Function at 0x1401be420
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x70
mov esi, edx
xchg r13, rcx
mov rdi, r13
xchg rcx, r13
cmp edx, 0xffffffff
jne 0x1401be464
xor eax, eax
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
push rax
push rbx
push rbx
push rax
push rcx
push rcx
push rbx
xchg qword [rsp + 0x38], rdi
pop rbx
pop rcx
pop rcx
pop rax
pop rbx
pop rbx
pop rax
add rsp, 8
ret
mov qword [rsp + 0x80], rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401be4b0
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
mov rcx, rdi
xchg r12, rax
mov rbx, r12
xchg r12, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401be4b0
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be716
cmp qword [rdi + 0x80], 0
je 0x1401be6f8
xchg rdi, r8
mov rcx, r8
xchg rdi, r8
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401be4fa
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
mov r9, qword [rdi + 0x90]
xchg r9, rdx
mov r8, r9
xchg rdx, r9
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
xchg rsi, rcx
mov rsi, qword [rdi + 0x68]
xchg rcx, rsi
test rcx, rcx
jne 0x1401be559
xchg r8, rdx
mov r8, qword [rdi + 0x80]
xchg r8, rdx
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x3e101970
xor ecx, 0x57fa79c1
sub ecx, 0x40d38037
xor ecx, 0x2e056d2d
add ecx, 0x5ec8e305
sub ecx, 0x92897f0
add ecx, 0xa34c2793
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be716
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg r12, rax
mov qword [rsp + 0x38], r12
xchg r12, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
xchg r15, rax
mov qword [rsp + 0x28], r15
xchg r15, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be615
sub eax, 1
je 0x1401be615
cmp eax, 2
jne 0x1401be6f8
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x24bacc33
sub ecx, 0x20282a70
add ecx, 0x3a9a0e78
add ecx, 0x1beabc56
sub ecx, 0x44f0c688
add ecx, 0x5caac120
xor ecx, 0x7dde5acb
xor ecx, 0x198ae764
add ecx, 0xe97a2579
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be716
xchg rbx, r15
mov r15, qword [rsp + 0x90]
xchg rbx, r15
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be684
xchg r9, r15
mov r15, qword [rdi + 0x80]
xchg r15, r9
lea rcx, [rsp + 0x48]
xchg rdi, r8
mov rdi, rbx
xchg rdi, r8
mov edx, 0x29b789d5
xor edx, 0x2e191df2
sub edx, 0x629660b
add edx, 0x499a6e8f
add edx, 0x1ac42755
sub edx, 0x4806ef9e
xor edx, 0x1ddcd463
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be6f8
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x74
sub byte [rdi + 0x71], 0x45
xor byte [rdi + 0x71], 0x41
sub byte [rdi + 0x71], 0x69
xor byte [rdi + 0x71], 0x2d
sub byte [rdi + 0x71], 6
add byte [rdi + 0x71], 0x37
sub byte [rdi + 0x71], 0x36
sub byte [rdi + 0x71], 0x22
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x562273ae
xor ecx, 0x70655024
add ecx, 0x1bb21c4a
sub ecx, 0xae343a9
xor ecx, 0x69e6378a
sub ecx, 0x5d1a9a78
add ecx, 0x3d41b468
add ecx, 0x82f354b
add ecx, 0xb8b5e523
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be716
mov eax, 0x2d9dcf97
xor eax, 0x7c7d9e91
add eax, 0xe6b57e5
sub eax, 0x1db632cc
sub eax, 0x3f85353b
xor eax, 0xfcefbf1b
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
push rdx
push rbx
push rax
push rbx
push rbx
push rdx
xchg qword [rsp + 0x30], rdi
pop rdx
pop rbx
pop rbx
pop rax
pop rbx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]