Function at 0x416379
Capabilities:
Write file on windows

Disassembly:
mov edx, 0xc
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x41637e
call fcn.00451930
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00429060
mov edx, dword [esp + 0x38]
lea ecx, [esp + 4]
call fcn.00429060
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 8]
call fcn.00429060
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0xc]
call fcn.00429060
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x10]
call fcn.00429060
push 0xfffffff5
call sub.KERNEL32.DLL_GetStdHandle
mov dword [esp + 0x14], eax
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
mov edx, str.__r_n_r_n
push edx
call fcn.00451890
mov edx, dword [esp + 8]
push edx
call fcn.00451890
mov edx, 0x4edd4a
push edx
call fcn.00451890
mov edx, dword [esp + 0x10]
push edx
call fcn.00451890
mov edx, str._r_n_r_n_r_n
push edx
call fcn.00451890
mov edx, dword [esp + 0xc]
push edx
call fcn.00451890
mov edx, str._r_n_r_n
push edx
call fcn.00451890
call fcn.004291f2
add dword [esp], edx
call fcn.0044f0a0
call fcn.00429210
mov dword [esp + 0x18], eax
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
call fcn.00450610
push eax
push dword [esp + 0x24]
push dword [esp + 0x24]
call sub.KERNEL32.DLL_WriteFile
push dword [esp + 0x18]
call fcn.004505f0
mov eax, 0x4ed280
push eax
push dword [esp + 0x10]
call fcn.004500b0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], 1
jmp 0x416495
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x24]
jl 0x416648
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
mov eax, 0x4ed280
push eax
push dword [esp + 0x30]
push dword [esp + 0x1c]
call fcn.00450140
lea eax, [esp + 0x2c]
push eax
call fcn.00451800
push edx
call fcn.004517c0
pop edx
push eax
mov edx, 0x4e8020
push edx
call fcn.00451890
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
mov eax, 0x4e8dbc
push eax
push 1
push dword [esp + 0x44]
call fcn.00450140
call fcn.004291f2
add dword [esp], edx
call fcn.0044f560
pop eax
lea eax, [esp + 0x30]
push eax
call fcn.00451800
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
mov eax, 0x4e8dbc
push eax
push 2
push dword [esp + 0x40]
call fcn.00450140
call fcn.004291f2
add dword [esp], edx
call fcn.0044f560
lea eax, [esp + 0xc]
push eax
call fcn.00451800
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
push 0x1c
push dword [esp + 0x38]
call fcn.00450270
lea eax, [esp + 0x30]
push eax
call fcn.00451800
push dword [esp + 0x2c]
call fcn.0044f0a0
mov dword [esp + 0x18], eax
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
call fcn.00450610
push eax
push dword [esp + 0x24]
push dword [esp + 0x24]
call sub.KERNEL32.DLL_WriteFile
push dword [esp + 0x18]
call fcn.004505f0
push edx
call fcn.004517c0
pop edx
push eax
mov edx, dword [esp + 0xc]
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.00451890
mov edx, 0x4ed280
push edx
call fcn.00451890
call fcn.004291f2
add dword [esp], edx
call fcn.0044f0a0
call fcn.00429210
mov dword [esp + 0x18], eax
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
call fcn.00450610
push eax
push dword [esp + 0x24]
push dword [esp + 0x24]
call sub.KERNEL32.DLL_WriteFile
push dword [esp + 0x18]
call fcn.004505f0
inc dword [esp + 0x24]
jno 0x416495
push edx
call fcn.004517c0
pop edx
push eax
push edx
call fcn.004517c0
pop edx
push eax
mov edx, str._r_n_r_n
push edx
call fcn.00451890
mov edx, dword [esp + 0x18]
push edx
call fcn.00451890
call fcn.004291f2
add dword [esp], edx
call fcn.0044f0a0
call fcn.00429210
mov dword [esp + 0x18], eax
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
call fcn.00450610
push eax
push dword [esp + 0x24]
push dword [esp + 0x24]
call sub.KERNEL32.DLL_WriteFile
push dword [esp + 0x18]
call fcn.004505f0
jmp 0x402cd1