Function at 0x140176540
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
mov rbx, rcx
je 0x14017672b
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x1401765a6
xchg rbp, rdx
mov rbp, qword [rbx + 0x88]
xchg rdx, rbp
xchg r15, rbx
mov rcx, r15
xchg rbx, r15
mov r9, qword [rbx + 0x90]
mov r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x140176669
cmp byte [rdi], 0
je 0x140176669
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
mov esi, 0xe5a5e66
add esi, 0x35492fb5
sub esi, 0x4294fffc
xor esi, 0x1d746ed
add esi, 0x311dcfb6
xor esi, 0x7c123c42
xor esi, 0x6e9dfd7
add esi, 0xfd9d10e
xor esi, 0x5ae6b3b4
mov edx, esi
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 0x18]
cmp si, ax
jne 0x140176618
xor al, al
jmp 0x140176677
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x14017669f
sub eax, 1
je 0x1401766b4
cmp eax, 2
jne 0x140176611
mov byte [rdi], 0x51
xor byte [rdi], 0x14
sub byte [rdi], 0x3e
xor byte [rdi], 0x3b
sub byte [rdi], 0x16
xor byte [rdi], 1
sub byte [rdi], 0x27
mov al, 0x5e
xor al, 0x43
xor al, 0x3f
add al, 0x4b
sub al, 0x1c
xor al, 0x75
sub al, 0x23
xchg rcx, rbp
mov rbp, qword [rbx + 0x80]
xchg rcx, rbp
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x140176733
mov byte [rdi], 0x21
add byte [rdi], 0x38
sub byte [rdi], 0x35
xor byte [rdi], 0x46
xor byte [rdi], 0x7c
add byte [rdi], 0x53
xor byte [rdi], 0x71
mov rsi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x140176720
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
xchg r8, rsi
mov rsi, r8
xchg rsi, r8
mov edx, 0x69d54546
xor edx, 0x7fc09877
add edx, 0x38f6f72a
sub edx, 0x34b5bf94
add edx, 0x2e8c0a52
xor edx, 0x314418d7
sub edx, 0x46b194a4
xor edx, 0x86c9c27
sub edx, 0x3a99ef0c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x140176611
cmp byte [rdi], 0
sete al
jmp 0x140176677
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
mov byte [rbx + 0x7c], 0x79
sub byte [rbx + 0x7c], 0x72
add byte [rbx + 0x7c], 0x54
sub byte [rbx + 0x7c], 0x53
add byte [rbx + 0x7c], 0x5e
sub byte [rbx + 0x7c], 0x23
add byte [rbx + 0x7c], 0x20
sub byte [rbx + 0x7c], 0x43
sub byte [rbx + 0x7c], 0x20
mov byte [rdi], 0xe
add byte [rdi], 0x5b
sub byte [rdi], 0x16
xor byte [rdi], 0x27
sub byte [rdi], 0x5f
sub byte [rdi], 0x15
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
xchg rsi, r10
mov qword [rbx + 0x80], r10
xchg rsi, r10
xchg rbp, rax
mov rbp, rax
xchg rbp, rax
mov rcx, qword [0x140217068]
xchg rdx, rbp
mov rdx, qword [rsp + 0x70]
xchg rdx, rbp
mov qword [rbx + 0x68], rsi
mov rsi, qword [rsp + 0x78]
mov qword [rbx + 0x74], rcx
xchg rbx, r9
mov r9, qword [rsp + 0x68]
xchg r9, rbx
add rsp, 0x50
push rdx
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]