Function at 0x703170
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movabs rbx, 0x6f2e756e672e6363
movabs r15, 0x756f6e6520746f6e
movabs r14, 0x6563617073206867
movabs r13, 0x726f6620726f6620
movabs r12, 0x617078652074616d
movabs rdi, 0x5028206e6f69736e
movabs rsi, 0x757320657361656c
movabs r11, 0x6c75662074696d62
movabs r10, 0x657220677562206c
movabs r9, 0x200a3a296c6d7468
sub rdx, rcx
mov qword [rbp + 0x70], rcx
movabs rcx, 0x2074612074726f70
lea rax, [rdx + 1]
mov r8, rdx
mov qword [rbp], rbx
movabs rdx, 0x672f2f3a70747468
movabs rbx, 0x2e736775622f6772
mov qword [rbp - 0x58], rax
lea rax, [r8 + 0x8a]
mov qword [rbp - 0x50], r15
and rax, 0xfffffffffffffff0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], r11
mov qword [rbp - 0x18], r10
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rdx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], r9
mov dword [rbp + 0x18], 0x202020
call fcn.0067cdd0
sub rsp, rax
mov eax, 0x2020
lea rbx, [rsp + 0x20]
mov qword [rbx + 0x48], rdx
mov rdx, qword [rbp + 0x70]
mov qword [rbx + 0x20], rdi
movabs rdi, 0x2e736775622f6772
mov qword [rbx + 0x28], rsi
movabs rsi, 0x6f2e756e672e6363
mov qword [rbx + 0x40], rcx
lea rcx, [rbx + 0x6b]
mov qword [rbx], r15
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x30], r11
mov qword [rbx + 0x38], r10
mov qword [rbx + 0x50], rsi
mov qword [rbx + 0x58], rdi
mov qword [rbx + 0x60], r9
mov word [rbx + 0x68], ax
mov byte [rbx + 0x6a], 0x20
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x58]
mov rcx, rbx
mov byte [rbx + rax + 0x6a], 0
call fcn.007cd620
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rdi
push rsi
push rbx
sub rsp, 0x30
cmp byte [0x007f5a10], 0
jne 0x703237
mov byte [0x007f5a10], 1
call fcn.007da450
test rax, rax
je 0x7032ca
mov rbx, qword [rax + 8]
lea r9, [rsp + 0x2c]
xor eax, eax
cmp byte [rbx], 0x2a
mov dword [rsp + 0x2c], 0xffffffff
sete al
xor r8d, r8d
xor edx, edx
add rbx, rax
mov rcx, rbx
call fcn.0067b740
mov rsi, qword [sym.imp.msvcrt.dll___iob_func]
mov rdi, rax
call rsi
mov r8d, 0x30
mov edx, 1
lea r9, [rax + 0x60]
lea rcx, str.terminate_called_after_throwing_an_instance_of_
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x703227
call rsi
mov rcx, rbx
lea rdx, [rax + 0x60]
call sub.msvcrt.dll_fputs
call rsi
mov r8d, 2
mov edx, 1
lea r9, [rax + 0x60]
lea rcx, [0x00823781]
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x70325d
call fcn.007da8e0
call rsi
mov rcx, rdi
lea rdx, [rax + 0x60]
call sub.msvcrt.dll_fputs
jmp 0x7031fe
call qword [sym.imp.msvcrt.dll___iob_func]
mov r8d, 0x1d
mov edx, 1
lea r9, [rax + 0x60]
lea rcx, str.terminate_called_recursively_n
call sub.msvcrt.dll_fwrite
call sub.msvcrt.dll_abort
mov rcx, rdi
call fcn.0068bd18
jmp 0x703222
call sub.msvcrt.dll_abort
call qword [sym.imp.msvcrt.dll___iob_func]
mov r8d, 0x2d
mov edx, 1
lea r9, [rax + 0x60]
lea rcx, str.terminate_called_without_an_active_exception_n
call sub.msvcrt.dll_fwrite
jmp 0x7032c5