Function at 0x401a15
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x1b0]
sub esp, 0x230
mov eax, dword [0x4103f0]
push ebx
push esi
push edi
push 0x2711
mov dword [ebp + 0x1ac], eax
call fcn.00403bd2
test eax, eax
setne bl
mov byte [ebp - 0x70], bl
push 0x86
push dword [ebp - 0x70]
mov dword [ebp - 0x78], eax
call fcn.004019f7
add esp, 0xc
test bl, bl
je 0x401aea
push dword [ebp + 0x1b8]
mov edi, 0x2710
push edi
push 1
push dword [ebp - 0x78]
call fcn.00403b86
add esp, 0x10
mov esi, eax
cmp esi, edi
jne 0x401abd
push dword [ebp + 0x1bc]
push edi
push 1
push dword [ebp - 0x78]
call fcn.00403a51
cmp eax, edi
sete bl
mov byte [ebp - 0x70], bl
push 0x8f
push dword [ebp - 0x70]
call fcn.004019f7
push dword [ebp + 0x1b8]
push edi
push 1
push dword [ebp - 0x78]
call fcn.00403b86
add esp, 0x28
test bl, bl
mov esi, eax
jne 0x401a79
test bl, bl
je 0x401aea
push dword [ebp + 0x1bc]
push esi
push 1
push dword [ebp - 0x78]
call fcn.00403a51
cmp eax, esi
sete bl
mov byte [ebp - 0x70], bl
push 0x96
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x18
xor esi, esi
cmp dword [ebp + 0x1bc], esi
je 0x401b00
push dword [ebp + 0x1bc]
call fcn.004038f9
pop ecx
cmp dword [ebp + 0x1b8], esi
je 0x401b14
push dword [ebp + 0x1b8]
call fcn.004038f9
pop ecx
test bl, bl
je 0x401df9
push 0x40d430
push dword [ebp + 0x1c0]
mov dword [ebp - 0x7c], esi
call fcn.0040389a
mov edi, eax
cmp edi, esi
setne bl
mov byte [ebp - 0x70], bl
push 0xac
push dword [ebp - 0x70]
mov dword [ebp - 0x74], edi
call fcn.004019f7
add esp, 0x10
test bl, bl
je 0x401cb6
push 2
push esi
push edi
call fcn.004037f5
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 0x70], bl
push 0xb2
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x14
test bl, bl
je 0x401cb6
push edi
call fcn.00403725
mov esi, eax
test esi, esi
setne bl
mov byte [ebp - 0x70], bl
push 0xb9
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0xc
test bl, bl
je 0x401cbc
push 0
lea eax, [esi - 8]
push eax
push edi
call fcn.004037f5
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 0x70], bl
push 0xbf
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x14
test bl, bl
je 0x401cbc
push dword [ebp - 0x74]
xor eax, eax
mov byte [ebp + 0x19c], 0
lea edi, [ebp + 0x19d]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 8
stosb byte es:[edi], al
lea eax, [ebp + 0x19c]
push 1
push eax
call fcn.00403b86
add esp, 0x10
test eax, eax
je 0x401c1a
lea eax, [ebp + 0x19c]
push eax
call fcn.00403536
mov dword [ebp + 0x1bc], eax
jmp 0x401c29
push 0xca
push 0
xor bl, bl
call fcn.004019f7
pop ecx
test bl, bl
pop ecx
je 0x401cbc
mov edi, dword [ebp + 0x1bc]
push edi
call fcn.00403524
test eax, eax
setne bl
mov byte [ebp - 0x70], bl
push 0xd2
push dword [ebp - 0x70]
mov dword [ebp - 0x7c], eax
call fcn.004019f7
add esp, 0xc
test bl, bl
je 0x401cbc
mov eax, esi
sub eax, edi
push 0
sub eax, 8
push eax
push dword [ebp - 0x74]
call fcn.004037f5
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 0x70], bl
push 0xd8
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x14
test bl, bl
je 0x401cbc
push dword [ebp - 0x74]
push edi
push 1
push dword [ebp - 0x7c]
call fcn.00403b86
cmp eax, edi
sete bl
mov byte [ebp - 0x70], bl
push 0xde
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x18
jmp 0x401cbc
mov esi, dword [ebp + 0x1bc]
xor edi, edi
test bl, bl
mov dword [ebp - 0x80], edi
je 0x401da3
push str.cabinet.dll
push dword [ebp + 0x1c4]
lea eax, [ebp - 0x6c]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push edi
push 0x80
push 2
push edi
push 1
push 0x40000000
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x80], eax
jne 0x401d29
call edi
push eax
lea eax, [ebp - 0x6c]
push eax
push str.CreateFile__s_error__d
push str.Extract
call fcn.00401207
add esp, 0x10
xor bl, bl
test bl, bl
je 0x401da3
push 0
lea eax, [ebp + 0x1b8]
push eax
push dword [ebp + 0x1bc]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x401d67
call edi
push eax
lea eax, [ebp - 0x6c]
push eax
push str.WriteFile__s_error__d
push str.Extract
call fcn.00401207
add esp, 0x10
xor bl, bl
test bl, bl
je 0x401da3
push 0
push 0
push dword [ebp - 0x74]
call fcn.004037f5
sub esi, dword [ebp + 0x1bc]
add esp, 0xc
sub esi, 8
push esi
push dword [ebp - 0x74]
call fcn.00402e10
test eax, eax
setne bl
mov byte [ebp - 0x70], bl
push 0xfe
push dword [ebp - 0x70]
call fcn.004019f7
pop ecx
pop ecx
xor esi, esi
cmp dword [ebp - 0x7c], esi
je 0x401db3
push dword [ebp - 0x7c]
call fcn.0040340c
pop ecx
cmp dword [ebp - 0x74], esi
je 0x401dc1
push dword [ebp - 0x74]
call fcn.004038f9
pop ecx
cmp dword [ebp - 0x80], esi
je 0x401dcf
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
je 0x401df9
push dword [ebp + 0x1c4]
push dword [ebp + 0x1c0]
call fcn.00402670
mov bl, al
mov byte [ebp - 0x70], bl
push 0x112
push dword [ebp - 0x70]
call fcn.004019f7
add esp, 0x10
cmp dword [ebp - 0x78], 0
je 0x401e08
push dword [ebp - 0x78]
call fcn.00403407
pop ecx
mov ecx, dword [ebp + 0x1ac]
pop edi
pop esi
mov al, bl
pop ebx
call fcn.004031c9
add ebp, 0x1b0
leave
ret