Function at 0x456fc0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x305c
call fcn.00468360
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x1008], ax
push 0xffe
push 0
lea ecx, [ebp - 0x1006]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x4e9ef8
call fcn.004684f8
add esp, 4
test eax, eax
jne 0x457029
push 0x104
push 0x4e9ef8
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x4e9ef8
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [0x4e9ef4], eax
cmp dword [0x4ce634], 0
je 0x4571ea
cmp dword [0x4e9ef0], 0
jne 0x45707f
push 0x4be3a8
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4e9ef0], eax
cmp dword [0x4e9ef0], 0
jne 0x45707f
push 0
push 0x4be3bc
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4e9ef0], eax
cmp dword [0x4e9ef0], 0
jne 0x45707f
mov dword [0x4e9ef0], 0xffffffff
cmp dword [0x4e9ef0], 0xffffffff
je 0x4571ea
xor edx, edx
mov word [ebp - 0x1fc0], dx
push 0xf9e
push 0
lea eax, [ebp - 0x1fbe]
push eax
call fcn.00467d60
add esp, 0xc
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x1020], ecx
mov edx, dword [ebp - 0x1020]
push edx
mov eax, dword [ebp + 8]
push eax
push 0x7d0
lea ecx, [ebp - 0x1fc0]
push ecx
call fcn.0046d320
add esp, 0x10
mov dword [ebp - 0x1020], 0
lea edx, [ebp - 0x1fc0]
push edx
mov eax, dword [0x4e9ef4]
push eax
push 0x4be3d0
push 0x800
lea ecx, [ebp - 0x1008]
push ecx
call fcn.00468336
add esp, 0x14
call fcn.004040e0
mov dword [ebp - 0x1fc4], eax
mov dword [ebp - 0x1018], 0
lea edx, [ebp - 0x1008]
mov dword [ebp - 0x101c], edx
cmp dword [ebp - 0x101c], 0
jne 0x457139
mov dword [ebp - 0x3054], 0
jmp 0x4571af
mov eax, dword [ebp - 0x101c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x100c], eax
cmp dword [ebp - 0x100c], 0x3fffffff
jle 0x457167
mov dword [ebp - 0x3058], 0
jmp 0x4571a3
mov eax, dword [ebp - 0x100c]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0x305c], esp
mov ecx, dword [ebp - 0x1fc4]
push ecx
mov edx, dword [ebp - 0x100c]
shl edx, 1
push edx
mov eax, dword [ebp - 0x101c]
push eax
mov ecx, dword [ebp - 0x305c]
push ecx
call fcn.00423510
mov dword [ebp - 0x3058], eax
mov edx, dword [ebp - 0x3058]
mov dword [ebp - 0x3054], edx
mov eax, dword [ebp - 0x3054]
mov dword [ebp - 0x1010], eax
lea ecx, [ebp - 0x1008]
push ecx
call fcn.004684f8
add esp, 4
add eax, 1
mov dword [ebp - 0x1014], eax
lea edx, [ebp - 0x1018]
push edx
push 0
push 0x4a
mov eax, dword [0x4e9ef0]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4ce630], 0
je 0x45732f
cmp dword [0x4e9eec], 0
jne 0x457225
push 0
push 0x4be3e0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x4e9eec], eax
cmp dword [0x4e9eec], 0
jne 0x457225
mov dword [0x4e9eec], 0xffffffff
cmp dword [0x4e9eec], 0xffffffff
je 0x45732f
xor ecx, ecx
mov word [ebp - 0x20a8], cx
push 0xc6
push 0
lea edx, [ebp - 0x20a6]
push edx
call fcn.00467d60
add esp, 0xc
lea eax, [ebp - 0x1fe0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x64
lea ecx, [ebp - 0x20a8]
push ecx
push 0
lea edx, [ebp - 0x1fe0]
push edx
push inet_addr
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
xor eax, eax
mov word [ebp - 0x3048], ax
push 0xf9e
push 0
lea ecx, [ebp - 0x3046]
push ecx
call fcn.00467d60
add esp, 0xc
lea edx, [ebp + 0xc]
mov dword [ebp - 0x1fd0], edx
mov eax, dword [ebp - 0x1fd0]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x7d0
lea edx, [ebp - 0x3048]
push edx
call fcn.0046d320
add esp, 0x10
mov dword [ebp - 0x1fd0], 0
lea eax, [ebp - 0x3048]
push eax
mov ecx, dword [0x4e9ef4]
push ecx
lea edx, [ebp - 0x20a8]
push edx
push 0x4be3e8
push 0x800
lea eax, [ebp - 0x1008]
push eax
call fcn.00468336
add esp, 0x18
push 0x78
mov ecx, dword [0x4e9eec]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x1fcc], eax
lea edx, [ebp - 0x1008]
push edx
push 0
push 0x180
mov eax, dword [ebp - 0x1fcc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4e9ee8], 0
je 0x4573cf
push 0
push 0
push 4
push 0
push 0
push 0xc0000000
push 0x4be400
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x304c], eax
cmp dword [ebp - 0x304c], 0xffffffff
je 0x4573cf
push 2
push 0
push 0
mov ecx, dword [ebp - 0x304c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea edx, [ebp - 0x3050]
push edx
lea eax, [ebp - 0x1008]
push eax
call fcn.004684f8
add esp, 4
push eax
lea ecx, [ebp - 0x1008]
push ecx
mov edx, dword [ebp - 0x304c]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x3050]
push eax
push 2
push 0x4be418
mov ecx, dword [ebp - 0x304c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x304c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esp, [ebp - 0x305c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00467d4f
mov esp, ebp
pop ebp
ret