Function at 0x14000bf44
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfd0]
mov eax, 0x10d0
call fcn.14003a3b0
sub rsp, rax
mov rax, qword [0x140054040]
xor rax, rsp
mov qword [rbp + 0xfc0], rax
mov edi, r8d
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0x30], r8d
xor ebx, ebx
lea r12d, [rbx + 1]
test r8d, r8d
jne 0x14000bfa0
mov dword [rsp + 0x30], r12d
mov edi, r12d
mov qword [rsp + 0x48], rbx
mov r13b, bl
mov word [rsp + 0x70], bx
xor edx, edx
mov r8d, 0x1046
lea rcx, [rsp + 0x72]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsi + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
mov edx, edi
mov rax, qword [rax + 0x50]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000c3a5
cmp dword [rsp + 0x30], ebx
jle 0x14000c3a8
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsp + 0x48], rbx
mov edi, dword [rsp + 0x30]
mov rcx, qword [rsi + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
mov edx, edi
mov rax, qword [rax + 0x48]
call qword [case.0x140033a70.0]
test eax, eax
jns 0x14000c023
mov dword [rsp + 0x30], ebx
mov rcx, qword [rsi + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x3c]
mov edx, edi
mov rax, qword [rax + 0x78]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000c371
cmp word [rsp + 0x3c], bx
jne 0x14000c371
test r13b, r13b
jne 0x14000c081
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x54]
mov r8d, SafeArrayPutElement
lea rdx, str._t_topics__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov r13b, r12b
mov rcx, qword [rsi + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
mov edx, edi
mov rax, qword [rax + 0x88]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000c371
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
mov r8d, edi
mov edx, edi
mov rcx, rsi
call fcn.14000cf2c
test al, al
je 0x14000c371
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x58]
mov r8d, 0x1a
lea rdx, str._t_t_url_href
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
lea r14, [rsp + 0x70]
lea rdx, [rsp + 0x70]
mov r8d, ebx
movzx eax, word [rsp + 0x70]
cmp bx, ax
je 0x14000c208
mov rdi, rbx
mov esi, ebx
cmp ax, 0x3e
ja 0x14000c1d3
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000c1d3
test r8d, r8d
je 0x14000c151
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
movzx ecx, word [r14]
sub ecx, 0x22
je 0x14000c19c
sub ecx, 4
je 0x14000c18e
sub ecx, 1
je 0x14000c185
sub ecx, 0x15
je 0x14000c177
cmp ecx, 2
jne 0x14000c1a8
lea rdi, str.gt_
jmp 0x14000c17e
lea rdi, str.lt_
mov esi, 8
jmp 0x14000c1a8
lea rdi, str.apos_
jmp 0x14000c1a3
lea rdi, str.amp_
mov esi, 0xa
jmp 0x14000c1a8
lea rdi, str.quot_
mov esi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r8d, esi
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov r8d, 0xfffffffe
lea rdx, [r14 + 2]
add r14, 2
add r8d, 2
movzx eax, word [r14]
cmp bx, ax
jne 0x14000c10e
test r8d, r8d
je 0x14000c208
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x5c]
mov r8d, 4
lea rdx, [0x1400429b4]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x14000c348
mov r8d, ebx
movzx eax, word [rdi]
cmp bx, ax
je 0x14000c348
mov rdx, rdi
mov rsi, rbx
mov r14d, ebx
cmp ax, 0x3e
ja 0x14000c318
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000c318
test r8d, r8d
je 0x14000c294
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x44]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
movzx ecx, word [rdi]
sub ecx, 0x22
je 0x14000c2e0
sub ecx, 4
je 0x14000c2d1
sub ecx, 1
je 0x14000c2c8
sub ecx, 0x15
je 0x14000c2b9
cmp ecx, 2
jne 0x14000c2ed
lea rsi, str.gt_
jmp 0x14000c2c0
lea rsi, str.lt_
mov r14d, 8
jmp 0x14000c2ed
lea rsi, str.apos_
jmp 0x14000c2e7
lea rsi, str.amp_
mov r14d, 0xa
jmp 0x14000c2ed
lea rsi, str.quot_
mov r14d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x44]
mov r8d, r14d
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov r8d, 0xfffffffe
lea rdx, [rdi + 2]
add rdi, 2
add r8d, 2
movzx eax, word [rdi]
cmp bx, ax
jne 0x14000c250
test r8d, r8d
je 0x14000c348
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x44]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, str.__url__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000c3a5
mov rsi, qword [rsp + 0x60]
cmp dword [rsp + 0x30], ebx
jg 0x14000bfec
test r13b, r13b
je 0x14000c3a8
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
lea rdx, str._t__topics__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
setne bl
mov r12b, bl
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, r12b
mov rcx, qword [rbp + 0xfc0]
xor rcx, rsp
call fcn.140038c60
mov rbx, qword [rsp + 0x1128]
add rsp, 0x10d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret