Function at 0x140175ef0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r11, rbp
mov qword [rsp + 0x18], r11
xchg rbp, r11
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
xchg rbx, r11
mov r11, rcx
xchg rbx, r11
je 0x1401760e4
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x140175f60
mov rdx, qword [rbx + 0x88]
xchg r9, rcx
mov r9, rbx
xchg rcx, r9
xchg rsi, r9
mov rsi, qword [rbx + 0x90]
xchg rsi, r9
xchg rbp, rdx
mov r8, rbp
xchg rbp, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x14017601e
cmp byte [rdi], 0
je 0x14017601e
xchg rbp, rax
mov rbp, qword [rbx]
xchg rbp, rax
mov esi, 0x7d3c30b3
xor esi, 0x76b717bd
xor esi, 0x6029edb5
sub esi, 0x581500b4
add esi, 0x2f441f95
xor esi, 0x42d11663
mov edx, esi
xchg rcx, r14
mov r14, rbx
xchg r14, rcx
call qword [rax + 0x18]
cmp si, ax
jne 0x140175fc0
xor al, al
jmp 0x140176030
xchg rcx, rdi
mov rdi, qword [rbx + 0x68]
xchg rcx, rdi
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140176058
sub eax, 1
je 0x14017606d
cmp eax, 2
jne 0x140175fb9
mov byte [rdi], 0x3a
sub byte [rdi], 0x15
add byte [rdi], 0x53
sub byte [rdi], 0x33
sub byte [rdi], 0x44
xor byte [rdi], 0x3d
sub byte [rdi], 0x30
sub byte [rdi], 0xc
mov al, 0x20
xor al, 0x7f
sub al, 1
xor al, 0x6d
sub al, 0xc
add al, 0x30
sub al, 0x51
add al, 0x17
sub al, 0x1c
xchg r10, rcx
mov r10, qword [rbx + 0x80]
xchg rcx, r10
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x1401760ec
mov byte [rdi], 0x35
sub byte [rdi], 0xd
sub byte [rdi], 0xb
xor byte [rdi], 0x54
sub byte [rdi], 4
xor byte [rdi], 4
xor byte [rdi], 0x41
xchg rdi, rsi
mov rdi, qword [rsp + 0x60]
xchg rsi, rdi
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x1401760d9
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
xchg rsi, r8
mov rsi, r8
xchg rsi, r8
mov edx, 0x6c60c8e3
sub edx, 0xc11ef4d
xor edx, 0x443543ec
xor edx, 0xaebfb00
sub edx, 0x13b6ff31
xor edx, 0x14caf38c
add edx, 0x392e4315
sub edx, 0x4741d4d9
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x140175fb9
cmp byte [rdi], 0
sete al
jmp 0x140176030
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
mov rcx, rbx
mov byte [rbx + 0x7c], 0x79
xor byte [rbx + 0x7c], 0x65
xor byte [rbx + 0x7c], 0x52
xor byte [rbx + 0x7c], 0x25
xor byte [rbx + 0x7c], 0x11
xor byte [rbx + 0x7c], 0x4e
sub byte [rbx + 0x7c], 0x34
mov byte [rdi], 0x7c
xor byte [rdi], 4
xor byte [rdi], 0x63
add byte [rdi], 0x10
xor byte [rdi], 0x18
sub byte [rdi], 0x1d
sub byte [rdi], 7
xor byte [rdi], 0xf
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
xchg rdx, rsi
mov qword [rbx + 0x80], rdx
xchg rdx, rsi
xchg rbp, rax
mov rbp, rax
xchg rbp, rax
mov rcx, qword [0x140217068]
mov rbp, qword [rsp + 0x70]
mov qword [rbx + 0x68], rsi
mov rsi, qword [rsp + 0x78]
xchg rcx, r11
mov qword [rbx + 0x74], r11
xchg r11, rcx
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]