Function at 0x1401bdef0
Capabilities:
Write file on windows

Disassembly:
xchg rsi, r11
mov qword [rsp + 0x10], r11
xchg rsi, r11
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x70
mov esi, edx
xchg rdi, r14
mov r14, rcx
xchg r14, rdi
cmp edx, 0xffffffff
jne 0x1401bdf3c
xor eax, eax
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
xchg r12, rbx
mov qword [rsp + 0x80], r12
xchg rbx, r12
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401bdf9a
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
mov rcx, rdi
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401bdf9a
xchg r11, rdi
mov rcx, r11
xchg rdi, r11
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be1f7
cmp qword [rdi + 0x80], 0
je 0x1401be1d4
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401bdfea
xchg rdx, r13
mov r13, qword [rdi + 0x88]
xchg r13, rdx
mov rcx, rdi
xchg rbx, r9
mov rbx, qword [rdi + 0x90]
xchg rbx, r9
xchg r8, rcx
mov rcx, rdx
xchg rcx, r8
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1401be03d
mov rdx, qword [rdi + 0x80]
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x44389684
xor ecx, 0x1be6e6a0
sub ecx, 0xde38e42
sub ecx, 0x390887a8
sub ecx, 0xe49adf2
xor ecx, 0x67ac72a3
add ecx, 0x92fb2114
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be1f7
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg rbx, rax
mov qword [rsp + 0x38], rbx
xchg rbx, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg rdx, rax
mov qword [rsp + 0x30], rdx
xchg rdx, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
xchg rdi, rax
mov qword [rsp + 0x28], rdi
xchg rdi, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be0fd
sub eax, 1
je 0x1401be0fd
cmp eax, 2
jne 0x1401be1d4
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x45c2b6d6
sub ecx, 0x26f75a7a
xor ecx, 0x7b286e86
sub ecx, 0x1c86f516
xor ecx, 0x24ba8ebf
sub ecx, 0x32792186
add ecx, 0x3cf29ecb
sub ecx, 0x53f0f596
add ecx, 0xdb90c4d5
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be1f7
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be172
xchg r9, r12
mov r12, qword [rdi + 0x80]
xchg r12, r9
lea rcx, [rsp + 0x48]
xchg r8, rsi
mov rsi, rbx
xchg r8, rsi
mov edx, 0x200bae82
sub edx, 0x2cba50f
add edx, 0x35ddc9d4
sub edx, 0x6db5feb
sub edx, 0x2654fd73
add edx, 0x548c7893
sub edx, 0x6b50d11d
add edx, 0x2d8c13d4
xor edx, 0x3cb53132
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be1d4
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x25
xor byte [rdi + 0x71], 0x19
sub byte [rdi + 0x71], 0x10
sub byte [rdi + 0x71], 0x11
sub byte [rdi + 0x71], 0xe
add byte [rdi + 0x71], 6
add byte [rdi + 0x71], 0x36
add byte [rdi + 0x71], 0xa
sub byte [rdi + 0x71], 0x52
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x61fbd08d
xor ecx, 0x5d775c9f
xor ecx, 0x403f0409
sub ecx, 0x3b749d0
sub ecx, 0x6fa2f231
xor ecx, 0xf6a6b3e5
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be1f7
mov eax, 0x4a2caafd
add eax, 0x2ed1de8e
xor eax, 0x642c227f
add eax, 0x6b4a11c
xor eax, 0x704e4d71
xor eax, 0x159bc0f
add eax, 0xad6f4391
xchg r15, rbx
mov r15, qword [rsp + 0x80]
xchg r15, rbx
xchg rcx, rsi
mov rcx, qword [rsp + 0x88]
xchg rcx, rsi
add rsp, 0x70
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]