Function at 0x1401768a0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
mov rbx, rcx
je 0x140176a8b
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x140176913
xchg rdx, r12
mov r12, qword [rbx + 0x88]
xchg r12, rdx
xchg rsi, rcx
mov rsi, rbx
xchg rcx, rsi
xchg r8, r9
mov r8, qword [rbx + 0x90]
xchg r8, r9
xchg r8, r10
mov r10, rdx
xchg r10, r8
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x1401769ce
cmp byte [rdi], 0
je 0x1401769ce
xchg rdx, rax
mov rdx, qword [rbx]
xchg rdx, rax
mov esi, 0x522e2da0
xor esi, 0x78f9ea32
add esi, 0x401d4da7
sub esi, 0x36d78fd2
xor esi, 0x66806c9
sub esi, 0x327483af
mov edx, esi
mov rcx, rbx
call qword [rax + 0x18]
cmp si, ax
jne 0x14017696d
xor al, al
jmp 0x1401769da
xchg r9, rcx
mov r9, qword [rbx + 0x68]
xchg rcx, r9
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
xchg rbx, rax
mov qword [rsp + 0x20], rbx
xchg rbx, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140176a02
sub eax, 1
je 0x140176a1a
cmp eax, 2
jne 0x140176966
mov byte [rdi], 0x35
xor byte [rdi], 0x7c
add byte [rdi], 9
xor byte [rdi], 0x1e
xor byte [rdi], 0xe
add byte [rdi], 0x24
xor byte [rdi], 0x55
add byte [rdi], 0x40
sub byte [rdi], 0x73
mov al, 0x41
sub al, 0x3d
xor al, 0x3d
add al, 0xd
sub al, 0x40
sub al, 5
xchg rcx, r12
mov r12, qword [rbx + 0x80]
xchg r12, rcx
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x140176a93
mov byte [rdi], 0x75
sub byte [rdi], 0x4b
add byte [rdi], 0x1a
sub byte [rdi], 6
xor byte [rdi], 0x5c
sub byte [rdi], 0x2d
xor byte [rdi], 0
xor byte [rdi], 0x35
mov rsi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x140176a80
xchg r9, r8
mov r8, qword [rbx + 0x80]
xchg r8, r9
lea rcx, [rsp + 0x30]
xchg rsi, r12
mov r8, r12
xchg rsi, r12
mov edx, 0x622b8d2
add edx, 0x2c6f7512
xor edx, 0x527d90ce
xor edx, 0x29438a86
xor edx, 0x106670b5
xor edx, 0x5b835f4d
sub edx, 0x2491853
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x140176966
cmp byte [rdi], 0
sete al
jmp 0x1401769da
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
xchg rcx, rsi
mov rsi, rbx
xchg rcx, rsi
mov byte [rbx + 0x7c], 1
add byte [rbx + 0x7c], 0x13
add byte [rbx + 0x7c], 0x1e
add byte [rbx + 0x7c], 0xd
add byte [rbx + 0x7c], 0xa
sub byte [rbx + 0x7c], 0x3d
xor byte [rbx + 0x7c], 0xc
mov byte [rdi], 0x5f
xor byte [rdi], 0x4a
xor byte [rdi], 0x55
sub byte [rdi], 8
xor byte [rdi], 0x54
xor byte [rdi], 0x67
xor byte [rdi], 0xb
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
xchg rsi, r13
mov qword [rbx + 0x80], r13
xchg rsi, r13
xchg rdx, rbp
mov rax, rdx
xchg rdx, rbp
mov rcx, qword [0x140217068]
xchg rcx, rbp
mov rcx, qword [rsp + 0x70]
xchg rbp, rcx
mov qword [rbx + 0x68], rsi
xchg rsi, r10
mov r10, qword [rsp + 0x78]
xchg rsi, r10
mov qword [rbx + 0x74], rcx
xchg r15, rbx
mov r15, qword [rsp + 0x68]
xchg rbx, r15
add rsp, 0x50
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]