Function at 0x58a5ab
Capabilities:
Write file on windows

Disassembly:
push 0x1c8
mov eax, 0x5e2e13
call fcn.00523519
mov eax, dword [ebp + 8]
mov dword [ebp - 0x150], eax
xor esi, esi
xor ebx, ebx
inc esi
push ebx
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 4], esi
call fcn.004cb9f4
push ebx
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x114], 7
call fcn.00410c09
lea eax, [ebp - 0x17c]
push ebx
push eax
mov byte [ebp - 4], 3
call fcn.004c1b34
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004acb45
push eax
lea ecx, [ebp - 0x12c]
call fcn.00410d6e
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 3
call fcn.004ac66a
push str..._tempTeamViewerVersion4_
lea ecx, [ebp - 0x12c]
call fcn.0040153d
cmp dword [ebp - 0x114], 8
mov eax, dword [ebp - 0x128]
jae 0x58a64b
lea eax, [ebp - 0x128]
push ebx
push eax
call dword [0x71f61c]
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x12c]
call fcn.00401f2c
push 0x6a4720
sub esp, 0x1c
lea eax, [ebp - 0x12c]
mov ecx, esp
mov dword [ebp - 0x14c], esp
push eax
call fcn.0041186e
lea eax, [ebp - 0x148]
push eax
call fcn.004adf6c
add esp, 0x20
cmp dword [eax + 0x18], 0x10
jb 0x58a69b
mov eax, dword [eax + 4]
jmp 0x58a69e
add eax, 4
push eax
call fcn.00521145
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x148]
mov edi, eax
call fcn.004108b7
cmp edi, ebx
je 0x58a8b0
push edi
push dword [ebp + 0x3c]
lea eax, [ebp + 0x28]
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14c], esp
push eax
call fcn.0041186e
lea eax, [ebp - 0x198]
push eax
call fcn.004adf6c
add esp, 0x20
cmp dword [eax + 0x18], 0x10
jb 0x58a6f0
mov eax, dword [eax + 4]
jmp 0x58a6f3
add eax, 4
push eax
call fcn.0052007a
add esp, 0x10
push ebx
push esi
lea ecx, [ebp - 0x198]
call fcn.004108b7
push edi
call fcn.0051ec62
pop ecx
push edi
call fcn.0051ed30
cmp byte [0x722275], bl
pop ecx
je 0x58a87e
lea eax, [ebp - 0x14c]
push eax
call fcn.004c6191
cmp dword [ebp - 0x14c], ebx
pop ecx
je 0x58a8b0
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x178]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x198]
push eax
mov dword [ebp - 0x178], 0x20
call fcn.004c74a1
cmp dword [eax + 0x18], 8
pop ecx
jb 0x58a76b
mov ecx, dword [eax + 4]
jmp 0x58a76e
lea ecx, [eax + 4]
lea edx, [ebp - 0x110]
movzx eax, word [ecx]
inc ecx
mov word [edx], ax
inc ecx
inc edx
inc edx
cmp ax, bx
jne 0x58a774
push ebx
push esi
lea ecx, [ebp - 0x198]
call fcn.00410779
lea eax, [ebp - 0x110]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x178]
push eax
push dword [ebp - 0x14c]
mov dword [ebp - 0x150], ebx
call fcn.004ca86a
add esp, 0xc
push str.mshta.exe__
lea ecx, [ebp - 0x148]
call fcn.004120e9
mov byte [ebp - 4], 5
cmp dword [ebp - 0x114], 8
mov eax, dword [ebp - 0x128]
jae 0x58a7e7
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x148]
call fcn.0040153d
push 0x69eab0
lea ecx, [ebp - 0x148]
call fcn.0040153d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x154], esp
push 0x69dd8c
call fcn.004120e9
mov byte [ebp - 4], 6
cmp dword [ebp - 0x130], 8
mov eax, dword [ebp - 0x144]
jae 0x58a831
lea eax, [ebp - 0x144]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x158], esp
push eax
call fcn.004120e9
push dword [ebp - 0x14c]
mov byte [ebp - 4], 5
call fcn.004c6eb0
add esp, 0x3c
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x14c]
call fcn.004ca889
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x148]
call fcn.00410779
jmp 0x58a8b0
cmp dword [ebp - 0x114], 8
mov eax, dword [ebp - 0x128]
jae 0x58a893
lea eax, [ebp - 0x128]
push 5
push ebx
push 0x69dd8c
push eax
mov eax, dword [ebp - 0x150]
push 0x69eb74
push dword [eax + 4]
call dword [0x71f6e4]
push ebx
push esi
lea ecx, [ebp - 0x12c]
call fcn.00410779
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 1
call fcn.004cbcf8
push ebx
push esi
lea ecx, [ebp + 0xc]
call fcn.00410779
push ebx
push esi
lea ecx, [ebp + 0x28]
call fcn.00410779
call fcn.0052359c
ret 0x3c