Function at 0x467ab0
Capabilities:
Get graphical window text
Write file on windows

Disassembly:
sub esp, 0xad8
mov eax, dword [0x4bacc0]
xor eax, esp
mov dword [esp + 0xad4], eax
push esi
push edi
push 0x4c
lea eax, [esp + 0x14]
push 0
push eax
call fcn.00481440
mov ecx, dword [0x4fcf38]
mov dword [esp + 0x20], ecx
mov ecx, 0xb
mov esi, str.Log_Files__.log_.logAll_Files__._.
lea edi, [esp + 0x4e8]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
add esp, 0xc
cmp byte [esp + 0x4dc], cl
mov dword [esp + 0x10], 0x4c
je 0x467b2f
lea eax, [esp + 0x4dc]
mov edi, edi
cmp byte [eax], 0x7c
jne 0x467b18
mov byte [eax], 0
add ecx, 1
movzx eax, cx
cmp byte [esp + eax + 0x4dc], 0
lea eax, [esp + eax + 0x4dc]
jne 0x467b10
lea ecx, [esp + 0x10]
lea edx, [esp + 0x4dc]
lea eax, [esp + 0x8dc]
push ecx
mov dword [esp + 0x20], edx
mov byte [esp + 0x8e0], 0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], 0x100
mov dword [esp + 0x50], 0x4a1e64
mov dword [esp + 0x48], 0x80806
call dword [sym.imp.comdlg32.dll_GetSaveFileNameA]
test eax, eax
je 0x467e55
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov edx, dword [0x4fcf38]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
call fcn.00432430
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea eax, [esp + 0x8f4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 8], esi
je 0x467e55
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [esp + 0x10]
push ecx
push 2
push 0x4a1894
push esi
call edi
test eax, eax
je 0x467e3a
mov eax, dword [0x4fcf38]
push 0x400
lea edx, [esp + 0xe0]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [esp + 0xdc]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x467c11
push 0
lea ecx, [esp + 0x10]
push ecx
sub eax, edx
push eax
lea edx, [esp + 0xe8]
push edx
push esi
call edi
test eax, eax
je 0x467e3a
push 0
lea eax, [esp + 0x10]
push eax
push 4
push str._r_n_r_n
push esi
call edi
test eax, eax
je 0x467e3a
push ebx
push ebp
mov ebp, dword [0x4bf980]
movzx eax, word [ebp]
cmp ax, 0xffff
je 0x467e1d
test ax, ax
je 0x467e1d
lea ecx, [esp + 0x4e4]
push ecx
lea edx, [esp + 0x68]
push edx
push ebp
movzx esi, ax
call fcn.00467390
add esp, 0xc
cmp si, 0x76c
jbe 0x467caa
mov eax, dword [str.__Error]
mov ecx, dword [0x4a1e60]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], ecx
jmp 0x467ce6
cmp si, 0x708
jbe 0x467ccc
mov edx, dword [str.Warning]
mov eax, dword [0x4a1e30]
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], eax
jmp 0x467ce6
mov ecx, dword [str.___Info]
mov edx, dword [0x4a1e58]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], edx
lea edi, [esp + 0xe4]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x467cf0
mov ebx, dword [0x49e590]
lea eax, [esp + 0x64]
mov dword [edi], ebx
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x467d08
lea edi, [esp + 0xe4]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
nop
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x467d20
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xe4]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x467d42
lea eax, [esp + 0x4e4]
mov dword [edi], ebx
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x467d57
lea edi, [esp + 0xe4]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov edi, edi
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x467d70
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0xe4]
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x467d92
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
sub eax, edx
lea ecx, [esp + 0x18]
push ecx
push eax
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0xf0]
push edx
push eax
call esi
test eax, eax
je 0x467e34
mov edx, dword [esp + 0x10]
push 0
lea ecx, [esp + 0x18]
push ecx
push 2
push 0x4a1894
push edx
call esi
test eax, eax
je 0x467e34
push 0
add ebp, 6
push ebp
call fcn.00481160
add eax, 1
push 0
push eax
call fcn.00481160
add eax, 1
push 0
push eax
call fcn.00481160
add eax, 1
push 0
push eax
call fcn.00481160
mov esi, dword [esp + 0x30]
add eax, 1
mov ebp, eax
movzx eax, word [ebp]
add esp, 0x20
cmp ax, 0xffff
jne 0x467c66
push 0
lea eax, [esp + 0x18]
push eax
push 2
push 0x4a1894
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x467e38
mov esi, dword [esp + 0x10]
pop ebp
pop ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [esp + 0xadc]
pop edi
pop esi
xor ecx, esp
call fcn.004810ab
add esp, 0xad8
ret