Function at 0x4037a0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
sub esp, 0x1c8
push ebx
push ebp
push esi
push edi
push 0x42a4dc
call fcn.00401630
mov edi, str._tracingocsprint.dat
or ecx, 0xffffffff
xor eax, eax
push 0x42a4dc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42a4dc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00403f60
add esp, 8
test eax, eax
jne 0x4037fd
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret
push 0x42a4dc
call fcn.00401630
mov edi, str.cdusrlogsprintlogs.logs
or ecx, 0xffffffff
xor eax, eax
push 0x42a4dc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42a4dc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00403f60
mov ebp, dword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 8
test eax, eax
jne 0x403909
push 0x42a4dc
call fcn.00401630
mov edi, str.cdusrlogs
or ecx, 0xffffffff
xor eax, eax
push 0x42a4dc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42a4dc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00404030
mov edi, str.printlogs.logs
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov esi, edi
mov edx, ecx
mov edi, 0x42a4dc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0x10000080
mov ecx, edx
push 2
push eax
and ecx, 3
push 3
push 0xc0000000
push 0x42a4dc
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov ecx, 0x6c
xor eax, eax
lea edi, [esp + 0x24]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x2c]
push 0x1b2
push ecx
push esi
call ebp
push esi
call ebx
push 0
push 0x10000080
push 3
push 0
push 3
push 0xc0000000
push 0x42a4dc
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x403ada
push 0x1b2
push 0
push esi
call fcn.00404210
add esp, 0xc
test eax, eax
jne 0x403955
push esi
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1c8
ret
lea edx, [esp + 0x10]
push 0
push edx
lea eax, [esp + 0x2c]
push 0x1b2
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edi, dword [esp + 0x24]
inc edi
cmp edi, 0x1e8480
mov dword [esp + 0x24], edi
jle 0x4039f0
push 0x1b2
push 0
push esi
call fcn.00404270
add esp, 0xc
push esi
call ebx
push 6
call fcn.004042e0
add esp, 4
push 0
push 0x10000080
push 2
push 0
push 3
push 0xc0000000
push 0x42a4dc
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov ecx, 0x6c
xor eax, eax
lea edi, [esp + 0x24]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
push 0
push ecx
lea edx, [esp + 0x2c]
push 0x1b2
push edx
push esi
stosw word es:[edi], ax
call ebp
push esi
call ebx
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c8
ret
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x2c]
push 0x1b2
push ecx
push esi
call ebp
mov eax, dword [esp + 0x1dc]
lea edx, [esp + 0x2c]
push edx
push eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], eax
call fcn.00401750
lea eax, [esp + 0x1c]
push eax
call fcn.00403ef0
mov ecx, dword [eax]
mov dword [esp + 0x92], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x96], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x9a], ecx
mov edx, dword [eax + 0xc]
lea eax, [esp + 0xa2]
push eax
mov dword [esp + 0xa2], edx
call fcn.00403cd0
mov ecx, dword [esp + 0x1f4]
add esp, 0x10
lea edx, [esp + 0x54]
push 0x31
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov eax, dword [esp + 0x1e0]
push 0x12b
lea ecx, [esp + 0xae]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [edi + edi*2]
push 0
push 0
lea edx, [eax + eax*8]
lea eax, [edi + edx*8]
shl eax, 1
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea ecx, [esp + 0x10]
push 0
push ecx
lea edx, [esp + 0x2c]
push 0x1b2
push edx
push esi
call ebp
push 0x1b2
push 0
push esi
call fcn.00404270
add esp, 0xc
push esi
call ebx
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c8
ret