Function at 0x41f592
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2240
call fcn.00434830
mov eax, dword [0x62b0b8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x208
lea eax, [ebp - 0x414]
push edi
xor esi, esi
push esi
push eax
call fcn.00445350
push str.C:log_
mov ebx, 0x104
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.0045328d
push 0x800
lea eax, [ebp - 0x1230]
push esi
push eax
call fcn.00445350
push 0x6207f4
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x61c]
push str._s_s.log
push eax
call fcn.0041f482
add esp, 0x34
call fcn.0043a8db
test al, al
je 0x41f623
cmpsb byte [esi], byte es:[edi]
pop ds
sub eax, 0x53fab055
jb 0x41f657
aad 0x5f
add al, dl
invalid
push edi
lea eax, [ebp - 0x824]
push esi
push eax
call fcn.00445350
push edi
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.00445350
add esp, 0x18
lea eax, [ebp - 0x20c]
push ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call fcn.004532f1
pop ecx
test eax, eax
je 0x41f828
lea eax, [ebp - 0x20c]
push 0x5c
push eax
call fcn.004454aa
xor ecx, ecx
push 0x6207f4
mov word [eax], cx
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xa2c]
push 0x5a5f0c
push eax
call fcn.0041f482
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0xa2c]
add esp, 0x18
push eax
call ebx
test eax, eax
je 0x41f828
lea eax, [ebp - 0x20c]
push eax
call fcn.004532f1
lea ecx, [ebp - 0x20a]
lea eax, [ecx + eax*2]
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.0045328d
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x61c]
push 0x5a5f2c
push eax
call fcn.0041f482
lea eax, [ebp + 0xc]
push eax
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push 0x3ff
push 0x400
push eax
call fcn.0041f839
push esi
call fcn.00448781
mov dword [ebp - 0x2240], eax
lea eax, [ebp - 0x2240]
push eax
mov dword [ebp - 0x223c], edx
call fcn.0045156f
add esp, 0x40
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test edi, edi
je 0x41f828
lea ecx, [ebp - 0x1230]
push ecx
push eax
push dword [edi]
mov eax, dword [edi + 0x10]
push dword [edi + 4]
inc eax
push dword [edi + 8]
push dword [edi + 0xc]
push eax
mov eax, dword [edi + 0x14]
add eax, 0x76c
push eax
lea eax, [ebp - 0x2230]
push str.__d__d__d__d__d__d___d_:_s
push eax
call fcn.0041f4a0
xor eax, eax
add esp, 0x28
mov word [ebp - 0xa32], ax
lea eax, [ebp - 0x61c]
push eax
call ebx
xor ebx, ebx
inc ebx
test eax, eax
lea eax, [ebp - 0x61c]
push 0x5a5f40
push eax
cmovne esi, ebx
call fcn.00451a69
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x41f828
test esi, esi
jne 0x41f7ce
push edi
push 2
lea eax, [ebp - 0x2238]
mov dword [ebp - 0x2238], 0xfeff
push ebx
push eax
call fcn.00453235
add esp, 0x10
lea eax, [ebp - 0x2230]
push eax
call fcn.004532f1
push edi
add eax, eax
push eax
lea eax, [ebp - 0x2230]
push ebx
push eax
call fcn.00453235
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xd
push ebx
push eax
call fcn.00453235
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xa
push ebx
push eax
call fcn.00453235
push edi
call fcn.00451867
add esp, 0x38
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00433ee3
mov esp, ebp
pop ebp
ret