Function at 0x1401be370
Capabilities:
Write file on windows

Disassembly:
xchg rsi, r15
mov qword [rsp + 0x10], r15
xchg r15, rsi
push rdi
sub rsp, 0x70
mov esi, edx
xchg rdi, r11
mov r11, rcx
xchg rdi, r11
cmp edx, 0xffffffff
jne 0x1401be3b7
xor eax, eax
xchg rsi, rdi
mov rdi, qword [rsp + 0x88]
xchg rdi, rsi
add rsp, 0x70
push rdx
push rcx
push rdx
push rcx
push rcx
xchg qword [rsp + 0x28], rdi
add rsp, 0x30
ret
mov qword [rsp + 0x80], rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401be411
xchg rsi, rcx
mov rsi, rdi
xchg rcx, rsi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
mov rcx, rdi
xchg rbx, r12
mov r12, rax
xchg rbx, r12
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401be411
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be684
cmp qword [rdi + 0x80], 0
je 0x1401be657
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401be461
xchg r9, rdx
mov r9, qword [rdi + 0x88]
xchg rdx, r9
xchg rdi, r9
mov rcx, r9
xchg rdi, r9
mov r9, qword [rdi + 0x90]
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
xchg rcx, r12
mov r12, qword [rdi + 0x68]
xchg rcx, r12
test rcx, rcx
jne 0x1401be4cc
xchg r8, rdx
mov r8, qword [rdi + 0x80]
xchg rdx, r8
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x5edba7e9
sub ecx, 0x2550b0ac
sub ecx, 0xd10e9ae
add ecx, 0x22f66531
sub ecx, 0xe6e74a5
xor ecx, 0x42724aa8
xor ecx, 0x109ce1ab
add ecx, 0x44c47be5
add ecx, 0xa74c2f02
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be684
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg r10, rax
mov qword [rsp + 0x38], r10
xchg r10, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg r15, rax
mov qword [rsp + 0x30], r15
xchg r15, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
xchg rbx, rax
mov qword [rsp + 0x20], rbx
xchg rbx, rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be592
sub eax, 1
je 0x1401be592
cmp eax, 2
jne 0x1401be657
movsx ecx, byte [rsp + 0x40]
xchg r8, rdx
mov r8, qword [rdi + 0x80]
xchg r8, rdx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x2cd22cde
sub ecx, 0x1478243
sub ecx, 0x1742e7ea
xor ecx, 0x4034dee8
sub ecx, 0x2403a2d
xor ecx, 0x59bc989e
add ecx, 0x49bbc644
sub ecx, 0x163c60ca
add ecx, 0xc0f21fd3
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be684
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be601
xchg r9, r12
mov r12, qword [rdi + 0x80]
xchg r9, r12
lea rcx, [rsp + 0x48]
xchg r8, rbx
mov rbx, r8
xchg rbx, r8
mov edx, 0x2118f701
sub edx, 0x9b30a1
add edx, 0x1f9cc229
sub edx, 0x1be499c7
add edx, 0x491a2fe3
sub edx, 0x5f163874
add edx, 0x66370580
sub edx, 0x7470ebb0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be657
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x52
sub byte [rdi + 0x71], 0x3a
xor byte [rdi + 0x71], 0x6d
add byte [rdi + 0x71], 6
xor byte [rdi + 0x71], 8
sub byte [rdi + 0x71], 0x72
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x2d986e5a
add ecx, 0x12f17f46
add ecx, 0x357ad14b
sub ecx, 0x44f939c5
xor ecx, 0x1799a40d
add ecx, 0xd96dded4
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be684
mov eax, 0x63920ab
xor eax, 0x672b8530
sub eax, 0x1cbce4ef
add eax, 0x376d2b96
sub eax, 0x746ae6e
sub eax, 0x3c01ba1b
add eax, 0x2a06ccbc
sub eax, 0xe056e66
add eax, 0xab841df0
xchg r9, rbx
mov r9, qword [rsp + 0x80]
xchg rbx, r9
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret