Function at 0x5ab200
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x64d428
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x699fe8]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push esi
push edi
mov eax, dword [0x699fe8]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebx, ecx
cmp byte [ebx + 0x50a], 0
mov dword [esp + 0x20], ebx
je 0x5ab4cd
add ebx, 0x108
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], 4
nop
mov esi, ebx
call fcn.005ad0a0
xor esi, esi
cmp eax, esi
jne 0x5ab4ee
push 0xffffffffffffffff
push esi
add ebx, 0x44
push ebx
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], esi
mov byte [esp + 0x58], 0
call fcn.00403e20
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x98], esi
push ecx
xor eax, eax
mov byte [esp + 0x20], 0x2f
call fcn.004419a0
cmp eax, 0xffffffff
je 0x5ab31c
mov byte [esp + 0x14], 0x2f
jmp 0x5ab2c0
push eax
xor ecx, ecx
lea esi, [esp + 0x30]
lea edx, [esp + 0x4c]
lea ebx, [eax + 1]
call fcn.0042fb60
mov eax, dword [esp + 0x30]
mov edi, 0x10
cmp dword [esp + 0x44], edi
jae 0x5ab2e6
lea eax, [esp + 0x30]
push eax
call fcn.00620b10
add esp, 4
cmp dword [esp + 0x44], edi
jb 0x5ab302
mov edx, dword [esp + 0x30]
push edx
call fcn.0061c19a
add esp, 4
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x50]
push ecx
mov eax, ebx
call fcn.004419a0
cmp eax, 0xffffffff
jne 0x5ab2c0
jmp 0x5ab321
mov edi, 0x10
cmp dword [esp + 0x60], edi
mov eax, dword [esp + 0x4c]
jae 0x5ab32f
lea eax, [esp + 0x4c]
push eax
push str.AdFile:__s_r_n
lea esi, [esp + 0x34]
call fcn.005b0ca0
add esp, 8
cmp dword [eax + 0x18], edi
jb 0x5ab34b
mov eax, dword [eax + 4]
jmp 0x5ab34e
add eax, 4
push eax
call dword [0x652068]
cmp dword [esp + 0x44], edi
jb 0x5ab368
mov edx, dword [esp + 0x30]
push edx
call fcn.0061c19a
add esp, 4
cmp dword [esp + 0x60], edi
mov eax, dword [esp + 0x4c]
jae 0x5ab376
lea eax, [esp + 0x4c]
push 0x6585d8
push eax
call fcn.0061ceb1
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x5ab3d6
mov edi, dword [esp + 0x18]
lea esi, [esp + 0x2c]
call fcn.005ad0b0
mov eax, dword [esp + 0x30]
mov esi, 0x10
cmp dword [esp + 0x44], esi
jae 0x5ab3aa
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x40]
push ebx
push ecx
push 1
push eax
call fcn.0061d3c8
push ebx
call fcn.0061cf36
add esp, 0x14
cmp dword [esp + 0x44], esi
jb 0x5ab3d4
mov edx, dword [esp + 0x30]
push edx
call fcn.0061c19a
add esp, 4
mov edi, esi
mov eax, dword [esp + 0x18]
call fcn.005ace00
mov dword [esp + 0x90], 0xffffffff
cmp dword [esp + 0x60], edi
jb 0x5ab3fd
mov eax, dword [esp + 0x4c]
push eax
call fcn.0061c19a
add esp, 4
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
cmp dword [esi + 0x548], 0
jbe 0x5ab4b8
mov eax, dword [esi + 0x544]
mov edi, dword [eax]
add esi, 0x540
cmp edi, eax
jne 0x5ab429
call fcn.0061c63f
push 0xffffffffffffffff
lea eax, [edi + 8]
push 0
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], 0
mov byte [esp + 0x74], 0
call fcn.00403e20
mov dword [esp + 0x90], 2
mov eax, dword [esi + 4]
mov eax, dword [eax]
push eax
push esi
lea ecx, [esp + 0x2c]
push ecx
push esi
call fcn.005bc600
mov edi, dword [esp + 0x20]
add edi, 0x68
lea ecx, [esp + 0x64]
mov esi, ebx
call fcn.005acd10
mov dword [esp + 0x90], 0xffffffff
cmp dword [esp + 0x7c], 0x10
jb 0x5ab4a3
mov edx, dword [esp + 0x68]
push edx
call fcn.0061c19a
add esp, 4
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
add ebx, 0x100
sub dword [esp + 0x1c], 1
mov dword [esp + 0x18], ebx
jne 0x5ab260
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.0061efd1
mov esp, ebp
pop ebp
ret
cmp eax, 2
je 0x5ab4b8
cmp eax, 1
je 0x5ab401
lea ecx, [ebx + 0x44]
push ecx
mov edi, str.Error_on_AdFile:
lea esi, [esp + 0x4c]
call fcn.00445160
add esp, 4
push eax
mov edi, 0x66f6e8
lea esi, [esp + 0x30]
mov dword [esp + 0x94], 1
call fcn.0041e290
mov esi, 0x10
add esp, 4
cmp dword [eax + 0x18], esi
jb 0x5ab53d
mov eax, dword [eax + 4]
jmp 0x5ab540
add eax, 4
push eax
call dword [0x652068]
cmp dword [esp + 0x44], esi
jb 0x5ab55a
mov edx, dword [esp + 0x30]
push edx
call fcn.0061c19a
add esp, 4
mov dword [esp + 0x90], 0xffffffff
cmp dword [esp + 0x60], esi
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], 0
mov byte [esp + 0x30], 0
jb 0x5ab58d
mov eax, dword [esp + 0x4c]
push eax
call fcn.0061c19a
add esp, 4
mov eax, ebx
call fcn.005ace00
jmp 0x5ab401