Function at 0x736344
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7b2a3a
mov eax, dword fs:[0]
push eax
mov eax, 0x11e4
call fcn.006e70d0
mov eax, dword [0x8ca144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00402330
mov ebx, 0x208
lea eax, [ebp - 0x808]
push ebx
xor esi, esi
push esi
push eax
call fcn.0074fc20
push str.C:log_
lea eax, [ebp - 0x808]
push 0x104
push eax
call fcn.0075ffff
call fcn.00402330
push 0x3e8
lea eax, [ebp - 0xdf8]
push esi
push eax
call fcn.0074fc20
add esp, 0x24
mov dword [ebp - 0x11f0], esi
mov dword [ebp - 0x11ec], esi
mov dword [ebp - 0x11e8], esi
mov dword [ebp - 4], esi
lea edi, [ebp - 0xfb8]
push 0x6f
pop ecx
mov esi, str.wzfMPbN9F3pjLCktB1ijLqFvJki0jAWOUIgtWdNh4NHZ90n2yCyKhRIyRTCQkUY1EDM8keRc8w9m4FUmoOiBXiTXNcZBLfqwYcJjDWRUkNN7Vw7LoWkLy6mKNyIqrdTCMoFvt2wPmgDKyQAsSfqvChhZDCCitXpzXSEpVJMB4lL4PHDhUd1pU0vaxQ6bSK1OlVAbn4WqoHKA4S3Y8KBYL6oprSac62U54jogJlrnv8C1idj4KPhBnCwHiMlk0cHWOn2rwT8awC7V66izI2PS49mQSZmLNsBjc4JBmJvJJ4e3bDQ9NK8z9pwiFm8yGkKruuNRPyglACioQ7usZReEYbgsUWF94Ogn6EJHdH3F6qLQnvsFOdZ1hEkZly4hagPUklKCAns6pKcd3kZdkrLsyqA1Ewo5oN89kz3N4LjBNAopGXV9qkslsqLLbkhI
lea eax, [ebp - 0xfb8]
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp - 0x11a0]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
xor eax, eax
lea ecx, [ebp - 0x11f0]
inc eax
mov byte [ebp - 4], al
lea eax, [ebp - 0x11a0]
push eax
call fcn.004082f0
xor esi, esi
lea ecx, [ebp - 0x11a0]
push esi
push 1
call fcn.004096c0
lea eax, [ebp - 0x808]
push eax
lea eax, [ebp - 0x420]
push str._sxzq.log
push eax
call fcn.00736252
push ebx
lea eax, [ebp - 0xa10]
push esi
push eax
call fcn.0074fc20
push ebx
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.0074fc20
add esp, 0x24
mov dword [ebp - 0x11e4], ebx
mov dword [ebp - 0x11e0], ebx
mov dword [ebp - 0x11dc], ebx
push 0x38
pop ecx
mov esi, str.XTvLwv01rpKsx956XdjdDTpyoOk6ZmrUXqhNPZ5JfM2vD99mIjBziwLQpwd0YjJHrZjqUQtIB2Arr3gwxJ6Sw5nPsmQtspYWnIB7Y0wEVGd99m6sIDwXy1ydryGdzuLdLet3XSQYgbxaPwxNeoT0xhCwUg6FzsCCcySZrIX5QJIAt35zjZ2F5Z0FC9xEhU7fgkAoRuQQqumID3wrE1jovsjn7j30hWP2
mov byte [ebp - 4], 2
lea edi, [ebp - 0x504]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x11a0]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
lea eax, [ebp - 0x11a0]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x11e4]
call fcn.004082f0
push ebx
push 1
lea ecx, [ebp - 0x11a0]
mov byte [ebp - 4], 2
call fcn.004096c0
mov esi, 0x104
lea eax, [ebp - 0x218]
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push 0x5c
push eax
call fcn.0074ef34
pop ecx
pop ecx
xor ecx, ecx
mov word [eax], cx
call fcn.006f0305
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x420]
push eax
call ebx
test eax, eax
je 0x7366fe
call fcn.006ed117
lea eax, [ebp - 0x218]
push eax
call fcn.0075fe99
lea eax, [ebp + eax*2 - 0x216]
push eax
lea eax, [ebp - 0xa10]
push esi
push eax
call fcn.0075ffff
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x808]
push eax
lea eax, [ebp - 0x420]
push str._s_s.txt
push eax
call fcn.00736252
lea eax, [ebp + 0xc]
xor esi, esi
push eax
push esi
push dword [ebp + 8]
lea eax, [ebp - 0xdf8]
push 0x1f3
push 0x1f4
push eax
call fcn.004050b0
xor eax, eax
mov dword [ebp - 0x1194], esi
add esp, 0x38
mov word [ebp - 0xa12], ax
mov dword [ebp - 0x1190], esi
mov dword [ebp - 0x118c], esi
push 0x73
pop ecx
mov esi, str.Y6o4ubxFewW7QcKjQTzQVuBVO8rxvnUvITyxW5oBReUV3xVJ8DnjpTa69p6bm3jyEwPRVsykzHASxgLFOSrgDMAx6bYHhQUnCFrHzJjdqRzPRvLes6oxtoCzIaeV47tKmAWvLmqIQRI1kWAYd2JoEDYrHM1OApP23uqKJZDr8cwqrkDnAsBeX7ggF16C0OchDV6cVGDvFfTbCdvzpKGBINtzmBrsVtR40Tft8tPI32K72bUJfMlhgdBB6AbXCJxloEWFRJPSAKbJiCymA6U00MUL253Mjrc6vo4CueivAdDm0WZf2fdASFL3kyXRbyp40sRR6v9f7nBqNCazHHuzjnavDryopUPhbOYKi2OBhpMBG9RYPgZc5I50adRDbrs3qGCVp0FFxxiL8OltaeMFc4kj7SXaCKnzkhfug6URWhYlepj1aqn7YfXV9axBH6IoTZqMxnlIeZvV8
mov byte [ebp - 4], 4
lea edi, [ebp - 0x1188]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1188]
push eax
lea ecx, [ebp - 0x11b8]
movsw word es:[edi], word [esi]
call fcn.00405a50
lea eax, [ebp - 0x11b8]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1194]
call fcn.004082f0
xor edi, edi
lea ecx, [ebp - 0x11b8]
xor esi, esi
push edi
inc esi
push esi
call fcn.004096c0
lea eax, [ebp - 0x420]
push eax
call ebx
test eax, eax
mov dword [ebp - 0x11ac], edi
mov ebx, edi
mov dword [ebp - 0x11a8], edi
cmovne ebx, esi
mov dword [ebp - 0x11a4], edi
push 0x3f
pop ecx
mov esi, str.6Bst2UHOn4lG8DHvZSggi0KsSUZBUX7SLX0BgGVjT1Opyu56rreKAyYuPwoRfHQJixMk97pSXhVuFJ9Kec5WoqWZLweKkgfLxJCGTcvFdGreUxVsWmDx0H71CfR3oAKEVqYIsKBsOapWIfSroUgNz9gIxAOGoYIXYbIPwxqgkORRzklkrwCyhRB1Zx9FGbNrUvETKGnQTyBts5KrtJysVURFUpEsG8RnR9ZLjko43Mrvw0NTsokfmetLOkG
mov byte [ebp - 4], 6
lea edi, [ebp - 0x600]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x11d0]
call fcn.00405a50
mov byte [ebp - 4], 7
lea eax, [ebp - 0x11d0]
push eax
lea ecx, [ebp - 0x11ac]
call fcn.004082f0
xor esi, esi
mov byte [ebp - 4], 6
xor edi, edi
lea ecx, [ebp - 0x11d0]
push esi
inc edi
push edi
call fcn.004096c0
lea eax, [ebp - 0x420]
push 0x8917dc
push eax
call fcn.00756eab
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x7366e8
call fcn.00402330
test ebx, ebx
jne 0x736689
push esi
push 2
lea eax, [ebp - 0x11d8]
mov dword [ebp - 0x11d8], 0xfeff
push edi
push eax
call fcn.00757c71
add esp, 0x10
call fcn.00402330
lea eax, [ebp - 0xdf8]
push eax
call fcn.0075fe99
push esi
add eax, eax
push eax
lea eax, [ebp - 0xdf8]
push edi
push eax
call fcn.00757c71
push esi
push 2
lea eax, [ebp - 0x11d4]
mov dword [ebp - 0x11d4], 0xd
push edi
push eax
call fcn.00757c71
push esi
push 2
lea eax, [ebp - 0x11d4]
mov dword [ebp - 0x11d4], 0xa
push edi
push eax
call fcn.00757c71
push esi
call fcn.00756c7e
add esp, 0x38
lea ecx, [ebp - 0x11ac]
call fcn.006ec102
lea ecx, [ebp - 0x1194]
call fcn.006ec102
lea ecx, [ebp - 0x11e4]
call fcn.006ec102
lea ecx, [ebp - 0x11f0]
call fcn.006ec102
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e70bb
mov esp, ebp
pop ebp
ret