Function at 0x4147a0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
mov eax, 0x30b0
call fcn.00442670
mov eax, dword [0x484004]
xor eax, esp
mov dword [esp + 0x30a8], eax
mov eax, dword [edi + 0x10cc07c]
mov ecx, dword [edi + 0x10cc080]
mov edx, dword [ecx + 0xe0]
mov ecx, dword [ecx + 0xe4]
push ebx
mov ebx, dword [eax + 0xe0]
mov eax, dword [eax + 0xe4]
cmp eax, ecx
push ebp
push esi
lea ebp, [edi + 0x10969f8]
jg 0x414801
jl 0x4147ef
cmp ebx, edx
jae 0x414801
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
jmp 0x41481d
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x18], edx
mov dword [esp + 0x34], eax
mov ebx, edx
mov edx, dword [esp + 0x30]
mov ecx, eax
mov eax, dword [esp + 0x1c]
cmp ebx, edx
jne 0x414829
cmp eax, ecx
je 0x41500e
xor esi, esi
sub edx, ebx
sbb ecx, eax
mov eax, dword [edi + 0x10cc078]
mov dword [esp + 0x20], edx
mov dl, byte [eax + 0x781c]
mov dword [esp + 0x24], ecx
fild qword [esp + 0x20]
mov ecx, dword [eax + 0x34]
push 0x477f94
mov dword [esp + 0x50], esi
fstp qword [esp + 0x94]
mov dword [esp + 0x30], esi
mov esi, dword [0x488ae8]
fldz
push 0x477f88
fstp qword [esp + 0x78]
push esi
mov dword [esp + 0x70], ecx
mov byte [esp + 0x1f], dl
call fcn.0043bf85
mov eax, dword [esi]
add esp, 0xc
push ebx
push ebx
push str._int_xL
push str._s_d__x__n
push eax
call fcn.0043c301
mov ecx, dword [esi]
add esp, 0x14
push ecx
call fcn.0043c6cc
fld qword [edi + 0x83568]
mov esi, dword [0x488ae8]
fstp qword [esp + 0x54]
add esp, 4
push 0x477f94
push 0x477f88
push esi
call fcn.0043bf85
fld qword [esp + 0x5c]
mov edx, dword [esi]
fstp qword [esp + 4]
add esp, 4
push str.getleftT__
push str._s_lf_n
push edx
call fcn.0043c301
mov eax, dword [esi]
add esp, 0x14
push eax
call fcn.0043c6cc
mov ecx, dword [0x489b08]
mov edx, dword [0x488a6c]
add esp, 4
push 0x100
shl ecx, 9
add ecx, 0x488b08
push ecx
push 0xd4
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
mov eax, dword [0x489b08]
lea ecx, [eax + 1]
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x414929
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [edi + 0x1097a10]
shl eax, 9
add eax, 0x488b08
push eax
push 2
push 0x400
push edx
mov dword [0x489b08], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push str..alf
push ebp
call fcn.0043d6ad
add esp, 8
test eax, eax
jne 0x414aa9
push str..ALF
push ebp
call fcn.0043d6ad
add esp, 8
test eax, eax
jne 0x414aa9
push 0x478520
lea ecx, [esp + 0x40]
push ebp
push ecx
mov dword [esp + 0x44], eax
call fcn.0043d179
mov edx, dword [edi + 0x10cc078]
add esp, 0xc
test byte [edx + 0x7818], 8
je 0x414b0b
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x58]
movzx esi, word [esp + 0x80]
push 0
push 0x472ab0
push ebp
push 0
sub esi, edx
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 8
fld qword [edi + 0x10cbf40]
fstp qword [esp]
push str.chs32d.wmin
call fcn.0040f8b0
mov eax, dword [edi + 0x10cc078]
push 0
push 0
push 3
push 0
push 0
add eax, 0x48
push SysReAllocStringLen
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x414a85
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0xa0]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileTime]
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [esp + 0x58]
add eax, esi
cdq
mov ecx, 0x18
idiv ecx
movzx ecx, word [esp + 0x5a]
push ebp
mov eax, edx
shl eax, 4
sub eax, edx
lea eax, [ecx + eax*4]
mov edx, eax
shl edx, 4
sub edx, eax
movzx eax, word [esp + 0x60]
lea ecx, [eax + edx*4]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
fstp qword [esp + 0x74]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Frequency_hZ_
push str._16s
lea edx, [esp + 0xb8]
push 0x1000
push edx
call fcn.0043d25e
add esp, 0x10
jmp 0x414b6a
mov esi, dword [edi + 0x10cc078]
push 0
push 0
push 0
push 1
push ebp
mov dword [esp + 0x4c], 1
call fcn.00403170
push 0
push 0x20
push 3
push 0
push 0
push 0x40000000
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x2c], eax
jne 0x414af9
mov eax, dword [edi + 0x1097a10]
push 0x64
push 1
push 0x400
push eax
jmp 0x414ffe
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x414be1
cmp dword [edi + 0x1097600], 1
jne 0x414b33
push str.From_Begin_mks_
push str._16s
lea eax, [esp + 0xb8]
push 0x1000
push eax
call fcn.0043d25e
add esp, 0x10
cmp dword [edi + 0x1097600], 0
jne 0x414b6a
push str.mks
push str.UnixSecond
push str.Time
push str.Date
push str._7s__8s__10s___7s
lea ecx, [esp + 0xc4]
push 0x1000
push ecx
call fcn.0043d25e
add esp, 0x1c
mov edx, dword [edi + 0x10cc078]
xor esi, esi
cmp dword [edx + 0x2c], esi
jle 0x414bc7
lea ebp, [edi + 0x10971f8]
cmp dword [ebp], 0
je 0x414bb6
lea eax, [esp + 0xb0]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x414b90
lea ecx, [esi + 1]
push ecx
sub eax, edx
push str.____Chan__04d
lea edx, [esp + eax + 0xb8]
push 0x10
push edx
call fcn.0043d25e
add esp, 0x10
mov eax, dword [edi + 0x10cc078]
add esi, 1
add ebp, 4
cmp esi, dword [eax + 0x2c]
jl 0x414b7d
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0xb0]
push ecx
push 0x477f98
push edx
call fcn.0043c301
add esp, 0xc
mov ebp, dword [esp + 0x1c]
mov eax, ebp
cmp eax, dword [esp + 0x34]
mov esi, ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ebp
jg 0x414fb4
jl 0x414c14
cmp ebx, dword [esp + 0x30]
jae 0x414fb4
jmp 0x414c14
mov ebx, dword [esp + 0x18]
mov ecx, esi
sub ecx, ebx
mov edx, ebp
sbb edx, dword [esp + 0x1c]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
fild qword [esp + 0x78]
fst qword [esp + 0x40]
fld qword [esp + 0x90]
fdivr st(1)
fmul qword [0x479598]
call fcn.00441de0
mov ebx, eax
cmp ebx, dword [esp + 0x4c]
je 0x414c69
mov eax, dword [edi + 0x1097a10]
fstp st(0)
push ebx
push 1
push 0x400
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
fld qword [esp + 0x40]
mov dword [esp + 0x4c], ebx
cmp dword [esp + 0x38], 0
jne 0x414f1d
cmp dword [edi + 0x1097600], 1
jne 0x414ccd
mov ecx, dword [edi + 0x10cc078]
fld dword [ecx + 0x4ff0]
fdivr qword [0x479568]
fmulp st(1)
fld st(0)
call fcn.00441e16
push 0
push 0xa
push edx
push eax
call fcn.00454d40
fdiv qword [0x4795b0]
push edx
push eax
sub esp, 8
lea edx, [esp + 0x10c0]
fstp qword [esp]
push str._14.0lf__1d
push 0x1000
push edx
call fcn.0043d25e
add esp, 0x1c
jmp 0x414ccf
fstp st(0)
cmp dword [edi + 0x1097600], 0
jne 0x414e31
mov eax, dword [edi + 0x10cc078]
test byte [eax + 0x7818], 8
je 0x414d85
mov ebx, dword [0x488ae8]
push 0x477f94
push 0x477f88
push ebx
call fcn.0043bf85
mov eax, dword [ebx]
add esp, 0xc
push esi
push esi
push str._int_i
push str._s_d__x__n
push eax
call fcn.0043c301
mov ecx, dword [ebx]
add esp, 0x14
push ecx
call fcn.0043c6cc
mov edx, dword [edi + 0x10cc078]
fld dword [edx + 0x4ff0]
add esp, 4
fdivr qword [0x479568]
fild qword [esp + 0x20]
fmulp st(1)
fdiv qword [0x479690]
fadd qword [esp + 0x70]
call fcn.00441e16
push 0
push 0x64
push edx
push eax
call fcn.004625b0
push ecx
push eax
push str._13d___02d
lea eax, [esp + 0x10bc]
push 0x1000
mov dword [esp + 0x54], ebx
push eax
mov dword [esp + 0x58], edx
call fcn.0043d25e
add esp, 0x14
jmp 0x414e31
fld dword [eax + 0x4ff0]
fdivr qword [0x4795d0]
call fcn.00441e16
push ebp
push esi
push edx
push eax
call fcn.00441ea0
mov ecx, dword [edi + 0x1095eb8]
sub ecx, eax
mov eax, dword [edi + 0x1095ebc]
sbb eax, edx
push eax
mov edx, eax
mov dword [esp + 0x58], eax
push ecx
lea eax, [esp + 0x70]
push eax
sar edx, 0x1f
mov dword [esp + 0x5c], ecx
call fcn.004012c0
lea ebx, [edi + 0x1095ec8]
push ebx
lea ecx, [esp + 0x54]
push ecx
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov edx, dword [esp + 0x68]
movzx eax, word [edi + 0x1095ed4]
movzx ecx, word [edi + 0x1095ed2]
push edx
movzx edx, word [edi + 0x1095ed0]
push ebp
push eax
movzx eax, word [ebx]
push ecx
movzx ecx, word [edi + 0x1095eca]
push edx
movzx edx, word [edi + 0x1095ece]
sub eax, 0x7d0
push eax
push ecx
push edx
push str._02d._02d._02d__2d:_02d:_02d__10d__6d
lea eax, [esp + 0x10d4]
push 0x1000
push eax
call fcn.0043d25e
mov ebp, dword [esp + 0x50]
add esp, 0x2c
mov ecx, dword [edi + 0x10cc078]
xor ebx, ebx
cmp dword [ecx + 0x2c], ebx
jle 0x414f01
lea edx, [edi + 0x10971f8]
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x14]
cmp dword [eax], 0
je 0x414eea
lea eax, [esp + 0x10b0]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x414e63
mov ecx, dword [esp + 0x24]
sub eax, edx
push ecx
mov ecx, dword [edi + 0x10cc078]
lea ebp, [esp + eax + 0x10b4]
push esi
mov eax, ebx
call fcn.00402de0
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
sub esp, 0xc
fst qword [esp + 4]
fstp dword [esp]
call fcn.00411270
push eax
lea edx, [esp + 0x20bc]
push 0x1000
push edx
call fcn.0043d25e
add esp, 0x14
lea eax, [esp + 0x20b0]
push 0x2e
push eax
call fcn.0043d7a0
add esp, 8
test eax, eax
je 0x414ece
mov byte [eax], 0x2c
lea ecx, [esp + 0x20b0]
push ecx
push str._12s
push 0xd
push ebp
call fcn.0043d25e
mov ebp, dword [esp + 0x34]
add esp, 0x10
mov edx, dword [edi + 0x10cc078]
add dword [esp + 0x14], 4
add ebx, 1
cmp ebx, dword [edx + 0x2c]
jl 0x414e4c
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x10b0]
push eax
push 0x477f98
push ecx
call fcn.0043c484
add esp, 0xc
jmp 0x414f8c
mov edx, dword [edi + 0x10cc078]
fstp st(0)
xor ebx, ebx
cmp dword [edx + 0x2c], ebx
jle 0x414f8c
lea esp, [esp]
cmp byte [esp + 0x13], 0
je 0x414f4f
mov eax, ebx
cdq
idiv dword [esp + 0x64]
mov edx, 1
mov ecx, eax
mov al, byte [esp + 0x13]
shl edx, cl
test al, dl
je 0x414f7e
mov ecx, dword [edi + 0x10cc078]
push ebp
push esi
mov eax, ebx
call fcn.00402de0
fstp dword [esp + 0x6c]
mov eax, dword [esp + 0x2c]
push 0
lea ecx, [esp + 0x90]
push ecx
push 4
lea edx, [esp + 0x78]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [edi + 0x10cc078]
add ebx, 1
cmp ebx, dword [ecx + 0x2c]
jl 0x414f30
add esi, 1
adc ebp, 0
cmp ebp, dword [esp + 0x34]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ebp
jl 0x414c10
jg 0x414fb0
cmp esi, dword [esp + 0x30]
jb 0x414c10
mov ebx, dword [esp + 0x18]
cmp dword [esp + 0x38], 0
je 0x414fd7
mov edx, dword [esp + 0x1c]
push edx
push ebx
mov ebx, dword [esp + 0x34]
mov ecx, edi
call fcn.00417030
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x414fe4
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0043c6cc
add esp, 4
mov edx, dword [edi + 0x1097a10]
push 0x64
push 1
push 0x400
mov dword [edi + 0x1097a30], 1
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi + 0x1097a10], 0
mov ecx, dword [esp + 0x30b4]
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0043b563
add esp, 0x30b0
ret