Function at 0x436ec0
Capabilities:
Write file on windows

Disassembly:
test dword [esi + 0xa9c], 0x40000000
push ebx
mov ebx, eax
je 0x437189
mov eax, dword [esp + 8]
push ebp
push edi
xor edi, edi
test eax, eax
je 0x436fcf
cmp eax, 0x3c
mov eax, str.RCVD
je 0x436ef2
mov eax, str.SENT
push eax
push str._s_IAC_SB
push esi
call fcn.00423120
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, 3
jb 0x436fc6
movzx edi, byte [ebx + eax - 2]
movzx ebp, byte [ebx + eax - 1]
cmp edi, 0xff
jne 0x436f2c
cmp ebp, 0xf0
je 0x436fc6
push str._terminated_by
push esi
call fcn.00423120
add esp, 8
cmp edi, 0x27
ja 0x436f4e
mov eax, dword [edi*4 + 0x676d60]
push eax
push 0x676fe4
jmp 0x436f6e
lea ecx, [edi - 0xec]
cmp ecx, 0x13
ja 0x436f68
mov edx, dword [edi*4 + 0x676a50]
push edx
push 0x676fe4
jmp 0x436f6e
push edi
push 0x676fe0
push esi
call fcn.00423120
add esp, 0xc
cmp ebp, 0x27
jg 0x436f8b
mov eax, dword [ebp*4 + 0x676d60]
push eax
push 0x6e4b04
jmp 0x436fab
lea ecx, [ebp - 0xec]
cmp ecx, 0x13
ja 0x436fa5
mov edx, dword [ebp*4 + 0x676a50]
push edx
push 0x6e4b04
jmp 0x436fab
push ebp
push 0x673c78
push esi
call fcn.00423120
add esp, 0xc
push str.__not_IAC_SE__
push esi
call fcn.00423120
mov eax, dword [esp + 0x1c]
add esp, 8
sub eax, 2
mov dword [esp + 0x14], eax
jmp 0x436fd3
mov eax, dword [esp + 0x14]
cmp eax, 1
jae 0x436fec
pop edi
pop ebp
pop ebx
mov dword [esp + 8], str._Empty_suboption__
mov dword [esp + 4], esi
jmp fcn.00423120
mov al, byte [ebx]
cmp al, 0x27
ja 0x437029
movzx eax, al
lea ecx, [eax - 0x18]
cmp ecx, 0xf
ja case.0x437004.25
movzx ecx, byte [ecx + 0x437194]
jmp dword [ecx*4 + 0x43718c]
mov edx, dword [eax*4 + 0x676d60]
push edx
push 0x6e4b04
jmp 0x437033
mov eax, dword [eax*4 + 0x676d60]
push eax
push str._s__unsupported_
jmp 0x437033
movzx ecx, byte [edi + ebx]
push ecx
push str._d__unknown_
push esi
call fcn.00423120
add esp, 0xc
cmp byte [ebx], 0x1f
je 0x43713d
movzx eax, byte [ebx + 1]
cmp eax, 3
ja case.default.0x43704e
jmp dword [eax*4 + 0x4371a4]
push 0x676f94
jmp 0x43706f
push str._SEND
jmp 0x43706f
push str._INFO_REPLY
jmp 0x43706f
push str._NAME
push esi
call fcn.00423120
add esp, 8
mov al, byte [ebx]
cmp al, 0x18
je 0x437121
cmp al, 0x23
je 0x437121
cmp al, 0x27
je 0x4370bd
mov ebp, dword [esp + 0x14]
mov edi, 2
cmp ebp, edi
jbe 0x43716e
nop
movzx edx, byte [edi + ebx]
push edx
push str.__.2x
push esi
call fcn.00423120
inc edi
add esp, 0xc
cmp edi, ebp
jb 0x4370a0
jmp 0x43716e
cmp byte [ebx + 1], 0
jne 0x43716e
push 0x6e4e30
push esi
call fcn.00423120
mov ebp, dword [esp + 0x1c]
mov edi, 3
add esp, 8
cmp ebp, edi
jbe 0x43716e
movzx ecx, byte [edi + ebx]
mov eax, ecx
sub eax, 0
je 0x43710c
dec eax
je 0x437105
push ecx
push 0x676f6c
push esi
call fcn.00423120
add esp, 0xc
jmp 0x43711a
push 0x676f68
jmp 0x437111
push 0x673b3c
push esi
call fcn.00423120
add esp, 8
inc edi
cmp edi, ebp
jb 0x4370e6
jmp 0x43716e
mov eax, dword [esp + 0x14]
mov byte [ebx + eax], 0
add ebx, 2
push ebx
push 0x676f60
push esi
call fcn.00423120
add esp, 0xc
jmp 0x43716e
cmp dword [esp + 0x14], 4
jbe 0x43716e
movzx ecx, byte [ebx + 3]
movzx edx, byte [ebx + 4]
movzx eax, byte [ebx + 1]
shl ecx, 8
or ecx, edx
push ecx
movzx ecx, byte [ebx + 2]
shl eax, 8
or eax, ecx
push eax
push str.Width:__d___Height:__d
push esi
call fcn.00423120
add esp, 0x10
cmp dword [esp + 0x10], 0
pop edi
pop ebp
je 0x437189
pop ebx
mov dword [esp + 8], 0x6768ec
mov dword [esp + 4], esi
jmp fcn.00423120
pop ebx
ret