Function at 0x1401a6230
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov ebx, edx
mov rsi, rcx
mov rdi, qword [rcx + 0x738]
mov edx, 2
mov r8d, 2
call fcn.1401adf20
test rdi, rdi
je 0x1401a65a1
mov r13, qword [rsi + 0xa90]
mov rdi, qword [rsi + 0x738]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
test r13, r13
je 0x1401a65a1
mov rcx, r13
call fcn.1401a5760
lea rcx, [0x14026d2aa]
mov rdx, rdi
call sub.msvcrt.dll_strcmp
mov r14d, eax
test eax, eax
je 0x1401a62cf
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x60]
mov rcx, rsi
mov rdx, rdi
call fcn.140214460
test eax, eax
je 0x1401a62e7
mov r12d, eax
xor ebp, ebp
jmp 0x1401a655b
mov ecx, 1
call qword [fcn.14009dfe0]
mov r9, rax
mov qword [rsp + 0x58], rax
mov bpl, 1
jmp 0x1401a62ee
mov r9, qword [rsp + 0x58]
xor ebp, ebp
lea rcx, str._Netscape_HTTP_Cookie_File_n_https:__curl.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
mov edx, 0x83
mov r8d, 1
call sub.msvcrt.dll_fwrite
movsxd rdx, dword [r13 + 0x808]
test rdx, rdx
je 0x1401a64f0
mov rax, qword [0x14026c258]
shl rdx, 3
mov ecx, 1
call qword [rax]
mov r12d, 0x1b
test rax, rax
je 0x1401a655b
mov r15, rax
mov dword [rsp + 0x6c], r14d
mov qword [rsp + 0x70], rdi
xor eax, eax
xor r12d, r12d
jmp 0x1401a635b
inc rax
cmp rax, 0x100
je 0x1401a6388
mov rcx, qword [r13 + rax*8]
jmp 0x1401a6373
mov rcx, qword [rcx]
test rcx, rcx
je 0x1401a6350
cmp qword [rcx + 0x28], 0
je 0x1401a6370
mov qword [r15 + r12*8], rcx
inc r12
jmp 0x1401a6370
mov dword [rsp + 0x68], ebp
mov byte [rsp + 0x57], bl
lea r9, [0x1401a65f0]
mov r8d, 8
mov rcx, r15
mov rdx, r12
call sub.msvcrt.dll_qsort
test r12, r12
je 0x1401a64d1
xor ebp, ebp
lea r13, [0x14026d218]
lea rdi, [0x14026d210]
nop word cs:[rax + rax]
mov rax, qword [r15 + rbp*8]
cmp byte [rax + 0x50], 0
mov r9, qword [rax + 0x28]
je 0x1401a6400
test r9, r9
je 0x1401a6410
cmp byte [r9], 0x2e
mov r8, r13
je 0x1401a63f3
lea r8, [0x14026d386]
lea rcx, [0x14026d20b]
jmp 0x1401a641d
mov rcx, rdi
jmp 0x1401a641a
xor r9d, r9d
lea rcx, [0x14026d20b]
mov r8, r13
test r9, r9
lea rdx, [0x14026d388]
cmove r9, rdx
mov r10, qword [rax + 0x18]
test r10, r10
lea rdx, [0x14026d216]
cmove r10, rdx
mov r11, qword [rax + 0x10]
test r11, r11
cmove r11, r13
cmp byte [rax + 0x51], 0
mov r14, rdi
je 0x1401a6458
lea r14, [0x14026d20b]
cmp byte [rax + 0x53], 0
mov rdx, r13
je 0x1401a6468
lea rdx, str.HttpOnly_
mov rbx, qword [rax + 0x30]
mov rax, qword [rax + 8]
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rcx
lea rcx, str._s_s_s_t_s_t_s_t_s_t_I64d_t_s_t_s
call fcn.1401ac680
test rax, rax
je 0x1401a6540
mov r14, rax
mov rcx, qword [rsp + 0x58]
lea rdx, [0x14026d414]
mov r8, rax
call fcn.1401ac6b0
mov rcx, r14
mov rax, qword [0x1402654c0]
call qword [rax]
inc ebp
cmp r12, rbp
ja 0x1401a63d0
mov rax, qword [0x1402654c0]
mov rcx, r15
call qword [rax]
movzx ebx, byte [rsp + 0x57]
mov rdi, qword [rsp + 0x70]
mov ebp, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x6c]
test r14d, r14d
je 0x1401a6530
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_fclose
mov qword [rsp + 0x58], 0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1401a6530
mov rdx, rdi
call fcn.140214570
test eax, eax
je 0x1401a6530
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll__unlink
mov r12d, 0x17
jmp 0x1401a655b
mov rax, qword [0x1402654c0]
mov rcx, qword [rsp + 0x60]
call qword [rax]
jmp 0x1401a65a1
mov rcx, r15
mov rax, qword [0x1402654c0]
call qword [rax]
movzx ebx, byte [rsp + 0x57]
mov ebp, dword [rsp + 0x68]
mov r12d, 0x1b
test bpl, bpl
jne 0x1401a656f
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1401a656f
call sub.msvcrt.dll_fclose
mov rax, qword [0x1402654c0]
mov rcx, qword [rsp + 0x60]
call qword [rax]
mov rdi, qword [rsi + 0x738]
mov ecx, r12d
call fcn.1401f89d0
lea rdx, str.WARNING:_failed_to_save_cookies_in__s:__s
mov rcx, rsi
mov r8, rdi
mov r9, rax
call fcn.1401955d0
test bl, bl
je 0x1401a65d1
mov rax, qword [rsi + 0xe0]
mov rcx, qword [rsi + 0xa90]
test rax, rax
je 0x1401a65c1
cmp rcx, qword [rax + 0xb0]
je 0x1401a65d1
call fcn.1401a5950
mov qword [rsi + 0xa90], 0
mov rcx, rsi
mov edx, 2
call fcn.1401adf60
nop
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret