Function at 0x140008e2a
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x130
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc0], rcx
call sym.FindCurrentKTHREAD__
mov qword [rbp + 0xa8], rax
lea rax, [0x14004d007]
mov qword [str.BABUBE], rax
mov eax, dword [0x14004c210]
cmp eax, 0x29
jne 0x140008e95
mov rax, qword [str.BABUBE]
mov qword [rbp + 0xa0], rax
mov byte [0x14004c1f0], 0
mov dword [0x14004c210], 0x349
mov rax, qword [rbp + 0xa0]
mov qword [str.BABUBE], rax
jmp 0x140008ed7
mov byte [0x14004c220], 1
mov dword [0x14004c210], 0x1218e
mov edx, dword [0x14004c210]
lea rax, [rbp - 0x10]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp - 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [str.BABUBE], rax
lea rax, [rbp - 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
mov dword [0x14004c210], 0x29
mov qword [rbp + 0x98], 0
lea rax, [0x14004d007]
mov qword [str.BABUBE], rax
mov eax, dword [0x14004c210]
cmp eax, 0x29
jne 0x140008f34
mov rax, qword [str.BABUBE]
mov qword [rbp + 0x90], rax
mov byte [0x14004c1f0], 0
mov dword [0x14004c210], 0x349
mov rax, qword [rbp + 0x90]
mov qword [str.BABUBE], rax
jmp 0x140008f76
mov byte [0x14004c220], 1
mov dword [0x14004c210], 0x1218e
mov edx, dword [0x14004c210]
lea rax, [rbp + 0x10]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp + 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [str.BABUBE], rax
lea rax, [rbp + 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
mov dword [0x14004c210], 0x29
mov rax, qword [rbp + 0xa8]
add rax, 0x232
mov qword [rbp + 0x88], rax
mov byte [rbp - 0x21], 0
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x18]
mov dword [rax + 0x10], 0x119ff8
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x18]
mov byte [rax], 0xd
lea rax, [0x14004d007]
mov qword [str.BABUBE], rax
mov eax, dword [0x14004c210]
cmp eax, 0x29
jne 0x140009000
mov rax, qword [str.BABUBE]
mov qword [rbp + 0x80], rax
mov byte [0x14004c1f0], 0
mov dword [0x14004c210], 0x349
mov rax, qword [rbp + 0x80]
mov qword [str.BABUBE], rax
jmp 0x140009042
mov byte [0x14004c220], 1
mov dword [0x14004c210], 0x1218e
mov edx, dword [0x14004c210]
lea rax, [rbp + 0x30]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp + 0x30]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [str.BABUBE], rax
lea rax, [rbp + 0x30]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
mov dword [0x14004c210], 0x29
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x10]
mov rdx, qword [rbp + 0xc0]
mov rdx, qword [rdx + 0x18]
mov qword [rax + 0xb8], rdx
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x10]
mov rax, qword [rax + 0xb8]
mov dword [rax + 0x10], 0x119ff8
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x10]
mov rax, qword [rax + 0xb8]
mov byte [rax], 0xd
lea rax, [0x14004d007]
mov qword [str.BABUBE], rax
mov eax, dword [0x14004c210]
cmp eax, 0x29
jne 0x1400090d9
mov rax, qword [str.BABUBE]
mov qword [rbp + 0x78], rax
mov byte [0x14004c1f0], 0
mov dword [0x14004c210], 0x349
mov rax, qword [rbp + 0x78]
mov qword [str.BABUBE], rax
jmp 0x14000911b
mov byte [0x14004c220], 1
mov dword [0x14004c210], 0x1218e
mov edx, dword [0x14004c210]
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [str.BABUBE], rax
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
mov dword [0x14004c210], 0x29
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0x10]
mov rdx, qword [rbp + 0x88]
mov qword [rax + 0x18], rdx
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax + 0xb8]
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 1
lea rdx, [rbp - 0x21]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call sym.NtWriteFile
mov eax, 0
add rsp, 0x130
pop rbp
ret