Function at 0x1401ba230
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x50
xchg r10, rcx
mov rbx, r10
xchg rcx, r10
lea rax, [0x140004258]
mov qword [rcx], rax
cmp qword [rcx + 0x80], 0
je 0x1401ba290
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x1401ba290
mov rdx, qword [rbx + 0x88]
mov r9, qword [rbx + 0x90]
xchg r12, rdx
mov r8, r12
xchg rdx, r12
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp byte [rbx + 0x7c], 0
je 0x1401ba4c3
cmp qword [rbx + 0x80], 0
je 0x1401ba454
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbx + 0x70]
cmp rax, rcx
jne 0x1401ba2f0
xchg r11, rdx
mov r11, qword [rbx + 0x88]
xchg rdx, r11
mov r9, qword [rbx + 0x90]
xchg r12, r8
mov r12, rdx
xchg r12, r8
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
je 0x1401ba441
cmp byte [rbx + 0x71], 0
je 0x1401ba441
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
mov r8, qword [rax + 0x18]
lea rax, [fcn.1401be900]
mov edx, 0x4acda081
sub edx, 0x3e9cc0a1
add edx, 0x1a7a1cbf
add edx, 0x4cc76836
sub edx, 0x129cc6da
add edx, 0x9f2a6204
mov rcx, rbx
cmp r8, rax
jne 0x1401ba350
call fcn.1401be900
jmp 0x1401ba353
call r8
cmp eax, 0xffffffff
je 0x1401ba441
lea rdx, [rbx + 0x74]
lea rax, [rsp + 0x60]
xchg rbx, rax
mov qword [rsp + 0x20], rbx
xchg rbx, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
xchg rdi, rcx
mov rdi, qword [rbx + 0x68]
xchg rdi, rcx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401ba3cb
sub eax, 1
je 0x1401ba3e7
cmp eax, 2
jne 0x1401ba441
mov byte [rbx + 0x71], 0xf
xor byte [rbx + 0x71], 0x58
add byte [rbx + 0x71], 0x23
sub byte [rbx + 0x71], 0x31
xor byte [rbx + 0x71], 0x15
sub byte [rbx + 0x71], 0x26
xor byte [rbx + 0x71], 3
sub byte [rbx + 0x71], 0x2d
sub byte [rbx + 0x71], 8
jmp 0x1401ba441
mov byte [rbx + 0x71], 0x1e
xor byte [rbx + 0x71], 0x1c
add byte [rbx + 0x71], 0x3b
add byte [rbx + 0x71], 0x2b
xor byte [rbx + 0x71], 0x7b
add byte [rbx + 0x71], 0x44
sub byte [rbx + 0x71], 0x57
lea rax, [rsp + 0x30]
mov r8, qword [rsp + 0x60]
sub r8, rax
je 0x1401ba441
mov r9, qword [rbx + 0x80]
mov edx, 0x88e00cf
add edx, 0x39ddeff5
sub edx, 0x166f94b8
sub edx, 0x11daed8c
add edx, 0x3f654515
xor edx, 0x21671b72
sub edx, 0x578a7688
xor edx, 0xbd76631
xor edx, 0x2a80546f
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
xchg rcx, rdi
mov rdi, qword [rbx + 0x80]
xchg rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov byte [rbx + 0x7c], 0x18
add byte [rbx + 0x7c], 0x2c
xor byte [rbx + 0x7c], 0x53
xor byte [rbx + 0x7c], 9
add byte [rbx + 0x7c], 0x5f
xor byte [rbx + 0x7c], 0x5e
add byte [rbx + 0x7c], 0x48
xor byte [rbx + 0x7c], 0x1d
sub byte [rbx + 0x7c], 0x76
mov byte [rbx + 0x71], 0x15
sub byte [rbx + 0x71], 0xe
xor byte [rbx + 0x71], 0x7e
xor byte [rbx + 0x71], 0x78
xor byte [rbx + 0x71], 0x5d
sub byte [rbx + 0x71], 0x47
add byte [rbx + 0x71], 0x45
sub byte [rbx + 0x71], 0x5a
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
xor ecx, ecx
mov qword [rbx + 0x80], rcx
mov rax, qword [0x140217130]
xchg r15, rax
mov qword [rbx + 0x74], r15
xchg r15, rax
mov qword [rbx + 0x68], rcx
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
add rsp, 0x50
nop
add rsp, 8
xchg qword [rsp - 8], rbx
jmp qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]