Function at 0x401469
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x401470
call fcn.0040e600
mov ebx, dword [0x4180ec]
cmp ebx, 1
jne 0x4015c3
mov ebx, dword [0x4180d4]
cmp ebx, 1
jne 0x4014ae
mov ebx, dword [0x4180c0]
cmp ebx, 1
je 0x4014ae
mov eax, 1
jmp 0x4014b0
xor eax, eax
and eax, eax
je 0x4015be
mov eax, 0x417022
push eax
push dword [0x4180e8]
call fcn.00405730
mov dword [esp], eax
mov dword [esp + 4], 1
jmp 0x4014d6
mov eax, dword [esp]
cmp eax, dword [esp + 4]
jl 0x401575
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x417058
push eax
push dword [esp + 0x10]
push dword [0x4180e8]
call fcn.004057c0
lea eax, [esp + 0xc]
push eax
call fcn.0040e500
push dword [esp + 8]
call fcn.0040239f
and eax, eax
je 0x40156b
push edx
call fcn.0040e4c0
pop edx
push eax
push dword [esp + 0xc]
call fcn.00402afe
lea eax, [esp + 0x10]
push eax
call fcn.0040e500
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e660
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e660
mov edx, 0x417058
push edx
call fcn.0040e660
lea eax, [esp + 0x14]
push eax
call fcn.0040e500
inc dword [esp + 4]
jno 0x4014d6
push dword [esp + 0x10]
call fcn.004058f0
mov dword [esp + 0x14], eax
push 0
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x1c]
call fcn.0040a180
push eax
push dword [esp + 0x20]
push dword [0x418094]
call sub.KERNEL32.dll_WriteFile
push dword [esp + 0x14]
call fcn.0040a1a0
mov edx, 0x417020
lea ecx, [0x4180e8]
call fcn.00405068
jmp 0x401891
mov dword [0x4180ec], 1
mov dword [esp + 0x1c], 1
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x41702a
push eax
push dword [esp + 0x28]
push dword [0x41807c]
call fcn.004057c0
lea eax, [esp + 0x14]
push eax
call fcn.0040e500
mov eax, 0x41702e
push eax
push dword [esp + 0x14]
call fcn.00405950
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], 0
je 0x40167a
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x41702e
push eax
push 2
push dword [esp + 0x20]
call fcn.004057c0
lea eax, [esp + 0x28]
push eax
call fcn.0040e500
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x41702e
push eax
push 1
push dword [esp + 0x20]
call fcn.004057c0
lea eax, [esp + 0x14]
push eax
call fcn.0040e500
mov edx, dword [esp + 0x10]
xor ecx, ecx
call fcn.00405120
jne 0x401879
mov ebx, dword [esp + 0x1c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, edx
and ebx, ebx
jne 0x4016ca
push dword [esp + 0x10]
call fcn.004059b0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp + 8], eax
mov ebx, dword [esp + 4]
inc ebx
mov dword [esp + 4], ebx
jmp 0x401877
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.00405af0
call fcn.0040e6c0
mov edx, 0x417032
pop ecx
push ecx
call fcn.00405160
mov ecx, eax
call fcn.00405120
je 0x4017ba
mov edx, dword [0x4180a8]
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e660
mov edx, dword [0x4180c4]
push edx
call fcn.0040e660
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x417032
push eax
push dword [esp + 0x20]
call fcn.00405d70
pop eax
lea eax, [esp + 0x2c]
push eax
call fcn.0040e500
push dword [esp + 0x28]
call fcn.0040ace5
mov ebx, dword [0x4180dc]
cmp ebx, 1
jne 0x401777
push dword [esp + 0x24]
call fcn.004059b0
push eax
push dword [esp + 0x2c]
call fcn.0040ad65
push dword [esp + 0x28]
call fcn.00403b42
mov edx, dword [0x4180e8]
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e660
mov edx, dword [esp + 0x2c]
push edx
call fcn.0040e660
mov edx, 0x417058
push edx
call fcn.0040e660
lea eax, [0x4180e8]
push eax
call fcn.0040e500
jmp 0x401877
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e4c0
pop edx
push eax
mov eax, 0x417032
push eax
push dword [esp + 0x1c]
call fcn.00405d70
lea eax, [esp + 0x14]
push eax
call fcn.0040e500
mov edx, dword [esp + 0x10]
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e660
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
lea eax, [ebp + 4]
push eax
call fcn.0040e500
push dword [esp + 0x24]
call fcn.004059b0
push eax
mov ebx, dword [esp + 8]
mov ebp, dword [0x4180f0]
imul ebx, ebx, 0xc
add ebp, ebx
pop eax
mov dword [ebp], eax
mov edx, dword [0x4180e8]
push edx
call fcn.0040e4c0
pop edx
push eax
push edx
call fcn.0040e660
mov edx, dword [0x4180a8]
push edx
call fcn.0040e660
mov edx, dword [0x4180c4]
push edx
call fcn.0040e660
mov edx, dword [esp + 0x14]
push edx
call fcn.0040e660
mov edx, 0x417058
push edx
call fcn.0040e660
lea eax, [0x4180e8]
push eax
call fcn.0040e500
jmp 0x40187b
jmp 0x401889
mov ebx, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x1c], ebx
jmp 0x4015d5
mov eax, dword [esp + 4]
jmp 0x401891
push dword [esp + 8]
call fcn.0040e590
push dword [esp + 0x28]
call fcn.0040e590
push dword [esp + 0x10]
call fcn.0040e590
push dword [esp + 0x24]
call fcn.0040e590
push dword [esp + 0xc]
call fcn.0040e590
add esp, 0x2c
pop ebx
pop ebp
ret