Function at 0x140011997
Capabilities:
Write file on windows

Disassembly:
jmp 0x140019330
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov qword [rbp - 1], 0xfffffffffffffffe
mov qword [rsp + 0x130], rbx
mov rax, qword [0x140029010]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r12d, edx
mov r14, rcx
mov dword [rbp + 7], edx
xor esi, esi
mov dword [rbp - 0x79], esi
call fcn.1400113d4
mov r15d, eax
mov dword [rbp - 0x79], eax
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x79]
call fcn.140011a00
test al, al
je 0x14001939e
lea rcx, [rbp + 7]
call fcn.14001182a
jmp 0x1400195d4
mov rcx, r14
call qword [sym.imp.MSVCP140D.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1400193e5
mov rcx, r14
call qword [sym.imp.MSVCP140D.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.MSVCP140D.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1400193e5
mov rcx, r14
call qword [sym.imp.MSVCP140D.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov rbx, rax
lea rcx, [rbp + 7]
call fcn.1400117fd
mov byte [rbx], al
mov eax, r12d
jmp 0x1400195d4
cmp qword [r14 + 0x80], rsi
je 0x1400195d1
mov rcx, r14
call fcn.1400117d0
lea rcx, [rbp + 7]
call fcn.1400117fd
cmp qword [r14 + 0x68], rsi
jne 0x140019423
movzx ecx, al
mov rdx, qword [r14 + 0x80]
call fcn.140011820
test al, al
cmovne r15d, r12d
jmp 0x1400195d1
mov byte [rbp + 0x17], al
xor r8d, r8d
lea edx, [r8 + 8]
lea rcx, [rbp - 0x71]
call fcn.140011901
nop
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
mov rbx, rax
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
mov rdi, rax
mov rcx, rbx
call fcn.1400110c8
mov rbx, rax
lea rcx, [rbp - 0x71]
call fcn.1400118d4
add rbx, rax
mov rcx, rdi
call fcn.1400110c8
lea rcx, [rbp + 7]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x18]
lea r8, [rbp + 0x17]
lea rdx, [r14 + 0x74]
mov rcx, qword [r14 + 0x68]
call qword [sym.imp.MSVCP140D.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
mov ebx, eax
lea rcx, [rbp - 0x49]
call fcn.140011433
nop
lea rcx, [rbp - 0x31]
call fcn.140011433
test ebx, ebx
js 0x1400195c8
cmp ebx, 1
jg 0x1400195ad
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
nop
mov rcx, rax
call fcn.1400110c8
mov rbx, qword [rbp + 7]
sub rbx, rax
lea rcx, [rbp - 0x19]
call fcn.140011433
test rbx, rbx
je 0x140019537
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
nop
or esi, 1
mov dword [rbp - 0x79], esi
mov rcx, rax
call fcn.1400110c8
mov rcx, rax
mov r9, qword [r14 + 0x80]
mov r8, rbx
mov edx, 1
call qword [sym.imp.ucrtbased.dll_fwrite]
cmp rbx, rax
je 0x140019537
mov dil, 1
jmp 0x14001953a
xor dil, dil
test sil, 1
je 0x14001954c
and esi, 0xfffffffe
lea rcx, [rbp - 0x19]
call fcn.140011433
test dil, dil
jne 0x1400195c8
mov byte [r14 + 0x71], 1
lea rax, [rbp + 0x17]
cmp qword [rbp + 0xf], rax
jne 0x1400195a8
test rbx, rbx
jne 0x140019583
lea rcx, [rbp - 0x71]
call fcn.1400118d4
cmp rax, 0x20
jae 0x1400195c8
xor r8d, r8d
lea edx, [rbx + 8]
lea rcx, [rbp - 0x71]
call fcn.14001119a
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
mov rbx, rax
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x71]
call fcn.1400119d8
mov rdi, rax
jmp 0x140019457
mov r15d, r12d
jmp 0x1400195c8
cmp ebx, 3
jne 0x1400195c8
mov rdx, qword [r14 + 0x80]
movzx ecx, byte [rbp + 0x17]
call fcn.140011820
test al, al
cmovne r15d, r12d
lea rcx, [rbp - 0x71]
call fcn.1400111f4
mov eax, r15d
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140011988
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret