Function at 0x14000c5b8
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfd8]
mov eax, 0x10d8
call fcn.14003a3b0
sub rsp, rax
mov rax, qword [0x140054040]
xor rax, rsp
mov qword [rbp + 0xfc0], rax
mov r12, r9
mov r15, rdx
mov r14, rcx
mov qword [rsp + 0x58], rcx
mov dword [rsp + 0x38], r8d
mov rdi, qword [rbp + 0x1040]
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov r13b, bl
mov word [rsp + 0x70], bx
xor edx, edx
mov r8d, 0x1046
lea rcx, [rsp + 0x72]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
lea r8d, [rbx + 0x20]
lea rdx, str._t_t_collection__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
lea r8d, [rbx + 0x1c]
lea rdx, str._t_t_t_url_href
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
movabs rcx, 0x500000c400000000
test rdi, rdi
je 0x14000c79b
mov rdx, rdi
mov r8d, ebx
movzx eax, word [rdi]
cmp bx, ax
je 0x14000c79b
mov rsi, rbx
mov r14d, ebx
cmp ax, 0x3e
ja 0x14000c762
movzx eax, ax
bt rcx, rax
jae 0x14000c762
test r8d, r8d
je 0x14000c6d4
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
movzx ecx, word [rdi]
sub ecx, 0x22
je 0x14000c720
sub ecx, 4
je 0x14000c711
sub ecx, 1
je 0x14000c708
sub ecx, 0x15
je 0x14000c6f9
cmp ecx, 2
jne 0x14000c72d
lea rsi, str.gt_
jmp 0x14000c700
lea rsi, str.lt_
mov r14d, 8
jmp 0x14000c72d
lea rsi, str.apos_
jmp 0x14000c727
lea rsi, str.amp_
mov r14d, 0xa
jmp 0x14000c72d
lea rsi, str.quot_
mov r14d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov r8d, r14d
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r8d, 0xfffffffe
lea rdx, [rdi + 2]
movabs rcx, 0x500000c400000000
add rdi, 2
add r8d, 2
movzx eax, word [rdi]
cmp bx, ax
jne 0x14000c697
test r8d, r8d
je 0x14000c796
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r14, qword [rsp + 0x58]
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r8d, 4
lea rdx, [0x1400429b4]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
test r12, r12
je 0x14000c8dd
mov rdx, r12
mov r8d, ebx
movzx eax, word [r12]
cmp bx, ax
je 0x14000c8dd
mov rdi, rbx
mov esi, ebx
cmp ax, 0x3e
ja 0x14000c8a7
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000c8a7
test r8d, r8d
je 0x14000c823
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
movzx ecx, word [r12]
sub ecx, 0x22
je 0x14000c86f
sub ecx, 4
je 0x14000c861
sub ecx, 1
je 0x14000c858
sub ecx, 0x15
je 0x14000c84a
cmp ecx, 2
jne 0x14000c87b
lea rdi, str.gt_
jmp 0x14000c851
lea rdi, str.lt_
mov esi, 8
jmp 0x14000c87b
lea rdi, str.apos_
jmp 0x14000c876
lea rdi, str.amp_
mov esi, 0xa
jmp 0x14000c87b
lea rdi, str.quot_
mov esi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov r8d, esi
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r8d, 0xfffffffe
lea rdx, [r12 + 2]
add r12, 2
add r8d, 2
movzx eax, word [r12]
cmp bx, ax
jne 0x14000c7e0
test r8d, r8d
je 0x14000c8dd
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r12d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, r12d
lea rdx, str.__url__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov rcx, qword [r14 + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
mov edx, dword [rsp + 0x38]
mov rax, qword [rax + 0x50]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000cd0d
cmp dword [rsp + 0x38], ebx
jle 0x14000cce8
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsp + 0x50], rbx
mov edi, dword [rsp + 0x38]
mov rcx, qword [r14 + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
mov edx, edi
mov rax, qword [rax + 0x48]
call qword [case.0x140033a70.0]
test eax, eax
jns 0x14000c96e
mov dword [rsp + 0x38], ebx
mov rcx, qword [r14 + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
mov edx, edi
mov rax, qword [rax + 0x78]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000ccb9
cmp word [rsp + 0x48], bx
je 0x14000ccb9
test r13b, r13b
jne 0x14000c9cc
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x60]
mov r8d, 0x2a
lea rdx, str._t_t_t_subcollections__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r13b, 1
mov rcx, qword [r14 + 0x26c0]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
mov edx, edi
mov rax, qword [rax + 0x88]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000ccb9
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
mov r8d, edi
mov edx, edi
mov rcx, r14
call fcn.14000cf2c
test al, al
je 0x14000ccb9
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x64]
mov r8d, 0x1e
lea rdx, str._t_t_t_t_url_href
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
lea r14, [rsp + 0x70]
lea rdx, [rsp + 0x70]
mov r8d, ebx
movzx eax, word [rsp + 0x70]
cmp bx, ax
je 0x14000cb53
mov rdi, rbx
mov esi, ebx
cmp ax, 0x3e
ja 0x14000cb1e
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000cb1e
test r8d, r8d
je 0x14000ca9c
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
movzx ecx, word [r14]
sub ecx, 0x22
je 0x14000cae7
sub ecx, 4
je 0x14000cad9
sub ecx, 1
je 0x14000cad0
sub ecx, 0x15
je 0x14000cac2
cmp ecx, 2
jne 0x14000caf3
lea rdi, str.gt_
jmp 0x14000cac9
lea rdi, str.lt_
mov esi, 8
jmp 0x14000caf3
lea rdi, str.apos_
jmp 0x14000caee
lea rdi, str.amp_
mov esi, 0xa
jmp 0x14000caf3
lea rdi, str.quot_
mov esi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov r8d, esi
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r8d, 0xfffffffe
lea rdx, [r14 + 2]
add r14, 2
add r8d, 2
movzx eax, word [r14]
cmp bx, ax
jne 0x14000ca59
test r8d, r8d
je 0x14000cb53
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x68]
mov r8d, 4
lea rdx, [0x1400429b4]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x14000cc93
mov r8d, ebx
movzx eax, word [rdi]
cmp bx, ax
je 0x14000cc93
mov rdx, rdi
mov rsi, rbx
mov r14d, ebx
cmp ax, 0x3e
ja 0x14000cc63
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000cc63
test r8d, r8d
je 0x14000cbdf
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
movzx ecx, word [rdi]
sub ecx, 0x22
je 0x14000cc2b
sub ecx, 4
je 0x14000cc1c
sub ecx, 1
je 0x14000cc13
sub ecx, 0x15
je 0x14000cc04
cmp ecx, 2
jne 0x14000cc38
lea rsi, str.gt_
jmp 0x14000cc0b
lea rsi, str.lt_
mov r14d, 8
jmp 0x14000cc38
lea rsi, str.apos_
jmp 0x14000cc32
lea rsi, str.amp_
mov r14d, 0xa
jmp 0x14000cc38
lea rsi, str.quot_
mov r14d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r8d, r14d
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r8d, 0xfffffffe
lea rdx, [rdi + 2]
add rdi, 2
add r8d, 2
movzx eax, word [rdi]
cmp bx, ax
jne 0x14000cb9b
test r8d, r8d
je 0x14000cc93
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x4c]
mov r8d, r12d
lea rdx, str.__url__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000cd0d
mov r14, qword [rsp + 0x58]
cmp dword [rsp + 0x38], ebx
jg 0x14000c937
test r13b, r13b
je 0x14000cce8
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x4c]
mov r8d, 0x2c
lea rdx, str._t_t_t__subcollections__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x4c]
mov r8d, SafeArrayRedim
lea rdx, str._t_t__collection__r_n
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
setne bl
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, bl
mov rcx, qword [rbp + 0xfc0]
xor rcx, rsp
call fcn.140038c60
add rsp, 0x10d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret