Function at 0x476040
Capabilities:
Encode data using xor
Generate random numbers using the delphi lcg

Disassembly:
sub esp, 0x10
mov eax, dword [0x4d88f0]
xor eax, esp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
push eax
mov esi, ecx
call fcn.00475fb0
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
mov edi, dword [0x519518]
mov dword [esp + 0x10], eax
mov eax, dword [0x519514]
mov dword [esp + 0x14], ecx
mov ecx, dword [0x51951c]
mov dword [esp + 0x18], edx
xor ebp, ebp
mov edx, ecx
and edx, 0xfffd
or edx, 2
mov ebx, edx
xor ebx, 1
imul ebx, edx
shr ebx, 8
xor byte [esp + ebp + 0x10], bl
movzx edx, byte [esp + ebp + 0x10]
xor edx, eax
and edx, 0xff
shr eax, 8
xor eax, dword [edx*4 + 0x4e08b8]
movzx esi, al
add esi, edi
imul esi, esi, 0x8088405
inc esi
mov edx, esi
shr edx, 0x18
xor edx, ecx
and edx, 0xff
shr ecx, 8
xor ecx, dword [edx*4 + 0x4e08b8]
mov edi, ecx
and edi, 0xfffd
or edi, 2
mov edx, edi
xor edx, 1
imul edx, edi
shr edx, 8
xor byte [esp + ebp + 0x11], dl
movzx edx, byte [esp + ebp + 0x11]
xor edx, eax
and edx, 0xff
shr eax, 8
xor eax, dword [edx*4 + 0x4e08b8]
movzx edx, al
add edx, esi
imul edx, edx, 0x8088405
inc edx
mov esi, edx
shr esi, 0x18
xor esi, ecx
shr ecx, 8
and esi, 0xff
xor ecx, dword [esi*4 + 0x4e08b8]
mov esi, ecx
mov edi, esi
and edi, 0xfffd
or edi, 2
mov ecx, edi
xor ecx, 1
imul ecx, edi
shr ecx, 8
xor byte [esp + ebp + 0x12], cl
movzx ecx, byte [esp + ebp + 0x12]
xor ecx, eax
and ecx, 0xff
shr eax, 8
xor eax, dword [ecx*4 + 0x4e08b8]
movzx ecx, al
add ecx, edx
imul ecx, ecx, 0x8088405
inc ecx
mov edx, ecx
shr edx, 0x18
xor edx, esi
and edx, 0xff
shr esi, 8
xor esi, dword [edx*4 + 0x4e08b8]
mov edi, esi
and edi, 0xfffd
or edi, 2
mov edx, edi
xor edx, 1
imul edx, edi
shr edx, 8
xor byte [esp + ebp + 0x13], dl
movzx edx, byte [esp + ebp + 0x13]
xor edx, eax
and edx, 0xff
shr eax, 8
xor eax, dword [edx*4 + 0x4e08b8]
add ebp, 6
movzx edx, al
add edx, ecx
imul edx, edx, 0x8088405
inc edx
mov ecx, edx
shr ecx, 0x18
xor ecx, esi
and ecx, 0xff
shr esi, 8
xor esi, dword [ecx*4 + 0x4e08b8]
mov edi, esi
and edi, 0xfffd
or edi, 2
mov ecx, edi
xor ecx, 1
imul ecx, edi
shr ecx, 8
xor byte [esp + ebp + 0xe], cl
movzx ecx, byte [esp + ebp + 0xe]
xor ecx, eax
and ecx, 0xff
shr eax, 8
xor eax, dword [ecx*4 + 0x4e08b8]
movzx ecx, al
add ecx, edx
imul ecx, ecx, 0x8088405
inc ecx
mov edx, ecx
shr edx, 0x18
xor edx, esi
and edx, 0xff
shr esi, 8
xor esi, dword [edx*4 + 0x4e08b8]
mov edi, esi
and edi, 0xfffd
or edi, 2
mov edx, edi
xor edx, 1
imul edx, edi
shr edx, 8
xor byte [esp + ebp + 0xf], dl
movzx edx, byte [esp + ebp + 0xf]
xor edx, eax
and edx, 0xff
shr eax, 8
xor eax, dword [edx*4 + 0x4e08b8]
movzx edi, al
add edi, ecx
imul edi, edi, 0x8088405
inc edi
mov ecx, edi
shr ecx, 0x18
xor ecx, esi
and ecx, 0xff
shr esi, 8
xor esi, dword [ecx*4 + 0x4e08b8]
cmp ebp, 0xc
mov ecx, esi
jl 0x476085
movzx dx, byte [esp + 0x1b]
mov dword [0x519514], eax
mov eax, dword [0x508bb0]
mov dword [0x51951c], ecx
mov dword [0x519518], edi
test byte [eax + 0x40], 2
movzx eax, byte [0x518c2f]
movzx edx, dx
jne 0x4762c0
movzx eax, byte [0x518c37]
movzx edx, dx
cmp edx, eax
je 0x4762df
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.004af72c
add esp, 0x10
ret 4
mov esi, dword [0x518bc8]
mov eax, esi
cdq
cmp edx, dword [0x50798c]
jl 0x4762fe
mov edx, dword [0x507988]
jg 0x4762fc
cmp eax, edx
jbe 0x4762fe
mov esi, edx
mov edx, dword [0x518bc0]
test esi, esi
je 0x476380
jmp 0x476310
and ecx, 0xfffd
or ecx, 2
mov eax, ecx
xor eax, 1
imul eax, ecx
shr eax, 8
xor byte [edx], al
movzx ecx, byte [edx]
mov eax, dword [0x519514]
xor ecx, eax
shr eax, 8
and ecx, 0xff
xor eax, dword [ecx*4 + 0x4e08b8]
mov ecx, dword [0x51951c]
mov dword [0x519514], eax
movzx eax, al
add eax, dword [0x519518]
dec esi
imul eax, eax, 0x8088405
inc eax
mov dword [0x519518], eax
shr eax, 0x18
xor eax, ecx
and eax, 0xff
shr ecx, 8
xor ecx, dword [eax*4 + 0x4e08b8]
inc edx
mov dword [0x51951c], ecx
test esi, esi
jne 0x476310
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004af72c
add esp, 0x10
ret 4