Function at 0x140005d70
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov rbx, rdx
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp - 0x48]
call fcn.14000bdd0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140012240
mov r14, rax
lea rax, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp - 0x80], rax
lea r12, vtable.CVolObject.0
mov qword [rbp - 0x80], r12
xor r15d, r15d
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], r15
lea r13, vtable.CVolMem.0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], 0x40
mov qword [rbp - 0x80], r13
mov rdi, qword [0x140269678]
test rdi, rdi
jne 0x140005e32
cmp qword [0x1402696a8], rdi
jne 0x140005e22
lea rdi, [0x14022f9b0]
jmp 0x140005e32
mov rdi, qword [0x140269698]
test rdi, rdi
je 0x140005ee5
movzx ecx, word [rdi]
test cx, cx
je 0x140005ee5
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x140005e45
add rbx, rbx
mov rax, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x58]
sub rax, rsi
cmp rax, rbx
jl 0x140005ea2
cmp rbx, 2
jne 0x140005e76
mov rax, qword [rbp - 0x68]
mov word [rsi + rax], cx
add qword [rbp - 0x58], rbx
jmp 0x140005ee5
cmp rbx, 4
jne 0x140005e8b
mov ecx, dword [rdi]
mov rax, qword [rbp - 0x68]
mov dword [rsi + rax], ecx
add qword [rbp - 0x58], rbx
jmp 0x140005ee5
cmp rbx, 8
jne 0x140005ea2
mov rcx, qword [rdi]
mov rax, qword [rbp - 0x68]
mov qword [rsi + rax], rcx
add qword [rbp - 0x58], rbx
jmp 0x140005ee5
test rbx, rbx
jle 0x140005ee5
lea rdx, [rbx + rsi]
cmp rdx, rsi
jne 0x140005eb6
mov rax, qword [rbp - 0x68]
jmp 0x140005ed5
test rdx, rdx
jne 0x140005ecc
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r15
mov rax, r15
jmp 0x140005ed5
lea rcx, [rbp - 0x80]
call fcn.140010990
lea rcx, [rax + rsi]
mov r8, rbx
mov rdx, rdi
call fcn.1401b0750
nop
mov rcx, qword [r14 + 0x18]
mov rbx, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x68]
mov rax, rbx
test rcx, rcx
jne 0x140005f11
cmp qword [r14 + 0x48], rcx
jne 0x140005f08
lea rcx, [0x14022f9b0]
jmp 0x140005f11
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x140005f4c
cmp word [rcx], 0
je 0x140005f4c
test rax, rax
js 0x140005f4c
lea rdx, [0x140234614]
call fcn.1401ba238
mov rsi, rax
test rax, rax
je 0x140005f4c
mov r9, rax
mov r8, rbx
mov edx, 1
mov rcx, rdi
call fcn.1401b83d0
mov rcx, rsi
call fcn.1401b50f0
nop
mov qword [rbp - 0x80], r13
mov rdx, qword [rbp - 0x68]
test rdx, rdx
je 0x140005f64
lea rcx, [rbp - 0x80]
mov rax, qword [rbp - 0x80]
call qword [rax + 0x18]
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x80], r12
lea rax, [rbp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x30], r13
mov rdx, qword [rbp + 0x48]
test rdx, rdx
je 0x140005f97
lea rcx, [rbp + 0x30]
mov rax, qword [rbp + 0x30]
call qword [rax + 0x18]
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x10], r12
lea rax, [rbp - 0x28]
mov qword [rbp + 0x230], rax
mov qword [rbp - 0x28], r13
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x140005fce
lea rcx, [rbp - 0x28]
mov rax, qword [rbp - 0x28]
call qword [rax + 0x18]
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp - 8], r15
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x48], r12
lea r8, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp + 0x170], r8
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], r15
mov qword [rbp + 0x180], r15
lea rdx, vtable.CWString.0
mov qword [rbp + 0x170], rdx
lea rax, [rbp + 0x190]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x190], r8
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], r15
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x190], r13
mov qword [rbp + 0x1a8], r15
mov qword [rbp + 0x1b8], r15
mov qword [rbp + 0x1b0], r15
mov qword [rbp + 0x1c0], 0x40
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x1c0], 0xfe
lea rcx, vtable.CWConstString.0
mov qword [rbp + 0x170], rcx
lea r9, [0x14022f9b0]
mov qword [rbp + 0x188], r9
mov qword [rbp + 0x10], r8
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x10], rdx
lea rax, [rbp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x60], 0x40
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x60], 0xfe
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x28], r9
mov qword [rbp - 0x48], r8
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x48], rdx
lea rax, [rbp - 0x28]
mov qword [rbp + 0x230], rax
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp - 8], r15
mov qword [rbp + 8], 0x40
mov qword [rbp - 0x30], r15
mov qword [rbp + 8], 0xfe
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x30], r9
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], 0x40
mov qword [rbp + 0x118], r8
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r15
mov qword [rbp + 0x118], rdx
lea rax, [rbp + 0x138]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x138], r8
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], r15
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x158], r15
mov qword [rbp + 0x168], 0x40
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x168], 0xfe
mov qword [rbp + 0x118], rcx
mov qword [rbp + 0x130], r9
mov qword [rbp + 0xc0], r8
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xc0], rdx
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0xe0], r8
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x108], r15
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x110], 0x40
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0x110], 0xfe
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xd8], r9
mov qword [rbp + 0x68], r8
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x68], rdx
lea rax, [rbp + 0x88]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x88], r8
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], r15
mov qword [rbp + 0x88], r13
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb8], 0x40
mov qword [rbp + 0x80], r15
mov qword [rbp + 0xb8], 0xfe
mov qword [rbp + 0x68], rcx
lea rax, str.http:__222.2.2.24_upload_data
mov qword [rbp + 0x80], rax
or qword [rbp - 0x78], 1
lea rax, [rbp - 0x48]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x1c8]
call fcn.140003ba0
mov qword [rbp + 0x1c8], r13
mov rdx, qword [rbp + 0x1e0]
test rdx, rdx
je 0x140006384
lea rcx, [rbp + 0x1c8]
mov rax, qword [rbp + 0x1c8]
call qword [rax + 0x18]
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1e8], r15
mov qword [rbp + 0x1c8], r12
lea rax, [rbp + 0x88]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x88], r13
mov rdx, qword [rbp + 0xa0]
test rdx, rdx
je 0x1400063d2
lea rcx, [rbp + 0x88]
mov rax, qword [rbp + 0x88]
call qword [rax + 0x18]
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x68], r12
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0xe0], r13
mov rdx, qword [rbp + 0xf8]
test rdx, rdx
je 0x140006424
lea rcx, [rbp + 0xe0]
mov rax, qword [rbp + 0xe0]
call qword [rax + 0x18]
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x108], r15
mov qword [rbp + 0x100], r15
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xc0], r12
lea rax, [rbp + 0x138]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x138], r13
mov rdx, qword [rbp + 0x150]
test rdx, rdx
je 0x140006479
lea rcx, [rbp + 0x138]
mov rax, qword [rbp + 0x138]
call qword [rax + 0x18]
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x158], r15
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x118], r12
mov qword [rbp - 0x80], r13
mov rdx, qword [rbp - 0x68]
test rdx, rdx
je 0x1400064b4
lea rcx, [rbp - 0x80]
mov rax, qword [rbp - 0x80]
call qword [rax + 0x18]
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x80], r12
lea rax, [rbp - 0x28]
mov qword [rbp + 0x230], rax
mov qword [rbp - 0x28], r13
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x1400064e7
lea rcx, [rbp - 0x28]
mov rax, qword [rbp - 0x28]
call qword [rax + 0x18]
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp - 8], r15
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x48], r12
lea rax, [rbp + 0x30]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x30], r13
mov rdx, qword [rbp + 0x48]
test rdx, rdx
je 0x14000651e
lea rcx, [rbp + 0x30]
mov rax, qword [rbp + 0x30]
call qword [rax + 0x18]
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x10], r12
lea rax, [rbp + 0x190]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x190], r13
mov rdx, qword [rbp + 0x1a8]
test rdx, rdx
je 0x140006565
lea rcx, [rbp + 0x190]
mov r8, qword [rbp + 0x190]
call qword [r8 + 0x18]
mov qword [rbp + 0x1a8], r15
mov qword [rbp + 0x1b8], r15
mov qword [rbp + 0x1b0], r15
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x170], r12
mov eax, 1
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret