Function at 0x401511
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x401518
call fcn.0040e660
mov ebx, dword [0x4180ec]
cmp ebx, 1
jne 0x40166b
mov ebx, dword [0x4180d4]
cmp ebx, 1
jne 0x401556
mov ebx, dword [0x4180c0]
cmp ebx, 1
je 0x401556
mov eax, 1
jmp 0x401558
xor eax, eax
and eax, eax
je 0x401666
mov eax, 0x417026
push eax
push dword [0x4180e8]
call fcn.00405760
mov dword [esp], eax
mov dword [esp + 4], 1
jmp 0x40157e
mov eax, dword [esp]
cmp eax, dword [esp + 4]
jl 0x40161d
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x41705c
push eax
push dword [esp + 0x10]
push dword [0x4180e8]
call fcn.004057f0
lea eax, [esp + 0xc]
push eax
call fcn.0040e560
push dword [esp + 8]
call fcn.00402447
and eax, eax
je 0x401613
push edx
call fcn.0040e520
pop edx
push eax
push dword [esp + 0xc]
call fcn.00402ba6
lea eax, [esp + 0x10]
push eax
call fcn.0040e560
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e6c0
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e6c0
mov edx, 0x41705c
push edx
call fcn.0040e6c0
lea eax, [esp + 0x14]
push eax
call fcn.0040e560
inc dword [esp + 4]
jno 0x40157e
push dword [esp + 0x10]
call fcn.00405700
mov dword [esp + 0x14], eax
push 0
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x1c]
call fcn.0040a1e0
push eax
push dword [esp + 0x20]
push dword [0x418094]
call sub.KERNEL32.dll_WriteFile
push dword [esp + 0x14]
call fcn.0040a200
mov edx, 0x417024
lea ecx, [0x4180e8]
call fcn.00405068
jmp 0x401939
mov dword [0x4180ec], 1
mov dword [esp + 0x1c], 1
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x41702e
push eax
push dword [esp + 0x28]
push dword [0x41807c]
call fcn.004057f0
lea eax, [esp + 0x14]
push eax
call fcn.0040e560
mov eax, 0x417032
push eax
push dword [esp + 0x14]
call fcn.004059c0
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], 0
je 0x401722
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x417032
push eax
push 2
push dword [esp + 0x20]
call fcn.004057f0
lea eax, [esp + 0x28]
push eax
call fcn.0040e560
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x417032
push eax
push 1
push dword [esp + 0x20]
call fcn.004057f0
lea eax, [esp + 0x14]
push eax
call fcn.0040e560
mov edx, dword [esp + 0x10]
xor ecx, ecx
call fcn.00405120
jne 0x401921
mov ebx, dword [esp + 0x1c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, edx
and ebx, ebx
jne 0x401772
push dword [esp + 0x10]
call fcn.004059e0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp + 8], eax
mov ebx, dword [esp + 4]
inc ebx
mov dword [esp + 4], ebx
jmp 0x40191f
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.00405b20
call fcn.0040e720
mov edx, 0x417036
pop ecx
push ecx
call fcn.00405160
mov ecx, eax
call fcn.00405120
je 0x401862
mov edx, dword [0x4180a8]
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e6c0
mov edx, dword [0x4180c4]
push edx
call fcn.0040e6c0
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x417036
push eax
push dword [esp + 0x20]
call fcn.00405da0
pop eax
lea eax, [esp + 0x2c]
push eax
call fcn.0040e560
push dword [esp + 0x28]
call fcn.0040ad45
mov ebx, dword [0x4180dc]
cmp ebx, 1
jne 0x40181f
push dword [esp + 0x24]
call fcn.004059e0
push eax
push dword [esp + 0x2c]
call fcn.0040adc5
push dword [esp + 0x28]
call fcn.00403bea
mov edx, dword [0x4180e8]
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e6c0
mov edx, dword [esp + 0x2c]
push edx
call fcn.0040e6c0
mov edx, 0x41705c
push edx
call fcn.0040e6c0
lea eax, [0x4180e8]
push eax
call fcn.0040e560
jmp 0x40191f
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e520
pop edx
push eax
mov eax, 0x417036
push eax
push dword [esp + 0x1c]
call fcn.00405da0
lea eax, [esp + 0x14]
push eax
call fcn.0040e560
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e6c0
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
lea eax, [ebp + 4]
push eax
call fcn.0040e560
push dword [esp + 0x24]
call fcn.004059e0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp], eax
mov edx, dword [0x4180e8]
push edx
call fcn.0040e520
pop edx
push eax
push edx
call fcn.0040e6c0
mov edx, dword [0x4180a8]
push edx
call fcn.0040e6c0
mov edx, dword [0x4180c4]
push edx
call fcn.0040e6c0
mov edx, dword [esp + 0x14]
push edx
call fcn.0040e6c0
mov edx, 0x41705c
push edx
call fcn.0040e6c0
lea eax, [0x4180e8]
push eax
call fcn.0040e560
jmp 0x401923
jmp 0x401931
mov ebx, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x1c], ebx
jmp 0x40167d
mov eax, dword [esp + 4]
jmp 0x401939
push dword [esp + 8]
call fcn.0040e5f0
push dword [esp + 0x28]
call fcn.0040e5f0
push dword [esp + 0x10]
call fcn.0040e5f0
push dword [esp + 0x24]
call fcn.0040e5f0
push dword [esp + 0xc]
call fcn.0040e5f0
add esp, 0x2c
pop ebx
pop ebp
ret