Function at 0x6583a0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rbx
sub rsp, 0x1b0
mov rbp, rsp
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x148], rbp
mov qword [rbp + 0x1d0], rcx
nop
nop
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x170], rax
jmp 0x65840c
add qword [rbp + 0x170], 2
mov rax, qword [rbp + 0x170]
cmp word [rax], 0xd
je 0x658426
mov rax, qword [rbp + 0x170]
cmp word [rax], 0xa
jne 0x658404
mov rax, qword [rbp + 0x170]
mov word [rax], 0
add qword [rbp + 0x170], 2
jmp 0x658444
add qword [rbp + 0x170], 2
mov rax, qword [rbp + 0x170]
cmp word [rax], 0xd
je 0x65843c
mov rax, qword [rbp + 0x170]
cmp word [rax], 0xa
je 0x65843c
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x170]
call fcn.00413e30
mov rcx, qword [rbp + 0x140]
lea rdx, [rbp + 0x17c]
call fcn.00415790
mov dword [rbp + 0x1a4], eax
lea rcx, [rbp + 0x190]
call fcn.00411eb0
mov rbx, rax
lea rcx, [rbp + 0x188]
call fcn.00411eb0
mov rsi, rax
lea rcx, [rbp + 0x180]
call fcn.00411eb0
mov ecx, dword [rbp + 0x1a4]
lea rdx, [rbp + 0x1a0]
lea r8, [rbp + 0x19c]
mov r9, rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rax
call fcn.00658270
cmp dword [rbp + 0x1a0], 0
jne 0x658512
cmp dword [rbp + 0x19c], 0
jne 0x658512
cmp qword [rbp + 0x190], 0
jne 0x658512
cmp qword [rbp + 0x188], 0
jne 0x658512
cmp qword [rbp + 0x180], 0
jne 0x658512
xor rcx, rcx
call sub.kernel32.dll_ExitThread_1
mov rcx, qword [rbp + 0x1d0]
mov edx, 0x40000000
mov r8d, 1
xor r9, r9
mov dword [rsp + 0x20], 2
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileW_1
mov qword [rbp + 0x168], rax
cmp qword [rbp + 0x168], 0xffffffffffffffff
je 0x658856
mov rcx, qword [rbp + 0x168]
mov rdx, qword [0x00f25de8]
mov r8d, 2
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
lea rcx, [rbp + 0x40]
mov edx, dword [rbp + 0x1a0]
call fcn.00415770
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x40]
call fcn.00414000
mov rcx, qword [rbp + 0x158]
call fcn.004126e0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x158]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
lea rcx, [rbp + 0x40]
mov edx, dword [rbp + 0x19c]
call fcn.00415770
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x40]
call fcn.00414000
mov rcx, qword [rbp + 0x158]
call fcn.004126e0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x158]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x190]
call fcn.00413d90
mov rcx, rax
call fcn.0046f3d0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x190]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x188]
call fcn.00413d90
mov rcx, rax
call fcn.0046f3d0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x188]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x180]
call fcn.00413d90
mov rcx, rax
call fcn.0046f3d0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x180]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
lea rcx, [rbp + 0x40]
mov edx, dword [rbp + 0x1a4]
call fcn.00415770
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x40]
call fcn.00414000
mov rcx, qword [rbp + 0x158]
call fcn.004126e0
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x158]
mov r8d, eax
add r8d, r8d
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
lea rdx, [0x00e29070]
mov r8d, 4
lea r9, [rbp + 0x164]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
mov rcx, qword [rbp + 0x168]
call sub.kernel32.dll_CloseHandle_1
jmp 0x658856
xor rcx, rcx
call sub.kernel32.dll_ExitThread_1
mov qword [rbp + 0x1a8], 0
nop
lea rcx, [rbp + 0x140]
call fcn.00411eb0
lea rcx, [rbp + 0x158]
call fcn.00411eb0
lea rcx, [rbp + 0x180]
mov edx, 3
call fcn.00411f90
mov rax, qword [rbp + 0x1a8]
lea rsp, [rbp + 0x1b0]
pop rbx
pop rsi
pop rbp
ret