Function at 0x1401be210
Capabilities:
Write file on windows

Disassembly:
xchg rsi, rbp
mov qword [rsp + 0x10], rbp
xchg rbp, rsi
nop
push 0x42642d18
mov qword [rsp], rdi
sub rsp, 0x70
mov esi, edx
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp edx, 0xffffffff
jne 0x1401be25f
xor eax, eax
xchg rsi, rbp
mov rbp, qword [rsp + 0x88]
xchg rsi, rbp
add rsp, 0x70
push rax
push rbx
xchg qword [rsp + 0x10], rdi
pop rbx
pop rax
add rsp, 8
ret
xchg rbx, r15
mov qword [rsp + 0x80], r15
xchg rbx, r15
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x1401be2c3
xchg rcx, r9
mov r9, rdi
xchg r9, rcx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
xchg rdx, rdi
mov rcx, rdx
xchg rdx, rdi
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, rbx
jae 0x1401be2c3
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void____ptr64]
mov byte [rax], sil
mov eax, esi
jmp 0x1401be51d
cmp qword [rdi + 0x80], 0
je 0x1401be4ff
xchg r9, rdi
mov rcx, r9
xchg rdi, r9
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rdi + 0x70]
cmp rax, rcx
jne 0x1401be319
xchg r11, rdx
mov r11, qword [rdi + 0x88]
xchg rdx, r11
xchg r9, rcx
mov r9, rdi
xchg rcx, r9
mov r9, qword [rdi + 0x90]
xchg r8, rdx
mov rdx, r8
xchg r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1401be37e
xchg rsi, rdx
mov rsi, qword [rdi + 0x80]
xchg rdx, rsi
movsx ecx, sil
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0x34a31215
xor ecx, 0x2aeeca3d
add ecx, 0x501aa412
sub ecx, 0x504732cd
add ecx, 0x4323ac9f
sub ecx, 0x6ad94b4
sub ecx, 0x238f71eb
add ecx, 0x27dbd5d9
xor ecx, 0xa11c3ab9
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be51d
lea rax, [rsp + 0x90]
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x38], rax
lea rdx, [rdi + 0x74]
lea rax, [rsp + 0x68]
xchg rdi, rax
mov qword [rsp + 0x30], rdi
xchg rdi, rax
lea r9, [rsp + 0x41]
lea rax, [rsp + 0x48]
xchg r14, rax
mov qword [rsp + 0x28], r14
xchg r14, rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1401be434
sub eax, 1
je 0x1401be434
cmp eax, 2
jne 0x1401be4ff
movsx ecx, byte [rsp + 0x40]
xchg r14, rdx
mov r14, qword [rdi + 0x80]
xchg r14, rdx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ecx, 0xaeb38fb
xor ecx, 0x7da2b4f0
xor ecx, 0x1d6faacf
sub ecx, 0x6095c5a6
add ecx, 0x48d26766
add ecx, 0x1e82763c
add ecx, 0x8f1ac13f
cmp eax, ecx
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be51d
xchg rdx, rbx
mov rdx, qword [rsp + 0x90]
xchg rdx, rbx
lea rax, [rsp + 0x48]
sub rbx, rax
je 0x1401be4a3
mov r9, qword [rdi + 0x80]
lea rcx, [rsp + 0x48]
xchg rbx, rbp
mov r8, rbp
xchg rbx, rbp
mov edx, 0x7f28164a
xor edx, 0x55c7c1c
sub edx, 0x34b8bac7
add edx, 0x359cf7ff
xor edx, 0x22535ea9
xor edx, 0x4c085fce
add edx, 0x689ffa7f
xor edx, 0x7da3a169
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x1401be4ff
lea rax, [rsp + 0x40]
mov byte [rdi + 0x71], 0x25
add byte [rdi + 0x71], 0x3a
xor byte [rdi + 0x71], 8
xor byte [rdi + 0x71], 0x40
xor byte [rdi + 0x71], 0x49
xor byte [rdi + 0x71], 0x5f
cmp qword [rsp + 0x98], rax
pushf
mov ecx, 0x1b49d9d0
add ecx, 0x639b743e
xor ecx, 0x7d69ebea
add ecx, 0x6cc04b90
sub ecx, 0x31557950
add ecx, 0x29258c55
xor ecx, 0x97e2fb86
popf
cmovne ecx, esi
mov eax, ecx
jmp 0x1401be51d
mov eax, 0x2262dd2d
add eax, 0x13149303
sub eax, 0x1b3292cf
xor eax, 0x224730a
add eax, 0x59e716bb
add eax, 0x8db83ad9
mov rbx, qword [rsp + 0x80]
xchg rsi, r12
mov r12, qword [rsp + 0x88]
xchg rsi, r12
add rsp, 0x70
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]