Function at 0x14008cac0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov ebx, edx
mov rsi, rcx
mov rax, qword [0x14013aa80]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rdi, qword [rcx + 0x718]
mov edx, 2
mov r8d, 2
call fcn.140090f50
test rdi, rdi
je 0x14008ce1e
mov rdi, qword [rsi + 0x718]
mov r13, qword [rsi + 0xa58]
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
test r13, r13
je 0x14008ce1e
mov rcx, r13
call fcn.14008bf90
lea rcx, [0x140121b29]
mov rdx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov r14d, eax
test eax, eax
je 0x14008cb74
lea r8, [rsp + 0x78]
lea r9, [rsp + 0x70]
mov rcx, rsi
mov rdx, rdi
call fcn.1400bde00
test eax, eax
je 0x14008cb8c
mov r12d, eax
xor ebp, ebp
jmp 0x14008cddd
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
mov qword [rsp + 0x78], rax
mov bpl, 1
jmp 0x14008cb93
mov r9, qword [rsp + 0x78]
xor ebp, ebp
lea rcx, str._Netscape_HTTP_Cookie_File_n_https:__curl.se_docs_http_cookies.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
mov edx, 0x83
mov r8d, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
movsxd rdx, dword [r13 + 0x808]
test rdx, rdx
je 0x14008cd76
shl rdx, 3
mov ecx, 1
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12d, 0x1b
test rax, rax
je 0x14008cddd
mov r15, rax
mov dword [rsp + 0x64], r14d
mov qword [rsp + 0x68], rdi
xor eax, eax
xor r12d, r12d
jmp 0x14008cbfb
inc rax
cmp rax, 0x100
je 0x14008cc28
mov rcx, qword [r13 + rax*8]
jmp 0x14008cc13
mov rcx, qword [rcx]
test rcx, rcx
je 0x14008cbf0
cmp qword [rcx + 0x28], 0
je 0x14008cc10
mov qword [r15 + r12*8], rcx
inc r12
jmp 0x14008cc10
mov dword [rsp + 0x60], ebp
mov byte [rsp + 0x5f], bl
lea r9, [0x14008ce80]
mov r8d, 8
mov rcx, r15
mov rdx, r12
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
test r12, r12
je 0x14008cd5a
xor ebp, ebp
lea r13, [0x140122c0a]
lea rdi, str.FALSE
nop word cs:[rax + rax]
mov rax, qword [r15 + rbp*8]
movzx edx, byte [rax + 0x50]
mov r9, qword [rax + 0x28]
mov r8, r13
test dl, dl
je 0x14008cc9b
mov r8, r13
test r9, r9
je 0x14008cc9b
cmp byte [r9], 0x2e
mov r8, r13
je 0x14008cc9b
lea r8, [0x140121aca]
mov r10, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
test r9, r9
lea r11, [0x14011bd8d]
cmove r9, r11
test rcx, rcx
lea r11, [0x140120a79]
cmove rcx, r11
test r10, r10
cmove r10, r13
mov r11, rdi
test dl, dl
je 0x14008ccd4
lea r11, [0x14011f735]
cmp byte [rax + 0x51], 0
mov r14, rdi
je 0x14008cce4
lea r14, [0x14011f735]
cmp byte [rax + 0x53], 0
mov rdx, r13
je 0x14008ccf4
lea rdx, str.HttpOnly_
mov rbx, qword [rax + 8]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r11
lea rcx, str._s_s_s_t_s_t_s_t_s_t_I64d_t_s_t_s
call fcn.1400a8be0
test rax, rax
je 0x14008cdc5
mov r14, rax
mov rcx, qword [rsp + 0x78]
lea rdx, [0x140122654]
mov r8, rax
call fcn.1400a8c30
mov rcx, r14
call qword [0x140136438]
inc ebp
cmp r12, rbp
ja 0x14008cc70
mov rcx, r15
call qword [0x140136438]
movzx ebx, byte [rsp + 0x5f]
mov rdi, qword [rsp + 0x68]
mov ebp, dword [rsp + 0x60]
mov r14d, dword [rsp + 0x64]
test r14d, r14d
je 0x14008cdb8
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rsp + 0x78], 0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14008cdb8
mov rdx, rdi
call fcn.1400bdf50
test eax, eax
je 0x14008cdb8
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
mov r12d, reloc.WS2_32.dll_socket
jmp 0x14008cddd
mov rcx, qword [rsp + 0x70]
call qword [0x140136438]
jmp 0x14008ce1e
mov rcx, r15
call qword [0x140136438]
movzx ebx, byte [rsp + 0x5f]
mov ebp, dword [rsp + 0x60]
mov r12d, 0x1b
test bpl, bpl
jne 0x14008cdf2
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008cdf2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, qword [rsp + 0x70]
call qword [0x140136438]
mov ecx, r12d
call fcn.1400ba270
mov r8, qword [rsi + 0x718]
lea rdx, str.WARNING:_failed_to_save_cookies_in__s:__s
mov rcx, rsi
mov r9, rax
call fcn.1400791f0
test bl, bl
je 0x14008ce4e
mov rax, qword [rsi + 0xe8]
mov rcx, qword [rsi + 0xa58]
test rax, rax
je 0x14008ce3e
cmp rcx, qword [rax + 0xb8]
je 0x14008ce4e
call fcn.14008c1a0
mov qword [rsi + 0xa58], 0
mov rcx, rsi
mov edx, 2
call fcn.140090f90
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1400d2000
nop
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret