Function at 0x424210
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [0x46900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x220], 0xffffffff
push 0x104
push 0
lea eax, [ebp - 0x108]
push eax
call fcn.0042c590
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x108]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.network.log
mov edx, 1
add edx, 0xb
push edx
push 0x5c
lea eax, [ebp - 0x108]
push eax
call fcn.0041a440
add esp, 8
add eax, 1
push eax
call fcn.00412930
push 0
push 0x80
push 4
push 0
push 1
push 0xc0000000
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x220], eax
push 2
push 0
push 0
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x210]
push ecx
movzx edx, word [ebp - 0x212]
push edx
movzx eax, word [ebp - 0x214]
push eax
movzx ecx, word [ebp - 0x216]
push ecx
movzx edx, word [ebp - 0x21a]
push edx
movzx eax, word [ebp - 0x21c]
push eax
push str._d__02d__02d__02d:_02d:_02d
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
call fcn.00412990
add esp, 0x24
lea edx, [ebp - 0x20c]
mov dword [ebp - 0x228], edx
mov eax, dword [ebp - 0x228]
add eax, 1
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x228]
mov dl, byte [ecx]
mov byte [ebp - 0x221], dl
add dword [ebp - 0x228], 1
cmp byte [ebp - 0x221], 0
jne 0x424328
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
push 0
push 0
mov ecx, dword [ebp - 0x234]
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x22c], 5
ja case.default.0x424393
mov edx, dword [ebp - 0x22c]
jmp dword [edx*4 + 0x424490]
push 0
push 0
push 0xc
push str._Send_Head:
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp case.default.0x424393
push 0
push 0
push 0x11
push str._Send_Plan_Text:
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp case.default.0x424393
push 0
push 0
push 0x13
push str._Send_Cipher_Text:
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp case.default.0x424393
push 0
push 0
push 0xf
push str._Receive_Head:
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp case.default.0x424393
push 0
push 0
push 0x14
push str._Receive_Plan_Text:
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp case.default.0x424393
push 0
push 0
push 0x16
push str._Receive_Cipher_Text:
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push 0
push 4
push str._r_n_r_n
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004291f2
mov esp, ebp
pop ebp
ret