Function at 0x1401765e0
Capabilities:
Write file on windows

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg r11, rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
mov rbx, rcx
je 0x1401767c9
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x14017664a
xchg rdx, r13
mov r13, qword [rbx + 0x88]
xchg rdx, r13
xchg rcx, rbp
mov rbp, rbx
xchg rbp, rcx
mov r9, qword [rbx + 0x90]
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x1401766fb
cmp byte [rdi], 0
je 0x1401766fb
mov rax, qword [rbx]
mov esi, 0x241b63a5
sub esi, 0x6e1b75f
xor esi, 0x392ee375
add esi, 0xc00dd7c
add esi, 0x4388bcc9
sub esi, 0x739fe979
mov edx, esi
xchg r12, rcx
mov r12, rbx
xchg r12, rcx
call qword [rax + 0x18]
cmp si, ax
jne 0x1401766a6
xor al, al
jmp 0x140176709
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
xchg r10, rax
mov qword [rsp + 0x20], r10
xchg r10, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140176731
sub eax, 1
je 0x14017674c
cmp eax, 2
jne 0x14017669f
mov byte [rdi], 2
add byte [rdi], 0x20
xor byte [rdi], 0x4b
xor byte [rdi], 0x5e
add byte [rdi], 9
add byte [rdi], 0x35
sub byte [rdi], 0x75
mov al, 0x44
xor al, 3
sub al, 0x1a
xor al, 0x39
xor al, 0x7e
xor al, 0x49
xor al, 0x22
xchg rcx, r10
mov r10, qword [rbx + 0x80]
xchg r10, rcx
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x1401767d1
mov byte [rdi], 0x5f
sub byte [rdi], 0x52
sub byte [rdi], 4
add byte [rdi], 0x5e
sub byte [rdi], 0x28
add byte [rdi], 0x20
xor byte [rdi], 0x33
sub byte [rdi], 0x3b
xor byte [rdi], 0x31
xchg rsi, r8
mov r8, qword [rsp + 0x60]
xchg rsi, r8
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x1401767be
xchg rdx, r9
mov rdx, qword [rbx + 0x80]
xchg r9, rdx
lea rcx, [rsp + 0x30]
xchg r13, rsi
mov r8, r13
xchg rsi, r13
mov edx, 0x736f516a
xor edx, 0x57f0ee77
add edx, 0x1aa09e6a
xor edx, 0x7a648ab5
xor edx, 0x1018812a
sub edx, 0x498a6e7c
add edx, 0x2adc4d2f
sub edx, 0x368e34ca
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x14017669f
cmp byte [rdi], 0
sete al
jmp 0x140176709
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
mov byte [rbx + 0x7c], 0x3a
xor byte [rbx + 0x7c], 0x3b
add byte [rbx + 0x7c], 0x37
xor byte [rbx + 0x7c], 0x27
xor byte [rbx + 0x7c], 0x12
xor byte [rbx + 0x7c], 0x23
xor byte [rbx + 0x7c], 0x5a
sub byte [rbx + 0x7c], 0x74
mov byte [rdi], 0x6e
sub byte [rdi], 0x1f
xor byte [rdi], 0x12
sub byte [rdi], 0x11
sub byte [rdi], 0x42
add byte [rdi], 9
sub byte [rdi], 0x13
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
xchg rsi, rbp
mov qword [rbx + 0x80], rbp
xchg rsi, rbp
xchg rbp, rax
mov rbp, rax
xchg rbp, rax
mov rcx, qword [0x140217068]
xchg r14, rbp
mov r14, qword [rsp + 0x70]
xchg r14, rbp
xchg rsi, r9
mov qword [rbx + 0x68], r9
xchg rsi, r9
xchg rsi, r10
mov r10, qword [rsp + 0x78]
xchg r10, rsi
mov qword [rbx + 0x74], rcx
xchg rbp, rbx
mov rbp, qword [rsp + 0x68]
xchg rbp, rbx
add rsp, 0x50
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]