Function at 0x1401780c0
Capabilities:
Write file on windows

Disassembly:
push rbp
nop
push 0x7e7f9220
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x70
mov esi, 0x544196d
add esi, 0x6c8d96d6
sub esi, 0x16e94199
add esi, 0xc39968c
sub esi, 0x3de18e4f
sub esi, 0x1140ed36
sub esi, 0x17fe89b2
movzx ebp, dx
xchg rdx, rdi
mov rdx, rcx
xchg rdi, rdx
cmp si, dx
jne 0x14017813c
xor eax, eax
add rsp, 0x70
push rax
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
mov rsi, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rbp
ret
mov qword [rsp + 0x90], rbx
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::pptr_void_const___ptr64]
test rax, rax
je 0x1401781c9
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::epptr_void_const___ptr64]
xchg rbx, rdi
mov rcx, rbx
xchg rdi, rbx
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401781c9
xchg rsi, rcx
mov rsi, rdi
xchg rsi, rcx
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Pninc_void____ptr64]
mov rbx, qword [rsp + 0x90]
mov word [rax], bp
movzx eax, bp
add rsp, 0x70
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
nop
add rsp, 8
mov rbp, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
cmp qword [rdi + 0x80], 0
je 0x14017835e
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x140178219
xchg r15, rdx
mov r15, qword [rdi + 0x88]
xchg r15, rdx
mov rcx, rdi
mov r9, qword [rdi + 0x90]
xchg rdx, r10
mov r8, r10
xchg rdx, r10
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x14017824d
movzx ecx, bp
xchg rdx, r8
mov r8, qword [rdi + 0x80]
xchg rdx, r8
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputwc]
cmp ax, si
je 0x14017835e
movzx esi, bp
jmp 0x14017835e
lea rax, [rsp + 0xa0]
mov word [rsp + 0x40], bp
mov qword [rsp + 0x38], rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg r12, rax
mov qword [rsp + 0x30], r12
xchg r12, rax
lea r9, [rsp + 0x42]
lea rax, [rsp + 0x48]
xchg r12, rax
mov qword [rsp + 0x28], r12
xchg r12, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401782c0
sub eax, 1
je 0x1401782c0
cmp eax, 2
jne 0x14017835e
movzx ecx, word [rsp + 0x40]
jmp 0x140178229
xchg rbx, r9
mov r9, qword [rsp + 0xa0]
xchg r9, rbx
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x140178329
mov r9, qword [rdi + 0x80]
lea rcx, [rsp + 0x48]
xchg rbx, r8
mov rbx, r8
xchg rbx, r8
mov edx, 0xe77c351
xor edx, 0x5439f0ad
sub edx, 0x561a599a
add edx, 0x40d0141e
add edx, 0x90565a4
sub edx, 0x22a6ce18
sub edx, 0x2b62860b
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x14017835e
lea rax, [rsp + 0x40]
mov byte [rdi + 0x72], 0x5c
sub byte [rdi + 0x72], 0xe
add byte [rdi + 0x72], 0x2f
sub byte [rdi + 0x72], 0x2a
add byte [rdi + 0x72], 5
add byte [rdi + 0x72], 0x15
xor byte [rdi + 0x72], 0xb
xor byte [rdi + 0x72], 0x16
xor byte [rdi + 0x72], 0x71
cmp qword [rsp + 0xa8], rax
cmovne si, bp
mov rbx, qword [rsp + 0x90]
movzx eax, si
add rsp, 0x70
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
mov rsi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]