Function at 0x56adc0
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2240
call fcn.00569440
mov eax, dword [0x62aa54]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x208
lea eax, [ebp - 0x414]
push edi
xor esi, esi
push esi
push eax
call fcn.0056f390
push str.C:log_
mov ebx, 0x104
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.005857c9
push 0x800
lea eax, [ebp - 0x1230]
push esi
push eax
call fcn.0056f390
push 0x5a0a54
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x61c]
push str._s_s.log
push eax
call fcn.0040610a
add esp, 0x34
call fcn.0042ad4e
test al, al
je 0x56ae51
loope 0x56ae92
or ah, byte [ebp - 0x4eb7ceae]
pop es
stc
popfd
test al, 0x69
pop ds
xor eax, edx
push edi
lea eax, [ebp - 0x824]
push esi
push eax
call fcn.0056f390
push edi
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.0056f390
add esp, 0x18
lea eax, [ebp - 0x20c]
push ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call fcn.00578706
pop ecx
test eax, eax
je 0x56b056
add byte [eax], al
lea eax, [ebp - 0x20c]
push 0x5c
push eax
call fcn.00571252
xor ecx, ecx
push 0x5a0a54
mov word [eax], cx
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xa2c]
push 0x5a0ac0
push eax
call fcn.0040610a
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0xa2c]
add esp, 0x18
push eax
call ebx
test eax, eax
je 0x56b056
lea eax, [ebp - 0x20c]
push eax
call fcn.00578706
lea ecx, [ebp - 0x20a]
lea eax, [ecx + eax*2]
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.005857c9
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x61c]
push str._s_s.txt
push eax
call fcn.0040610a
lea eax, [ebp + 0xc]
push eax
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push 0x3ff
push 0x400
push eax
call fcn.00413572
push esi
call fcn.0057a2fd
mov dword [ebp - 0x2240], eax
lea eax, [ebp - 0x2240]
push eax
mov dword [ebp - 0x223c], edx
call fcn.0057d151
add esp, 0x40
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test edi, edi
je 0x56b056
lea ecx, [ebp - 0x1230]
push ecx
push eax
push dword [edi]
mov eax, dword [edi + 0x10]
push dword [edi + 4]
inc eax
push dword [edi + 8]
push dword [edi + 0xc]
push eax
mov eax, dword [edi + 0x14]
add eax, 0x76c
push eax
lea eax, [ebp - 0x2230]
push str.__d__d__d__d__d__d___d_:_s
push eax
call fcn.0056ac70
xor eax, eax
add esp, 0x28
mov word [ebp - 0xa32], ax
lea eax, [ebp - 0x61c]
push eax
call ebx
xor ebx, ebx
inc ebx
test eax, eax
lea eax, [ebp - 0x61c]
push 0x5a36e8
push eax
cmovne esi, ebx
call fcn.00578999
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x56b056
test esi, esi
jne 0x56affc
push edi
push 2
lea eax, [ebp - 0x2238]
mov dword [ebp - 0x2238], 0xfeff
push ebx
push eax
call fcn.00578e7b
add esp, 0x10
lea eax, [ebp - 0x2230]
push eax
call fcn.00578706
push edi
add eax, eax
push eax
lea eax, [ebp - 0x2230]
push ebx
push eax
call fcn.00578e7b
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xd
push ebx
push eax
call fcn.00578e7b
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xa
push ebx
push eax
call fcn.00578e7b
push edi
call fcn.00578797
add esp, 0x38
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0056935c
mov esp, ebp
pop ebp
ret