Function at 0x10025b7
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x90
mov eax, dword [0x10090b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp + 0x10]
xor ebx, ebx
push ebx
mov dword [ebp - 0x90], ecx
lea ecx, [ebp - 0x8c]
push ecx
push 8
push 0x1001734
push eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 0x7c], eax
cmp eax, ebx
je 0x100285e
push 6
pop ecx
push dword [ebp - 0x80]
xor eax, eax
mov word [ebp - 0x20], ax
lea edi, [ebp - 0x1e]
rep stosd dword es:[edi], eax
push 0xd
lea eax, [ebp - 0x20]
push eax
call fcn.01002007
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0x80], edi
jl 0x1002650
push ebx
lea eax, [ebp - 0x8c]
push eax
push 0x18
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x88]
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp edi, ebx
jl 0x1002677
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
push 0x100172c
push dword [ebp - 0x88]
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp edi, ebx
jl 0x10026ab
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
xor edi, edi
push eax
push dword [ebp - 0x88]
inc edi
mov dword [ebp - 0x84], edi
call esi
mov dword [ebp - 0x7c], eax
jmp 0x10026ae
xor edi, edi
inc edi
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x100270b
push 0x57
lea eax, [ebp - 0x77]
push ebx
push eax
mov byte [ebp - 0x78], bl
call sub.msvcrt.dll_memset
add esp, 0xc
cmp dword [ebp - 0x90], ebx
je 0x10026f2
push ebx
push ebx
push 0x40
lea eax, [ebp - 0x78]
push eax
push 0x40
push dword [ebp - 0x90]
push 0x400
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ebx
lea eax, [ebp - 0x8c]
push eax
push 0x58
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x88]
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x100273b
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x88]
mov dword [ebp - 0x84], edi
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x100276b
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x88]
mov dword [ebp - 0x84], edi
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x10027a5
xor eax, eax
mov byte [ebp - 0x20], bl
lea edi, [ebp - 0x1f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
stosb byte es:[edi], al
lea eax, [ebp - 0x8c]
push eax
push 0x18
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x88]
call esi
xor edi, edi
mov dword [ebp - 0x7c], eax
inc edi
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x10027d5
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x88]
mov dword [ebp - 0x84], edi
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x1002805
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x88]
mov dword [ebp - 0x84], 0x40
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x1002828
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp + 0x14]
push eax
push dword [ebp - 0x88]
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], ebx
je 0x1002854
cmp dword [ebp - 0x80], ebx
jl 0x1002859
push ebx
lea eax, [ebp - 0x8c]
push eax
push 4
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x88]
mov dword [ebp - 0x84], ebx
call esi
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x80], ebx
jge 0x100285e
mov eax, dword [ebp - 0x80]
jmp 0x100286f
mov eax, dword [ebp - 0x7c]
neg eax
sbb eax, eax
and eax, 0x7fffbffb
add eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01003059
leave
ret 0x10