Function at 0x60be2c
Capabilities:
Write file on windows

Disassembly:
add al, 0
int3
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov esi, ecx
xor edi, edi
mov al, byte [edi + esi]
cmp al, 0x20
je 0x60be4b
cmp al, 9
je 0x60be4b
cmp al, 0xd
jne 0x60be4e
inc edi
jmp 0x60be3c
lea eax, [edi + esi]
mov ebx, edi
mov dword [ebp - 0x20], eax
mov al, byte [eax]
cmp al, 0xa
je 0x60c396
test al, al
je 0x60c396
cmp al, 0x23
je 0x60c396
mov cl, byte [ebx + esi]
lea eax, [ecx - 0x41]
cmp al, 0x19
jbe 0x60be89
lea eax, [ecx - 0x61]
cmp al, 0x19
jbe 0x60be89
sub cl, 0x30
cmp cl, 9
ja 0x60be8c
inc ebx
jmp 0x60be70
mov edx, ebx
mov al, byte [edx + esi]
cmp al, 0x20
je 0x60be9d
cmp al, 9
je 0x60be9d
cmp al, 0xd
jne 0x60bea0
inc edx
jmp 0x60be8e
cmp byte [edx + esi], 0x3d
mov eax, dword [ebp + 0xc]
jne 0x60c0de
inc edx
mov ecx, esi
call fcn.0060ba3c
sub ebx, edi
mov dword [ebp - 0x18], eax
js 0x60beca
mov edx, ebx
lea ecx, [edi + esi]
call fcn.0060610c
mov ecx, eax
jmp 0x60becc
xor ecx, ecx
call fcn.0060ad1c
mov edi, eax
call fcn.006063cc
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x60bef1
cmp dword [edi + 0xc], 0
jne 0x60bef1
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x60bf48
test eax, eax
jne 0x60bf3e
push dword [ebp + 8]
push dword [ebp - 8]
push 0x43cbd8
push 1
call fcn.006060bc
add esp, 0x10
test byte [0x43fedc], 1
je 0x60bf2f
mov eax, dword [0x443d10]
test eax, eax
je 0x60bf2f
push eax
push 1
push ebx
push dword [ebp - 0x20]
call fcn.00626a60
add esp, 0x10
push 0x43cbf8
push 1
call fcn.006060bc
add esp, 8
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x18]
mov ecx, esi
call fcn.0060ba3c
mov edx, dword [edi + 4]
mov ebx, eax
cmp edx, 0xe
ja case.default.0x60bf67
movzx ecx, byte [edx + 0x407304]
jmp dword [ecx*4 + 0x4072e8]
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x60c0b2
push dword [ebp + 8]
push dword [ebp - 8]
push 0x43cc88
push 1
call fcn.006060bc
add esp, 0x10
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00625a34
mov dl, 0x6e
inc eax
add dh, bh
outsb dx, byte [esi]
inc eax
add byte [edi], dh
outsd dx, dword [esi]
inc eax
add byte [ebp + 0x6f], ch
inc eax
add byte [esi + 0x7600406f], dh
jo 0x60c3fb
add byte [edi + 0x4071], bl
add byte [eax], al
add dword [edx], eax
add al, byte [edx]
add al, byte [ebx]
add al, 4
add al, 5
push es
push es
int3
add byte [esi - 0x7d], ah
js 0x60c408
add byte [edi], cl
test byte [esi + 0x53000000], ch
push edi
lea ebx, [eax + 0xa]
push 0x43cca0
push ebx
call fcn.006268f2
mov edi, eax
add esp, 8
test edi, edi
jne 0x60c44a
call fcn.00625c21
push ebx
push 0x43cca4
push dword [eax]
push 1
call fcn.00606aac
add esp, 0x10
or eax, 0xffffffff
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006253f9
mov esp, ebp
pop ebp
ret
push esi
push edi
lea eax, [ebp - 0x204]
mov esi, 1
push 0x200
push eax
call fcn.006266ef
add esp, 0xc
test eax, eax
je 0x60c496
lea ecx, [ecx]
push 0
push esi
mov edx, ebx
lea ecx, [ebp - 0x204]
call fcn.0060be2c
push edi
lea eax, [ebp - 0x204]
inc esi
push 0x200
push eax
call fcn.006266ef
add esp, 0x14
test eax, eax
jne 0x60c46c
push edi
call fcn.00626bfd
add esp, 4
mov eax, 1
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006253f9
mov esp, ebp
pop ebp
ret