Function at 0x140053520
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rax, qword [0x1400b8288]
xor rax, rsp
mov qword [rsp + 0xc0], rax
mov r15, r8
mov r14, rdx
mov r12, rcx
mov edi, 1
movaps xmm0, xmmword [str._FALLBACK_LANGUAGE__s___s__FALLBACK_]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm1, xmmword [0x1400a7470]
movaps xmmword [rsp + 0x80], xmm1
movaps xmm0, xmmword [0x1400a7480]
movaps xmmword [r11 - 0x78], xmm0
movaps xmm1, xmmword [0x1400a7490]
movaps xmmword [r11 - 0x68], xmm1
movsd xmm0, qword [0x1400a74a0]
movsd qword [r11 - 0x58], xmm0
mov eax, dword [0x1400a74a8]
mov dword [r11 - 0x50], eax
xor r13d, r13d
mov ebx, r13d
mov qword [rsp + 0x38], rbx
test rcx, rcx
je 0x140053771
test rdx, rdx
je 0x140053771
test r8, r8
je 0x140053771
test r9, r9
je 0x140053771
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov edx, 0x104
mov eax, edx
mov qword [rsp + 0x50], rdx
mov rcx, r14
mov qword [rsp + 0x48], rcx
test rax, rax
je 0x14005360b
cmp word [rcx], r13w
je 0x14005360b
add rcx, 2
mov qword [rsp + 0x48], rcx
sub rax, rdi
mov qword [rsp + 0x50], rax
jmp 0x1400535ed
mov ecx, r13d
mov r10d, 0x80070057
test rax, rax
cmove ecx, r10d
test ecx, ecx
js 0x140053627
sub rdx, rax
mov qword [r8], rdx
jmp 0x14005362a
mov qword [r8], r13
test ecx, ecx
jns 0x140053639
mov qword [r8], r13
mov edi, r13d
jmp 0x140053748
mov ecx, dword [rsp + 0x40]
add r9d, 0x27
add ecx, r9d
mov esi, ecx
lea eax, [rcx + rcx]
mov dword [rsp + 0x30], eax
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, ebx
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140053631
mov qword [rsp + 0x20], r15
mov r9, r14
lea r8, [rsp + 0x70]
mov edx, esi
mov rcx, rax
call fcn.1400011bc
test eax, eax
js 0x140053631
lea rdx, [rsp + 0x68]
cmp rsi, 0x7fffffff
ja 0x1400536f6
mov qword [rsp + 0x60], rsi
mov rax, rbx
mov qword [rsp + 0x58], rbx
mov ecx, esi
test rsi, rsi
je 0x1400536d5
cmp word [rax], r13w
je 0x1400536d5
add rax, 2
mov qword [rsp + 0x58], rax
sub rsi, rdi
mov qword [rsp + 0x60], rsi
jmp 0x1400536b7
mov eax, r13d
test rsi, rsi
mov r8d, 0x80070057
cmove eax, r8d
test eax, eax
js 0x1400536f1
sub rcx, rsi
mov qword [rdx], rcx
jmp 0x1400536fb
mov qword [rdx], r13
jmp 0x1400536fb
mov eax, 0x80070057
test eax, eax
jns 0x140053707
mov qword [rdx], r13
jmp 0x140053631
mov dword [rsp + 0x30], r13d
mov rsi, qword [rsp + 0x68]
lea r8d, [rsi + rsi]
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x30]
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
nop dword [rax + rax]
test eax, eax
je 0x140053631
lea rcx, [rsi + rsi]
mov eax, dword [rsp + 0x30]
cmp rax, rcx
cmovne edi, r13d
test rbx, rbx
je 0x14005376d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, edi
jmp 0x140053773
xor eax, eax
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.140096bd0
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret