Function at 0x1401be340
Capabilities:
Write file on windows

Disassembly:
xchg rsi, rbp
mov qword [rsp + 0x10], rbp
xchg rsi, rbp
push rdi
sub rsp, 0x70
mov esi, edx
xchg rcx, r11
mov rdi, r11
xchg r11, rcx
cmp edx, 0xffffffff
jne 0x1401be385
xor eax, eax
xchg rsi, r15
mov r15, qword [rsp + 0x88]
xchg rsi, r15
add rsp, 0x70
push rdx
push rbx
push rdx
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
ret
mov qword [rsp + 0x80], rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401be3df
xchg r8, rdi
mov rcx, r8
xchg rdi, r8
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
mov rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401be3df
xchg r8, rcx
mov r8, rdi
xchg rcx, r8
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be617
cmp qword [rdi + 0x80], 0
je 0x1401be5f9
xchg r8, rdi
mov rcx, r8
xchg r8, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401be429
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
xchg r9, r12
mov r12, qword [rdi + 0x90]
xchg r12, r9
mov r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
xchg rbp, rcx
mov rbp, qword [rdi + 0x68]
xchg rbp, rcx
test rcx, rcx
jne 0x1401be482
xchg rdx, r14
mov r14, qword [rdi + 0x80]
xchg rdx, r14
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x1698500b
xor ecx, 0x7d398349
add ecx, 0x5df93da
sub ecx, 0xe351588
add ecx, 0x1430674a
xor ecx, 0x88834721
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be617
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg r10, rax
mov qword [rsp + 0x38], r10
xchg r10, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg r12, rax
mov qword [rsp + 0x30], r12
xchg r12, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
xchg rsi, rax
mov qword [rsp + 0x28], rsi
xchg rsi, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
xchg rdi, rax
mov qword [rsp + 0x20], rdi
xchg rdi, rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be53a
sub eax, 1
je 0x1401be53a
cmp eax, 2
jne 0x1401be5f9
movsx ecx, byte [rsp + 0x40]
xchg rdx, rbp
mov rbp, qword [rdi + 0x80]
xchg rdx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x342ce0f9
xor ecx, 0x5b7415e1
xor ecx, 0x111250a
sub ecx, 0x6395f281
xor ecx, 0x5106fa5a
add ecx, 0xa44ad834
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be617
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be59d
mov r9, qword [rdi + 0x80]
lea rcx, [rsp + 0x48]
xchg r8, rbx
mov rbx, r8
xchg rbx, r8
mov edx, 0x14fc31ec
add edx, 0x65aa9fcd
xor edx, 0x7c838b81
add edx, 0x1088e410
add edx, 0x4cb94546
add edx, 0xbb6e6a9
sub edx, 0x6f1e6a36
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be5f9
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 8
xor byte [rdi + 0x71], 0x48
add byte [rdi + 0x71], 0x3e
xor byte [rdi + 0x71], 0x14
sub byte [rdi + 0x71], 0x53
xor byte [rdi + 0x71], 0x16
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x2ba73c0e
xor ecx, 0x4dfd764e
add ecx, 0x176df7a1
sub ecx, 0x6ca0955e
xor ecx, 0x1d3cbc1a
add ecx, 0x60428790
add ecx, 0x93a267d6
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be617
mov eax, 0x33f76346
sub eax, 0x126afd21
add eax, 0x171afb10
sub eax, 0x1615774f
add eax, 0x535fc335
xor eax, 0x8a0e52e4
xchg rbp, rbx
mov rbp, qword [rsp + 0x80]
xchg rbp, rbx
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
push rdx
push rbx
push rax
push rbx
push rax
push rax
push rcx
xchg qword [rsp + 0x38], rdi
pop rcx
pop rax
pop rax
pop rbx
pop rax
pop rbx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]