Function at 0x471470
Capabilities:
Allocate or change rwx memory
Check if file exists
Execute shellcode via indirect call
Get file attributes
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53152e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc60
mov eax, dword [0x5c6150]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xbf4], ecx
mov eax, dword [ebx + 0xc]
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0xbe8], eax
mov dword [ebp - 0xbe0], esi
mov byte [ebp - 0xc00], 0
mov dword [ebp - 0xc04], 0
lea ecx, [ebp - 0x880]
mov dword [ebp - 4], 0
call fcn.0044fd40
push 1
lea ecx, [ebp - 0x878]
mov dword [ebp - 0x760], 0
mov dword [ebp - 0x87c], 0
call fcn.00450b00
cmp byte [ebp - 0x764], 0
lea eax, [ebp - 0x874]
cmove eax, dword [ebp - 0x878]
xor ecx, ecx
mov word [eax + 4], cx
lea edx, [ebp - 0x880]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc04]
call fcn.0045ed60
test al, al
jne 0x471547
xor edi, edi
jmp 0x472241
push 0
push 0
push 0
push 0
push 0x5a2518
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x9a8]
call fcn.00451900
push 0x472c90
push 0x472c50
push 2
push 0x20
lea eax, [ebp - 0x758]
mov byte [ebp - 4], 2
push eax
call fcn.004d755d
lea ecx, [ebp - 0x718]
call fcn.0044fd40
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x71c], 0
mov byte [ebp - 0x5f4], 1
push 1
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 3
call fcn.00472cf0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x9a4], 0
je 0x4721a5
cmp byte [ebp - 0x88c], 0
lea eax, [ebp - 0x99c]
cmove eax, dword [ebp - 0x9a0]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4721a5
shr eax, 4
not al
and al, 1
je 0x4721a5
cmp byte [ebp - 0x88c], 0
lea eax, [ebp - 0x99c]
lea ecx, [ebp - 0xad8]
cmove eax, dword [ebp - 0x9a0]
add eax, 4
push eax
call fcn.0046bd50
test al, al
jne 0x47163c
lea ecx, [ebp - 0xc04]
call fcn.00450c80
push 0x5a259c
jmp 0x4721b5
lea ecx, [ebp - 0x758]
mov dword [ebp - 0x73c], 0
call fcn.00473e00
lea ecx, [ebp - 0x738]
mov dword [ebp - 0x71c], 0
call fcn.00473e00
push 0
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0xad8]
call fcn.00473090
push 1
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0xad8]
call fcn.00473090
push dword [ebp - 0xa20]
lea ecx, [ebp - 0x718]
call fcn.0044ff70
lea ecx, [ebp - 0xad8]
call fcn.00473820
xor eax, eax
mov dword [ebp - 0xc2c], fcn.004e1b5b
mov dword [ebp - 0xc28], fcn.004e1ae7
mov dword [ebp - 0xc24], fcn.004e1b56
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0xc1c], 0x1fff8
mov dword [ebp - method.allocator_unsigned_char__class_TAllocDefault_.virtual_0], vtable.t_heap.0
lea ecx, [ebp - 0x5f0]
call fcn.0044fd40
lea ecx, [ebp - 0x360]
call fcn.0044fd40
lea ecx, [ebp - 0x4c8]
call fcn.0044fd40
sub esp, 0x10
mov byte [ebp - 4], 8
movss xmm3, dword [0x5af4c4]
lea eax, [ebp - 0xc18]
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 0xc18], fcn.004e1b5b
mov dword [ebp - 0xc14], fcn.004e1ae7
mov dword [esp + 8], 0x40100000
mov dword [esp + 4], 0x3e800000
push eax
mov dword [ebp - 0xc10], fcn.004e1b56
call fcn.00412bf0
xor edx, edx
mov byte [ebp - 4], 9
push esi
lea ecx, [ebp - 0x758]
mov dword [ebp - 0xbec], edx
xor edi, edi
call fcn.00472cd0
test eax, eax
jle 0x471d2f
xor eax, eax
mov dword [ebp - 0xbe4], eax
cmp esi, 1
ja 0x471c35
mov edi, esi
shl edi, 5
test edx, edx
js 0x471c35
cmp edx, dword [ebp + edi - 0x73c]
jge 0x471c35
mov edi, dword [ebp + edi - 0x758]
add edi, eax
je 0x471c04
push 1
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x5ec], 0
call fcn.00450b00
cmp byte [ebp - 0x4d4], 0
lea eax, [ebp - 0x5e4]
push 1
cmove eax, dword [ebp - 0x5e8]
xor ecx, ecx
mov word [eax + 4], cx
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x35c], ecx
lea ecx, [ebp - 0x358]
call fcn.00450b00
cmp byte [ebp - 0x244], 0
lea eax, [ebp - 0x354]
push 1
cmove eax, dword [ebp - 0x358]
xor ecx, ecx
mov word [eax + 4], cx
mov dword [ebp - 0x3a8], ecx
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4c0]
call fcn.00450b00
cmp byte [ebp - 0x3ac], 0
lea eax, [ebp - 0x4bc]
cmove eax, dword [ebp - 0x4c0]
xor ecx, ecx
mov word [eax + 4], cx
lea eax, [edi + 0xc]
cmp byte [edi + 0x11c], cl
jne 0x471865
mov eax, dword [edi + 8]
add eax, 4
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 0xbd8], eax
lea eax, [ebp - 0xbf0]
push eax
lea eax, [ebp - 0xc08]
push eax
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xbd8]
push eax
call fcn.00413010
test eax, eax
jne 0x471b46
cmp byte [edi + 0x11c], al
lea eax, [edi + 0xc]
jne 0x4718ab
mov eax, dword [edi + 8]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
test esi, esi
je 0x471bac
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor al, al
jne 0x471bac
lea ecx, [ebp - 0x220]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x471900
sub ecx, edx
sar ecx, 1
je 0x471bac
push 0x591e94
lea eax, [ebp - 0x220]
mov dword [ebp - 0xbd8], 0
push eax
lea eax, [ebp - 0xbd8]
push eax
call fcn.004e2a04
add esp, 0xc
test eax, eax
jne 0x471bac
push 0x40
push eax
lea eax, [ebp - 0x3a0]
mov byte [ebp - 0xbd1], 1
push eax
call fcn.004d9fe0
add esp, 0xc
lea eax, [ebp - 0x3a0]
push dword [ebp - 0xbd8]
push 1
push 0x40
push eax
call fcn.004e2c2e
mov eax, 0x5a4d
add esp, 0x10
cmp ax, word [ebp - 0x3a0]
je 0x47198e
mov byte [ebp - 0xbd1], 0
jmp 0x471ac8
mov eax, dword [ebp - 0x364]
push 0
add eax, 4
push eax
push dword [ebp - 0xbd8]
call fcn.004e2850
add esp, 0xc
mov dword [ebp - 0x224], 0
lea eax, [ebp - 0x234]
xorps xmm0, xmm0
movups xmmword [ebp - 0x234], xmm0
push dword [ebp - 0xbd8]
push 1
push 0x14
push eax
call fcn.004e2c2e
add esp, 0x10
lea ecx, [ebp - 0x360]
call fcn.0044ff00
push dword [ebp - 0x230]
lea eax, [ebp - 0x360]
push 0x59fc70
push eax
call fcn.00450580
add esp, 0xc
push 0
push dword [ebp - 0x364]
push dword [ebp - 0xbd8]
call fcn.004e2850
mov eax, dword [ebp - 0x234]
mov ecx, 0x14c
add esp, 0xc
cmp cx, ax
jne 0x471a57
push 0xf8
lea eax, [ebp - 0xbd0]
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
lea eax, [ebp - 0xbd0]
push dword [ebp - 0xbd8]
push 1
push 0xf8
push eax
call fcn.004e2c2e
push dword [ebp - 0xb80]
jmp 0x471ab4
mov ecx, 0x200
cmp cx, ax
je 0x471a7f
mov ecx, 0x8664
cmp cx, ax
je 0x471a7f
lea ecx, [ebp - 0x360]
call fcn.0044ff00
mov byte [ebp - 0xbd1], 0
jmp 0x471ac8
push 0x108
lea eax, [ebp - 0xab8]
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
lea eax, [ebp - 0xab8]
push dword [ebp - 0xbd8]
push 1
push 0x108
push eax
call fcn.004e2c2e
push dword [ebp - 0xa68]
lea eax, [ebp - 0x360]
push 0x59fc70
push eax
call fcn.00450580
add esp, 0x1c
push dword [ebp - 0xbd8]
call fcn.004e24fb
add esp, 4
cmp byte [ebp - 0xbd1], 0
je 0x471bac
cmp byte [ebp - 0x244], 0
lea eax, [ebp - 0x354]
lea ecx, [ebp - 0xc30]
cmove eax, dword [ebp - 0x358]
add eax, 4
push eax
call fcn.00456d80
cmp byte [edi + 0x11c], 0
mov dword [ebp - 0xbd8], eax
lea eax, [edi + 0xc]
jne 0x471b1b
mov eax, dword [edi + 8]
add eax, 4
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 0xbdc], eax
lea eax, [ebp - 0xbd8]
push eax
lea eax, [ebp - 0xbdc]
push eax
lea eax, [ebp - 0xc14]
push eax
call fcn.00412cc0
jmp 0x471bac
mov eax, dword [eax + 4]
mov ecx, 0x5920ac
test eax, eax
cmovne ecx, eax
mov esi, ecx
mov dword [ebp - 0xbdc], ecx
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x471b60
sub esi, ecx
lea ecx, [ebp - 0x358]
sar esi, 1
mov dword [ebp - 0x35c], esi
inc esi
push esi
call fcn.00450b00
cmp byte [ebp - 0x244], 0
lea eax, [esi + esi]
push eax
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0x354]
cmove ecx, dword [ebp - 0x358]
add ecx, 4
push ecx
call fcn.004d9a60
add esp, 0xc
cmp dword [ebp - 0x35c], 0
je 0x471bf2
cmp byte [edi + 0x364], 0
lea eax, [edi + 0x254]
jne 0x471bca
mov eax, dword [edi + 0x250]
cmp byte [ebp - 0x244], 0
lea ecx, [ebp - 0x354]
cmove ecx, dword [ebp - 0x358]
add eax, 4
push eax
lea eax, [ecx + 4]
push eax
call fcn.004e0bff
add esp, 8
test eax, eax
je 0x471c39
mov eax, dword [ebp - 0xbe4]
mov esi, dword [ebp - 0xbe0]
mov edx, dword [ebp - 0xbec]
add eax, 0x490
lea ecx, [ebp - 0x758]
inc edx
mov dword [ebp - 0xbe4], eax
push esi
mov dword [ebp - 0xbec], edx
call fcn.00472cd0
cmp edx, eax
jge 0x471d23
mov eax, dword [ebp - 0xbe4]
jmp 0x471784
xor edi, edi
jmp 0x471c04
cmp byte [edi + 0x11c], 0
lea eax, [edi + 0xc]
jne 0x471c48
mov eax, dword [edi + 8]
add eax, 4
mov ecx, 0x5920ac
cmovne ecx, eax
mov esi, ecx
mov dword [ebp - 0xbdc], ecx
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x471c60
sub esi, ecx
lea ecx, [ebp - 0x5e8]
sar esi, 1
mov dword [ebp - 0x5ec], esi
inc esi
push esi
call fcn.00450b00
cmp byte [ebp - 0x4d4], 0
lea eax, [esi + esi]
push eax
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0x5e4]
cmove ecx, dword [ebp - 0x5e8]
add ecx, 4
push ecx
call fcn.004d9a60
add esp, 0xc
lea eax, [edi + 0x378]
cmp byte [edi + 0x488], 0
jne 0x471cc1
mov eax, dword [edi + 0x374]
add eax, 4
mov ecx, 0x5920ac
cmovne ecx, eax
mov esi, ecx
mov dword [ebp - 0xbdc], ecx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x471cd7
sub esi, ecx
lea ecx, [ebp - 0x4c0]
sar esi, 1
mov dword [ebp - 0x4c4], esi
inc esi
push esi
call fcn.00450b00
cmp byte [ebp - 0x3ac], 0
lea eax, [esi + esi]
push eax
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0x4bc]
cmove ecx, dword [ebp - 0x4c0]
add ecx, 4
push ecx
call fcn.004d9a60
add esp, 0xc
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0xbe4], eax
lea ecx, [ebp - 0xc6c]
call fcn.00412e30
cmp dword [ebp - 0x4c4], 0
je 0x4720dd
cmp dword [ebp - 0x35c], 0
je 0x4720dd
cmp dword [ebp - 0x5ec], 0
je 0x4720dd
test edi, edi
je 0x4720dd
cmp byte [ebp - 0x4d4], 0
lea eax, [ebp - 0x5e4]
cmove eax, dword [ebp - 0x5e8]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x4720dd
push dword [ebp - 0xbe8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xbec], eax
test eax, eax
je 0x4720dd
cmp byte [ebx + 8], 0
mov cl, byte [eax]
jne 0x471dc0
cmp cl, 0xe9
je 0x471dc0
cmp cl, 0xe8
jne 0x4720dd
push 0x28
call fcn.004d7188
mov esi, dword [ebp - 0xbf4]
mov edi, eax
add esp, 4
mov dword [ebp - 0xbd8], edi
cmp byte [ebp - 0x4d4], 0
lea eax, [ebp - 0x5e4]
cmove eax, dword [ebp - 0x5e8]
lea ecx, [esi + 0x18]
add eax, 4
push eax
call fcn.004740b0
lea ecx, [ebp - 0xc0c]
mov dword [edi], eax
mov eax, dword [ebp - 0xbe8]
push ecx
lea ecx, [ebp - 0xc08]
mov dword [ebp - 0xbdc], eax
push ecx
lea ecx, [ebp - 0xbe0]
push ecx
lea eax, [esi + 0x1c]
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0xbf0], eax
push ecx
mov ecx, eax
call fcn.00474370
test eax, eax
je 0x471e3b
mov esi, dword [eax + 4]
jmp 0x471e9a
mov edx, dword [ebp - 0xbe8]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x471e44
sub edx, ecx
mov ecx, dword [esi + 0x18]
lea eax, [edx + 1]
push eax
mov dword [ebp - 0xbdc], eax
call fcn.00412b80
mov esi, eax
test esi, esi
je 0x471e7a
push dword [ebp - 0xbdc]
push dword [ebp - 0xbe8]
push esi
call fcn.004d9a60
add esp, 0xc
mov ecx, dword [ebp - 0xbf0]
lea eax, [ebp - 0xbe0]
push eax
push eax
lea eax, [ebp - 0xc14]
mov dword [ebp - 0xbe0], esi
push eax
call fcn.00474110
mov ecx, dword [ebp - 0xbf4]
lea eax, [ebp - 0x354]
mov dword [edi + 4], esi
cmp byte [ebp - 0x244], 0
cmove eax, dword [ebp - 0x358]
lea ecx, [ecx + 0x18]
add eax, 4
push eax
call fcn.004740b0
mov dword [edi + 8], eax
lea ecx, [ebp - 0x4bc]
mov eax, dword [ebp - 0xbec]
movups xmm0, xmmword [eax]
mov dword [edi + 0x20], eax
movups xmmword [edi + 0xc], xmm0
cmp byte [ebp - 0x3ac], 0
cmove ecx, dword [ebp - 0x4c0]
add ecx, 4
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x471ef0
push 0x40
sub ecx, edx
push 0x1000
sar ecx, 1
shr ecx, 1
push 0x15
push 0
mov dword [ebp - 0xbe8], ecx
mov byte [edi + 0x1c], cl
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp byte [ebp - 0x3ac], 0
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 0xbe0], eax
cmove ecx, dword [ebp - 0x4c0]
add ecx, 4
mov dword [ebp - 0xbf0], ecx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x471f41
sub ecx, edx
sar ecx, 1
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
mov dword [ebp - 0xbdc], edx
cmp edx, 0x15
jg 0x4720d2
xor esi, esi
test edx, edx
jle 0x4720d2
mov edx, dword [ebp - 0xbf0]
movzx ecx, word [edx + esi*4]
lea eax, [ecx - 0x30]
cmp ax, 9
ja 0x471f8a
sub cl, 0x30
jmp 0x471fa8
lea eax, [ecx - 0x61]
cmp ax, 5
ja 0x471f98
sub cl, 0x57
jmp 0x471fa8
lea eax, [ecx - 0x41]
cmp ax, 5
ja 0x4720d2
sub cl, 0x37
movzx edx, word [edx + esi*4 + 2]
lea eax, [edx - 0x30]
cmp ax, 9
ja 0x471fbb
sub dl, 0x30
jmp 0x471fd9
lea eax, [edx - 0x61]
cmp ax, 5
ja 0x471fc9
sub dl, 0x57
jmp 0x471fd9
lea eax, [edx - 0x41]
cmp ax, 5
ja 0x4720d2
sub dl, 0x37
mov eax, dword [ebp - 0xbe0]
shl cl, 4
add cl, dl
mov edx, dword [ebp - 0xbdc]
mov byte [esi + eax], cl
inc esi
cmp esi, edx
jl 0x471f72
test edx, edx
jle 0x4720d2
mov eax, dword [ebp - 0xbec]
mov edx, 0x15
mov esi, dword [ebp - 0xbe0]
sub eax, esi
sub eax, 5
mov dword [ebp - 0xbfb], 0
mov dword [ebp - 0xbfb], eax
mov eax, dword [ebp - 0xbe8]
movzx eax, al
sub edx, eax
mov byte [ebp - 0xbfc], 0xe9
lea ecx, [esi + eax]
test ecx, ecx
jne 0x472046
call fcn.004e1e89
mov dword [eax], 0x16
jmp 0x472075
cmp edx, 5
jb 0x47205e
mov eax, dword [ebp - 0xbfc]
mov dword [ecx], eax
mov al, byte [ebp - 0xbf8]
mov byte [ecx + 4], al
jmp 0x47207a
push edx
push 0
push ecx
call fcn.004d9fe0
add esp, 0xc
call fcn.004e1e89
mov dword [eax], 0x22
call fcn.004e1d80
mov dword [edi + 0x24], esi
mov esi, dword [ebp - 0xbf4]
add esi, 0x84
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
cmp ecx, eax
jne 0x4720bf
test eax, eax
jne 0x4720a5
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x4720aa
mov eax, 1
jmp 0x4720b3
lea eax, [ecx + ecx]
test eax, eax
js 0x4720e5
cmp eax, 0x1fffffff
ja 0x4720e5
push eax
mov ecx, esi
call fcn.00456de0
test eax, eax
je 0x4720e5
mov ecx, dword [esi + 4]
mov eax, dword [esi]
lea eax, [eax + ecx*4]
test eax, eax
je 0x4720cd
mov dword [eax], edi
inc dword [esi + 4]
jmp 0x4720e5
push 0x28
push edi
call fcn.004d72b2
add esp, 8
xor edi, edi
mov dword [ebp - 0xbd8], edi
lea ecx, [ebp - 0xc6c]
mov byte [ebp - 4], 0x10
call fcn.00412e30
cmp byte [ebp - 0x3ac], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x472120
mov eax, dword [ebp - 0x4c0]
lea ecx, [ebp - 0x4bc]
cmp eax, ecx
je 0x472120
push eax
call fcn.004e1b56
add esp, 4
cmp byte [ebp - 0x244], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x47214c
mov eax, dword [ebp - 0x358]
lea ecx, [ebp - 0x354]
cmp eax, ecx
je 0x47214c
push eax
call fcn.004e1b56
add esp, 4
cmp byte [ebp - 0x4d4], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x472178
mov eax, dword [ebp - 0x5e8]
lea ecx, [ebp - 0x5e4]
cmp eax, ecx
je 0x472178
push eax
call fcn.004e1b56
add esp, 4
mov byte [ebp - 4], 0x11
mov esi, dword [ebp - 0xbe4]
test esi, esi
je 0x4721d0
mov edi, dword [ebp - 0xc24]
nop dword [eax]
push esi
mov esi, dword [esi + 4]
call edi
add esp, 4
test esi, esi
jne 0x472190
mov edi, dword [ebp - 0xbd8]
jmp 0x4721d0
lea ecx, [ebp - 0xc04]
call fcn.00450c80
push 0x59aebc
push 0x5971f4
push eax
call fcn.00450580
add esp, 0xc
lea ecx, [ebp - 0xad8]
call fcn.00473820
xor edi, edi
mov byte [ebp - 4], 0x12
cmp byte [ebp - 0x5fc], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x472200
mov eax, dword [ebp - 0x710]
lea ecx, [ebp - 0x70c]
cmp eax, ecx
je 0x472200
push eax
call fcn.004e1b56
add esp, 4
push 0x472c90
push 2
push 0x20
lea eax, [ebp - 0x758]
push eax
call fcn.004d71cb
cmp byte [ebp - 0x88c], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x472241
mov eax, dword [ebp - 0x9a0]
lea ecx, [ebp - 0x99c]
cmp eax, ecx
je 0x472241
push eax
call fcn.004e1b56
add esp, 4
cmp byte [ebp - 0x764], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x47226d
mov eax, dword [ebp - 0x878]
lea ecx, [ebp - 0x874]
cmp eax, ecx
je 0x47226d
push eax
call fcn.004e1b56
add esp, 4
lea ecx, [ebp - 0xc04]
call fcn.00450c20
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d6cfd
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc