Function at 0x140003990
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x480
mov rdi, rcx
call fcn.1400038b8
xor ebx, ebx
cmp eax, ebx
je 0x140003b21
mov eax, dword [rdi + 0x18]
lea rcx, [rbx - 1]
lea esi, [rbx + 1]
add eax, esi
movsxd rdx, eax
lea eax, [rbx + 8]
mul rdx
cmovo rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp dword [rdi + 0x18], ebx
mov r12d, ebx
mov r13, rax
mov r8d, ebx
jle 0x140003a16
mov rcx, rbx
mov rdx, rax
mov rax, qword [rdi + 0x240]
cmp dword [rcx + rax + 0x54], ebx
je 0x140003a06
mov rax, qword [rcx + rax + 0x60]
add r12d, esi
mov qword [rdx], rax
add rdx, 8
add r8d, esi
add rcx, 0xa0
cmp r8d, dword [rdi + 0x18]
jl 0x1400039ea
cmp r12d, ebx
jle 0x140003b12
lea rcx, [rsp + 0x30]
mov ebp, ebx
mov qword [rsp + 0x78], rbx
call fcn.1400106b4
cmp eax, ebx
je 0x140003b10
cmp qword [rsp + 0x30], rbx
mov qword [rsp + 0x4b8], rbx
je 0x140003b10
lea rcx, [rdi + 0x258]
lea rdx, [rsp + 0x4b8]
call qword [rsp + 0x30]
mov rcx, qword [rsp + 0x4b8]
cmp rcx, rbx
je 0x140003b10
movsxd r12, r12d
mov rdi, rbx
cmp r12, rbx
jle 0x140003b05
lea rcx, [rsp + 0x81]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x80], bl
call sub.msvcrt.dll_memset
mov r8, qword [r13 + rdi*8]
lea rdx, str.DELETE_FROM_moz_cookies_WHERE_id___I64d
lea rcx, [rsp + 0x80]
call sub.msvcrt.dll_sprintf
cmp qword [rsp + 0x70], rbx
mov qword [rsp + 0x4c0], rbx
je 0x140003aeb
mov rcx, qword [rsp + 0x4b8]
lea rax, [rsp + 0x4c0]
lea rdx, [rsp + 0x80]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [rsp + 0x70]
jmp 0x140003af0
mov eax, 0xffff
cmp eax, ebx
cmove ebp, esi
add rdi, rsi
cmp rdi, r12
jl 0x140003a7e
mov rcx, qword [rsp + 0x4b8]
cmp qword [rsp + 0x68], rbx
je 0x140003b10
call qword [rsp + 0x68]
mov ebx, ebp
mov rcx, r13
call fcn.140010a4c
mov eax, ebx
jmp 0x140003c20
lea rcx, [rdi + 0x258]
xor edx, edx
call fcn.1400060ec
or rcx, 0xffffffffffffffff
cmp rax, rcx
mov qword [rdi + 0x368], rax
je 0x140003c1e
mov r8d, dword [rdi + 0x360]
cmp r8d, ebx
jle 0x140003b7a
mov rcx, qword [rdi + 0x250]
lea rdx, [0x14001178f]
lea r9, [rsp + 0x4b8]
cmp qword [rcx], rbx
mov qword [rsp + 0x20], rbx
cmovne rdx, qword [rcx]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [rdi + 0x18], ebx
mov r12d, ebx
mov esi, 1
jle 0x140003c06
mov rbp, rbx
mov rdx, qword [rdi + 0x240]
cmp dword [rdx + rbp + 0x54], ebx
jne 0x140003bf6
mov rax, qword [rdx + rbp + 0x98]
mov r8d, dword [rdx + rbp + 0x4c]
lea r9, [rsp + 0x4b8]
mov rcx, qword [rax + 0x250]
lea rax, [0x14001178f]
mov qword [rsp + 0x20], rbx
cmp qword [rcx], rbx
cmovne rax, qword [rcx]
sub r8d, dword [rdx + rbp + 0x48]
movsxd rdx, dword [rdx + rbp + 0x48]
mov rcx, qword [rdi + 0x368]
add rdx, rax
add r8d, esi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rdi + 0x368]
lea rdx, [rdi + 0x248]
call fcn.14000611c
add r12d, esi
add rbp, 0xa0
cmp r12d, dword [rdi + 0x18]
jl 0x140003b8a
mov rcx, qword [rdi + 0x368]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + 0x368], rbx
mov eax, esi
jmp 0x140003c20
xor eax, eax
mov rbx, qword [rsp + 0x4b0]
add rsp, 0x480
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret