Function at 0x140175fd0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
xchg rsi, r15
mov qword [rsp + 0x20], r15
xchg r15, rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
mov rbx, rcx
je 0x1401761ab
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x140176049
xchg rdx, r12
mov r12, qword [rbx + 0x88]
xchg rdx, r12
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
xchg r9, r8
mov r8, qword [rbx + 0x90]
xchg r8, r9
xchg rdx, r8
mov rdx, r8
xchg r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x140176100
cmp byte [rdi], 0
je 0x140176100
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
mov esi, 0x7ee2b1a8
xor esi, 0x315d9536
xor esi, 0x4a4de295
xor esi, 0x3e91fb36
xor esi, 0x7850d6e9
sub esi, 0x4332ebd5
mov edx, esi
xchg rbx, rsi
mov rcx, rsi
xchg rsi, rbx
call qword [rax + 0x18]
cmp si, ax
jne 0x1401760a9
xor al, al
jmp 0x140176112
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140176134
sub eax, 1
je 0x140176146
cmp eax, 2
jne 0x1401760a2
mov byte [rdi], 0x60
xor byte [rdi], 0x6d
add byte [rdi], 0x25
add byte [rdi], 0x20
sub byte [rdi], 0xb
xor byte [rdi], 0x6a
add byte [rdi], 0x1c
sub byte [rdi], 0x15
sub byte [rdi], 0x34
mov al, 0x18
add al, 0x1f
add al, 0x12
xor al, 0x72
add al, 0xa
xor al, 0x36
add al, 7
sub al, 0x1e
sub al, 0x5b
mov rcx, qword [rbx + 0x80]
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x1401761b3
mov byte [rdi], 0xa
add byte [rdi], 0x2a
add byte [rdi], 0x43
xor byte [rdi], 0x54
xor byte [rdi], 0x54
sub byte [rdi], 0x77
mov rsi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x1401761a0
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
xchg r8, rsi
mov rsi, r8
xchg r8, rsi
mov edx, 0x274f77
xor edx, 0x33692095
sub edx, 0x206f4f0e
xor edx, 0x4344d6f2
xor edx, 0x6d9d5cd1
sub edx, 0x3c06aaf6
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x1401760a2
cmp byte [rdi], 0
sete al
jmp 0x140176112
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
mov rcx, rbx
mov byte [rbx + 0x7c], 0xe
add byte [rbx + 0x7c], 0xb
xor byte [rbx + 0x7c], 0x36
xor byte [rbx + 0x7c], 0x57
xor byte [rbx + 0x7c], 0x13
add byte [rbx + 0x7c], 8
xor byte [rbx + 0x7c], 0x3f
sub byte [rbx + 0x7c], 0xa
sub byte [rbx + 0x7c], 0x42
mov byte [rdi], 8
xor byte [rdi], 0x30
sub byte [rdi], 0x26
sub byte [rdi], 0x11
xor byte [rdi], 0x51
sub byte [rdi], 0x48
xor byte [rdi], 0x42
sub byte [rdi], 0x4a
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
mov qword [rbx + 0x80], rsi
xchg r14, rax
mov r14, rbp
xchg r14, rax
mov rcx, qword [0x140217068]
xchg rdx, rbp
mov rdx, qword [rsp + 0x70]
xchg rbp, rdx
mov qword [rbx + 0x68], rsi
xchg rsi, rbp
mov rbp, qword [rsp + 0x78]
xchg rbp, rsi
xchg r12, rcx
mov qword [rbx + 0x74], r12
xchg r12, rcx
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]