Function at 0x1401b9c10
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x50
xchg rcx, rsi
mov rbx, rsi
xchg rsi, rcx
lea rax, [0x140004258]
mov qword [rcx], rax
cmp qword [rcx + 0x80], 0
je 0x1401b9c76
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x1401b9c76
mov rdx, qword [rbx + 0x88]
xchg r9, rdi
mov rdi, qword [rbx + 0x90]
xchg r9, rdi
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp byte [rbx + 0x7c], 0
je 0x1401b9eaf
cmp qword [rbx + 0x80], 0
je 0x1401b9e42
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbx + 0x70]
cmp rax, rcx
jne 0x1401b9cdc
xchg r14, rdx
mov r14, qword [rbx + 0x88]
xchg r14, rdx
xchg r9, r10
mov r10, qword [rbx + 0x90]
xchg r10, r9
xchg r10, rdx
mov r8, r10
xchg r10, rdx
xchg r13, rbx
mov rcx, r13
xchg rbx, r13
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
je 0x1401b9e35
cmp byte [rbx + 0x71], 0
je 0x1401b9e35
mov rax, qword [rbx]
xchg r8, rdx
mov rdx, qword [rax + 0x18]
xchg r8, rdx
lea rax, [fcn.1401be340]
mov edx, 0x5a3dfa9b
xor edx, 0x405a8290
sub edx, 0x17c06a2e
add edx, 0x31e386df
add edx, 0x1f4f3bd4
sub edx, 0x1fbf7ba2
add edx, 0x57f2fed
add edx, 0xc6667b24
xchg r14, rbx
mov rcx, r14
xchg r14, rbx
cmp r8, rax
jne 0x1401b9d50
call fcn.1401be340
jmp 0x1401b9d53
call r8
cmp eax, 0xffffffff
je 0x1401b9e35
lea rdx, [rbx + 0x74]
lea rax, [rsp + 0x60]
xchg rbp, rax
mov qword [rsp + 0x20], rbp
xchg rbp, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
xchg rbp, rcx
mov rbp, qword [rbx + 0x68]
xchg rbp, rcx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401b9dc3
sub eax, 1
je 0x1401b9ddb
cmp eax, 2
jne 0x1401b9e35
mov byte [rbx + 0x71], 0x49
xor byte [rbx + 0x71], 0x53
add byte [rbx + 0x71], 0xa
xor byte [rbx + 0x71], 0x6c
xor byte [rbx + 0x71], 0x5e
add byte [rbx + 0x71], 6
sub byte [rbx + 0x71], 0x1c
jmp 0x1401b9e35
mov byte [rbx + 0x71], 0x55
sub byte [rbx + 0x71], 0x15
xor byte [rbx + 0x71], 0x32
sub byte [rbx + 0x71], 0x48
xor byte [rbx + 0x71], 0x73
xor byte [rbx + 0x71], 0x59
lea rax, [rsp + 0x30]
xchg r8, rsi
mov rsi, qword [rsp + 0x60]
xchg r8, rsi
sub r8, rax
je 0x1401b9e35
xchg r9, rdx
mov rdx, qword [rbx + 0x80]
xchg r9, rdx
mov edx, 0x58b58bcc
xor edx, 0x5e5f3856
add edx, 0x19ff755f
xor edx, 0x6ee575ee
add edx, 0x2fec1e49
xor edx, 0x6c617511
xor edx, 0x119a0e70
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rbx + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov byte [rbx + 0x7c], 0x27
add byte [rbx + 0x7c], 0x23
sub byte [rbx + 0x7c], 0x3d
xor byte [rbx + 0x7c], 0x4e
add byte [rbx + 0x7c], 4
sub byte [rbx + 0x7c], 0xe
xor byte [rbx + 0x7c], 0x39
mov byte [rbx + 0x71], 0x18
xor byte [rbx + 0x71], 0x45
sub byte [rbx + 0x71], 0xc
xor byte [rbx + 0x71], 0x19
sub byte [rbx + 0x71], 0x10
sub byte [rbx + 0x71], 0x27
add byte [rbx + 0x71], 0x39
xor byte [rbx + 0x71], 0x1e
sub byte [rbx + 0x71], 0x54
xchg rcx, r12
mov r12, rbx
xchg r12, rcx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
xor ecx, ecx
xchg r8, rcx
mov qword [rbx + 0x80], r8
xchg r8, rcx
mov rax, qword [0x140217130]
mov qword [rbx + 0x74], rax
mov qword [rbx + 0x68], rcx
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
add rsp, 0x50
push rcx
push rdx
push rcx
push rdx
xchg qword [rsp + 0x20], rbx
add rsp, 0x28
jmp qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]