Function at 0x40cb30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43ee10
push 0x43809e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffffeb4
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov eax, dword [str.XX:XX:XX.XX]
mov dword [ebp - 0x40], eax
mov ecx, dword [0x43ee04]
mov dword [ebp - 0x3c], ecx
mov edx, dword [0x43ee08]
mov dword [ebp - 0x38], edx
mov ax, word [0x43ee0c]
mov word [ebp - 0x34], ax
xor ecx, ecx
mov byte [ebp - 0x32], cl
mov edx, dword [str.XX.XX.XX]
mov dword [ebp - 0x54], edx
mov eax, dword [0x43edf8]
mov dword [ebp - 0x50], eax
mov cl, byte [0x43edfc]
mov byte [ebp - 0x4c], cl
xor edx, edx
mov dword [ebp - 0x4b], edx
mov dword [ebp - 0x47], edx
mov word [ebp - 0x43], dx
mov byte [ebp - 0x41], dl
mov dword [ebp - 4], 0
push 0
push 0x80
push 4
push 0
push 0
push 0x40000000
push str.c:except.log
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x40cdd9
push 2
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x1e]
and edx, 0xffff
push edx
mov eax, dword [ebp - 0x20]
and eax, 0xffff
push eax
mov ecx, dword [ebp - 0x22]
and ecx, 0xffff
push ecx
mov edx, dword [ebp - 0x24]
and edx, 0xffff
push edx
push str._0.2u:_0.2u:_0.2u._0.3u
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
push ecx
mov edx, dword [ebp - 0x2a]
and edx, 0xffff
push edx
mov eax, dword [ebp - 0x26]
and eax, 0xffff
push eax
push str._0.2u._0.2u._0.2u
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push str._______________exception_log_opened________________________________________n_n
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
push 0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x54]
push ecx
push str.Date:_t_t_t_t_s_n
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x40]
push ecx
push str.Time:_t_t_t_t_s_n
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push str.V1.3
push str.version_of_exception_handler:_t_s_n_n
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea ecx, [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp + 8]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0x30]
push ecx
push 1
push 0x43ed24
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push str._______________exception_log_closed________________________________________n_n
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
push 0
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x11c]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
jmp 0x40ce0f
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret