Function at 0x4659d0
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x5f3008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x44], eax
push ebx
mov word [ebp - 0x3c], 0xfeff
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x465a99
push eax
push 0x80
push 2
push eax
push eax
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x465a7f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x7d0
mov esi, eax
call fcn.00560858
add esp, 4
mov edi, eax
push esi
push 0x857
push 0x5aabc8
push 0x5aa1dc
push 0x1f4
push edi
call fcn.00406c50
add esp, 0x18
push 0x30
push 0x591508
push edi
push dword [ebp - 0x44]
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
call fcn.00560853
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push 0
lea eax, [ebp - 0x40]
push eax
push 2
lea eax, [ebp - 0x3c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebx + 0x36560]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465ae3
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
jmp 0x465ae5
xor eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn0
push str.Setting
call edi
mov esi, dword [ebx + 0x36564]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465b53
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465b55
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn1
push str.Setting
call edi
mov esi, dword [ebx + 0x36568]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465bbd
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465bbf
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn2
push str.Setting
call edi
mov esi, dword [ebx + 0x3656c]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465c27
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465c29
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn3
push str.Setting
call edi
mov esi, dword [ebx + 0x36570]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465c91
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465c93
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn4
push str.Setting
call edi
mov esi, dword [ebx + 0x36574]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465cfb
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465cfd
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn5
push str.Setting
call edi
mov esi, dword [ebx + 0x36578]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465d65
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465d67
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn6
push str.Setting
call edi
mov esi, dword [ebx + 0x3657c]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x465dcf
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x465dd1
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.AdjustAccesslogColumn7
push str.Setting
call edi
push ebx
push 0
push 0
push 0
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4