Function at 0x140175e90
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
xchg rbx, r11
mov r11, rcx
xchg r11, rbx
je 0x14017606d
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x140175f02
xchg rdx, r9
mov r9, qword [rbx + 0x88]
xchg rdx, r9
mov rcx, rbx
xchg r9, rcx
mov rcx, qword [rbx + 0x90]
xchg r9, rcx
xchg rdx, r8
mov rdx, r8
xchg r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x140175fbc
cmp byte [rdi], 0
je 0x140175fbc
mov rax, qword [rbx]
mov esi, 0x764a385
sub esi, 0x37f0906
xor esi, 0x55367ede
add esi, 0x1dd431e2
sub esi, 0x58046080
add esi, 0x2a980e7
xor esi, 0x25860c2f
sub esi, 0x3aca3ac6
mov edx, esi
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax + 0x18]
cmp si, ax
jne 0x140175f6a
xor al, al
jmp 0x140175fc8
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
xchg r14, rax
mov qword [rsp + 0x20], r14
xchg r14, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140175fea
sub eax, 1
je 0x140175ffc
cmp eax, 2
jne 0x140175f63
mov byte [rdi], 0x6d
xor byte [rdi], 0x65
add byte [rdi], 0x48
sub byte [rdi], 0x16
add byte [rdi], 0x39
sub byte [rdi], 0x73
mov al, 0x18
xor al, 0x4e
sub al, 7
add al, 0x1b
sub al, 0x23
sub al, 0x46
mov rcx, qword [rbx + 0x80]
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x140176075
mov byte [rdi], 0x5a
sub byte [rdi], 0x49
xor byte [rdi], 0x65
sub byte [rdi], 0x1a
sub byte [rdi], 0x46
sub byte [rdi], 0x14
mov rsi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x140176062
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
xchg rsi, r8
mov rsi, r8
xchg rsi, r8
mov edx, 0x1ef2db1c
xor edx, 0x403cd82
add edx, 0x45144033
sub edx, 0x3cc4a9f2
add edx, 0x3b3f229c
sub edx, 0x2e176e24
xor edx, 0x6f762f16
sub edx, 0x5f1e4e40
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x140175f63
cmp byte [rdi], 0
sete al
jmp 0x140175fc8
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
xchg rsi, rcx
mov rsi, rbx
xchg rsi, rcx
mov byte [rbx + 0x7c], 0x2e
xor byte [rbx + 0x7c], 0x61
sub byte [rbx + 0x7c], 6
sub byte [rbx + 0x7c], 0x3a
add byte [rbx + 0x7c], 0x4b
sub byte [rbx + 0x7c], 0x5a
mov byte [rdi], 0x59
xor byte [rdi], 0x77
xor byte [rdi], 0x4b
sub byte [rdi], 0x27
xor byte [rdi], 0xe
sub byte [rdi], 0x30
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
mov qword [rbx + 0x80], rsi
xchg r8, rax
mov r8, rbp
xchg r8, rax
mov rcx, qword [0x140217068]
xchg r13, rbp
mov r13, qword [rsp + 0x70]
xchg rbp, r13
xchg rdx, rsi
mov qword [rbx + 0x68], rdx
xchg rsi, rdx
mov rsi, qword [rsp + 0x78]
xchg rcx, rdi
mov qword [rbx + 0x74], rdi
xchg rcx, rdi
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]