Function at 0x180058ca0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
movzx ebx, byte [rbp + 0x6f]
lea r15d, [rdx - 0xe]
mov r14, r8
mov rsi, rcx
cmp edx, r15d
jbe case.0x180058d13.0
mov r13d, dword [rbp + 0x6f]
lea edi, [rdx - 0xda]
mov r12d, dword [rbp + 0x6f]
lea rdx, [0x180000000]
mov r8d, 0x6573
mov r9d, 0x646e
mov r10d, 0x18
nop word [rax + rax]
cmp edi, 0x14
ja case.0x180058d13.7
mov ecx, dword [rdx + rdi*4 + 0x59004]
add rcx, rdx
jmp rcx
movsd xmm0, qword [str.2.dl]
lea rdx, [0x1800aa7c4]
movzx eax, word [0x1800b0930]
lea rcx, [rbp - 9]
movsd qword [rbp + 1], xmm0
mov word [rbp + 9], ax
call qword [sym.imp.KERNEL32.dll_lstrcatW]
xor eax, eax
lea r9, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 9]
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xbd
call fcn.1800282f0
mov qword [rbp + 0xf], rax
jmp 0x180058fb7
mov eax, dword [rbp + 0x6f]
lea rcx, [rbp - 0x39]
mov r9, qword [r14]
mov edx, 1
mov byte [rbp - 0x3f], al
sar eax, 8
mov byte [rbp - 0x3e], al
mov word [rbp - 0x41], 1
lea r8d, [rdx + 0xd]
mov r9, qword [r9 + 0x18]
call fcn.18007be3c
cmp rax, 0xe
je 0x180058fb7
mov rax, qword [rsi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x25
mov rcx, qword [rsi]
mov rax, qword [rcx]
call qword [rax]
jmp 0x180058fb7
mov dword [rbp - 0x29], 0x646e6573
jmp case.0x180058d13.7
mov rcx, qword [rsi]
mov word [rbp - 0x49], reloc.oledlg.dll_OleUIChangeSourceA
movzx eax, byte [rcx + 0x88]
mov byte [rbp - 0x45], al
movzx eax, byte [rcx + 0x89]
mov byte [rbp - 0x44], al
movzx eax, byte [rcx + 0x8c]
mov byte [rbp - 0x43], al
movzx eax, byte [rcx + 0x8d]
mov byte [rbp - 0x42], al
jmp case.0x180058d13.7
mov ecx, dword [rbp + 0x7f]
mov eax, r13d
sar eax, 8
mov byte [rbp - 0x36], al
mov eax, r13d
sar eax, 0x10
mov byte [rbp - 0x35], al
mov eax, r13d
sar eax, 0x18
mov byte [rbp - 0x34], al
mov eax, ecx
sar eax, 8
mov byte [rbp - 0x2e], al
mov eax, ecx
sar eax, 0x10
mov byte [rbp - 0x2d], al
mov eax, ecx
sar eax, 0x18
mov byte [rbp - 0x2c], al
mov byte [rbp - 0x38], 0x4d
mov byte [rbp - 0x37], r13b
mov byte [rbp - 0x2f], cl
jmp case.0x180058d13.7
xor eax, eax
mov byte [rbp - 0x39], 0x42
mov qword [rbp - 0x49], rax
mov dword [rbp - 0x41], eax
jmp case.0x180058d13.7
mov eax, dword [0x1800b0934]
lea rdx, [rbp - 5]
mov r8d, 0xa
mov dword [rbp - 9], eax
movzx eax, word [0x1800b0938]
mov byte [rbp - 0x25], 0
mov word [rbp - 5], ax
lea ecx, [r8 - 8]
call fcn.180077a4c
mov dword [rbp - 3], 0x5f
jmp 0x180058fb7
mov rax, qword [rsi]
mov rcx, qword [r14]
mov r13d, dword [rax + 0x8c]
imul r13d, dword [rcx + 0x44]
add r13d, dword [rbp + 0x7f]
xor eax, eax
mov qword [rbp - 0x39], rax
mov dword [rbp - 0x31], eax
mov word [rbp - 0x2d], ax
jmp case.0x180058d13.7
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x180058ebc
mov rdx, qword [r14]
mov r8d, dword [r14 + 0x10]
xor r9d, r9d
mov rcx, qword [rsi]
call qword [rbp + 0xf]
mov dword [rbp - 0x11], eax
jmp 0x180058fb7
mov rax, qword [rsi]
cmp dword [rax + 0x40], 2
jne 0x180058f08
mov eax, dword [rax + 0x6c]
mov ecx, 8
test eax, eax
cmove ecx, r10d
neg eax
mov dword [rbp + 0x6f], ecx
sbb r12d, r12d
and r12d, 0x100
lea eax, [r12 + 0xd]
lea eax, [r12 + rax*2]
mov dword [rbp + 0x7f], eax
jmp case.0x180058d13.7
mov r12d, 0x100
mov dword [rbp + 0x6f], 8
lea eax, [r12 + 0xd]
lea eax, [r12 + rax*2]
mov dword [rbp + 0x7f], eax
jmp case.0x180058d13.7
mov r9, qword [r14]
lea rcx, [rbp - 0x49]
mov edx, 1
mov r9, qword [r9 + 0x18]
lea r8d, [rdx + 0xb]
call fcn.18007be3c
cmp rax, 0xc
je 0x180058f5a
mov rax, qword [rsi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x25
mov rcx, qword [rsi]
mov rax, qword [rcx]
call qword [rax]
test r12d, r12d
jle 0x180058fb7
mov rax, qword [r14]
lea r9, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
lea rdx, [rbp + 0x1f]
mov rax, qword [rsi]
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x17], rax
mov r8d, 0x38
lea rax, [rbp - 0x21]
mov dword [rbp - 0x21], 3
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x19], r12d
call fcn.180011aa0
jmp 0x180058fb7
cmp dword [rbp - 0x11], 0xffffffff
je 0x180058fff
mov bl, 1
jmp case.0x180058d13.7
mov r8d, 0xa
lea rdx, [rbp - 1]
lea ecx, [r8 - 7]
call fcn.180077a4c
mov r10d, 0x18
lea rdx, [0x180000000]
mov r9d, 0x646e
mov r8d, 0x6573
dec edi
lea eax, [rdi + 0xda]
cmp eax, r15d
ja 0x180058d00
movzx eax, bl
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor al, al
jmp 0x180058fe4