Function at 0x4902d0
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x4c
mov ebx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
mov ebp, dword [ebx + 0x930]
mov dword [esp + 0x1c], eax
test ebp, ebp
je 0x490421
mov edi, dword [ebx + 0xad0]
test edi, edi
je 0x490303
mov dword [esp], ebx
call sym._Curl_cookie_loadfiles
mov dword [esp + 8], 2
mov dword [esp + 4], 2
mov dword [esp], ebx
call sym._Curl_share_lock
mov ebp, dword [ebx + 0xadc]
test ebp, ebp
je 0x49039c
mov edi, dword [ebx + 0x930]
mov eax, ebp
mov esi, 0x5dc309
mov dword [esp + 0x28], edi
call sym._remove_expired
mov ecx, 2
repe cmpsb byte [esi], byte es:[edi]
jne 0x4903e2
mov dword [esp], 1
call dword [0x5c044c]
mov dword [esp + 8], 0x88
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], str._Netscape_HTTP_Cookie_File_n_https:__curl.haxx.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
mov dword [esp + 0x20], eax
call sym._fwrite
mov eax, dword [ebp + 0x408]
test eax, eax
jne 0x490461
mov dword [esp + 0x24], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call dword [0x5bcc2c]
cmp byte [esp + 0x1c], 0
je 0x4903ca
mov edx, dword [ebx + 0x80]
mov eax, dword [ebx + 0xadc]
test edx, edx
je 0x4903b8
cmp eax, dword [edx + 0x58]
je 0x4903ca
mov dword [esp], eax
call sym._Curl_cookie_cleanup
mov dword [ebx + 0xadc], 0
mov dword [esp], ebx
mov dword [esp + 4], 2
call sym._Curl_share_unlock
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
lea esi, [esp + 0x37]
mov dword [esp + 8], 9
mov dword [esp], ebx
mov dword [esp + 4], esi
call sym._Curl_rand_hex
test eax, eax
je 0x490580
mov eax, dword [ebx + 0x930]
mov dword [esp + 4], str.WARNING:_failed_to_save_cookies_in__s_n
mov dword [esp], ebx
mov dword [esp + 8], eax
call sym._Curl_infof
jmp 0x49039c
cmp byte [esp + 0x1c], 0
je 0x490444
mov eax, dword [ebx + 0xad0]
test eax, eax
je 0x490444
mov dword [esp], eax
call sym._curl_slist_free_all
mov dword [ebx + 0xad0], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 2
mov dword [esp], ebx
call sym._Curl_share_lock
jmp 0x49039c
shl eax, 2
mov dword [esp], 1
mov dword [esp + 4], eax
call dword [0x5bcc20]
test eax, eax
mov edi, eax
mov dword [esp + 0x24], 0
je 0x49056e
mov byte [esp + 0x2f], 1
mov edx, ebp
lea ecx, [ebp + 0x400]
xor ebp, ebp
lea esi, [esi]
lea edi, [edi]
mov eax, dword [edx]
test eax, eax
je 0x4904c3
lea esi, [esi]
lea edi, [edi]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x4904bd
mov dword [edi + ebp*4], eax
add ebp, 1
mov eax, dword [eax]
test eax, eax
jne 0x4904b0
add edx, 4
cmp edx, ecx
jne 0x4904a0
mov dword [esp + 0xc], sym._cookie_sort_ct
mov dword [esp + 8], 4
xor esi, esi
mov dword [esp + 4], ebp
mov dword [esp], edi
call sym._qsort
test ebp, ebp
je 0x490623
mov dword [esp + 0x60], ebx
jmp 0x49052c
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
add esi, 1
mov dword [esp + 4], 0x5dc3ef
mov dword [esp], eax
call sym._curl_mfprintf
mov dword [esp], ebx
call dword [0x5bcc2c]
cmp ebp, esi
je 0x49061f
mov eax, dword [edi + esi*4]
call sym._get_netscape_format
test eax, eax
mov ebx, eax
jne 0x490500
mov eax, dword [esp + 0x20]
mov dword [esp + 4], str._n_Fatal_libcurl_error_n
mov ebx, dword [esp + 0x60]
mov dword [esp], eax
call sym._curl_mfprintf
mov dword [esp], edi
call dword [0x5bcc2c]
cmp byte [esp + 0x2f], 0
jne 0x49056e
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call sym._fclose
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call dword [0x5bcc2c]
jmp 0x490402
mov eax, dword [esp + 0x28]
mov dword [esp + 8], esi
mov dword [esp], str._s._s.tmp
mov dword [esp + 4], eax
call sym._curl_maprintf
test eax, eax
mov dword [esp + 0x24], eax
je 0x490402
mov dword [esp + 4], 0x5dc3d3
mov dword [esp], eax
call sym._fopen
test eax, eax
mov dword [esp + 0x20], eax
je 0x49056e
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x88
mov dword [esp + 4], 1
mov dword [esp], str._Netscape_HTTP_Cookie_File_n_https:__curl.haxx.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
call sym._fwrite
mov eax, dword [ebp + 0x408]
test eax, eax
jne 0x490639
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call sym._fclose
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sym._Curl_rename
test eax, eax
je 0x49038f
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sym._unlink
jmp 0x49056e
mov ebx, dword [esp + 0x60]
mov dword [esp], edi
call dword [0x5bcc2c]
cmp byte [esp + 0x2f], 0
jne 0x49038f
jmp 0x4905e6
shl eax, 2
mov dword [esp], 1
mov dword [esp + 4], eax
call dword [0x5bcc20]
test eax, eax
mov edi, eax
je 0x490562
mov byte [esp + 0x2f], 0
jmp 0x49048c