Function at 0x43e070
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x441296
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x45b660]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb0], ecx
call fcn.0043bad0
mov ecx, eax
call fcn.0043aa20
mov ecx, eax
call fcn.0043bd20
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x43e0c4
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax]
test ecx, ecx
jne 0x43e0c9
jmp 0x43e476
push 0
push 0
push 0
push 0
push str.ErrorLog
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x58]
call fcn.0043c1b0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.0043bbf0
movzx eax, al
test eax, eax
jne 0x43e155
lea ecx, [ebp - 0x70]
call fcn.0043d7c0
mov byte [ebp - 4], 1
push 0
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x58]
call fcn.0043c7e0
movzx edx, al
test edx, edx
jne 0x43e141
lea ecx, [ebp - 0x70]
call fcn.0043dad0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.0043d760
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0043bd40
jmp 0x43e476
lea ecx, [ebp - 0x58]
call fcn.0043bd80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.0043d760
push 0
call fcn.0043d7e0
add esp, 4
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
lea ecx, [ebp - 0x48]
call fcn.00439e20
mov byte [ebp - 4], 2
push str._Y__M__D
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x48]
call fcn.0043a460
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.00439a90
push eax
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x24]
call fcn.0043cb30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.0043bbf0
movzx eax, al
test eax, eax
jne 0x43e22b
lea ecx, [ebp - 0x78]
call fcn.0043d7c0
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0043c7e0
movzx edx, al
test edx, edx
jne 0x43e217
lea ecx, [ebp - 0x78]
call fcn.0043dad0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x78]
call fcn.0043d760
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call fcn.0043bd40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00439b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0043bd40
jmp 0x43e476
lea ecx, [ebp - 0x24]
call fcn.0043bd80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x78]
call fcn.0043d760
mov eax, dword [ebp - 0xb0]
mov byte [eax + 4], 0
push 0
push 0
push 0
push str..log
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x38]
call fcn.0043cb30
push 0
push 0x80
push 4
push 0
push 0
push 4
lea ecx, [ebp - 0x38]
call fcn.0043bd00
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x43e27c
jmp 0x43e43e
push 0x10000000
push 1
mov eax, dword [ebp - 0x10]
push eax
call fcn.00439800
add esp, 0xc
push 1
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00439750
add esp, 8
push 2
push 0
push 0
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffff
jne 0x43e2bb
jmp 0x43e43e
cmp dword [ebp - 0x68], 0
jne 0x43e305
mov byte [ebp - 0x80], 0xff
mov byte [ebp - 0x7f], 0xfe
mov dword [ebp - 0x7c], 2
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x7c]
je 0x43e305
jmp 0x43e43e
lea ecx, [ebp - 0x94]
call fcn.00439e20
push 0x450dbc
push 0x450dc4
push 1
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0xb0]
call fcn.0043df10
lea ecx, [ebp - 0xac]
call fcn.00439e20
push 0x450dc8
push 0
call fcn.0043d7e0
add esp, 4
push edx
push eax
lea ecx, [ebp - 0xac]
call fcn.0043a460
push 0x450df8
lea ecx, [ebp - 0x94]
call fcn.00439a90
push eax
push 0x450df4
lea ecx, [ebp - 0xac]
call fcn.00439f80
mov ecx, eax
call fcn.00439f80
mov ecx, eax
call fcn.00439f80
lea ecx, [ebp - 0xac]
call fcn.00439ae0
shl eax, 1
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
lea ecx, [ebp - 0xac]
call fcn.00439a60
push eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x98]
je 0x43e3ed
lea ecx, [ebp - 0xac]
call fcn.00439b20
lea ecx, [ebp - 0x94]
call fcn.00439b20
jmp 0x43e43e
lea ecx, [ebp - 0xac]
call fcn.00439b20
lea ecx, [ebp - 0x94]
call fcn.00439b20
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x38]
call fcn.0043bd40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call fcn.0043bd40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00439b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0043bd40
jmp 0x43e476
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x38]
call fcn.0043bd40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call fcn.0043bd40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00439b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0043bd40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4