Function at 0x4563b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61f126
mov eax, dword fs:[0]
push eax
sub esp, 0x85c
mov eax, dword [0x6f7654]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x18]
cmp eax, dword [0x6faa60]
jle 0x4563eb
jmp 0x45665d
cmp dword [ebp + 0x18], 2
jg 0x4563f6
call fcn.00456340
lea ecx, [ebp + 0x20]
mov dword [ebp - 0x418], ecx
mov byte [ebp - 0x81c], 0
push 0x3ff
push 0
lea edx, [ebp - 0x81b]
push edx
call fcn.005eb2a0
add esp, 0xc
mov eax, dword [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
push 0x3ff
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.005f02cb
add esp, 0x14
mov dword [ebp - 0x418], 0
cmp dword [0x6faa64], 0
jne 0x45645f
mov dword [ebp - 0x858], 0x6490cb
jmp 0x456468
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x858]
mov dword [ebp - 0x41c], ecx
mov byte [ebp - 0x414], 0
push 0x3ff
push 0
lea edx, [ebp - 0x413]
push edx
call fcn.005eb2a0
add esp, 0xc
lea eax, [ebp - 0x81c]
push eax
call fcn.005ea870
add esp, 4
test eax, eax
jbe 0x456553
lea ecx, [ebp - 0x81c]
push ecx
call fcn.005ea870
add esp, 4
movsx edx, byte [ebp + eax - 0x81d]
cmp edx, 0xa
jne 0x456553
lea eax, [ebp - 0x81c]
push eax
mov ecx, dword [ebp - 0x41c]
push ecx
lea edx, [ebp - 0x838]
push edx
call fcn.004561f0
add esp, 4
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x860], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x860]
call fcn.00403ab0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.00456100
add esp, 4
push eax
push 0x649300
push 0x3ff
push 0x400
lea edx, [ebp - 0x414]
push edx
call fcn.005edda9
add esp, 0x24
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x838]
call fcn.00402e00
jmp 0x4565d9
lea eax, [ebp - 0x81c]
push eax
mov ecx, dword [ebp - 0x41c]
push ecx
lea edx, [ebp - 0x854]
push edx
call fcn.004561f0
add esp, 4
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x868], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x868]
call fcn.00403ab0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.00456100
add esp, 4
push eax
push 0x649318
push 0x3ff
push 0x400
lea edx, [ebp - 0x414]
push edx
call fcn.005edda9
add esp, 0x24
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.00402e00
cmp dword [0x6faa58], 0
je 0x456617
mov eax, dword [0x6faa58]
push eax
lea ecx, [ebp - 0x414]
push ecx
call fcn.005ea870
add esp, 4
push eax
push 1
lea edx, [ebp - 0x414]
push edx
call fcn.005ee27f
add esp, 0x10
mov eax, dword [0x6faa58]
push eax
call fcn.005eefba
add esp, 4
cmp dword [0x6faa5c], 0
je 0x45665d
cmp dword [ebp + 0x18], 3
jg 0x45665d
mov ecx, dword [0x6faa5c]
push ecx
lea edx, [ebp - 0x414]
push edx
call fcn.005ea870
add esp, 4
push eax
push 1
lea eax, [ebp - 0x414]
push eax
call fcn.005ee27f
add esp, 0x10
mov ecx, dword [0x6faa5c]
push ecx
call fcn.005eefba
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005ea848
mov esp, ebp
pop ebp
ret