Function at 0x140011ff0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r15
sub rsp, 0x150
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov rdi, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
cmp rax, 0xffffffffffffffff
je 0x140012063
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], r15
lea r8d, [r15 + 0x2c]
mov rcx, rax
lea rdx, str.OOPWinPipeServer::ActivateVisualizer_called_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140012063
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rbx, qword [rdi + 0xc8]
mov rbp, qword [rdi + 0xd0]
mov rsi, qword [rdi + 0x28]
mov qword [rsp + 0x178], r14
cmp rbx, rbp
je 0x1400120a4
movzx r8d, word [rsi + 8]
lea rdx, [rsi + 0xa]
mov rcx, qword [rbx]
call fcn.14000a040
test al, al
jne 0x140012191
add rbx, 8
cmp rbx, rbp
jne 0x140012082
mov rbx, qword [rdi + 0x30]
lea r8, str.OOPWinPipeServer::Could_not_find_visualizer_to_activate_n
mov edx, 0x100
lea rcx, [rsp + 0x40]
call fcn.1400096e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], r15d
cmp rax, 0xffffffffffffffff
je 0x14001211b
lea rcx, [rsp + 0x40]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rcx + r8], r15b
jne 0x1400120f0
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14001211b
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov rcx, rdi
call fcn.140010490
mov al, 0x4c
mov cl, 0x49
mov dl, 0x41
mov r8b, 0x46
mov byte [rbx], r8b
lea r9, [rdi + 0x60]
mov byte [rbx + 1], dl
mov r8d, 4
mov byte [rbx + 2], cl
mov byte [rbx + 3], al
lea rax, [rdi + 0x38]
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r14, qword [rsp + 0x178]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.14019ce50
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop rdi
pop rsi
ret
lea r8, str.OOPWinPipeServer::ActivateVisualizer::_found_visualizer_to_activate_n
mov edx, 0x100
lea rcx, [rsp + 0x40]
call fcn.1400096e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], r15d
cmp rax, 0xffffffffffffffff
je 0x1400121fc
lea rcx, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], r15b
jne 0x1400121d1
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400121fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [rbx]
mov rcx, rdi
call fcn.140010490
mov ecx, dword [rdi + 0x64]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80ca
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov rbx, qword [rdi + 0x30]
mov al, 0x59
mov cl, 0x58
mov dl, 0x52
mov r8b, 0x50
jmp 0x14001212e