Function at 0x140011c10
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x150
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov r14, rdx
mov rbp, rcx
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r15, rax
mov r9, r14
mov edx, 0x100
lea rcx, [rsp + 0x40]
test rax, rax
je 0x140011e85
lea r8, str.Registering___S__n
call fcn.140008bb0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edi, edi
mov dword [rsp + 0x30], edi
mov rbx, 0xffffffffffffffff
cmp rax, rbx
je 0x140011ccc
lea rcx, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rcx + r8], dil
jne 0x140011ca1
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140011ccc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0xc70
call fcn.140184174
mov rsi, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0xc70
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r14
xor edx, edx
mov rcx, rsi
call fcn.140009db0
lea r12, vtable.ExternalVisualPlugIn.0
mov qword [rsi], r12
mov qword [rsi + 0xc48], r15
mov qword [rsi + 0xc50], rdi
mov qword [rsi + 0xc58], rdi
mov qword [rsi + 0xc60], rdi
mov qword [rsi + 0xc68], rdi
mov rcx, rsi
call qword [vtable.ExternalVisualPlugIn.0]
test al, al
je 0x140011d70
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x30], rsi
mov rdx, qword [rbp + 0xd0]
cmp rdx, qword [rbp + 0xd8]
je 0x140011d61
mov qword [rdx], rsi
add qword [rbp + 0xd0], 8
jmp 0x140011eee
lea r8, [rsp + 0x30]
call fcn.1400152d0
jmp 0x140011eee
mov r9, r14
lea r8, str.Initialize_failed_when_registering___S__n
mov edx, 0x100
lea rcx, [rsp + 0x40]
call fcn.140008bb0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, rbx
je 0x140011ddf
lea rcx, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rcx + rbx], dil
jne 0x140011db0
mov r8, rbx
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140011ddf
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov qword [rsi], r12
mov rax, qword [rsi + 0xc58]
test rax, rax
jne 0x140011e1a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140011e76
mov r8d, 0x37
lea rdx, str.Cannot_deactivate_plugin._mVisualPluginProcPtr__null_n
jmp 0x140011e58
mov r8, qword [rsi + 0xc60]
xor edx, edx
mov ecx, 0x56646374
call rax
test eax, eax
jne 0x140011e76
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140011e76
mov r8d, 0x14
lea rdx, str.Plugin_deactivated._n
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140011e76
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov edx, 0xc70
mov rcx, rsi
call fcn.1401841b0
jmp 0x140011eee
lea r8, str.LoadLibraryExW_failed_when_registering___S__n
call fcn.140008bb0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edi, edi
mov dword [rsp + 0x30], edi
cmp rax, 0xffffffffffffffff
je 0x140011eee
lea rcx, [rsp + 0x40]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rcx + rbx], dil
jne 0x140011ec0
mov r8, rbx
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140011eee
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140183d70
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret