Function at 0x140011800
Capabilities:
Write file on windows

Disassembly:
push rsi
sub rsp, 0x50
mov rax, qword [0x1402e4000]
xor rax, rsp
mov qword [rsp + 0x48], rax
lea rcx, [0x1402e3e29]
call fcn.14000fe00
lea rcx, [0x1402e46d3]
call fcn.14000fe00
lea rcx, [0x1402e3e30]
call fcn.14000fb00
lea rcx, [0x1402e3e29]
call fcn.14000fe00
lea rcx, [0x1402e46d4]
call fcn.14000fb00
lea rcx, [0x1402e46d8]
call fcn.14000fb00
lea rcx, [0x1402e4680]
call fcn.14000fe00
lea rcx, [0x1402e3e18]
call fcn.14000fb00
lea rcx, [0x1402e4681]
call fcn.14000fe00
lea rcx, [0x1402e4682]
call fcn.14000fe00
lea rcx, [0x1402e3e38]
call fcn.14000fc80
lea rcx, [0x1402e3e48]
call fcn.14000fc80
lea rcx, [0x1402e4697]
call fcn.14000fe00
lea rcx, [0x1402e4694]
call fcn.14000fe00
lea rcx, [0x1402e4698]
call fcn.14000fe00
lea rcx, [0x1402e469c]
call fcn.14000fb00
lea rcx, [0x1402e4695]
call fcn.14000fe00
lea rcx, [0x1402e4696]
call fcn.14000fe00
lea rcx, [0x1402e4683]
call fcn.14000fe00
lea rcx, [0x1402e3e0c]
call fcn.14000fb00
lea rcx, [0x1402e3e10]
call fcn.14000fb00
lea rcx, [0x1402e3e14]
call fcn.14000fb00
lea rcx, [0x1402e4684]
call fcn.14000fb00
lea rcx, [0x1402e4690]
call fcn.14000fb00
lea rcx, [0x1402e4688]
call fcn.14000fb00
lea rcx, [0x1402e468c]
call fcn.14000fb00
lea rcx, [0x1402e3e28]
call fcn.14000fe00
lea rcx, [0x1402e46b0]
call fcn.14000fe00
lea rcx, [0x1402e46b2]
call fcn.14000fe00
lea rcx, [0x1402e46b1]
call fcn.14000fe00
lea rcx, [0x1402e3e68]
call fcn.14000fc80
lea rcx, [0x1402e3e78]
call fcn.14000fc80
lea rcx, [0x1402e3e88]
call fcn.14000fc80
lea rcx, [0x1402e3e98]
call fcn.14000fc80
lea rcx, [0x1402e46b4]
call fcn.14000fb00
lea rcx, [0x1402e3ea8]
call fcn.14000fc80
lea rcx, [0x1402e3eb8]
call fcn.14000fc80
lea rcx, [0x1402e46bd]
call fcn.14000fe00
lea rcx, [0x1402e3ed8]
call fcn.14000fc80
lea rcx, [0x1402e3ee8]
call fcn.14000fc80
lea rcx, [0x1402e46be]
call fcn.14000fe00
lea rcx, [0x1402e46bf]
call fcn.14000fe00
lea rcx, [0x1402e46c7]
call fcn.14000fe00
lea rcx, [0x1402e46d0]
call fcn.14000fe00
lea rcx, [0x1402e46c4]
call fcn.14000fe00
lea rcx, [0x1402e46c3]
call fcn.14000fe00
lea rcx, [0x1402e46c2]
call fcn.14000fe00
lea rcx, [0x1402e46c1]
call fcn.14000fe00
lea rcx, [0x1402e46d1]
call fcn.14000fe00
lea rcx, [0x1402e46d2]
call fcn.14000fe00
lea rcx, [0x1402e3e2c]
call fcn.14000fb00
lea rcx, [0x1402e46c0]
call fcn.14000fe00
lea rcx, [0x1402e46c5]
call fcn.14000fe00
lea rcx, [0x1402e46b3]
call fcn.14000fe00
lea rcx, [0x1402e3ec8]
call fcn.14000fc80
lea rcx, [0x1402e46bc]
call fcn.14000fe00
lea rcx, [0x1402e46b8]
call fcn.14000fb00
lea rcx, [0x1402e46c8]
call fcn.14000fb00
lea rcx, [0x1402e46cc]
call fcn.14000fb00
lea rcx, [0x1402e469a]
call fcn.14000fe00
lea rcx, [0x1402e46a1]
call fcn.14000fe00
lea rcx, [0x1402e469b]
call fcn.14000fe00
lea rcx, [0x1402e46a0]
call fcn.14000fe00
lea rcx, [0x1402e3e1c]
call fcn.14000fb00
lea rcx, [0x1402e46a2]
call fcn.14000fe00
lea rcx, [0x1402e46a3]
call fcn.14000fe00
lea rcx, [0x1402e46a4]
call fcn.14000fb00
lea rcx, [0x1402e3e20]
call fcn.14000fb00
lea rcx, [0x1402e3e24]
call fcn.14000fb00
lea rcx, [0x1402e46a8]
call fcn.14000fb00
lea rcx, [0x1402e46ac]
call fcn.14000fb00
mov rax, qword [0x1402e4a20]
lea r9, [rsp + 0x30]
sub rax, qword [0x1402e4a18]
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1402e46e0]
xor esi, esi
sar rax, 4
mov r8d, 8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140011c9c
cmp dword [rsp + 0x30], 8
jne 0x140011c9c
cmp qword [rsp + 0x40], rsi
je 0x140011c9c
mov qword [rsp + 0x60], rbx
mov rbx, qword [0x1402e4a18]
mov qword [rsp + 0x68], rdi
mov rdi, qword [0x1402e4a20]
cmp rbx, rdi
je 0x140011c92
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], sil
jne 0x140011bf0
mov rcx, qword [0x1402e46e0]
lea r9, [rsp + 0x30]
mov r8d, 8
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140011c92
cmp dword [rsp + 0x30], 8
jne 0x140011c92
mov r8d, dword [rsp + 0x38]
lea r9, [rsp + 0x30]
mov rdx, qword [rbx]
mov rcx, qword [0x1402e46e0]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140011c92
mov eax, dword [rsp + 0x30]
cmp rax, qword [rsp + 0x38]
jne 0x140011c92
mov rcx, qword [0x1402e46e0]
lea rdx, [rbx + 8]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rsi
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140011c92
cmp dword [rsp + 0x30], 4
jne 0x140011c92
add rbx, 0x10
cmp rbx, rdi
jne 0x140011be3
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140087bd0
add rsp, 0x50
pop rsi
ret