Function at 0x563090
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x6c
push ebx
xor ebx, ebx
xor eax, eax
cmp esi, ebx
mov dword [esp + 0x18], ebx
je 0x56335d
mov edx, dword [esi]
push ebx
push ebx
xor ecx, ecx
push ecx
push eax
push esi
call dword [edx + 0x14]
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push 0x1c
lea edx, [esp + 0x5c]
push edx
push esi
call dword [eax + 0xc]
cmp eax, ebx
jl 0x56335d
lea eax, [esp + 4]
test eax, eax
je 0x5630da
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
cmp dword [esp + 4], ebx
jne 0x5630e9
xor eax, eax
pop ebx
add esp, 0x6c
ret 8
push ebp
push edi
mov edi, dword [esp + 0x7c]
lea edx, [esp + 0x18]
push edx
push 0x20657563
push edi
call fcn.00562bb0
mov ebp, eax
cmp ebp, ebx
jl 0x563359
push ebx
lea eax, [esp + 0x14]
push eax
push 4
lea ecx, [esp + 0x18]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x5632de
cmp dword [esp + 0xc], ebx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], ebx
jbe 0x563265
jmp 0x563140
cmp ebp, ebx
jl 0x563265
push ebx
push esi
call fcn.00562d50
cmp eax, ebx
jl 0x56335b
mov eax, dword [esi]
lea ecx, [esp + 0x24]
push ecx
push 0x1c
lea edx, [esp + 0x48]
push edx
push esi
call dword [eax + 0xc]
mov ebp, eax
cmp ebp, ebx
jne 0x563250
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x4c], ebx
jg 0x563248
mov eax, dword [esp + 0x48]
jl 0x5631a6
cmp eax, 0xffffffff
ja 0x563248
cmp dword [esp + 0x54], ebx
jg 0x563248
jl 0x5631bd
cmp dword [esp + 0x50], 0xffffffff
ja 0x563248
mov ecx, dword [esp + 0x44]
push ebx
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x34], eax
mov dword [esp + 0x44], eax
push 0x18
lea eax, [esp + 0x34]
push eax
push edi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x44], 0x61746164
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x5632de
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
add edx, ecx
cmp eax, ebx
mov dword [esp + 0x14], edx
jl 0x563224
jg 0x563217
cmp dword [esp + 0x50], ebx
jb 0x563224
mov edx, dword [esp + 0x80]
mov dword [edx], 1
mov ecx, dword [esp + 0x58]
cmp ecx, ebx
je 0x563250
mov eax, dword [esp + 0x80]
push ebx
mov dword [eax], 1
mov edx, dword [esi]
push 1
xor eax, eax
push eax
push ecx
push esi
call dword [edx + 0x14]
jmp 0x563250
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
inc eax
cmp eax, ecx
mov dword [esp + 0x1c], eax
jb 0x563140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push edi
call fcn.00562c00
mov ebp, eax
cmp dword [esp + 0x20], ebx
je 0x563359
mov edx, dword [esi]
push ebx
push ebx
xor ecx, ecx
push ecx
xor eax, eax
push eax
push esi
call dword [edx + 0x14]
mov eax, dword [esi]
lea ecx, [esp + 0x80]
push ecx
push 0x1c
lea edx, [esp + 0x64]
push edx
push esi
call dword [eax + 0xc]
mov ebp, eax
cmp ebp, ebx
jl 0x563359
lea eax, [esp + 0x18]
push eax
push 0x31306673
push edi
call fcn.00562bb0
cmp eax, ebx
jl 0x56335b
push ebx
lea ecx, [esp + 0x14]
push ecx
push 4
lea edx, [esp + 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x5632ec
pop edi
pop ebp
mov eax, 0x8004e009
pop ebx
add esp, 0x6c
ret 8
mov eax, dword [esp + 0xc]
test eax, eax
mov edi, dword [esp + 0x10]
jbe 0x563349
push 0
push esi
call fcn.00562d50
test eax, eax
jl 0x56335b
mov eax, dword [esi]
lea ecx, [esp + 0x24]
push ecx
push 0x1c
lea edx, [esp + 0x64]
push edx
push esi
call dword [eax + 0xc]
test eax, eax
jl 0x563364
cmp dword [esp + 0x24], 0x1c
jne 0x563364
mov edx, dword [esp + 0x7c]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x60]
push ecx
push esi
push edx
call fcn.00562e60
test eax, eax
jl 0x56335b
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
add edi, edx
inc ebx
cmp ebx, eax
jb 0x5632f8
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x7c]
push edi
push eax
push ecx
call fcn.00562c00
mov eax, ebp
pop edi
pop ebp
pop ebx
add esp, 0x6c
ret 8
pop edi
pop ebp
mov eax, 0x8004e008
pop ebx
add esp, 0x6c
ret 8