcx
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r15, rax
mov r9, r14
mov edx, 0x100
lea rcx, [rsp + 0x40]
test rax, rax
je 0x140012a6c
lea r8, str.Registering___S__n
call fcn.1400096e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edi, edi
mov dword [rsp + 0x30], edi
mov rbx, 0xffffffffffffffff
cmp rax, rbx
je 0x1400128bc
lea rcx, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rcx + r8], dil
jne 0x140012891
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400128bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0xc70
call fcn.14019d258
mov rsi, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0xc70
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r14
xor edx, edx
mov rcx, rsi
call fcn.14000a8e0
lea r12, vtable.ExternalVisualPlugIn.0
mov qword [rsi], r12
mov qword [rsi + 0xc48], r15
mov qword [rsi + 0xc50], rdi
mov qword [rsi + 0xc58], rdi
mov qword [rsi + 0xc60], rdi
mov qword [rsi + 0xc68], rdi
mov rcx, rsi
call qword [vtable.ExternalVisualPlugIn.0]
test al, al
je 0x14001295d
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x30], rsi
mov rdx, qword [rbp + 0xd0]
cmp rdx, qword [rbp + 0xd8]
je 0x14001294e
mov qword [rdx], rsi
add qword [rcx + 8], 8
jmp 0x140012ad1
lea r8, [rsp + 0x30]
call fcn.140015d90
jmp 0x140012ad1
mov r9, r14
lea r8, str.Initialize_failed_when_registering___S__n
mov edx, 0x100
lea rcx, [rsp + 0x40]
call fcn.1400096e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, rbx
je 0x1400129c6
lea rcx, [rsp + 0x40]
inc rbx
cmp byte [rcx + rbx], dil
jne 0x140012997
mov r8, rbx
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400129c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov qword [rsi], r12
mov rax, qword [rsi + 0xc58]
test rax, rax
jne 0x140012a01
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140012a5d
mov r8d, 0x37
lea rdx, str.Cannot_deactivate_plugin._mVisualPluginProcPtr__null_n
jmp 0x140012a3f
mov r8, qword [rsi + 0xc60]
xor edx, edx
mov ecx, 0x56646374
call rax
test eax, eax
jne 0x140012a5d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140012a5d
mov r8d, 0x14
lea rdx, str.Plugin_deactivated._n
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140012a5d
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov edx, 0xc70
mov rcx, rsi
call fcn.14019d294
jmp 0x140012ad1
lea r8, str.LoadLibraryExW_failed_when_registering___S__n
call fcn.1400096e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edi, edi
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140012ad1
lea rcx, [rsp + 0x40]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rcx + rbx], dil
jne 0x140012aa3
mov r8, rbx
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140012ad1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.14019ce50
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret