Function at 0x4333e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1068
call fcn.00460980
mov eax, dword [0x4a0270]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], 0x4913f8
mov dword [ebp - 0x1020], 0xc800000
lea eax, [ebp - 0x10]
push eax
call fcn.004336b0
add esp, 4
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.00433690
add esp, 4
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x7bb080]
cmp ecx, dword [eax + 8]
je 0x4334ff
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
mov dword [0x7bb080], ecx
mov dword [0x49edf0], 1
mov dword [0x49edec], 1
mov dword [0x7bb07c], 0
cmp dword [0x49ede8], 0xffffffff
je 0x433487
mov eax, dword [0x49ede8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x49ede8], 0xffffffff
mov dword [ebp - 0x1024], str.logs___s__04d__02d__02d__02d__05d.txt
mov eax, dword [0x49edec]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
add eax, 1
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x14]
add edx, 0x76c
push edx
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov ecx, dword [ebp - 0x1024]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x404
push edx
call fcn.0045ee9d
add esp, 0x20
push 0
push 0x20
push 4
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 8]
add eax, 0x404
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [0x49ede8], eax
cmp dword [0x49ede8], 0xffffffff
jne 0x43350f
xor eax, eax
jmp 0x433676
cmp dword [0x49edec], 0x1869f
jbe 0x433522
xor eax, eax
jmp 0x433676
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
push edx
push str.__02d:_02d___s_s
lea eax, [ebp - 0x1014]
push eax
call fcn.0045ee9d
add esp, 0x18
lea eax, [ebp - 0x1018]
push eax
push 0x1000
lea ecx, [ebp - 0x1014]
push ecx
call fcn.004336d0
push 0
lea eax, [ebp - 0x101c]
push eax
mov ecx, dword [ebp - 0x1018]
push ecx
lea edx, [ebp - 0x1014]
push edx
mov eax, dword [0x49ede8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [0x7bb07c]
add eax, dword [ebp - 0x1018]
mov dword [0x7bb07c], eax
cmp dword [0x7bb07c], 0xc800000
jb 0x433671
cmp dword [0x49ede8], 0xffffffff
je 0x4335c5
mov eax, dword [0x49ede8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x49ede8], 0xffffffff
mov eax, dword [0x49edec]
add eax, 1
mov dword [0x49edec], eax
cmp dword [0x49edec], 0x1869f
jbe 0x4335e5
xor eax, eax
jmp 0x433676
mov dword [0x49edf0], 1
mov dword [ebp - 0x1028], str.logs___s__04d__02d__02d__02d__05d.txt
mov eax, dword [0x49edec]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
add eax, 1
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x14]
add edx, 0x76c
push edx
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov ecx, dword [ebp - 0x1028]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x404
push edx
call fcn.0045ee9d
add esp, 0x20
push 0
push 0x20
push 4
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 8]
add eax, 0x404
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [0x49ede8], eax
mov dword [0x7bb07c], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045ee62
mov esp, ebp
pop ebp
ret 4