Function at 0x67ec2c
Capabilities:
Write file on windows

Disassembly:
int3
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov esi, ecx
xor edi, edi
mov al, byte [edi + esi]
cmp al, 0x20
je 0x67ec4b
cmp al, 9
je 0x67ec4b
cmp al, 0xd
jne 0x67ec4e
inc edi
jmp 0x67ec3c
lea eax, [edi + esi]
mov ebx, edi
mov dword [ebp - 0x20], eax
mov al, byte [eax]
cmp al, 0xa
je 0x67f196
test al, al
je 0x67f196
cmp al, 0x23
je 0x67f196
mov cl, byte [ebx + esi]
lea eax, [ecx - 0x41]
cmp al, 0x19
jbe 0x67ec89
lea eax, [ecx - 0x61]
cmp al, 0x19
jbe 0x67ec89
sub cl, 0x30
cmp cl, 9
ja 0x67ec8c
inc ebx
jmp 0x67ec70
mov edx, ebx
mov al, byte [edx + esi]
cmp al, 0x20
je 0x67ec9d
cmp al, 9
je 0x67ec9d
cmp al, 0xd
jne 0x67eca0
inc edx
jmp 0x67ec8e
cmp byte [edx + esi], 0x3d
mov eax, dword [ebp + 0xc]
jne 0x67eede
inc edx
mov ecx, esi
call fcn.0067e83c
sub ebx, edi
mov dword [ebp - 0x18], eax
js 0x67ecca
mov edx, ebx
lea ecx, [edi + esi]
call fcn.00678f0c
mov ecx, eax
jmp 0x67eccc
xor ecx, ecx
call fcn.0067db1c
mov edi, eax
call fcn.006791cc
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x67ecf1
cmp dword [edi + 0xc], 0
jne 0x67ecf1
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x67ed48
test eax, eax
jne 0x67ed3e
push dword [ebp + 8]
push dword [ebp - 8]
push 0x43cbd8
push 1
call fcn.00678ebc
add esp, 0x10
test byte [0x43fedc], 1
je 0x67ed2f
mov eax, dword [0x443d10]
test eax, eax
je 0x67ed2f
push eax
push 1
push ebx
push dword [ebp - 0x20]
call fcn.00699860
add esp, 0x10
push 0x43cbf8
push 1
call fcn.00678ebc
add esp, 8
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x18]
mov ecx, esi
call fcn.0067e83c
mov edx, dword [edi + 4]
mov ebx, eax
cmp edx, 0xe
ja case.default.0x67ed67
movzx ecx, byte [edx + 0x407304]
jmp dword [ecx*4 + 0x4072e8]
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x67eeb2
push dword [ebp + 8]
push dword [ebp - 8]
push 0x43cc88
push 1
call fcn.00678ebc
add esp, 0x10
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00698834
mov dl, 0x6e
inc eax
add dh, bh
outsb dx, byte [esi]
inc eax
add byte [edi], dh
outsd dx, dword [esi]
inc eax
add byte [ebp + 0x6f], ch
inc eax
add byte [esi + 0x7600406f], dh
jo 0x67f1fb
add byte [edi + 0x4071], bl
add byte [eax], al
add dword [edx], eax
add al, byte [edx]
add al, byte [ebx]
add al, 4
add al, 5
push es
push es
int3
add byte [esi - 0x7d], ah
js 0x67f208
add byte [edi], cl
test byte [esi + 0x53000000], ch
push edi
lea ebx, [eax + 0xa]
push 0x43cca0
push ebx
call fcn.006996f2
mov edi, eax
add esp, 8
test edi, edi
jne 0x67f24a
call fcn.00698a21
push ebx
push 0x43cca4
push dword [eax]
push 1
call fcn.006798ac
add esp, 0x10
or eax, 0xffffffff
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006981f9
mov esp, ebp
pop ebp
ret
push esi
push edi
lea eax, [ebp - 0x204]
mov esi, 1
push 0x200
push eax
call fcn.006994ef
add esp, 0xc
test eax, eax
je 0x67f296
lea ecx, [ecx]
push 0
push esi
mov edx, ebx
lea ecx, [ebp - 0x204]
call fcn.0067ec2c
push edi
lea eax, [ebp - 0x204]
inc esi
push 0x200
push eax
call fcn.006994ef
add esp, 0x14
test eax, eax
jne 0x67f26c
push edi
call fcn.006999fd
add esp, 4
mov eax, 1
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006981f9
mov esp, ebp
pop ebp
ret