Function at 0x4419d0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
cmp qword [rcx + 0xb50], 0
mov rbp, rcx
mov r12d, edx
je 0x441b1e
cmp qword [rcx + 0xe98], 0
je 0x441a03
call sym.Curl_cookie_loadfiles
mov r8d, 2
mov edx, 2
mov rcx, rbp
call sym.Curl_share_lock
mov rbx, qword [rbp + 0xeb0]
test rbx, rbx
je 0x441a95
mov rdi, qword [rbp + 0xb50]
mov rcx, rbx
lea rsi, [0x00484245]
mov qword [rsp + 0x30], rdi
call sym.remove_expired
mov ecx, 2
repe cmpsb byte [rsi], byte [rdi]
jne 0x441ae5
call qword [sym.imp.msvcrt.dll___iob_func]
lea rsi, [rax + 0x30]
lea rcx, str._Netscape_HTTP_Cookie_File_n_https:__curl.haxx.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
mov r8d, 0x88
mov edx, 1
mov r9, rsi
call sym.fwrite
movsxd rax, dword [rbx + 0x80c]
test eax, eax
jne 0x441b56
mov r15, qword [0x0048e0e0]
mov qword [rsp + 0x28], 0
mov rcx, qword [rsp + 0x28]
call qword [r15]
test r12b, r12b
je 0x441ac6
mov rax, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xeb0]
test rax, rax
je 0x441ab6
cmp rcx, qword [rax + 0xa8]
je 0x441ac6
call sym.Curl_cookie_cleanup
mov qword [rbp + 0xeb0], 0
mov edx, 2
mov rcx, rbp
call sym.Curl_share_unlock
nop
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [rsp + 0x40]
mov r8d, 9
mov rcx, rbp
mov rdx, rsi
call sym.Curl_rand_hex
test eax, eax
je 0x441c59
mov r8, qword [rbp + 0xb50]
lea rdx, str.WARNING:_failed_to_save_cookies_in__s_n
mov rcx, rbp
call sym.Curl_infof
jmp 0x441a95
test dl, dl
je 0x441b3e
mov rcx, qword [rcx + 0xe98]
test rcx, rcx
je 0x441b3e
call sym.curl_slist_free_all
mov qword [rbp + 0xe98], 0
mov r8d, 2
mov edx, 2
mov rcx, rbp
call sym.Curl_share_lock
jmp 0x441a95
lea rdx, [rax*8]
mov rax, qword [0x0048e0d0]
mov ecx, 1
call qword [rax]
test rax, rax
mov r14, rax
mov qword [rsp + 0x28], 0
je 0x441d06
mov byte [rsp + 0x3f], 1
lea rdx, [rbx + 0x800]
xor r13d, r13d
mov rax, qword [rbx]
test rax, rax
je 0x441bb7
nop dword [rax + rax]
cmp qword [rax + 0x28], 0
je 0x441baf
mov qword [r14 + r13*8], rax
add r13, 1
mov rax, qword [rax]
test rax, rax
jne 0x441ba0
add rbx, 8
cmp rbx, rdx
jne 0x441b90
lea r9, [sym.cookie_sort_ct]
mov r8d, 8
mov rdx, r13
mov rcx, r14
call sym.qsort
test r13, r13
je 0x441cec
xor ebx, ebx
xor eax, eax
mov r15, qword [0x0048e0e0]
jmp 0x441c17
lea rdx, [0x0048432f]
mov r8, rax
mov rcx, rsi
call sym.curl_mfprintf
mov rcx, rdi
call qword [r15]
lea eax, [rbx + 1]
cmp rax, r13
mov rbx, rax
jae 0x441cf3
mov rcx, qword [r14 + rax*8]
call sym.get_netscape_format
test rax, rax
mov rdi, rax
jne 0x441bf0
lea rdx, str._n_Fatal_libcurl_error_n
mov rcx, rsi
call sym.curl_mfprintf
mov rcx, r14
call qword [r15]
cmp byte [rsp + 0x3f], 0
jne 0x441c4c
mov rcx, rsi
call sym.fclose
mov rcx, qword [rsp + 0x28]
call qword [r15]
jmp 0x441b03
mov rdx, qword [rsp + 0x30]
lea rcx, str._s._s.tmp
mov r8, rsi
call sym.curl_maprintf
test rax, rax
mov qword [rsp + 0x28], rax
je 0x441b03
lea rdx, [0x00484313]
mov rcx, rax
call sym.curlx_win32_fopen
test rax, rax
mov rsi, rax
je 0x441d06
lea rcx, str._Netscape_HTTP_Cookie_File_n_https:__curl.haxx.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
mov r9, rax
mov r8d, 0x88
mov edx, 1
call sym.fwrite
movsxd rax, dword [rbx + 0x80c]
test eax, eax
jne 0x441d12
mov r15, qword [0x0048e0e0]
mov rcx, rsi
call sym.fclose
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
call sym.Curl_rename
test eax, eax
je 0x441a8d
mov rcx, qword [rsp + 0x28]
call sym.unlink
jmp 0x441c4c
mov r15, qword [0x0048e0e0]
mov rcx, r14
call qword [r15]
cmp byte [rsp + 0x3f], 0
jne 0x441a8d
jmp 0x441cbe
mov r15, qword [0x0048e0e0]
jmp 0x441c4c
lea rdx, [rax*8]
mov rax, qword [0x0048e0d0]
mov ecx, 1
call qword [rax]
test rax, rax
mov r14, rax
mov r15, qword [0x0048e0e0]
je 0x441c44
mov byte [rsp + 0x3f], 0
jmp 0x441b86