Function at 0x473552
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0x1710c
jmp 0x473304
xor esi, 0x10776
pop esi
push esi
push ebx
add esp, 4
or esi, 0x11f73
call 0x473324
add byte [edx], bh
dec eax
dec esi
inc edi
inc edi
dec edi
inc edx
cmp eax, 0x5e04c483
lea ecx, [ebp - 0x16c0]
mov dword [ebp - 0xcfc], ecx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xcf8], eax
xor ecx, ecx
mov word [ebp - 0x1cc], cx
xor edx, edx
mov word [ebp - 0x2c], dx
push eax
push eax
add esp, 4
and eax, 0x2d86
pop eax
push edx
sub edx, 0x1354a
add edx, 0xc3d6
call 0x47337a
add byte [ecx + 0x49], al
cmp eax, 0x323d383e
inc eax
dec edi
add esp, 4
and edx, 0xc04a
pop edx
mov eax, dword [ebp - 0xcf8]
mov cx, word [eax]
mov word [ebp - 0x10a6], cx
mov edx, dword [ebp - 0xcf8]
add edx, 2
mov dword [ebp - 0xcf8], edx
mov ax, word [ebp - 0x10a6]
mov word [ebp - 0x1cc], ax
mov ecx, dword [ebp - 0xcfc]
mov dx, word [ecx]
mov word [ebp - 0x10a8], dx
mov eax, dword [ebp - 0xcfc]
add eax, 2
mov dword [ebp - 0xcfc], eax
mov cx, word [ebp - 0x10a8]
mov word [ebp - 0x2c], cx
push edx
push edx
add esp, 4
and edx, 0x2a38
pop edx
push ebx
xor ebx, 0x6641
or ebx, 0x29cf
xor ebx, 0x9919
pop ebx
push esi
push edx
add esp, 4
add esi, 0xcfa8
or esi, 0xe882
pop esi
movzx edx, word [ebp - 0x2c]
test edx, edx
jne 0x47342a
movzx eax, word [ebp - 0x1cc]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
mov dword [ebp - 0x1638], eax
jmp 0x473484
movzx edx, word [ebp - 0x1cc]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
je 0x473352
movzx ecx, word [ebp - 0x1cc]
xor ecx, 0x20
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x473352
movzx eax, word [ebp - 0x1cc]
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
jge 0x47346e
mov dword [ebp - 0x1634], 0xffffffff
jmp 0x473478
mov dword [ebp - 0x1634], 1
mov edx, dword [ebp - 0x1634]
mov dword [ebp - 0x1638], edx
enter 0xffffffffffffffe9, 0xffffffffffffffff
enter 0xffffffffffffffe9, 0xffffffffffffffff
cmp dword [ebp - 0x1638], 0
jne 0x4734cd
push eax
push edx
add esp, 4
sub eax, 0x1742e
and eax, 0x17ad4
add eax, 0xa6a7
or eax, 0x3aad
pop eax
push eax
sub eax, 0xc843
add eax, 0x1194e
or eax, 0x129a
pop eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x2c0], eax
jmp 0x473535
push esi
push edi
add esp, 4
xor esi, 0xd941
pop esi
push esi
push edx
add esp, 4
sub esi, 0x11384
xor esi, 0xecfc
and esi, 0x9fa2
add esi, 0x2973
pop esi
push ebx
add ebx, 0x9d40
pop ebx
mov ecx, dword [ebp - 0x50c]
mov edx, dword [ecx]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x50c]
cmp eax, dword [ebp - 0xd00]
je 0x47352b
mov ecx, dword [ebp - 0x50c]
cmp dword [ecx + 0x30], 0
jne 0x4732f6
mov dword [ebp - 0x2c0], 0
push ebx
push ecx
add esp, 4
or ebx, 0x16e18
sub ebx, 0x2eae
call 0x473552
add byte [edx], dh
cmp eax, 0x464c4436
add esp, 4
pop ebx
push edi
and edi, 0x7fe0
jmp 0x473566
pop edi
cmp dword [ebp - 0x2c0], 0
jne 0x473e6b
mov edx, 0x6b
mov word [ebp - 0x1748], dx
mov eax, 0x65
mov word [ebp - 0x1746], ax
mov ecx, 0x72
mov word [ebp - 0x1744], cx
mov edx, 0x6e
mov word [ebp - 0x1742], dx
mov eax, 0x65
mov word [ebp - 0x1740], ax
mov ecx, 0x6c
mov word [ebp - 0x173e], cx
mov edx, 0x33
mov word [ebp - 0x173c], dx
mov eax, 0x32
mov word [ebp - 0x173a], ax
mov ecx, 0x2e
mov word [ebp - 0x1738], cx
mov edx, 0x64
mov word [ebp - 0x1736], dx
mov eax, 0x6c
mov word [ebp - 0x1734], ax
mov ecx, 0x6c
mov word [ebp - 0x1732], cx
xor edx, edx
mov word [ebp - 0x1730], dx
push esi
push edi
add esp, 4
xor esi, 0x1495
xor esi, 0xca6d
jmp 0x473623
pop esi
push eax
push esi
add esp, 4
add eax, 0x88c6
jmp 0x473638
or eax, 0x17811
pop eax
mov byte [ebp - 0x8c4], 0x4c
mov byte [ebp - 0x8c3], 0x6f
mov byte [ebp - 0x8c2], 0x61
mov byte [ebp - 0x8c1], 0x64
mov byte [ebp - 0x8c0], 0x4c
mov byte [ebp - 0x8bf], 0x69
mov byte [ebp - 0x8be], 0x62
mov byte [ebp - 0x8bd], 0x72
mov byte [ebp - 0x8bc], 0x61
mov byte [ebp - 0x8bb], 0x72
mov byte [ebp - 0x8ba], 0x79
mov byte [ebp - 0x8b9], 0x57
mov byte [ebp - 0x8b8], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1d64], eax
mov ecx, dword [ebp - 0x1d64]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1d68], edx
mov eax, dword [ebp - 0x1d68]
mov dword [ebp - 0x163c], eax
push eax
push eax
add esp, 4
add eax, 0xfa97
pop eax
push ebx
sub ebx, 0x4434
sub ebx, 0x7687
and ebx, 0x1ba6
sub ebx, 0xf41
pop ebx
push edi
push ecx
add esp, 4
and edi, 0xdc6
pop edi
cmp dword [ebp - 0x163c], 0
jne 0x47370b
mov dword [ebp - 0x7a4], 0
jmp 0x4739b2
mov ecx, dword [ebp - 0x163c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd0c], eax
push edi
push eax
add esp, 4
and edi, 0x49e1
and edi, 0x11c90
and edi, 0x17535
add edi, 0x7a90
pop edi
push esi
xor esi, 0x1751f
and esi, 0x16d28
xor esi, 0x7560
pop esi
cmp dword [ebp - 0xd0c], 0
jne 0x473767
mov dword [ebp - 0x7a4], 0
jmp 0x4739b2
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp - 0x510], ecx
push ecx
push ecx
add esp, 4
xor ecx, 0x12b76
jmp 0x473786
or ecx, 0x181aa
pop ecx
push ebx
call 0x47379b
add byte [edx], dh
inc edi
inc esi
inc esp
dec ecx
inc edi
add esp, 4
or ebx, 0x1752b
pop ebx
lea edx, [ebp - 0x1748]
mov dword [ebp - 0xd08], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xd04], ecx
xor edx, edx
mov word [ebp - 0x1d0], dx
xor eax, eax
mov word [ebp - 0x30], ax
push edx
call 0x4737de
add byte [eax], bh
push eax
cmp dword [eax + 0x42], edx
dec eax
inc ebp
dec eax
add esp, 4
pop edx
push esi
jmp 0x4737e8
jmp 0x4737ee
pop esi
push ebx
push eax
add esp, 4
or ebx, 0x146b4
sub ebx, 0xc32e
pop ebx
mov ecx, dword [ebp - 0xd04]
mov dx, word [ecx]
mov word [ebp - 0x10aa], dx
mov eax, dword [ebp - 0xd04]
add eax, 2
mov dword [ebp - 0xd04], eax
mov cx, word [ebp - 0x10aa]
mov word [ebp - 0x1d0], cx
mov edx, dword [ebp - 0xd08]
mov ax, word [edx]
mov word [ebp - 0x10ac], ax
mov ecx, dword [ebp - 0xd08]
add ecx, 2
mov dword [ebp - 0xd08], ecx
mov dx, word [ebp - 0x10ac]
mov word [ebp - 0x30], dx
push edi
and edi, 0x14601
pop edi
push edx
push edx
add esp, 4
or edx, 0x53ae
add edx, 0x1fe
and edx, 0x181fd
call 0x473886
add byte [eax + 0x35], dl
dec edx
cmp eax, 0x444b4037
inc ecx
add esp, 4
pop edx
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x4738a7
movzx ecx, word [ebp - 0x1d0]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x1644], ecx
jmp 0x473901
movzx eax, word [ebp - 0x1d0]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x4737cf
movzx edx, word [ebp - 0x1d0]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x4737cf
movzx ecx, word [ebp - 0x1d0]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x4738eb
mov dword [ebp - 0x1640], 0xffffffff
jmp 0x4738f5
mov dword [ebp - 0x1640], 1
mov eax, dword [ebp - 0x1640]
mov dword [ebp - 0x1644], eax
cmp dword [ebp - 0x1644], 0
jne 0x47394a
push esi
jmp 0x473910
xor esi, 0x6c3f
jmp 0x47391e
pop esi
push ecx
jmp 0x473925
call 0x473932
add byte [eax + 0x47], al
inc eax
inc esp
inc eax
inc edx
cmp eax, dword [ebx - 0x3e7efb3c]
cmp dword [ebx], esi
add byte [ecx - 0x75], bl
invalid
push eax
sub eax, 0x195e
and eax, 0x130f0
or eax, 0x2191
pop eax
push ecx
add ecx, 0x1de1
pop ecx
push ebx
push edi
add esp, 4
call 0x473978
add byte [ebx], dh
inc ebp
inc edi
inc eax
cmp byte [eax], bh
add esp, 4
pop ebx
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [ebp - 0xd0c]
je 0x4739a8
mov edx, dword [ebp - 0x510]
cmp dword [edx + 0x30], 0
jne 0x473773
mov dword [ebp - 0x7a4], 0
push ebx
or ebx, 0xc9f1
sub ebx, 0x236
and ebx, 0x17640
and ebx, 0x3172
pop ebx
push esi
push eax
add esp, 4
jmp 0x4739d7
or esi, 0xa421
and esi, 0x8ffe
pop esi
cmp dword [ebp - 0x7a4], 0
jne 0x473a2e
push edi
jmp 0x4739f7
call 0x473a07
add byte [edx + 0x37], al
cmp edi, dword [ebx]
inc esi
xor eax, dword [ebx + esi + 0x48]
inc ebp
add esp, 4
pop edi
push edx
sub edx, 0x11023
add edx, 0x10469
or edx, 0x17df0
pop edx
mov dword [ebp - 0xad4], 0
jmp fcn.00474555
push eax
push edx
add esp, 4
jmp 0x473a3a
add eax, 0x5a11
or eax, 0x8ce7
pop eax
push ecx
push edx
add esp, 4
call 0x473a5c
add byte [ecx], bh
cmp bh, byte [ecx + edi]
inc ecx
xor al, 0x3e
xor bh, byte [0x4c48350]
pop ecx
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x7b4], 0
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x1648], edx
cmp dword [ebp - 0x1648], 0
jne 0x473a9f
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x3d0], eax
jmp 0x473d90
mov ecx, dword [ebp - 0x1648]
mov edx, dword [ebp - 0x37c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x164c], edx
jne 0x473ac7
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x3d0], eax
jmp 0x473d90
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x164c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1650], ecx
cmp dword [ebp - 0x1650], 0
jne 0x473af9
mov edx, dword [ebp - 0x7b4]
mov dword [ebp - 0x3d0], edx
jmp 0x473d90
mov eax, dword [ebp - 0x37c]
add eax, dword [ebp - 0x1650]
mov dword [ebp - 0x7a8], eax
jne 0x473b1e
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x3d0], ecx
jmp 0x473d90
mov edx, dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x37c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1d6c], eax
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ebp - 0x37c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d70], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp - 0x37c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d74], ecx
mov dword [ebp - 0x7ac], 0
jmp 0x473b78
mov edx, dword [ebp - 0x7ac]
add edx, 1
mov dword [ebp - 0x7ac], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp - 0x7ac]
cmp ecx, dword [eax + 0x18]
jae 0x473d84
mov edx, dword [ebp - 0x7ac]
mov eax, dword [ebp - 0x1d6c]
mov ecx, dword [ebp - 0x37c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x728], ecx
mov edx, dword [ebp - 0x7ac]
mov eax, dword [ebp - 0x1d70]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d74]
mov eax, dword [ebp - 0x37c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d78], eax
mov dword [ebp - 0x168], 0
jmp 0x473be8
mov ecx, dword [ebp - 0x168]
add ecx, 1
mov dword [ebp - 0x168], ecx
mov edx, dword [ebp - 0x728]
add edx, dword [ebp - 0x168]
movsx eax, byte [edx]
test eax, eax
je 0x473c9a
mov ecx, dword [ebp - 0x168]
movsx edx, byte [ebp + ecx - 0x8c4]
test edx, edx
je 0x473c9a
push edi
push esi
add esp, 4
or edi, 0x73c6
sub edi, 0x10059
add edi, 0x55a1
pop edi
push ebx
add ebx, 0x1669
jmp 0x473c3a
add ebx, 0x578b
sub ebx, 0x10430
pop ebx
mov eax, dword [ebp - 0x728]
add eax, dword [ebp - 0x168]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movsx eax, byte [ebp + edx - 0x8c4]
cmp ecx, eax
je 0x473c8c
mov ecx, dword [ebp - 0x728]
add ecx, dword [ebp - 0x168]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x168]
movsx ecx, byte [ebp + eax - 0x8c4]
cmp edx, ecx
jne 0x473c93
jmp 0x473bd9
jmp 0x473c9a
push esi
or esi, 0x97b7
pop esi
push ecx
add ecx, 0xc296
pop ecx
push ecx
call 0x473cb9
add byte [0x483a4f47], bh
push eax
inc esp
dec ebx
add esp, 4
pop ecx
push edx
jmp 0x473cc5
and edx, 0x16c9f
pop edx
mov edx, dword [ebp - 0x728]
add edx, dword [ebp - 0x168]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x168]
movsx edx, byte [ebp + ecx - 0x8c4]
cmp eax, edx
jne 0x473cf9
mov dword [ebp - 0xd10], 0
jmp 0x473d68
push ecx
sub ecx, 0x5d78
xor ecx, 0xc031
and ecx, 0x17793
jmp 0x473d12
pop ecx
push edi
push esi
add esp, 4
sub edi, 0xa02d
add edi, 0x4bdd
and edi, 0x1150b
pop edi
mov eax, dword [ebp - 0x728]
add eax, dword [ebp - 0x168]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x168]
movsx eax, byte [ebp + edx - 0x8c4]
or eax, 0x20
cmp ecx, eax
jge 0x473d5e
mov dword [ebp - 0xd10], 0xffffffff
jmp 0x473d68
mov dword [ebp - 0xd10], 1
cmp dword [ebp - 0xd10], 0
jne 0x473d7f
mov ecx, dword [ebp - 0x1d78]
mov dword [ebp - 0x3d0], ecx
jmp 0x473d90
jmp 0x473b69
mov edx, dword [ebp - 0x7b4]
mov dword [ebp - 0x3d0], edx
cmp dword [ebp - 0x3d0], 0
je 0x473e6b
push eax
push esi
add esp, 4
call 0x473daf
add byte [eax + 0x36], cl
dec ecx
xor eax, dword [edi + 0x50]
add esp, 4
call 0x473dbf
add byte [ebp + 0x44], al
dec esp
inc ebp
dec edx
inc edx
inc ebp
add esp, 4
and eax, 0x13f09
xor eax, 0x3fe
pop eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1d7c], eax
push edi
add edi, 0x34cd
or edi, 0x14c8c
call 0x473df7
add byte [ebp + ecx*2 + 0x4d], cl
cmp al, 0x32
xor al, byte [ebx + ecx*2 + 0x39]
add esp, 4
call 0x473e09
add byte [esi + 0x4b], cl
aas
dec ebx
dec ebp
inc edx
push eax
dec edx
add esp, 4
pop edi
mov ecx, dword [ebp - 0x1d7c]
mov dword [ebp - 0x1d80], ecx
lea edx, [ebp - 0x16c0]
push edx
call dword [ebp - 0x1d80]
test eax, eax
jne 0x473e6b
push ebx
and ebx, 0x13f5
call 0x473e41
add byte [edi], bh
inc edi
dec edx
inc ebp
inc ebx
cmp byte [esi + 0x3c], al
dec esp
add esp, 4
pop ebx
push ecx
or ecx, 0x15cb6
jmp 0x473e53
pop ecx
push edi
sub edi, 0x134f1
pop edi
mov dword [ebp - 0xad4], 0
jmp fcn.00474555
push edi
jmp 0x473e75
call 0x473e81
add byte [eax + 0x3f], dl
xor eax, 0x8340383d
les eax, [edi + ebx*2]
push edx
push eax
add esp, 4
or edx, 0x14b9d
xor edx, 0x13b54
xor edx, 0xe039
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1d84], eax
mov ecx, dword [ebp - 0x1d84]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1d88], edx
mov eax, dword [ebp - 0x1d88]
mov dword [ebp - 0x1654], eax
push ecx
call 0x473ed5
add byte [ecx], bh
dec ebp
dec edx
inc edi
xor eax, 0x46423836
add esp, 4
call 0x473ee6
add byte [esi + esi], bh
dec eax
inc ebp
inc ecx
inc esi
inc ecx
cmp eax, dword [ebx - 0x167efb3c]
bound ax, dword [eax]
add byte [ecx + 0x1206de1], al
add byte [ecx - 0x7d], bl
mov ebp, 0xffffe9ac
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2c0], 0
jmp 0x4741b5
push edx
push edi
add esp, 4
or edx, 0x2ab
add edx, 0x172a2
jmp 0x4741ce
call 0x4741db
add byte [ecx + eax*2], dh
dec ecx
push eax
dec eax
inc eax
dec edi
add esp, 4
pop edx
push edx
sub edx, 0x147e1
pop edx
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x338], ecx
push edx
push edi
add esp, 4
call 0x474207
add byte [ecx], bh
dec esi
dec edx
dec esi
dec ebp
dec ebp
add esp, 4
les eax, [ecx + eax*4]
inc edx
and eax, dword [ecx]
add byte [ecx + 0x184e9ca], al
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [ebx + 0x4c], cl
inc esi
inc edx
dec edx
cmp byte [ebp + 0x4f], cl
add esp, 4
pop edx
mov dword [ebp - 0x7c4], 0
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x1660], edx
cmp dword [ebp - 0x1660], 0
jne 0x474258
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x518], eax
jmp fcn.00474549
mov ecx, dword [ebp - 0x1660]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1664], edx
push dword [ebp + 0x11]
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x518], eax
jmp fcn.00474549
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1664]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x4742b2
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x518], edx
jmp fcn.00474549
add byte [eax], al
mov eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x1668]
mov dword [ebp - 0x7b8], eax
jne 0x4742d7
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x518], ecx
jmp fcn.00474549
mov edx, dword [ebp - 0x7b8]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1d8c], eax
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d90], edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d94], ecx
mov dword [ebp - 0x7bc], 0
jmp 0x474331
mov edx, dword [ebp - 0x7bc]
add edx, 1
mov dword [ebp - 0x7bc], edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x7bc]
cmp ecx, dword [eax + 0x18]
jae 0x47453d
mov edx, dword [ebp - 0x7bc]
mov eax, dword [ebp - 0x1d8c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x7c0], ecx
mov edx, dword [ebp - 0x7bc]
mov eax, dword [ebp - 0x1d90]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d94]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d98], eax
mov dword [ebp - 0x16c], 0
jmp 0x4743a1
mov ecx, dword [ebp - 0x16c]
add ecx, 1
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 0x7c0]
add edx, dword [ebp - 0x16c]
movsx eax, byte [edx]
test eax, eax
je 0x474453
mov ecx, dword [ebp - 0x16c]
movsx edx, byte [ebp + ecx - 0x9fc]
test edx, edx
je 0x474453
push esi
push edi
add esp, 4
xor esi, 0xb974
jmp 0x4743df
pop esi
push eax
and eax, 0x14a
sub eax, 0xb4a9
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x12322
add ebx, 0x103d1
pop ebx
mov eax, dword [ebp - 0x7c0]
add eax, dword [ebp - 0x16c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x16c]
movsx eax, byte [ebp + edx - 0x9fc]
cmp ecx, eax
je 0x474445
mov ecx, dword [ebp - 0x7c0]
add ecx, dword [ebp - 0x16c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x16c]
movsx ecx, byte [ebp + eax - 0x9fc]
cmp edx, ecx
jne 0x47444c
jmp 0x474392
jmp 0x474453
push eax
and eax, 0x678f
and eax, 0x1652d
and eax, 0x18496
jmp 0x47446e
pop eax
push esi
or esi, 0xecb1
pop esi
push esi
and esi, 0x1709d
xor esi, 0x107e
pop esi
mov edx, dword [ebp - 0x7c0]
add edx, dword [ebp - 0x16c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x16c]
movsx edx, byte [ebp + ecx - 0x9fc]
cmp eax, edx
jne 0x4744b2
mov dword [ebp - 0xd20], 0
jmp 0x474521
push edx
push edx
add esp, 4
sub edx, 0x17c70
jmp 0x4744c3
pop edx
push edx
push ecx
add esp, 4
add edx, 0x12e0b
xor edx, 0x15ed0
pop edx
push ebx
and ebx, 0x11f6e
sub ebx, 0xa8e0
pop ebx
mov eax, dword [ebp - 0x7c0]
add eax, dword [ebp - 0x16c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x16c]
movsx eax, byte [ebp + edx - 0x9fc]
or eax, 0x20
cmp ecx, eax
jge 0x474517
mov dword [ebp - 0xd20], 0xffffffff
jmp 0x474521
mov dword [ebp - 0xd20], 1
cmp dword [ebp - 0xd20], 0
jne 0x474538
mov ecx, dword [ebp - 0x1d98]
mov dword [ebp - 0x518], ecx
jmp fcn.00474549
jmp 0x474322
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x518], edx