Function at 0x4674d0
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x5f3008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [0x616724]
push esi
push edi
push ebx
mov dword [ebp - 0x44], eax
mov word [ebp - 0x3c], 0xfeff
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46759d
push eax
push 0x80
push 2
push eax
push eax
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x467583
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x7d0
mov esi, eax
call fcn.00560858
add esp, 4
mov edi, eax
push esi
push 0x860
push 0x5aabc8
push 0x5aa1dc
push 0x1f4
push edi
call fcn.00406c50
add esp, 0x18
push 0x30
push 0x591508
push edi
push dword [ebp - 0x44]
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
call fcn.00560853
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push 0
lea eax, [ebp - 0x40]
push eax
push 2
lea eax, [ebp - 0x3c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebx + 0x36600]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x4675e7
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
jmp 0x4675e9
xor eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.Group2Id
push str.Folder
call edi
mov esi, dword [ebx + 0x36604]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x467657
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x467659
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.Group2Id2
push str.Folder
call edi
mov esi, dword [ebx + 0x36608]
lea eax, [ebp - 0x18]
push esi
push 0x5a9ffc
push 0xa
push eax
call fcn.00406c50
sar esi, 0x1f
xor edx, edx
and esi, 1
mov ecx, eax
add esi, 9
add esp, 0x10
sub ecx, esi
cmp eax, esi
cmovl ecx, edx
cmp ecx, eax
jge 0x4676c1
sub eax, ecx
lea esi, [ebp - 0x18]
lea esi, [esi + ecx*2]
mov ecx, eax
shr ecx, 1
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x4676c3
xor eax, eax
xor ecx, ecx
push ebx
mov word [ebp + eax*2 - 0x38], cx
lea eax, [ebp - 0x38]
push eax
push str.Display2Seq
push str.Folder
call edi
push ebx
push 0
push 0
push 0
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4