Function at 0x1401be700
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x70
mov esi, edx
xchg rcx, r9
mov rdi, r9
xchg r9, rcx
cmp edx, 0xffffffff
jne 0x1401be74d
xor eax, eax
xchg rsi, r10
mov r10, qword [rsp + 0x88]
xchg rsi, r10
add rsp, 0x70
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
xchg rbx, r10
mov qword [rsp + 0x80], r10
xchg rbx, r10
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401be7ad
xchg rdi, r8
mov rcx, r8
xchg r8, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
xchg r9, rdi
mov rcx, r9
xchg r9, rdi
mov rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401be7ad
xchg r8, rdi
mov rcx, r8
xchg r8, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401bea08
cmp qword [rdi + 0x80], 0
je 0x1401be9e5
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401be803
xchg r8, rdx
mov r8, qword [rdi + 0x88]
xchg rdx, r8
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
xchg r9, r8
mov r8, qword [rdi + 0x90]
xchg r8, r9
mov r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1401be856
xchg rdx, r14
mov r14, qword [rdi + 0x80]
xchg r14, rdx
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x4c533e94
sub ecx, 0x2a8bf540
add ecx, 0xf565f3f
sub ecx, 0x1ad6228d
xor ecx, 0x747c4583
add ecx, 0x9dc43c7a
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bea08
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg rdx, rax
mov qword [rsp + 0x38], rdx
xchg rdx, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg r11, rax
mov qword [rsp + 0x30], r11
xchg r11, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
xchg r15, rax
mov qword [rsp + 0x28], r15
xchg r15, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be914
sub eax, 1
je 0x1401be914
cmp eax, 2
jne 0x1401be9e5
movsx ecx, byte [rsp + 0x40]
xchg rdx, rbp
mov rbp, qword [rdi + 0x80]
xchg rbp, rdx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x5c8c0f34
sub ecx, 0x2319f952
xor ecx, 0x47c518c7
sub ecx, 0x1ed05c17
xor ecx, 0x703bcb08
xor ecx, 0x2db7f4bc
add ecx, 0xfd957145
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bea08
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be977
xchg r9, rdx
mov rdx, qword [rdi + 0x80]
xchg rdx, r9
lea rcx, [rsp + 0x48]
mov r8, rbx
mov edx, 0x247398af
xor edx, 0x1016afb0
add edx, 0x25235d30
add edx, 0x15261012
sub edx, 0x3f15809b
sub edx, 0x1a27977c
sub edx, 0x15718c49
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be9e5
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0xd
xor byte [rdi + 0x71], 0x6e
xor byte [rdi + 0x71], 0x53
add byte [rdi + 0x71], 0x1a
add byte [rdi + 0x71], 0xe
xor byte [rdi + 0x71], 0x2e
xor byte [rdi + 0x71], 0x75
add byte [rdi + 0x71], 4
sub byte [rdi + 0x71], 6
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x3df6d712
xor ecx, 0x738b50cc
add ecx, 0x2ac8f70f
sub ecx, 0x5976a45
sub ecx, 0x1215d9d0
sub ecx, 0x22a419e3
sub ecx, 0x1bd446c8
add ecx, 0xdcdf25d2
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401bea08
mov eax, 0x6c9ba889
sub eax, 0x2c802552
xor eax, 0xf00f775
xor eax, 0x157216e0
xor eax, 0x1b07b004
add eax, 0x116fd01d
add eax, 0xad215d3c
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]