Function at 0x403d20
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x5c4]
sub esp, 0x5c4
push 0xffffffffffffffff
push 0x440aed
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x452040]
xor eax, ebp
mov dword [ebp + 0x5c0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea esi, [edi + 0x24c]
push esi
mov dword [ebp - 0x14], esi
call fcn.00408ae0
add esp, 4
test eax, eax
jne 0x404077
cmp dword [esi + 0x2c], 0x7fffffff
je 0x40407e
mov dword [ebp - 4], eax
cmp dword [edi + 0x248], eax
jne 0x404044
lea eax, [ebp]
mov dword [edi + 0x248], 0xffffffff
push eax
call fcn.00404800
mov byte [ebp - 4], 1
push str.Electronic_ArtsEA_DesktopLogs
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00401630
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp]
call fcn.00402450
push 1
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x238]
push 0x453728
push eax
call fcn.00404b20
add esp, 0x10
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x18]
call fcn.00402450
test bl, bl
je 0x404035
push 0x104
push 0x453a98
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
add eax, 0xffffffff
js 0x403e44
movzx ecx, word [eax*2 + 0x453a98]
cmp ecx, 0x5c
je 0x403fa2
cmp ecx, 0x2e
jne 0x403e3f
cmp eax, 0x104
jae 0x404088
xor ecx, ecx
mov word [eax*2 + 0x453a98], cx
sub eax, 1
jns 0x403e14
xor ecx, ecx
test ecx, ecx
mov eax, str.NULL
cmovne eax, ecx
push eax
lea eax, [ebp + 0x238]
push eax
push str._sIGOProxy__s.log
push 0x104
push edi
call fcn.00403590
add esp, 0x14
push 0
push 0x80
push 4
push 0
push 3
push 0xc0000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [edi + 0x248], eax
cmp eax, 0xffffffff
je 0x404044
push str.Process_Information_r_n
lea eax, [ebp + 0x440]
mov dword [ebp - 0x10], 0
push pe_nt_image_headers32
push eax
call fcn.00403480
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x10]
add esp, 0xc
push 0
push ecx
push eax
lea eax, [ebp + 0x440]
push eax
push dword [edi + 0x248]
call ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.____PID:__d_r_n
lea eax, [ebp + 0x440]
push pe_nt_image_headers32
push eax
call fcn.00403480
add esp, 0x10
lea ecx, [ebp - 0x10]
push 0
push ecx
push eax
lea eax, [ebp + 0x440]
push eax
push dword [edi + 0x248]
call ebx
push 0x104
lea eax, [ebp + 0x30]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x30]
push eax
push str.____EXE:__S_r_n
lea eax, [ebp + 0x440]
push pe_nt_image_headers32
push eax
call fcn.00403480
add esp, 0x10
lea ecx, [ebp - 0x10]
push 0
push ecx
push eax
lea eax, [ebp + 0x440]
push eax
push dword [edi + 0x248]
call ebx
lea eax, [ebp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x80
lea eax, [ebp + 0x540]
push eax
push str.ddd__MMM_dd_yyyy
lea eax, [ebp + 0x20]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
test eax, eax
jle 0x403fca
mov ecx, 0x80
sub ecx, eax
lea eax, [ebp + eax + 0x53f]
push ecx
push eax
push str.hh:mm:ss_tt
lea eax, [ebp + 0x20]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
jmp 0x403fd1
test eax, eax
js 0x403e44
cmp word [eax*2 + 0x453a98], 0x5c
jne 0x403fb6
inc eax
test eax, eax
js 0x403e44
lea ecx, [eax*2 + 0x453a98]
jmp 0x403e46
mov byte [ebp + 0x540], 0
lea eax, [ebp + 0x540]
push eax
push str.STARTED:__s_r_n
lea eax, [ebp + 0x440]
push pe_nt_image_headers32
push eax
call fcn.00403480
add esp, 0x10
lea ecx, [ebp - 0x10]
push 0
push ecx
push eax
lea eax, [ebp + 0x440]
push eax
push dword [edi + 0x248]
call ebx
call fcn.00405300
cmp dword [0x452014], 0xf
mov ecx, section..data
cmova ecx, dword [section..data]
push ecx
push 0x274
push str.C:packagesIGOProxydev_774277_sourceHelpers.cpp
push eax
call fcn.004052c0
add esp, 0x10
jmp 0x404044
xor eax, eax
mov dword [edi + 0x248], 0xffffffff
mov word [edi], ax
mov dword [ebp - 4], 0xffffffff
push esi
call fcn.00408af1
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x5c0]
xor ecx, ebp
call fcn.00421ea0
lea esp, [ebp + 0x5c4]
pop ebp
ret
push 5
call fcn.004090bb
dec dword [esi + 0x2c]
push 6
call fcn.004090bb
call fcn.00421ce5
int3