Function at 0x401500
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x401507
call fcn.0040da60
mov ebx, dword [0x417030]
cmp ebx, 1
jne 0x40165a
mov ebx, dword [0x417014]
cmp ebx, 1
jne 0x401545
mov ebx, dword [0x417004]
cmp ebx, 1
je 0x401545
mov eax, 1
jmp 0x401547
xor eax, eax
and eax, eax
je 0x401655
mov eax, 0x416022
push eax
push dword [0x41702c]
call fcn.004055a0
mov dword [esp], eax
mov dword [esp + 4], 1
jmp 0x40156d
mov eax, dword [esp]
cmp eax, dword [esp + 4]
jl 0x40160c
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x416048
push eax
push dword [esp + 0x10]
push dword [0x41702c]
call fcn.00405630
lea eax, [esp + 0xc]
push eax
call fcn.0040d960
push dword [esp + 8]
call fcn.004024d3
and eax, eax
je 0x401602
push edx
call fcn.0040d920
pop edx
push eax
push dword [esp + 0xc]
call fcn.00402bf9
lea eax, [esp + 0x10]
push eax
call fcn.0040d960
mov edx, dword [esp + 0x10]
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040dac0
mov edx, dword [esp + 0x10]
push edx
call fcn.0040dac0
mov edx, 0x416048
push edx
call fcn.0040dac0
lea eax, [esp + 0x14]
push eax
call fcn.0040d960
inc dword [esp + 4]
jno 0x40156d
push dword [esp + 0x10]
call fcn.00405540
mov dword [esp + 0x14], eax
push 0
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x1c]
call fcn.00409590
push eax
push dword [esp + 0x20]
push dword [0x416fdc]
call sub.KERNEL32.dll_WriteFile
push dword [esp + 0x14]
call fcn.004095b0
mov edx, 0x416020
lea ecx, [0x41702c]
call fcn.00405068
jmp 0x401928
mov dword [0x417030], 1
mov dword [esp + 0x1c], 1
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x41602a
push eax
push dword [esp + 0x28]
push dword [0x416fc8]
call fcn.00405630
lea eax, [esp + 0x14]
push eax
call fcn.0040d960
mov eax, 0x41602e
push eax
push dword [esp + 0x14]
call fcn.00405760
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], 0
je 0x401711
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x41602e
push eax
push 2
push dword [esp + 0x20]
call fcn.00405630
lea eax, [esp + 0x28]
push eax
call fcn.0040d960
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x41602e
push eax
push 1
push dword [esp + 0x20]
call fcn.00405630
lea eax, [esp + 0x14]
push eax
call fcn.0040d960
mov edx, dword [esp + 0x10]
xor ecx, ecx
call fcn.00405110
jne 0x401910
mov ebx, dword [esp + 0x1c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, edx
and ebx, ebx
jne 0x401761
push dword [esp + 0x10]
call fcn.004057c0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x417034]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp + 8], eax
mov ebx, dword [esp + 4]
inc ebx
mov dword [esp + 4], ebx
jmp 0x40190e
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.00405900
call fcn.0040db20
mov edx, 0x416032
pop ecx
push ecx
call fcn.00405150
mov ecx, eax
call fcn.00405110
je 0x401851
mov edx, dword [0x416ff0]
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040dac0
mov edx, dword [0x417008]
push edx
call fcn.0040dac0
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x416032
push eax
push dword [esp + 0x20]
call fcn.00405b80
pop eax
lea eax, [esp + 0x2c]
push eax
call fcn.0040d960
push dword [esp + 0x28]
call fcn.0040a0f5
mov ebx, dword [0x417020]
cmp ebx, 1
jne 0x40180e
push dword [esp + 0x24]
call fcn.004057c0
push eax
push dword [esp + 0x2c]
call fcn.0040a175
push dword [esp + 0x28]
call fcn.00403384
mov edx, dword [0x41702c]
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040dac0
mov edx, dword [esp + 0x2c]
push edx
call fcn.0040dac0
mov edx, 0x416048
push edx
call fcn.0040dac0
lea eax, [0x41702c]
push eax
call fcn.0040d960
jmp 0x40190e
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040d920
pop edx
push eax
mov eax, 0x416032
push eax
push dword [esp + 0x1c]
call fcn.00405b80
lea eax, [esp + 0x14]
push eax
call fcn.0040d960
mov edx, dword [esp + 0x10]
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040dac0
mov ebx, dword [esp + 8]
mov ebp, dword [0x417034]
imul ebx, ebx, 0xc
add ebp, ebx
lea eax, [ebp + 4]
push eax
call fcn.0040d960
push dword [esp + 0x24]
call fcn.004057c0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x417034]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp], eax
mov edx, dword [0x41702c]
push edx
call fcn.0040d920
pop edx
push eax
push edx
call fcn.0040dac0
mov edx, dword [0x416ff0]
push edx
call fcn.0040dac0
mov edx, dword [0x417008]
push edx
call fcn.0040dac0
mov edx, dword [esp + 0x14]
push edx
call fcn.0040dac0
mov edx, 0x416048
push edx
call fcn.0040dac0
lea eax, [0x41702c]
push eax
call fcn.0040d960
jmp 0x401912
jmp 0x401920
mov ebx, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x1c], ebx
jmp 0x40166c
mov eax, dword [esp + 4]
jmp 0x401928
push dword [esp + 8]
call fcn.0040d9f0
push dword [esp + 0x28]
call fcn.0040d9f0
push dword [esp + 0x10]
call fcn.0040d9f0
push dword [esp + 0x24]
call fcn.0040d9f0
push dword [esp + 0xc]
call fcn.0040d9f0
add esp, 0x2c
pop ebx
pop ebp
ret