Function at 0x401469
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
mov edx, 9
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x401470
call fcn.0040e570
mov dword [esp], 1
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
mov eax, 0x417026
push eax
push dword [esp + 0xc]
push dword [0x418074]
call fcn.00405730
lea eax, [esp + 8]
push eax
call fcn.0040e470
mov eax, 0x41702a
push eax
push dword [esp + 8]
call fcn.00405860
mov dword [esp + 8], eax
cmp dword [esp + 8], 0
je 0x40152e
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
mov eax, 0x41702a
push eax
push 2
push dword [esp + 0x14]
call fcn.00405730
lea eax, [esp + 0x10]
push eax
call fcn.0040e470
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
mov eax, 0x41702a
push eax
push 1
push dword [esp + 0x14]
call fcn.00405730
lea eax, [esp + 8]
push eax
call fcn.0040e470
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.00405120
jne 0x401724
mov ebx, dword [esp]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, edx
and ebx, ebx
jne 0x40157d
push dword [esp + 4]
call fcn.004058c0
push eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [0x4180e0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp + 8], eax
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x401722
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
push 1
push dword [esp + 0x10]
call fcn.00405a00
call fcn.0040e5d0
mov edx, 0x41702e
pop ecx
push ecx
call fcn.00405160
mov ecx, eax
call fcn.00405120
je 0x401669
mov edx, dword [0x4180a0]
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e600
mov edx, dword [0x4180bc]
push edx
call fcn.0040e600
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
mov eax, 0x41702e
push eax
push dword [esp + 0x14]
call fcn.00405c80
pop eax
lea eax, [esp + 0x18]
push eax
call fcn.0040e470
push dword [esp + 0x14]
call fcn.0040ac55
mov ebx, dword [0x4180d4]
cmp ebx, 1
jne 0x40162a
push dword [esp + 0xc]
call fcn.004058c0
push eax
push dword [esp + 0x18]
call fcn.0040acd5
push dword [esp + 0x14]
call fcn.00403a39
mov edx, dword [esp + 0x18]
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e600
mov edx, dword [esp + 0x18]
push edx
call fcn.0040e600
mov edx, 0x417054
push edx
call fcn.0040e600
lea eax, [esp + 0x1c]
push eax
call fcn.0040e470
jmp 0x401722
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e430
pop edx
push eax
mov eax, 0x41702e
push eax
push dword [esp + 0x10]
call fcn.00405c80
lea eax, [esp + 8]
push eax
call fcn.0040e470
mov edx, dword [esp + 4]
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e600
mov ebx, dword [esp + 0x14]
mov ebp, dword [0x4180e0]
imul ebx, ebx, 0xc
add ebp, ebx
lea eax, [ebp + 4]
push eax
call fcn.0040e470
push dword [esp + 0xc]
call fcn.004058c0
push eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [0x4180e0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp], eax
mov edx, dword [esp + 0x18]
push edx
call fcn.0040e430
pop edx
push eax
push edx
call fcn.0040e600
mov edx, dword [0x4180a0]
push edx
call fcn.0040e600
mov edx, dword [0x4180bc]
push edx
call fcn.0040e600
mov edx, dword [esp + 8]
push edx
call fcn.0040e600
mov edx, 0x417054
push edx
call fcn.0040e600
lea eax, [esp + 0x1c]
push eax
call fcn.0040e470
jmp 0x401726
jmp 0x401732
mov ebx, dword [esp]
inc ebx
mov dword [esp], ebx
jmp 0x401489
mov ebx, dword [0x4180cc]
cmp ebx, 1
jne 0x40174f
mov ebx, dword [0x4180b8]
cmp ebx, 1
je 0x40174f
mov eax, 1
jmp 0x401751
xor eax, eax
and eax, eax
je 0x40178e
push dword [esp + 0x18]
call fcn.00405ca0
mov dword [esp + 0x1c], eax
push 0
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x24]
call fcn.0040a0f0
push eax
push dword [esp + 0x28]
push dword [0x41808c]
call sub.KERNEL32.dll_WriteFile
push dword [esp + 0x1c]
call fcn.0040a110
mov eax, dword [esp + 0x10]
jmp 0x401796
push dword [esp + 0x18]
call fcn.0040e500
push dword [esp + 0x14]
call fcn.0040e500
push dword [esp + 4]
call fcn.0040e500
push dword [esp + 0xc]
call fcn.0040e500
add esp, 0x24
pop ebx
pop ebp
ret