Function at 0x140176c20
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r8, rbp
mov qword [rsp + 0x18], r8
xchg r8, rbp
xchg rsi, r13
mov qword [rsp + 0x20], r13
xchg rsi, r13
push rdi
sub rsp, 0x50
cmp qword [rcx + 0x80], 0
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
je 0x140176df6
call qword [sym.imp.MSVCP140.dll_protected:_wchar_t____ptr64___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::eback_void_const___ptr64]
lea rdx, [rbx + 0x70]
cmp rax, rdx
jne 0x140176c90
xchg r10, rdx
mov r10, qword [rbx + 0x88]
xchg rdx, r10
xchg rbx, rbp
mov rcx, rbp
xchg rbx, rbp
mov r9, qword [rbx + 0x90]
mov r8, rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::setg_wchar_t____ptr64__wchar_t____ptr64__wchar_t____ptr64____ptr64]
cmp qword [rbx + 0x68], 0
lea rdi, [rbx + 0x72]
je 0x140176d51
cmp byte [rdi], 0
je 0x140176d51
xchg r12, rax
mov r12, qword [rbx]
xchg r12, rax
mov esi, 0x24661b28
sub esi, 0x1fdd79d9
add esi, 0x1645c37d
xor esi, 0x1d69804e
add esi, 0x1c5e377f
xor esi, 0x49b6ef3d
add esi, 0x23c1c4c
sub esi, 0x45151830
sub esi, 0x2ad6f759
mov edx, esi
mov rcx, rbx
call qword [rax + 0x18]
cmp si, ax
jne 0x140176cfc
xor al, al
jmp 0x140176d5d
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140176d7f
sub eax, 1
je 0x140176d91
cmp eax, 2
jne 0x140176cf5
mov byte [rdi], 0x56
xor byte [rdi], 0x1a
add byte [rdi], 0x23
sub byte [rdi], 0x5e
add byte [rdi], 0x20
xor byte [rdi], 0x18
sub byte [rdi], 0x29
mov al, 0x1b
add al, 0x38
sub al, 0x3c
add al, 0x36
xor al, 0x33
xor al, 0x7f
mov rcx, qword [rbx + 0x80]
xor esi, esi
test al, al
mov ebp, esi
cmovne rbp, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
cmovne rbp, rsi
jmp 0x140176dfe
mov byte [rdi], 0x2e
add byte [rdi], 0x2f
sub byte [rdi], 0xe
xor byte [rdi], 0x4e
xor byte [rdi], 0x17
xor byte [rdi], 0x16
mov rsi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rsi, rax
je 0x140176deb
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
xchg rbx, rsi
mov r8, rbx
xchg rsi, rbx
mov edx, 0x7357c957
xor edx, 0x1efff316
xor edx, 0x15778aa9
sub edx, 0x21c90fa5
add edx, 0x26a3e757
xor edx, 0x7dba889b
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rsi, rax
jne 0x140176cf5
cmp byte [rdi], 0
sete al
jmp 0x140176d5d
xor esi, esi
lea rdi, [rcx + 0x72]
mov ebp, esi
xchg rbp, rcx
mov rbp, rbx
xchg rcx, rbp
mov byte [rbx + 0x7c], 0x36
add byte [rbx + 0x7c], 0x24
sub byte [rbx + 0x7c], 0x49
add byte [rbx + 0x7c], 0x23
add byte [rbx + 0x7c], 0x16
xor byte [rbx + 0x7c], 0x4d
xor byte [rbx + 0x7c], 0x6f
xor byte [rbx + 0x7c], 0x26
xor byte [rbx + 0x7c], 0x4e
mov byte [rdi], 0x19
sub byte [rdi], 0xe
xor byte [rdi], 0x73
xor byte [rdi], 0x5b
sub byte [rdi], 0x18
add byte [rdi], 0x1a
sub byte [rdi], 0x25
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void____ptr64]
xchg rdx, rsi
mov qword [rbx + 0x80], rdx
xchg rdx, rsi
xchg r8, rbp
mov rax, r8
xchg rbp, r8
mov rcx, qword [0x140218068]
xchg rbp, rdi
mov rdi, qword [rsp + 0x70]
xchg rdi, rbp
xchg rsi, rdx
mov qword [rbx + 0x68], rdx
xchg rsi, rdx
xchg rsi, r15
mov r15, qword [rsp + 0x78]
xchg rsi, r15
xchg r11, rcx
mov qword [rbx + 0x74], r11
xchg rcx, r11
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
push rbx
push rcx
push rbx
push rax
push rdx
push rax
push rbx
push rdx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]