Function at 0x41dfeb
Capabilities:
Write file on windows

Disassembly:
push 0x1cc
push 0x43d2c0
call fcn.00418280
mov eax, dword [0x447d10]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x194], eax
mov byte [ebp - 0x195], al
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
test al, al
je 0x41e724
movzx eax, al
push eax
call fcn.0041fa19
pop ecx
test eax, eax
je 0x41da94
dec dword [ebp - 0x184]
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
mov esi, eax
push esi
call fcn.0041fa19
pop ecx
test eax, eax
jne 0x41da53
cmp esi, 0xffffffff
je 0x41da7e
push dword [ebp + 8]
push esi
call fcn.00421a35
pop ecx
pop ecx
inc dword [ebp + 0xc]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
push eax
call fcn.0041fa19
pop ecx
test eax, eax
jne 0x41da7e
jmp 0x41da32
mov esi, dword [ebp + 0xc]
cmp byte [esi], 0x25
jne 0x41e68e
xor edi, edi
mov dword [ebp - 0x1a0], edi
mov byte [ebp - 0x198], 0
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x18c], edi
mov byte [ebp - 0x1a1], 0
mov byte [ebp - 0x197], 0
mov byte [ebp - 0x18e], 0
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x196], 0
mov byte [ebp - 0x185], 0
mov byte [ebp - 0x18d], 1
mov dword [ebp - 0x1c8], edi
inc esi
movzx ebx, byte [esi]
movzx eax, bl
push eax
call fcn.0041f9a0
pop ecx
test eax, eax
je 0x41db1c
inc dword [ebp - 0x1b4]
lea eax, [edi + edi*4]
lea edi, [ebx + eax*2 - 0x30]
jmp 0x41dbdb
cmp ebx, 0x4e
jg 0x41dbaa
je 0x41dbdb
cmp ebx, 0x2a
je 0x41dba2
cmp ebx, 0x46
je 0x41dbdb
cmp ebx, 0x49
je 0x41db4e
cmp ebx, 0x4c
jne 0x41dbb9
inc byte [ebp - 0x18d]
jmp 0x41dbdb
mov cl, byte [esi + 1]
cmp cl, 0x36
jne 0x41db76
lea eax, [esi + 2]
cmp byte [eax], 0x34
jne 0x41db76
mov esi, eax
inc dword [ebp - 0x1c8]
and dword [ebp - 0x1ac], 0
and dword [ebp - 0x1a8], 0
jmp 0x41dbdb
cmp cl, 0x33
jne 0x41db87
lea eax, [esi + 2]
cmp byte [eax], 0x32
jne 0x41db87
mov esi, eax
jmp 0x41dbdb
cmp cl, 0x64
je 0x41dbdb
cmp cl, 0x69
je 0x41dbdb
cmp cl, 0x6f
je 0x41dbdb
cmp cl, 0x78
je 0x41dbdb
cmp cl, 0x58
jne 0x41dbb9
jmp 0x41dbdb
inc byte [ebp - 0x18e]
jmp 0x41dbdb
cmp ebx, 0x68
je 0x41dbcf
cmp ebx, 0x6c
je 0x41dbc1
cmp ebx, 0x77
je 0x41dbc7
inc byte [ebp - 0x17d]
jmp 0x41dbdb
inc byte [ebp - 0x18d]
inc byte [ebp - 0x185]
jmp 0x41dbdb
dec byte [ebp - 0x18d]
dec byte [ebp - 0x185]
cmp byte [ebp - 0x17d], 0
je 0x41daf8
mov dword [ebp - 0x18c], edi
mov dword [ebp + 0xc], esi
cmp byte [ebp - 0x18e], 0
jne 0x41dc14
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1dc], eax
add eax, 4
mov dword [ebp + 0x10], eax
mov ebx, dword [eax - 4]
mov dword [ebp - 0x1b0], ebx
jmp 0x41dc1a
mov ebx, dword [ebp - 0x1b0]
mov byte [ebp - 0x17d], 0
cmp byte [ebp - 0x185], 0
jne 0x41dc42
mov al, byte [esi]
cmp al, 0x53
je 0x41dc3b
cmp al, 0x43
mov byte [ebp - 0x185], 0xff
jne 0x41dc42
mov byte [ebp - 0x185], 1
movzx edi, byte [esi]
or edi, 0x20
mov dword [ebp - 0x1c0], edi
cmp edi, 0x6e
je 0x41dc86
cmp edi, 0x63
je 0x41dcf2
cmp edi, 0x7b
je 0x41dcf2
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
mov esi, eax
push esi
call fcn.0041fa19
pop ecx
test eax, eax
jne 0x41dc65
mov dword [ebp - 0x194], esi
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x1b4]
test ecx, ecx
je 0x41dca0
cmp dword [ebp - 0x18c], 0
je 0x41df96
cmp edi, 0x6f
jg 0x41df62
je 0x41e383
cmp edi, 0x63
je 0x41df35
cmp edi, 0x64
je 0x41e383
jle 0x41df88
cmp edi, 0x67
jle 0x41dd2b
cmp edi, 0x69
je 0x41dd0d
cmp edi, 0x6e
jne 0x41df88
mov eax, dword [ebp - 0x184]
cmp byte [ebp - 0x18e], 0
je 0x41e657
jmp 0x41e683
inc dword [ebp - 0x184]
mov esi, dword [ebp + 8]
mov edx, esi
call fcn.0041d9d9
mov dword [ebp - 0x194], eax
jmp 0x41dc89
push 0x64
pop edi
mov ebx, dword [ebp - 0x194]
cmp ebx, 0x2d
jne 0x41e231
mov byte [ebp - 0x197], 1
jmp 0x41e236
lea esi, [ebp - 0x17c]
mov ebx, dword [ebp - 0x194]
cmp ebx, 0x2d
jne 0x41dd4a
mov byte [ebp - 0x17c], bl
lea esi, [ebp - 0x17b]
jmp 0x41dd4f
cmp ebx, 0x2b
jne 0x41dd6f
dec dword [ebp - 0x18c]
inc dword [ebp - 0x184]
mov edi, dword [ebp + 8]
mov edx, edi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
jmp 0x41dd72
mov edi, dword [ebp + 8]
cmp dword [ebp - 0x1b4], 0
je 0x41dd87
cmp dword [ebp - 0x18c], 0x15d
jle 0x41ddc1
mov dword [ebp - 0x18c], 0x15d
jmp 0x41ddc1
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41ddcc
inc dword [ebp - 0x19c]
mov byte [esi], bl
inc esi
inc dword [ebp - 0x184]
mov edx, edi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
jne 0x41dd93
cmp byte [0x4487f4], bl
jne 0x41de36
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41de36
inc dword [ebp - 0x184]
mov edx, edi
call fcn.0041d9d9
mov ebx, eax
mov al, byte [0x4487f4]
mov byte [esi], al
inc esi
jmp 0x41de25
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41de36
inc dword [ebp - 0x19c]
mov byte [esi], bl
inc esi
inc dword [ebp - 0x184]
mov edx, edi
call fcn.0041d9d9
mov ebx, eax
push ebx
mov dword [ebp - 0x194], ebx
call fcn.0041f9a0
pop ecx
test eax, eax
jne 0x41ddfd
cmp dword [ebp - 0x19c], 0
je 0x41deda
cmp ebx, 0x65
je 0x41de51
cmp ebx, 0x45
jne 0x41deda
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41deda
mov byte [esi], 0x65
inc esi
inc dword [ebp - 0x184]
mov edx, edi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
cmp ebx, 0x2d
jne 0x41de84
mov byte [esi], al
inc esi
jmp 0x41de89
cmp ebx, 0x2b
jne 0x41decf
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
jne 0x41deba
and dword [ebp - 0x18c], eax
jmp 0x41decf
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41deda
inc dword [ebp - 0x19c]
mov byte [esi], bl
inc esi
mov edx, edi
inc dword [ebp - 0x184]
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
jne 0x41dea1
dec dword [ebp - 0x184]
cmp ebx, 0xffffffff
je 0x41deee
push edi
push ebx
call fcn.00421a35
pop ecx
pop ecx
cmp dword [ebp - 0x19c], 0
je 0x41e724
cmp byte [ebp - 0x18e], 0
jne 0x41e683
inc dword [ebp - 0x1b8]
mov byte [esi], 0
lea eax, [ebp - 0x17c]
push eax
push dword [ebp - 0x1b0]
movsx eax, byte [ebp - 0x18d]
dec eax
push eax
call dword [0x4480f8]
add esp, 0xc
jmp 0x41e683
test ecx, ecx
jne 0x41df49
mov dword [ebp - 0x1b4], 1
inc dword [ebp - 0x18c]
cmp byte [ebp - 0x185], 0
jle 0x41e113
mov byte [ebp - 0x196], 1
jmp 0x41e113
mov eax, edi
sub eax, 0x70
je 0x41e37c
sub eax, 3
je 0x41df49
dec eax
dec eax
je 0x41e383
sub eax, 3
je 0x41dd10
sub eax, 3
je 0x41dfc3
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, dword [ebp - 0x194]
je 0x41dfa2
cmp dword [ebp - 0x194], 0xffffffff
jmp 0x41e6eb
dec byte [ebp - 0x195]
cmp byte [ebp - 0x18e], 0
jne 0x41e683
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + 0x10], eax
jmp 0x41e683
cmp byte [ebp - 0x185], 0
jle 0x41dfd3
mov byte [ebp - 0x196], 1
mov edi, dword [ebp + 0xc]
inc edi
mov dword [ebp + 0xc], edi
mov dword [ebp - 0x1d0], edi
cmp byte [edi], 0x5e
jne 0x41dff3
inc edi
mov dword [ebp - 0x1d0], edi
mov byte [ebp - 0x1a1], 0xff
mov ebx, dword [ebp - 0x1bc]
test ebx, ebx
jne 0x41e05a
and dword [ebp - 4], ebx
push 0x20
pop eax
call fcn.00416440
mov dword [ebp - 0x18], esp
mov ebx, esp
mov dword [ebp - 0x1bc], ebx
or dword [ebp - 4], 0xffffffff
jmp 0x41e05a
push 0x20
push 0
push ebx
call fcn.004178a0
add esp, 0xc
cmp dword [ebp - 0x1c0], 0x7b
jne 0x41e0e7
cmp byte [edi], 0x5d
jne 0x41e0e7
mov dl, 0x5d
inc edi
mov byte [ebx + 0xb], 0x20
jmp 0x41e0ed
inc edi
cmp al, 0x2d
jne 0x41e0ce
test dl, dl
je 0x41e0ce
mov cl, byte [edi]
cmp cl, 0x5d
je 0x41e0ce
inc edi
cmp dl, cl
jae 0x41e097
mov al, cl
jmp 0x41e09b
mov al, dl
mov dl, cl
cmp dl, al
ja 0x41e0ca
movzx esi, dl
sub al, dl
inc al
movzx eax, al
mov dword [ebp - 0x1d4], eax
mov eax, esi
shr eax, 3
add eax, ebx
mov ecx, esi
and ecx, 7
mov dl, 1
shl dl, cl
or byte [eax], dl
inc esi
dec dword [ebp - 0x1d4]
jne 0x41e0af
xor dl, dl
jmp 0x41e0ed
mov byte [ebp - 0x198], al
movzx ecx, al
mov eax, ecx
shr eax, 3
add eax, ebx
and ecx, 7
mov dl, 1
shl dl, cl
or byte [eax], dl
mov dl, byte [ebp - 0x198]
mov al, byte [edi]
cmp al, 0x5d
jne 0x41e07e
test al, al
je 0x41e724
mov ebx, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1c0], 0x7b
jne 0x41e10d
mov dword [ebp + 0xc], edi
mov edi, dword [ebp - 0x1c0]
mov esi, ebx
dec dword [ebp - 0x184]
cmp dword [ebp - 0x194], 0xffffffff
je 0x41e134
push dword [ebp + 8]
push dword [ebp - 0x194]
call fcn.00421a35
pop ecx
pop ecx
cmp dword [ebp - 0x1b4], 0
je 0x41e151
mov eax, dword [ebp - 0x18c]
dec dword [ebp - 0x18c]
test eax, eax
je 0x41e334
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
mov dword [ebp - 0x194], eax
cmp eax, 0xffffffff
je 0x41e31e
cmp edi, 0x63
je 0x41e1c0
cmp edi, 0x73
jne 0x41e187
cmp eax, 9
jl 0x41e182
cmp eax, 0xd
jle 0x41e187
cmp eax, 0x20
jne 0x41e1c0
cmp edi, 0x7b
jne 0x41e31e
mov ecx, eax
and ecx, 7
xor edx, edx
inc edx
shl edx, cl
mov ecx, eax
sar ecx, 3
mov edi, dword [ebp - 0x1bc]
movsx ecx, byte [ecx + edi]
movsx edi, byte [ebp - 0x1a1]
xor ecx, edi
test ecx, edx
je 0x41e31e
mov edi, dword [ebp - 0x1c0]
cmp byte [ebp - 0x18e], 0
jne 0x41e318
cmp byte [ebp - 0x196], 0
je 0x41e30a
mov byte [ebp - 0x1c4], al
movzx eax, al
mov ecx, dword [str.________________________________H]
test byte [ecx + eax*2 + 1], 0x80
je 0x41e204
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
mov byte [ebp - 0x1c3], al
push dword [0x4487f0]
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1cc]
push eax
call fcn.00421a0a
add esp, 0xc
mov ax, word [ebp - 0x1cc]
mov word [ebx], ax
inc ebx
inc ebx
jmp 0x41e30d
cmp ebx, 0x2b
jne 0x41e260
dec dword [ebp - 0x18c]
jne 0x41e24b
test ecx, ecx
je 0x41e24b
mov byte [ebp - 0x17d], 1
jmp 0x41e260
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
cmp ebx, 0x30
jne 0x41e3c6
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
cmp bl, 0x78
je 0x41e2d2
cmp bl, 0x58
je 0x41e2d2
mov dword [ebp - 0x19c], 1
cmp edi, 0x78
je 0x41e2b6
cmp dword [ebp - 0x1b4], 0
je 0x41e2ae
dec dword [ebp - 0x18c]
jne 0x41e2ae
inc byte [ebp - 0x17d]
push 0x6f
pop edi
jmp 0x41e3c6
dec dword [ebp - 0x184]
cmp ebx, 0xffffffff
je 0x41e2ca
push esi
push ebx
call fcn.00421a35
pop ecx
pop ecx
push 0x30
pop ebx
jmp 0x41e3c0
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
cmp dword [ebp - 0x1b4], 0
je 0x41e306
sub dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 1
jge 0x41e306
inc byte [ebp - 0x17d]
push 0x78
jmp 0x41e2b0
mov byte [ebx], al
inc ebx
mov dword [ebp - 0x1b0], ebx
jmp 0x41e134
inc esi
jmp 0x41e134
dec dword [ebp - 0x184]
cmp eax, 0xffffffff
je 0x41e334
push dword [ebp + 8]
push eax
call fcn.00421a35
pop ecx
pop ecx
cmp esi, ebx
je 0x41e724
cmp byte [ebp - 0x18e], 0
jne 0x41e683
inc dword [ebp - 0x1b8]
cmp dword [ebp - 0x1c0], 0x63
je 0x41e683
mov eax, dword [ebp - 0x1b0]
cmp byte [ebp - 0x196], 0
je 0x41e374
and word [eax], 0
jmp 0x41e683
mov byte [eax], 0
jmp 0x41e683
mov byte [ebp - 0x18d], 1
mov ebx, dword [ebp - 0x194]
cmp ebx, 0x2d
jne 0x41e397
mov byte [ebp - 0x197], 1
jmp 0x41e39c
cmp ebx, 0x2b
jne 0x41e3c6
dec dword [ebp - 0x18c]
jne 0x41e3b1
test ecx, ecx
je 0x41e3b1
mov byte [ebp - 0x17d], 1
jmp 0x41e3c6
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
cmp dword [ebp - 0x1c8], 0
je 0x41e530
cmp byte [ebp - 0x17d], 0
jne 0x41e4ff
cmp edi, 0x78
je 0x41e44b
cmp edi, 0x70
je 0x41e44b
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
je 0x41e488
cmp edi, 0x6f
jne 0x41e428
cmp ebx, 0x38
jge 0x41e488
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a8]
shld ecx, eax, 3
shl eax, 3
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], ecx
jmp 0x41e48e
push 0
push 0xa
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
call fcn.00418570
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], edx
jmp 0x41e48e
push ebx
call fcn.0041f9da
pop ecx
test eax, eax
je 0x41e488
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a8]
shld ecx, eax, 4
shl eax, 4
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], ecx
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
jne 0x41e48e
and ebx, 0xffffffdf
sub ebx, 7
jmp 0x41e48e
inc byte [ebp - 0x17d]
cmp byte [ebp - 0x17d], 0
jne 0x41e4d8
inc dword [ebp - 0x19c]
lea eax, [ebx - 0x30]
cdq
add dword [ebp - 0x1ac], eax
adc dword [ebp - 0x1a8], edx
cmp dword [ebp - 0x1b4], 0
je 0x41e4c7
dec dword [ebp - 0x18c]
jne 0x41e4c7
mov byte [ebp - 0x17d], 1
jmp 0x41e4ec
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
jmp 0x41e4ec
dec dword [ebp - 0x184]
cmp ebx, 0xffffffff
je 0x41e4ec
push esi
push ebx
call fcn.00421a35
pop ecx
pop ecx
cmp byte [ebp - 0x17d], 0
je 0x41e3e0
mov dword [ebp - 0x194], ebx
cmp byte [ebp - 0x197], 0
je 0x41e623
mov eax, dword [ebp - 0x1ac]
neg eax
mov ecx, dword [ebp - 0x1a8]
adc ecx, 0
neg ecx
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], ecx
jmp 0x41e623
cmp byte [ebp - 0x17d], 0
jne 0x41e614
cmp edi, 0x78
je 0x41e578
cmp edi, 0x70
je 0x41e578
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
je 0x41e59d
cmp edi, 0x6f
jne 0x41e565
cmp ebx, 0x38
jge 0x41e59d
shl dword [ebp - 0x1a0], 3
jmp 0x41e5a3
mov eax, dword [ebp - 0x1a0]
lea eax, [eax + eax*4]
shl eax, 1
mov dword [ebp - 0x1a0], eax
jmp 0x41e5a3
push ebx
call fcn.0041f9da
pop ecx
test eax, eax
je 0x41e59d
shl dword [ebp - 0x1a0], 4
push ebx
call fcn.0041f9a0
pop ecx
test eax, eax
jne 0x41e5a3
and ebx, 0xffffffdf
sub ebx, 7
jmp 0x41e5a3
inc byte [ebp - 0x17d]
cmp byte [ebp - 0x17d], 0
jne 0x41e5ed
inc dword [ebp - 0x19c]
mov eax, dword [ebp - 0x1a0]
lea eax, [eax + ebx - 0x30]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1b4], 0
je 0x41e5dc
dec dword [ebp - 0x18c]
jne 0x41e5dc
mov byte [ebp - 0x17d], 1
jmp 0x41e601
inc dword [ebp - 0x184]
mov edx, esi
call fcn.0041d9d9
mov ebx, eax
jmp 0x41e601
dec dword [ebp - 0x184]
cmp ebx, 0xffffffff
je 0x41e601
push esi
push ebx
call fcn.00421a35
pop ecx
pop ecx
cmp byte [ebp - 0x17d], 0
je 0x41e53d
mov dword [ebp - 0x194], ebx
cmp byte [ebp - 0x197], 0
je 0x41e623
neg dword [ebp - 0x1a0]
cmp edi, 0x46
jne 0x41e62f
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0
je 0x41e724
cmp byte [ebp - 0x18e], 0
jne 0x41e683
inc dword [ebp - 0x1b8]
mov ebx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x1c8], 0
je 0x41e673
mov eax, dword [ebp - 0x1ac]
mov dword [ebx], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebx + 4], eax
jmp 0x41e683
cmp byte [ebp - 0x18d], 0
je 0x41e680
mov dword [ebx], eax
jmp 0x41e683
mov word [ebx], ax
inc byte [ebp - 0x195]
inc dword [ebp + 0xc]
jmp 0x41e705
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
mov ebx, eax
mov dword [ebp - 0x194], ebx
movzx eax, byte [esi]
inc esi
mov dword [ebp + 0xc], esi
cmp eax, ebx
jne 0x41e6e8
movzx eax, bl
mov ecx, dword [str.________________________________H]
test byte [ecx + eax*2 + 1], 0x80
je 0x41e705
inc dword [ebp - 0x184]
mov edx, dword [ebp + 8]
call fcn.0041d9d9
movzx ecx, byte [esi]
inc esi
mov dword [ebp + 0xc], esi
cmp ecx, eax
je 0x41e6ff
cmp eax, 0xffffffff
je 0x41e6e8
push dword [ebp + 8]
push eax
call fcn.00421a35
pop ecx
pop ecx
cmp ebx, 0xffffffff
je 0x41e724
push dword [ebp + 8]
push dword [ebp - 0x194]
call fcn.00421a35
pop ecx
pop ecx
jmp 0x41e724
dec dword [ebp - 0x184]
cmp dword [ebp - 0x194], 0xffffffff
jne 0x41da32
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0x25
jne 0x41e724
cmp byte [eax + 1], 0x6e
je 0x41da32
cmp dword [ebp - 0x1d8], 1
jne 0x41e739
push dword [ebp - 0x1bc]
call fcn.004160e5
pop ecx
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x194], 0xffffffff
jne 0x41e757
test eax, eax
jne 0x41e757
cmp byte [ebp - 0x195], al
jne 0x41e757
or eax, 0xffffffff
lea esp, [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1c]
call fcn.004164ae
call fcn.004182bb
ret