Function at 0x1401b9be0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x50
xchg rbp, rcx
mov rbx, rbp
xchg rbp, rcx
lea rax, [0x140004258]
mov qword [rcx], rax
cmp qword [rcx + 0x80], 0
je 0x1401b9c40
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x1401b9c40
mov rdx, qword [rbx + 0x88]
mov r9, qword [rbx + 0x90]
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
xchg rbx, r10
mov rcx, r10
xchg rbx, r10
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp byte [rbx + 0x7c], 0
je 0x1401b9e59
cmp qword [rbx + 0x80], 0
je 0x1401b9df4
xchg r14, rbx
mov rcx, r14
xchg r14, rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbx + 0x70]
cmp rax, rcx
jne 0x1401b9c9a
xchg rdx, r14
mov r14, qword [rbx + 0x88]
xchg rdx, r14
mov r9, qword [rbx + 0x90]
xchg r8, rdx
mov rdx, r8
xchg rdx, r8
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
je 0x1401b9de7
cmp byte [rbx + 0x71], 0
je 0x1401b9de7
xchg rcx, rax
mov rcx, qword [rbx]
xchg rcx, rax
xchg r10, r8
mov r10, qword [rax + 0x18]
xchg r8, r10
lea rax, [fcn.1401be310]
mov edx, 0x7e34b896
sub edx, 0x631f2724
xor edx, 0x3376c121
add edx, 0x40d144eb
xor edx, 0x2620b162
sub edx, 0x3f44d1cc
sub edx, 0xa869be3
add edx, 0xfab74952
xchg rbx, rdi
mov rcx, rdi
xchg rdi, rbx
cmp r8, rax
jne 0x1401b9d12
call fcn.1401be310
jmp 0x1401b9d15
call r8
cmp eax, 0xffffffff
je 0x1401b9de7
lea rdx, [rbx + 0x74]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
xchg rcx, r8
mov r8, qword [rbx + 0x68]
xchg r8, rcx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401b9d7d
sub eax, 1
je 0x1401b9d99
cmp eax, 2
jne 0x1401b9de7
mov byte [rbx + 0x71], 0x12
sub byte [rbx + 0x71], 0xf
xor byte [rbx + 0x71], 0x28
xor byte [rbx + 0x71], 0x3f
add byte [rbx + 0x71], 0x3c
xor byte [rbx + 0x71], 0x50
jmp 0x1401b9de7
mov byte [rbx + 0x71], 0x1f
xor byte [rbx + 0x71], 8
xor byte [rbx + 0x71], 0x38
add byte [rbx + 0x71], 0x1f
xor byte [rbx + 0x71], 0x40
xor byte [rbx + 0x71], 0x47
sub byte [rbx + 0x71], 0x49
lea rax, [rsp + 0x30]
xchg r8, rbp
mov rbp, qword [rsp + 0x60]
xchg rbp, r8
sub r8, rax
je 0x1401b9de7
mov r9, qword [rbx + 0x80]
mov edx, 0x7619816c
sub edx, 0x477f8eb9
add edx, 0x1b8d67ba
add edx, 0x2d020e54
xor edx, 0x62e28a98
xor edx, 0x15cbe258
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rbx + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov byte [rbx + 0x7c], 0x4d
sub byte [rbx + 0x7c], 0x12
sub byte [rbx + 0x7c], 0xc
sub byte [rbx + 0x7c], 0x2c
xor byte [rbx + 0x7c], 0x26
add byte [rbx + 0x7c], 7
sub byte [rbx + 0x7c], 0x2a
add byte [rbx + 0x7c], 0xc
sub byte [rbx + 0x7c], 0xe
mov byte [rbx + 0x71], 0x45
sub byte [rbx + 0x71], 5
add byte [rbx + 0x71], 0x23
add byte [rbx + 0x71], 9
sub byte [rbx + 0x71], 0xb
xor byte [rbx + 0x71], 0x22
xor byte [rbx + 0x71], 0x43
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
xor ecx, ecx
mov qword [rbx + 0x80], rcx
mov rax, qword [0x140217130]
xchg r12, rax
mov qword [rbx + 0x74], r12
xchg r12, rax
mov qword [rbx + 0x68], rcx
mov rcx, rbx
add rsp, 0x50
push rcx
push rcx
push rdx
xchg qword [rsp + 0x18], rbx
pop rdx
pop rcx
pop rcx
add rsp, 8
jmp qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]