Function at 0x1400be180
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r12
push rdi
push rsi
push rbx
sub rsp, 0xa0
lea rbp, [rsp + 0xa0]
mov rdi, qword [0x140185450]
movabs rsi, 0x657220677562206c
movabs rbx, 0x6c75662074696d62
movabs r9, 0x756f6e6520746f6e
movabs r10, 0x6563617073206867
movabs r11, 0x726f6620726f6620
movabs r12, 0x617078652074616d
movabs r14, 0x5028206e6f69736e
movabs r15, 0x757320657361656c
mov rax, qword [rdi]
mov qword [rbp - 8], rax
xor eax, eax
mov qword [rbp - 0x48], rsi
sub rdx, rcx
movabs rsi, 0x2f2f3a7370747468
mov qword [rbp - 0x50], rbx
lea rax, [rdx + 0x78]
movabs rbx, 0x2074612074726f70
mov qword [rbp - 0x38], rsi
and rax, 0xfffffffffffffff0
movabs rsi, 0x736775622f67726f
mov qword [rbp - 0x28], rsi
movabs rsi, 0x202020200a3a29
mov qword [rbp - 0x40], rbx
movabs rbx, 0x2e756e672e636367
mov qword [rbp - 0x30], rbx
movabs rbx, 0x2f736775622f6772
mov qword [rbp - 0x1f], rsi
mov rsi, rdx
mov qword [rbp - 0x80], r9
mov qword [rbp - 0x78], r10
mov qword [rbp - 0x70], r11
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x27], rbx
call fcn.1400aa540
movabs rdx, 0x657220677562206c
movdqu xmm0, xmmword [rbp - 0x30]
sub rsp, rax
mov r8, rsi
movabs rax, 0x6c75662074696d62
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x20]
movabs rax, 0x2074612074726f70
mov qword [rbx + 0x40], rax
mov rax, qword [rbp - 0x20]
mov qword [rbx + 0x38], rdx
movabs rdx, 0x2f2f3a7370747468
mov qword [rbx + 0x48], rdx
mov rdx, rcx
mov qword [rbx + 0x60], rax
lea rax, [rbx + 0x68]
mov qword [rbx], r9
mov rcx, rax
mov qword [rbx + 8], r10
mov qword [rbx + 0x10], r11
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x20], r14
mov qword [rbx + 0x28], r15
movups xmmword [rbx + 0x50], xmm0
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov byte [rbx + rsi + 0x68], 0
mov rax, qword [rbp - 8]
sub rax, qword [rdi]
jne 0x1400be171
mov rcx, rbx
call fcn.140163970
call fcn.1400ac0f0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rdi, qword [0x140185450]
mov rax, qword [rdi]
mov qword [rsp + 0x28], rax
xor eax, eax
cmp byte [0x14016c560], 0
jne 0x1400be2ac
mov byte [0x14016c560], 1
call fcn.140161e70
test rax, rax
je 0x1400be278
mov rbx, qword [rax + 8]
xor eax, eax
lea r9, [rsp + 0x24]
cmp byte [rbx], 0x2a
mov dword [rsp + 0x24], 0xffffffff
sete al
xor r8d, r8d
xor edx, edx
add rbx, rax
mov rcx, rbx
call fcn.1400a9310
mov ecx, 2
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbp, rax
call rsi
mov edx, 1
lea rcx, str.terminate_called_after_throwing_an_instance_of_
mov r8d, 0x30
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edx, dword [rsp + 0x24]
mov ecx, 2
test edx, edx
je 0x1400be269
call rsi
mov rcx, rbx
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputs
mov ecx, 2
call rsi
mov r8d, 2
mov edx, 1
lea rcx, [0x14017f411]
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov eax, dword [rsp + 0x24]
test eax, eax
jne 0x1400be25a
mov rcx, rbp
call fcn.1400b5948
mov rax, qword [rsp + 0x28]
sub rax, qword [rdi]
jne 0x1400be2db
call fcn.140162270
call rsi
mov rcx, rbp
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputs
jmp 0x1400be229
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x2d
mov edx, 1
lea rcx, str.terminate_called_without_an_active_exception_n
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov rax, qword [rsp + 0x28]
sub rax, qword [rdi]
jne 0x1400be2db
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x1d
mov edx, 1
lea rcx, str.terminate_called_recursively_n
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov rax, qword [rsp + 0x28]
sub rax, qword [rdi]
je 0x1400be2a7
call fcn.1400ac0f0
sub rdx, 1
mov rcx, rax
jne 0x1400be34b
call fcn.140161c70
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x10]
mov ecx, 2
mov rbx, rax
call rsi
mov r9, rax
mov r8d, 0xb
mov edx, 1
lea rcx, str.__what__:
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov ecx, 2
call rsi
mov rdx, rax
mov rcx, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputs
mov ecx, 2
call rsi
mov rdx, rax
mov ecx, 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
call fcn.140161ea0
jmp 0x1400be29d
call fcn.140161c70
call fcn.140161ea0
jmp 0x1400be29d