Function at 0x140005020
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xe8
mov qword [rsp + 0x68], 0
mov rdi, rcx
mov rbx, rdx
mov rbp, r8
test rdx, rdx
je 0x14000519e
mov eax, dword [rdx + 0x28]
and eax, 2
test r8, r8
je 0x140005220
xor esi, esi
test eax, eax
jne 0x140005098
xor esi, esi
cmp byte [rbp], 0
je 0x140005098
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x60]
mov rdx, rbp
mov rcx, rdi
call sym.Curl_fopen
mov esi, eax
test eax, eax
je 0x140005240
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x140129da0]
call qword [rax]
cmp qword [rdi + 0x2c8], 0
je 0x140005132
mov qword [rsp + 0x70], 0
mov rax, qword [rbx + 0x18]
mov rbx, qword [rbx]
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x140005132
movabs rbp, 0x7fffffffffffffff
lea r12, [rsp + 0x80]
movabs r13, 0x6574696d696c6e75
nop dword [rax]
mov rsi, qword [rbx]
mov rbx, qword [rbx + 0x10]
mov rcx, qword [rsi + 0x18]
mov qword [rsp + 0xb0], rcx
call sym.strlen
movzx edx, byte [rsi + 0x20]
mov qword [rsp + 0xb8], rax
movzx eax, byte [rsp + 0xc0]
and edx, 1
and eax, 0xfffffffe
or eax, edx
mov byte [rsp + 0xc0], al
mov rcx, qword [rsi + 0x28]
cmp rcx, rbp
je 0x140005150
mov rdx, r12
call sym.Curl_gmtime
mov esi, eax
test eax, eax
je 0x1400051a8
mov eax, esi
add rsp, 0xe8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 0x64
mov qword [rsp + 0xc4], r13
mov word [rsp + 0xcc], ax
mov r9, qword [rdi + 0x2d0]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0x70]
mov rcx, rdi
call qword [rdi + 0x2c8]
cmp eax, 2
je 0x140005210
test eax, eax
jne 0x14000519e
add qword [rsp + 0x70], 1
test rbx, rbx
jne 0x1400050e0
xor esi, esi
jmp 0x140005132
mov eax, dword [rsp + 0x80]
lea rcx, [rsp + 0xc4]
mov edx, 0x12
lea r8, str._d_02d_02d__02d:_02d:_02d
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x90]
add eax, 1
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x94]
lea r9d, [rax + 0x76c]
call sym.curl_msnprintf
jmp 0x140005165
mov esi, 0x2b
jmp 0x140005132
mov rbp, qword [rdx + 0x20]
test rbp, rbp
je 0x140005231
test eax, eax
je 0x140005063
xor esi, esi
jmp 0x140005098
mov r9, qword [rsp + 0x60]
mov r8d, 0x6f
mov edx, 1
lea rcx, str._Your_HSTS_cache._https:__curl.se_docs_hsts.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n
call sym.fwrite
mov r12, qword [rbx]
test r12, r12
je 0x140005394
movabs r13, 0x7fffffffffffffff
jmp 0x140005312
lea rdx, [rsp + 0xb0]
call sym.Curl_gmtime
test eax, eax
jne 0x140005368
mov eax, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0xb0]
lea r8, [0x1400fd728]
mov r9, qword [r15 + 0x18]
lea edx, [rax + 1]
mov eax, dword [rsp + 0xc4]
add eax, 0x76c
cmp byte [r15 + 0x20], 0
mov dword [rsp + 0x48], ecx
mov ecx, dword [rsp + 0xb4]
mov dword [rsp + 0x28], edx
lea rdx, str._s_s___d_02d_02d__02d:_02d:_02d__n
mov dword [rsp + 0x20], eax
lea rax, [0x1400fd72a]
mov dword [rsp + 0x40], ecx
mov ecx, dword [rsp + 0xb8]
cmove r8, rax
mov dword [rsp + 0x38], ecx
mov ecx, dword [rsp + 0xbc]
mov dword [rsp + 0x30], ecx
mov rcx, r14
call sym.curl_mfprintf
test r12, r12
je 0x140005394
mov r15, qword [r12]
mov r14, qword [rsp + 0x60]
mov r12, qword [r12 + 0x10]
mov rcx, qword [r15 + 0x28]
cmp rcx, r13
jne 0x140005280
lea rax, str.unlimited
cmp byte [r15 + 0x20], 0
mov r9, qword [r15 + 0x18]
lea r8, [0x1400fd728]
mov qword [rsp + 0x20], rax
lea rax, [0x1400fd72a]
lea rdx, str._s_s___s__n
mov rcx, r14
cmove r8, rax
call sym.curl_mfprintf
jmp 0x140005309
mov rcx, qword [rsp + 0x60]
mov dword [rsp + 0x5c], eax
call sym.fclose
mov edx, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x68]
mov esi, edx
test rcx, rcx
je 0x14000508f
call sym.unlink
jmp 0x14000508a
mov rcx, qword [rsp + 0x60]
call sym.fclose
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14000508f
mov rdx, rbp
call sym.Curl_rename
test eax, eax
je 0x14000508a
mov edx, 0x17
jmp 0x14000537a