Function at 0x493a80
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10ac
call fcn.004d8ef0
mov eax, dword [0x556358]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
push edi
push 0x206
lea eax, [ebp - 0x682]
push 0
push eax
call fcn.004e0850
movups xmm0, xmmword [0x5444f8]
add esp, 0xc
lea eax, [ebp - 0x1094]
movups xmmword [ebp - 0x684], xmm0
push 0x800
push 0
push eax
call fcn.004e0850
add esp, 0xc
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x47c]
push str._scdbus.log
push eax
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0x88c]
push 0x208
push 0
push eax
call fcn.004e0850
add esp, 0xc
lea eax, [ebp - 0x274]
push 0x208
push 0
push eax
call fcn.004e0850
add esp, 0xc
lea eax, [ebp - 0x274]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x274]
push 0x5c
push eax
call fcn.004e05d0
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x47c]
push eax
call esi
test eax, eax
je 0x493d31
lea ecx, [ebp - 0x274]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x493b64
sub ecx, edx
lea edx, [ebp - 0x272]
sar ecx, 1
lea ecx, [edx + ecx*2]
lea edx, [ebp - 0x88c]
sub edx, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x493b84
lea eax, [ebp - 0x88c]
push eax
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x47c]
push str._s_s.txt
push eax
call fcn.00403350
lea eax, [ebp + 0xc]
push eax
push 0
push dword [ebp + 8]
lea eax, [ebp - 0x1094]
push 0x3ff
push eax
call fcn.00493e00
xor eax, eax
add esp, 0x24
mov word [ebp - 0x896], ax
xor edi, edi
lea eax, [ebp - 0x47c]
push eax
call esi
test eax, eax
mov ecx, 1
lea eax, [ebp - 0x47c]
push 0x54451c
push eax
cmovne edi, ecx
call fcn.004e7eed
mov esi, eax
add esp, 8
test esi, esi
je 0x493d31
test edi, edi
jne 0x493c2e
push esi
push 2
lea eax, [ebp - 0x109c]
mov dword [ebp - 0x109c], 0xfeff
push 1
push eax
call fcn.004e3e79
add esp, 0x10
lea eax, [ebp - 0x10ac]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x5c
lea eax, [ebp - 0x6c]
push 0
push eax
call fcn.004e0850
movzx eax, word [ebp - 0x109e]
add esp, 0xc
push eax
movzx eax, word [ebp - 0x10a0]
push eax
movzx eax, word [ebp - 0x10a2]
push eax
movzx eax, word [ebp - 0x10a4]
push eax
movzx eax, word [ebp - 0x10a6]
push eax
movzx eax, word [ebp - 0x10aa]
push eax
movzx eax, word [ebp - 0x10ac]
push eax
lea eax, [ebp - 0x6c]
push str._4d__02d__02d__02d:_02d:_02d._03d
push eax
call fcn.00403350
lea ecx, [ebp - 0x6c]
add esp, 0x24
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x493ca0
sub ecx, edx
sar ecx, 1
push esi
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x6c]
push 1
push eax
call fcn.004e3e79
lea ecx, [ebp - 0x1094]
add esp, 0x10
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x493cd0
sub ecx, edx
sar ecx, 1
push esi
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x1094]
push 1
push eax
call fcn.004e3e79
push esi
push 2
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x1098], 0xd
push 1
push eax
call fcn.004e3e79
push esi
push 2
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x1098], 0xa
push 1
push eax
call fcn.004e3e79
push esi
call fcn.004e4093
add esp, 0x34
mov ecx, dword [ebp - 8]
pop edi
xor ecx, ebp
pop esi
call fcn.004d7fbc
mov esp, ebp
pop ebp
ret