Function at 0x410e72
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2240
call fcn.0040c2f0
mov eax, dword [0x59c024]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x208
lea eax, [ebp - 0x414]
push edi
xor esi, esi
push esi
push eax
call fcn.004177a0
push 0x53fb78
mov ebx, 0x104
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.0042953c
push 0x800
lea eax, [ebp - 0x1230]
push esi
push eax
call fcn.004177a0
push str.LanShanIME
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x61c]
push str._s_s.log
push eax
call fcn.00410e34
push edi
lea eax, [ebp - 0x824]
push esi
push eax
call fcn.004177a0
add esp, 0x40
lea eax, [ebp - 0x20c]
push edi
push esi
push eax
call fcn.004177a0
add esp, 0xc
lea eax, [ebp - 0x20c]
push ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call fcn.0041af11
pop ecx
test eax, eax
je 0x4110ef
lea eax, [ebp - 0x20c]
push 0x5c
push eax
call fcn.0041912d
xor ecx, ecx
push str.LanShanIME
mov word [eax], cx
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xa2c]
push 0x53c65c
push eax
call fcn.00410e34
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0xa2c]
add esp, 0x18
push eax
call ebx
test eax, eax
je 0x4110ef
lea eax, [ebp - 0x20c]
push eax
call fcn.0041af11
lea ecx, [ebp - 0x20a]
lea eax, [ecx + eax*2]
push eax
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.0042953c
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x61c]
push str._s_s.txt
push eax
call fcn.00410e34
lea eax, [ebp + 0xc]
push eax
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push 0x3ff
push 0x400
push eax
call fcn.00402700
push esi
call fcn.004237bb
mov dword [ebp - 0x2240], eax
lea eax, [ebp - 0x2240]
push eax
mov dword [ebp - 0x223c], edx
call fcn.00429224
add esp, 0x40
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test edi, edi
je 0x4110ef
lea ecx, [ebp - 0x1230]
push ecx
push eax
push dword [edi]
mov eax, dword [edi + 0x10]
push dword [edi + 4]
inc eax
push dword [edi + 8]
push dword [edi + 0xc]
push eax
mov eax, dword [edi + 0x14]
add eax, 0x76c
push eax
lea eax, [ebp - 0x2230]
push str.__d__d__d__d__d__d___d_:_s
push eax
call fcn.00410e52
xor eax, eax
add esp, 0x28
mov word [ebp - 0xa32], ax
lea eax, [ebp - 0x61c]
push eax
call ebx
xor ebx, ebx
inc ebx
test eax, eax
lea eax, [ebp - 0x61c]
push 0x53fbb0
push eax
cmovne esi, ebx
call fcn.00427f47
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4110ef
test esi, esi
jne 0x411095
push edi
push 2
lea eax, [ebp - 0x2238]
mov dword [ebp - 0x2238], 0xfeff
push ebx
push eax
call fcn.00429483
add esp, 0x10
lea eax, [ebp - 0x2230]
push eax
call fcn.0041af11
push edi
add eax, eax
push eax
lea eax, [ebp - 0x2230]
push ebx
push eax
call fcn.00429483
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xd
push ebx
push eax
call fcn.00429483
push edi
push 2
lea eax, [ebp - 0x2234]
mov dword [ebp - 0x2234], 0xa
push ebx
push eax
call fcn.00429483
push edi
call fcn.00427d45
add esp, 0x38
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040c19b
mov esp, ebp
pop ebp
ret