Function at 0x4669c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x823814
mov eax, dword fs:[0]
push eax
sub esp, 0xec
mov eax, dword [0x93bf44]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x181cbec]
cmp dword [esi + 0x60], 0
lea edi, [esi + 0x50]
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xf0], edi
jbe 0x467669
push 0
lea ecx, [ebp - 0xe8]
call fcn.004884d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0
call fcn.0048da10
push 1
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 1
push eax
push edi
lea ecx, [ebp - 0xcc]
call fcn.0048f6b0
push str.desktop
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x58]
push ecx
mov ecx, eax
call fcn.00489fa0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 0x10
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.006d76e6
add esp, 4
mov dword [0x181cdd0], eax
lea ecx, [ebp - 0xe8]
push str.target_start
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466a9f
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x62c], eax
cmp edx, 0x10
jb 0x466ae2
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466ad8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46768f
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.target_path
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466b05
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x630], eax
cmp edx, 0x10
jb 0x466b48
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466b3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467694
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.NavShow
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466b6b
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x5c4], eax
cmp edx, 0x10
jb 0x466bae
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466ba4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467699
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.NavCheck
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466bd1
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x5c8], eax
cmp edx, 0x10
jb 0x466c14
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466c0a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46769e
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.NavCompel
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466c37
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x5cc], eax
cmp edx, 0x10
jb 0x466c7a
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466c70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676a3
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.ProtocolShow
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466c9d
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x604], eax
cmp edx, 0x10
jb 0x466ce0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466cd6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676a8
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.ProtocolCompel
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466d03
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x620], eax
cmp edx, 0x10
jb 0x466d46
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466d3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676ad
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.ExitCount
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466d69
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x634], eax
cmp edx, 0x10
jb 0x466dac
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466da2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676b2
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.FailedConfirm
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466dcf
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x624], eax
cmp edx, 0x10
jb 0x466e12
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466e08
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676b7
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.Cancel
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466e35
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x628], eax
cmp edx, 0x10
jb 0x466e78
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466e6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676bc
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.CloseBtn
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466e9b
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x638], eax
cmp edx, 0x10
jb 0x466ede
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466ed4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676c1
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.time3
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466f01
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x63c], eax
cmp edx, 0x10
jb 0x466f44
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466f3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676c6
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.delaytime3
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466f67
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x640], eax
cmp edx, 0x10
jb 0x466faa
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466fa0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676cb
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.checktime3
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x466fcd
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x644], eax
cmp edx, 0x10
jb 0x467010
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467006
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676d0
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.FirstCity
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x467033
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x98], eax
cmp edx, 0x10
jb 0x467076
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46706c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676d5
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.FirstCityExecute
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x467099
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x648], eax
cmp edx, 0x10
jb 0x4670dc
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4670d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676da
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.FileNameParse
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x4670ff
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [esi + 0x64c], eax
cmp edx, 0x10
jb 0x467142
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467138
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676df
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.SdEnv
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
sub esp, 0x18
mov byte [ebp - 0xcd], 0
mov ecx, esp
mov dword [ebp - 0xf4], esp
mov edi, eax
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x8fe594
mov byte [ecx], 0
call fcn.00406210
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, edi
push esp
call fcn.00489fa0
mov dl, byte [ebp - 0xcd]
lea ecx, [esi + 0x660]
mov byte [ebp - 4], 2
call fcn.0041dd20
add esp, 0x30
lea ecx, [ebp - 0xe8]
push str.logo3
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.004780b0
mov edx, eax
mov byte [ebp - 4], 5
cmp dword [edx + 0x14], 8
jb 0x4671e1
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4671e6
sub ecx, esi
mov esi, dword [ebp - 0xec]
sar ecx, 1
push ecx
push edx
lea ecx, [esi + 0x68]
call fcn.0040ea60
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x467243
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x467239
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676e4
push edx
push ecx
call fcn.005c24d6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 0x10
jb 0x46728f
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467285
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676e9
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.360check
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x4672b2
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [esi + 0x780], eax
cmp edx, 0x10
jb 0x4672f5
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4672eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676ee
push edx
push ecx
call fcn.005c24d6
add esp, 8
push 0x90018c
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x467318
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [esi + 0x650], eax
cmp edx, 0x10
jb 0x46735b
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467351
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676f3
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.ExtSd
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
sub esp, 0x18
mov byte [ebp - 0xcd], 0
mov ecx, esp
mov dword [ebp - 0xf8], esp
mov edi, eax
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x8fe594
mov byte [ecx], 0
call fcn.00406210
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, edi
push esp
call fcn.00489fa0
mov dl, byte [ebp - 0xcd]
lea ecx, [esi + 0x654]
mov byte [ebp - 4], 2
call fcn.0041dd20
add esp, 0x30
lea ecx, [ebp - 0xe8]
push str.SelfProtocol
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x4673e6
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov esi, dword [ebp - 0xec]
add esp, 4
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x66c], eax
cmp edx, 0x10
jb 0x46742f
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467425
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676f8
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.InstallMgr
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
cmp dword [eax + 0x14], 0x10
jb 0x467452
mov eax, dword [eax]
push eax
call fcn.006d76e6
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [esi + 0x670], eax
cmp edx, 0x10
jb 0x467495
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46748b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4676fd
push edx
push ecx
call fcn.005c24d6
add esp, 8
push str.UpSwitch
lea ecx, [ebp - 0xe8]
call fcn.00488cd0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00489fa0
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.004780b0
mov edx, eax
mov byte [ebp - 4], 8
cmp dword [edx + 0x14], 8
jb 0x4674cc
mov edx, dword [edx]
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4674d1
sub ecx, edi
lea edi, [esi + 0x674]
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.0040ea60
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x46752d
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x467523
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467702
push edx
push ecx
call fcn.005c24d6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 0x10
jb 0x467579
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46756f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467707
push edx
push ecx
call fcn.005c24d6
add esp, 8
cmp dword [edi + 0x14], 8
jb 0x467581
mov edi, dword [edi]
movups xmm0, xmmword [0x900938]
mov ax, word [0x900948]
xor esi, esi
mov word [ebp - 0x14], ax
movups xmmword [ebp - 0x24], xmm0
nop dword [eax + eax]
mov eax, 0x4d4873ed
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x35
sub ecx, eax
add ecx, 0x38
xor word [ebp + esi*2 - 0x24], cx
inc esi
cmp esi, 9
jl 0x4675a0
cmp dword [0x181cd3c], 8
lea eax, [ebp - 0x24]
push ecx
mov edx, 0x181cd28
mov ecx, reloc.gdiplus.dll_Ordinal_1
cmovae edx, dword [0x181cd28]
push edi
push eax
call fcn.0041bc60
mov ecx, dword [ebp - 0xf0]
add esp, 0xc
mov eax, ecx
cmp dword [ecx + 0x14], 0x10
jb 0x4675fc
mov eax, dword [ecx]
mov dword [ecx + 0x10], 0
mov byte [eax], 0
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x46763a
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x467630
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46770c
push edx
push ecx
call fcn.005c24d6
add esp, 8
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00464420
lea ecx, [ebp - 0xe8]
call fcn.00488820
mov eax, 1
jmp 0x467674
push 0x12
mov ecx, esi
call fcn.004692b0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c22ca
mov esp, ebp
pop ebp
ret
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
int3