Function at 0x14000df48
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov r10, r8
mov rdi, rdx
mov r12, rcx
xor ebx, ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x10], rbx
mov rax, qword [r8]
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x10]
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x18]
mov rcx, r10
mov rax, qword [rax + 0x60]
call qword [case.0x140033a70.0]
test eax, eax
js 0x14000e2ab
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
lea r8d, [rbx + 0x16]
lea rdx, str._t_t_result__n
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ab
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
lea r8d, [rbx + 0x1c]
lea rdx, str._t_t_t_url_href
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
movabs rcx, 0x500000c400000000
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x14000e114
mov r8d, ebx
movzx eax, word [rsi]
cmp bx, ax
je 0x14000e114
mov rdx, rsi
mov r14, rbx
mov r15d, ebx
cmp ax, 0x3e
ja 0x14000e0e1
movzx eax, ax
bt rcx, rax
jae 0x14000e0e1
test r8d, r8d
je 0x14000e054
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
movzx ecx, word [rsi]
sub ecx, 0x22
je 0x14000e0a0
sub ecx, 4
je 0x14000e091
sub ecx, 1
je 0x14000e088
sub ecx, 0x15
je 0x14000e079
cmp ecx, 2
jne 0x14000e0ad
lea r14, str.gt_
jmp 0x14000e080
lea r14, str.lt_
mov r15d, 8
jmp 0x14000e0ad
lea r14, str.apos_
jmp 0x14000e0a7
lea r14, str.amp_
mov r15d, 0xa
jmp 0x14000e0ad
lea r14, str.quot_
mov r15d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov r8d, r15d
mov rdx, r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov r8d, 0xfffffffe
lea rdx, [rsi + 2]
movabs rcx, 0x500000c400000000
add rsi, 2
add r8d, 2
movzx eax, word [rsi]
cmp bx, ax
jne 0x14000e018
test r8d, r8d
je 0x14000e114
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov r8d, 4
lea rdx, [0x1400429b4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov rsi, qword [rbp - 0x18]
test rsi, rsi
je 0x14000e24f
mov r8d, ebx
movzx eax, word [rsi]
cmp bx, ax
je 0x14000e24f
mov rdx, rsi
mov r14, rbx
mov r15d, ebx
cmp ax, 0x3e
ja 0x14000e220
movabs rcx, 0x500000c400000000
bt rcx, rax
jae 0x14000e220
test r8d, r8d
je 0x14000e19d
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
movzx ecx, word [rsi]
sub ecx, 0x22
je 0x14000e1e9
sub ecx, 4
je 0x14000e1da
sub ecx, 1
je 0x14000e1d1
sub ecx, 0x15
je 0x14000e1c2
cmp ecx, 2
jne 0x14000e1f6
lea r14, str.gt_
jmp 0x14000e1c9
lea r14, str.lt_
mov r15d, 8
jmp 0x14000e1f6
lea r14, str.apos_
jmp 0x14000e1f0
lea r14, str.amp_
mov r15d, 0xa
jmp 0x14000e1f6
lea r14, str.quot_
mov r15d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov r8d, r15d
mov rdx, r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov r8d, 0xfffffffe
lea rdx, [rsi + 2]
add rsi, 2
add r8d, 2
movzx eax, word [rsi]
cmp bx, ax
jne 0x14000e15a
test r8d, r8d
je 0x14000e24f
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, str.__url__r_n
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000e2ad
mov r8, qword [rbp - 0x20]
mov rdx, rdi
mov rcx, r12
call fcn.14000e2e8
test al, al
je 0x14000e2ad
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x40]
mov r8d, 0x1a
lea rdx, str._t_t__result__r_n
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
setne bl
jmp 0x14000e2ad
mov bl, 1
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, bl
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret