Function at 0x525b20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a93e2
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x8cf144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x1ac]
push 0x103
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f00
mov dword [ebp - 4], 0
call fcn.00402330
cmp dword [ebp - 0x198], 0x10
lea edi, [ebp - 0x1ac]
cmovae edi, dword [ebp - 0x1ac]
lea ecx, [edi + 1]
nop dword [eax + eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x525ba0
sub edi, ecx
mov dword [ebp - 0x288], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call fcn.00402330
mov eax, esi
cdq
push edx
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.0072a5c9
add esp, 0xc
lea eax, [ebp - 0x20c]
mov byte [ebp - 4], 1
push 0x102
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 2
call fcn.004090e0
mov eax, dword [ebp - 0x1f8]
mov byte [ebp - 4], 1
cmp eax, 0x10
jb 0x525c22
inc eax
lea ecx, [ebp - 0x20c]
push eax
push dword [ebp - 0x20c]
call fcn.00407d40
mov dword [ebp - 0x1f8], 0xf
mov dword [ebp - 0x1fc], 0
mov byte [ebp - 0x20c], 0
call fcn.00402330
lea ecx, [ebp - 0x278]
call fcn.00746dba
cmp dword [ebp - 0x1c8], 0x10
lea eax, [ebp - 0x1dc]
push dword [ebp - 0x1cc]
cmovae eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x278]
push eax
call fcn.00747786
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x278]
call fcn.00746fd4
mov byte [ebp - 4], 3
xor esi, esi
call fcn.00402330
xor ebx, ebx
mov dword [ebp - 0x280], esi
cmp dword [ebp + 0x10], ebx
jle 0x525d19
nop dword [eax]
push 0
lea ecx, [ebp - 0x1ac]
call fcn.004141a0
mov ecx, dword [ebp - 0x284]
mov cl, byte [ecx + ebx]
cmp cl, byte [eax]
jne 0x525d13
cmp dword [ebp - 0x280], 0
jne 0x525d19
xor esi, esi
mov dword [ebp - 0x27c], ebx
xor eax, eax
test edi, edi
jle 0x525d0d
cmp dword [ebp - 0x198], 0x10
lea edx, [ebp - 0x1ac]
mov ecx, dword [ebp - 0x284]
cmovae edx, dword [ebp - 0x1ac]
add ecx, ebx
mov edi, dword [ebp - 0x288]
mov cl, byte [eax + ecx]
cmp cl, byte [eax + edx]
jne 0x525dae
inc esi
cmp esi, edi
je 0x525d9f
inc eax
cmp eax, edi
jl 0x525cd1
mov esi, dword [ebp - 0x27c]
inc ebx
cmp ebx, dword [ebp + 0x10]
jl 0x525ca0
call fcn.006f3ed9
cmp dword [ebp - 0x198], 0x10
lea ecx, [ebp - 0x1ac]
cmovae ecx, dword [ebp - 0x1ac]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x525d35
sub ecx, edx
add esi, ecx
mov dword [ebp - 0x27c], esi
call fcn.00402330
cmp dword [ebp - 0x280], 0
je 0x525dcd
mov esi, dword [ebp - 0x1b0]
lea edx, [ebp - 0x1c4]
mov edi, dword [ebp - 0x1c4]
cmp esi, 0x10
cmovae edx, edi
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x525d70
mov ebx, dword [ebp - 0x284]
sub edx, ecx
xor ecx, ecx
add ebx, dword [ebp - 0x27c]
cmp ecx, edx
jge 0x525db5
cmp esi, 0x10
lea eax, [ebp - 0x1c4]
cmovae eax, edi
mov al, byte [eax + ecx]
mov byte [ebx + ecx], al
jmp 0x525db9
mov dword [ebp - 0x280], 1
jmp 0x525d0d
xor esi, esi
jmp 0x525d13
mov byte [ebx + ecx], 0
inc ecx
cmp ecx, 0x20
jge 0x525dcd
mov esi, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x1c4]
jmp 0x525d87
call fcn.00402330
cmp dword [ebp - 0x280], 0
je 0x525ee1
call fcn.00402330
mov esi, dword [ebp - 0x28c]
push esi
call fcn.0073a0b2
add esp, 4
push 0
push 0x80
push 1
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x525ee1
push 0
lea eax, [ebp - 0x290]
mov dword [ebp - 0x290], 0
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x284]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
mov ecx, 0x61
mov byte [ebp - 4], 4
mov esi, str.9tA576FC0USrQbplmTIaL1VkWLowc5X0h78pM9u9hZ7CQGeSG193PcQhtrm67YIqgHZHKDn0vhOF4kVVWzhFR70GFvv7sX6nwirIyG598JQnpxE5W7CnRp3pbc14PZoHv5qVYNil5nEDc0brQT2fJtjVbvavYaFiJprc8NAyrg4c6SsGfLQZnzYFXv5VONaD5McA2fcDLXKsCl8DPe26NomeW0QVPPZeLRbsVQ2zqi4YichComWR86q52XXBTXP9PvOCCkAlPFC50QdicWuXmpcW9RM6h1YXKWtyFGoTcxgvxzKUafPx7D5EBAY7HzwKSdaxk5ChPWLonTaHY4FaNd76MF3dGR2AVPSk4xjpRaxoOZeqUK4zpz2HxPjA9zQTtta
lea edi, [ebp - 0x194]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.00405a00
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x29c]
call fcn.00407ea0
mov eax, dword [ebp - 0x1e0]
cmp eax, 0x10
jb 0x525eb4
inc eax
lea ecx, [ebp - 0x1f4]
push eax
push dword [ebp - 0x1f4]
call fcn.00407d40
push ebx
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x29c]
call fcn.00405ba0
mov eax, dword [ebp - 0x1b0]
cmp eax, 0x10
jb 0x525eff
inc eax
lea ecx, [ebp - 0x1c4]
push eax
push dword [ebp - 0x1c4]
call fcn.00407d40
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1b0], 0xf
mov dword [ebp - 0x1b4], 0
mov byte [ebp - 0x1c4], 0
cmp eax, 0x10
jb 0x525f38
inc eax
lea ecx, [ebp - 0x1dc]
push eax
push dword [ebp - 0x1dc]
call fcn.00407d40
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x525f71
inc eax
lea ecx, [ebp - 0x1ac]
push eax
push dword [ebp - 0x1ac]
call fcn.00407d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e615c
mov esp, ebp
pop ebp
ret 0xc