Function at 0x56f2a3
Capabilities:
Write file on windows

Disassembly:
push 0x1b8
mov eax, 0x5fd56e
call fcn.005cb937
mov edi, ecx
lea eax, [ebp - 0x1a8]
xor ebx, ebx
push eax
mov dword [ebp - 4], ebx
call fcn.005c337e
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x19c], esp
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
call fcn.0054986d
sub esp, 0x14
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x198], esp
push str.TimeSave
call fcn.0040518c
mov ecx, edi
mov byte [ebp - 4], bl
call fcn.00567908
lea ecx, [ebp - 0x48]
mov esi, edi
call fcn.00567aad
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [edi + 0x20]
mov byte [ebp - 4], 2
call fcn.0040529a
push ebx
sub esp, 0x1c
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x198], esp
push eax
lea esi, [ebp - 0x198]
call fcn.004051ae
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0056ec11
sub esp, 0x1c
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x198], esp
push 0x641040
call fcn.0040518c
push 4
pop esi
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x19c], esp
push eax
call fcn.004051ae
mov edx, esi
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 3
call fcn.0056e9b3
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040529a
xor edi, edi
push ebx
inc edi
mov byte [ebp - 4], 3
push edi
lea ecx, [ebp - 0x1c4]
call fcn.004055c2
lea ecx, [ebp - 0x2c]
call fcn.0056ee55
cmp dword [ebp + 0x20], 0x10
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
jae 0x56f3e9
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0x190]
push ecx
push eax
call fcn.005b51bc
cmp eax, ebx
je 0x56f433
test byte [ebp - 0x170], 2
je 0x56f40a
xor byte [ebp - 0x170], 2
test byte [ebp - 0x170], 1
je 0x56f41a
xor byte [ebp - 0x170], 1
cmp dword [ebp + 0x20], 0x10
mov eax, dword [ebp + 0xc]
jae 0x56f426
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0x190]
push ecx
push eax
call fcn.005b5392
lea eax, [ebp + 8]
push eax
lea esi, [ebp - 0x64]
call fcn.0054ae6f
pop ecx
mov eax, esi
push ebx
push eax
mov byte [ebp - 4], 6
call fcn.00548f1f
pop ecx
pop ecx
test eax, eax
jne 0x56f484
push ebx
push edi
mov ecx, esi
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp + 8]
call fcn.004055c2
xor eax, eax
call fcn.005cb9ba
ret 0x1c
mov eax, dword [ebp + 0xc]
push 0x10
pop esi
mov dword [ebp - 0x194], ebx
cmp dword [ebp + 0x20], esi
jae 0x56f498
lea eax, [ebp + 0xc]
push 0x66a47c
push eax
lea eax, [ebp - 0x194]
push eax
call fcn.005c8fa1
add esp, 0xc
cmp dword [ebp - 0x194], ebx
jne 0x56f4e3
xor esi, esi
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.004055c2
push ebx
push edi
lea ecx, [ebp + 8]
call fcn.004055c2
mov eax, esi
jmp 0x56f47c
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x14], esi
jae 0x56f4ee
lea eax, [ebp - 0x28]
push dword [ebp - 0x194]
push dword [ebp - 0x18]
push edi
push eax
call fcn.005c9156
push dword [ebp - 0x194]
call fcn.005c924f
mov eax, dword [ebp + 0xc]
add esp, 0x14
cmp dword [ebp + 0x20], esi
jae 0x56f517
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0x190]
push ecx
push eax
call fcn.005b51bc
or byte [ebp - 0x170], 2
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x20], esi
jae 0x56f536
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0x190]
push ecx
push eax
call fcn.005b5392
mov esi, edi
jmp 0x56f4b7