Function at 0x1401bdd20
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rsi
push rdx
mov qword [rsp], rdi
sub rsp, 0x70
mov esi, edx
xchg rbx, rdi
mov rbx, rcx
xchg rdi, rbx
cmp edx, 0xffffffff
jne 0x1401bdd69
xor eax, eax
xchg rbp, rsi
mov rbp, qword [rsp + 0x88]
xchg rsi, rbp
add rsp, 0x70
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
xchg rbx, r13
mov qword [rsp + 0x80], r13
xchg r13, rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401bddc3
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
xchg rcx, r13
mov r13, rdi
xchg rcx, r13
mov rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401bddc3
xchg rdi, rsi
mov rcx, rsi
xchg rdi, rsi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be02a
cmp qword [rdi + 0x80], 0
je 0x1401be007
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401bde07
mov rdx, qword [rdi + 0x88]
xchg r13, rdi
mov rcx, r13
xchg rdi, r13
mov r9, qword [rdi + 0x90]
mov r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
xchg rcx, r14
mov r14, qword [rdi + 0x68]
xchg rcx, r14
test rcx, rcx
jne 0x1401bde72
xchg rdx, rbp
mov rbp, qword [rdi + 0x80]
xchg rbp, rdx
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x2f2cb78e
add ecx, 0x4b67c439
xor ecx, 0x63ed63a3
xor ecx, 0x2907fe65
xor ecx, 0x3d41475e
add ecx, 0x361f9f8b
xor ecx, 0x49ec5bae
xor ecx, 0x79dac7df
xor ecx, 0x8c962364
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be02a
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
xchg r10, rax
mov qword [rsp + 0x38], r10
xchg r10, rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg rsi, rax
mov qword [rsp + 0x30], rsi
xchg rsi, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401bdf22
sub eax, 1
je 0x1401bdf22
cmp eax, 2
jne 0x1401be007
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x702606b3
sub ecx, 0x3dc1334a
xor ecx, 0xfb619ea
xor ecx, 0x349bde37
add ecx, 0x497a8eff
sub ecx, 0x28576915
add ecx, 0xd593c561
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be02a
xchg r12, rbx
mov r12, qword [rsp + 0x90]
xchg rbx, r12
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401bdf9d
xchg r14, r9
mov r14, qword [rdi + 0x80]
xchg r9, r14
lea rcx, [rsp + 0x48]
xchg rcx, r8
mov rcx, rbx
xchg rcx, r8
mov edx, 0x4b2ffb39
add edx, 0x2d56bbb6
add edx, 0x56eaf5
xor edx, 0x1cda6e83
sub edx, 0x43c3535a
add edx, 0x2976a87a
xor edx, 0x485e0272
add edx, 0x7b37250c
xor edx, 0x7d1c4c00
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be007
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x75
sub byte [rdi + 0x71], 0xf
xor byte [rdi + 0x71], 0x15
sub byte [rdi + 0x71], 0x57
xor byte [rdi + 0x71], 0x62
sub byte [rdi + 0x71], 0x4c
sub byte [rdi + 0x71], 0x2c
xor byte [rdi + 0x71], 7
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x5ce67f38
xor ecx, 0x1c2cc4e0
xor ecx, 0x4d9c3014
xor ecx, 0x53323426
xor ecx, 0x5050b0a4
xor ecx, 0x115e8242
xor ecx, 0x67ee7f62
xor ecx, 0x877b0d91
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be02a
mov eax, 0x6b5a8a60
sub eax, 0xa8eac6
xor eax, 0x2417a91
xor eax, 0x45a512d7
add eax, 0x2c2fe689
sub eax, 0x154c27f6
add eax, 0xbbc64990
xchg rbp, rbx
mov rbp, qword [rsp + 0x80]
xchg rbp, rbx
mov rsi, qword [rsp + 0x88]
add rsp, 0x70
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]