Function at 0x1401bec40
Capabilities:
Write file on windows

Disassembly:
xchg rsi, rdi
mov qword [rsp + 0x10], rdi
xchg rsi, rdi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x70
mov esi, edx
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp edx, 0xffffffff
jne 0x1401bec93
xor eax, eax
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
push rax
push rcx
push rdx
xchg qword [rsp + 0x18], rdi
pop rdx
pop rcx
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
xchg rbx, r15
mov qword [rsp + 0x80], r15
xchg r15, rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401becf1
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
xchg rcx, r10
mov r10, rdi
xchg r10, rcx
xchg rsi, rax
mov rbx, rsi
xchg rsi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401becf1
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401bef2b
cmp qword [rdi + 0x80], 0
je 0x1401bef03
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401bed3b
xchg r13, rdx
mov r13, qword [rdi + 0x88]
xchg r13, rdx
mov rcx, rdi
mov r9, qword [rdi + 0x90]
xchg rdx, rbp
mov r8, rbp
xchg rdx, rbp
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1401bed8e
xchg rdx, r13
mov r13, qword [rdi + 0x80]
xchg r13, rdx
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x11f52c22
add ecx, 0x2eacfa39
sub ecx, 0x1335b10
sub ecx, 0x10f2393b
xor ecx, 0x5950ea4d
add ecx, 0x88d387a2
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bef2b
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg rdx, rax
mov qword [rsp + 0x38], rdx
xchg rdx, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
xchg r10, rax
mov qword [rsp + 0x20], r10
xchg r10, rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401bee3e
sub eax, 1
je 0x1401bee3e
cmp eax, 2
jne 0x1401bef03
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x5e6dc79c
add ecx, 0xa6a31f0
xor ecx, 0x250d24d5
add ecx, 0x1ac1459e
sub ecx, 0x3229ade3
sub ecx, 0x34ea6778
xor ecx, 0xfe77f263
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bef2b
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401beea7
mov r9, qword [rdi + 0x80]
lea rcx, [rsp + 0x48]
xchg rbx, r8
mov rbx, r8
xchg r8, rbx
mov edx, 0x7388a3f2
xor edx, 0x14a02a89
add edx, 0x39096ac
add edx, 0x137186eb
xor edx, 0x6bfaeb7e
add edx, 0x6671dba3
add edx, 0xcbfe2c
xor edx, 0x7d0e263a
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401bef03
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x28
xor byte [rdi + 0x71], 0x38
add byte [rdi + 0x71], 0x24
add byte [rdi + 0x71], 0x40
sub byte [rdi + 0x71], 0x4a
sub byte [rdi + 0x71], 0x29
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x2926c10a
sub ecx, 0x20e6c2fb
add ecx, 0x4d99265d
add ecx, 0x9b52e51
add ecx, 0x4313114
sub ecx, 0x37996f0d
add ecx, 0xd3d9eb3b
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bef2b
mov eax, 0x6467bd39
add eax, 0x9d7992a
sub eax, 0x30fc0d3f
sub eax, 0x171b6085
xor eax, 0x703baffa
add eax, 0x10f718f
sub eax, 0x1ddc0cdf
add eax, 0xc6b053ea
mov rbx, qword [rsp + 0x80]
xchg rsi, rbx
mov rbx, qword [rsp + 0x88]
xchg rbx, rsi
add rsp, 0x70
push rdx
push rcx
push rax
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]