Function at 0x4b1c10
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x5d8
mov eax, dword [0x528af4]
xor eax, esp
mov dword [esp + 0x5d4], eax
push ebx
mov ebx, dword [esp + 0x5f4]
push ebp
mov ebp, dword [esp + 0x5fc]
push esi
mov esi, dword [esp + 0x5e8]
push edi
mov edi, dword [esp + 0x5f0]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x48], ebp
cmp edi, 0x100
jbe 0x4b1c60
mov eax, dword [esi + 0x400]
mov dword [esp + 0x38], eax
jmp 0x4b1c68
mov dword [esp + 0x38], 0x10
push 0x44
lea eax, [esp + 0x5c]
push 0
push eax
call fcn.004ee100
add esp, 0xc
mov ecx, esi
mov edx, edi
lea ecx, [ecx]
mov eax, dword [ecx]
lea ecx, [ecx + 4]
inc dword [esp + eax*4 + 0x58]
sub edx, 1
jne 0x4b1c80
cmp dword [esp + 0x58], edi
jne 0x4b1cb6
mov dword [ebx], edx
mov dword [ebp], edx
xor eax, eax
mov ecx, dword [esp + 0x5e4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004ebbd8
add esp, 0x5d8
ret 0x1c
mov ecx, 1
jmp 0x4b1cc0
cmp dword [esp + ecx*4 + 0x58], 0
jne 0x4b1ccd
inc ecx
cmp ecx, 0x10
jbe 0x4b1cc0
mov eax, ecx
mov dword [esp + 0x14], eax
cmp dword [ebp], ecx
jae 0x4b1cdb
mov dword [ebp], ecx
mov edx, 0x10
cmp dword [esp + edx*4 + 0x58], 0
jne 0x4b1cec
sub edx, 1
jne 0x4b1ce0
mov dword [esp + 0x30], edx
cmp dword [ebp], edx
jbe 0x4b1cf8
mov dword [ebp], edx
mov ebp, 1
shl ebp, cl
cmp ecx, edx
jae 0x4b1d14
sub ebp, dword [esp + ecx*4 + 0x58]
js 0x4b1f8d
inc ecx
add ebp, ebp
cmp ecx, edx
jb 0x4b1d03
lea ebx, [edx*4]
mov eax, dword [esp + ebx + 0x58]
sub ebp, eax
mov dword [esp + 0x54], ebp
js 0x4b1f8d
add eax, ebp
xor ecx, ecx
mov dword [esp + ebx + 0x58], eax
mov dword [esp + 0xa0], ecx
sub edx, 1
je 0x4b1d54
xor eax, eax
add ecx, dword [esp + eax + 0x5c]
lea eax, [eax + 4]
mov dword [esp + eax + 0xa0], ecx
sub edx, 1
jne 0x4b1d41
push 0x480
lea eax, [esp + 0x168]
push 0
push eax
call fcn.004ee100
add esp, 0xc
xor ecx, ecx
lea ecx, [ecx]
mov edx, dword [esi]
lea esi, [esi + 4]
test edx, edx
je 0x4b1d8f
mov eax, dword [esp + edx*4 + 0x9c]
mov dword [esp + eax*4 + 0x164], ecx
inc eax
mov dword [esp + edx*4 + 0x9c], eax
inc ecx
cmp ecx, edi
jb 0x4b1d70
mov eax, dword [esp + ebx + 0x9c]
xor edx, edx
mov ecx, dword [esp + 0x14]
or ebp, 0xffffffff
mov esi, dword [esp + 0x30]
xor ebx, ebx
mov dword [esp + 0x4c], eax
xor edi, edi
mov dword [esp + 0x20], 0
lea eax, [esp + 0x164]
mov dword [esp + 0x9c], 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0xe0], 0
mov dword [esp + 0x10], edx
mov dword [esp + 0x124], edx
mov dword [esp + 0x24], ebx
cmp ecx, esi
jg 0x4b20c5
lea eax, [esp + 0x58]
mov ebx, edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x34], eax
mov eax, dword [eax]
test eax, eax
je 0x4b20ad
lea esi, [eax + 1]
mov edi, edi
dec esi
dec eax
mov dword [esp + 0x44], esi
lea esi, [ebp*4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + esi + 0xe4]
add eax, edx
cmp ecx, eax
jle 0x4b1f68
lea eax, [esp + 0xe4]
inc ebp
add edx, dword [esi + eax]
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x30]
sub esi, edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x2c], ebp
mov eax, dword [eax]
cmp esi, eax
jbe 0x4b1e57
mov esi, eax
mov ebx, ecx
mov eax, 1
sub ebx, edx
mov ecx, ebx
shl eax, cl
cmp eax, dword [esp + 0x44]
jbe 0x4b1e97
mov edx, dword [esp + 0x34]
or ecx, 0xffffffff
sub ecx, dword [esp + 0x40]
inc ebx
add eax, ecx
cmp ebx, esi
jae 0x4b1e93
lea esp, [esp]
mov ecx, dword [edx + 4]
lea edx, [edx + 4]
add eax, eax
cmp eax, ecx
jbe 0x4b1e93
inc ebx
sub eax, ecx
cmp ebx, esi
jb 0x4b1e80
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
lea eax, [edx + ebx]
cmp eax, ecx
jbe 0x4b1eaa
cmp edx, ecx
jae 0x4b1eaa
mov ebx, ecx
sub ebx, edx
mov ecx, ebx
lea eax, [esp + 0xe4]
mov edi, 1
lea esi, [ebp*4]
shl edi, cl
mov dword [esi + eax], ebx
lea eax, [edi*8 + 8]
push eax
call fcn.004f2e54
add esp, 4
test eax, eax
je 0x4b20f0
mov edx, dword [esp + 0x3c]
lea ecx, [eax + 8]
add eax, 4
mov dword [esp + 0x24], ecx
mov dword [esp + 0x3c], eax
mov dword [esp + esi + 0x124], ecx
mov dword [edx], ecx
mov dword [eax], 0
test ebp, ebp
je 0x4b1f51
mov eax, dword [esp + 0x20]
mov edx, 1
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x10]
shl edx, cl
sub ecx, dword [esp + esi + 0xe0]
dec edx
and edx, dword [esp + 0x20]
mov dword [esp + esi + 0x9c], eax
mov al, byte [esp + esi + 0xe0]
shr edx, cl
mov ecx, dword [esp + esi + 0x120]
mov byte [esp + 0x19], al
lea eax, [ebx + 0x20]
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
mov dword [ecx + edx*8], eax
mov eax, dword [esp + 0x1c]
mov dword [ecx + edx*8 + 4], eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
lea eax, [edx + ebx]
cmp ecx, eax
jg 0x4b1e32
mov ebx, dword [esp + 0x24]
mov al, cl
lea esi, [esp + 0x164]
sub al, dl
mov byte [esp + 0x19], al
mov eax, dword [esp + 0x4c]
lea eax, [esi + eax*4]
mov esi, dword [esp + 0x28]
cmp esi, eax
jb 0x4b1f97
mov byte [esp + 0x18], 0x63
jmp 0x4b1fe3
mov eax, 2
jmp 0x4b1c9b
mov ecx, dword [esi]
mov eax, dword [esp + 0x5f4]
cmp ecx, eax
jae 0x4b1fb8
cmp ecx, 0x100
setb al
add al, 0x1f
mov byte [esp + 0x18], al
mov ax, cx
jmp 0x4b1fd3
sub ecx, eax
mov eax, dword [esp + 0x5fc]
mov al, byte [ecx + eax]
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x5f8]
mov ax, word [eax + ecx*2]
mov ecx, dword [esp + 0x14]
add esi, 4
mov dword [esp + 0x28], esi
mov word [esp + 0x1c], ax
mov eax, dword [esp + 0x20]
sub ecx, edx
mov esi, 1
shl esi, cl
mov ecx, edx
shr eax, cl
cmp eax, edi
jae 0x4b202b
mov ebp, dword [esp + 0x1c]
lea ecx, [esi*8]
mov dword [esp + 0x50], ecx
lea ecx, [ebx + eax*8]
mov ebx, dword [esp + 0x18]
mov edi, edi
mov dword [ecx], ebx
add eax, esi
mov dword [ecx + 4], ebp
add ecx, dword [esp + 0x50]
cmp eax, edi
jb 0x4b2010
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov eax, 1
mov esi, dword [esp + 0x20]
lea ecx, [ecx - 1]
shl eax, cl
test esi, eax
je 0x4b2049
xor esi, eax
shr eax, 1
test esi, eax
jne 0x4b2041
xor esi, eax
mov ecx, edx
mov eax, 1
mov dword [esp + 0x20], esi
shl eax, cl
dec eax
and eax, esi
cmp eax, dword [esp + ebp*4 + 0x9c]
je 0x4b2095
jmp 0x4b2070
sub edx, dword [esp + ebp*4 + 0xe0]
dec ebp
mov eax, 1
mov ecx, edx
shl eax, cl
dec eax
and eax, esi
cmp eax, dword [esp + ebp*4 + 0x9c]
jne 0x4b2070
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x44]
test eax, eax
jne 0x4b1e10
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
inc ecx
add eax, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x34], eax
cmp ecx, esi
jle 0x4b1e01
cmp dword [esp + 0x54], 0
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0xe4]
mov dword [ecx], eax
je 0x4b1c99
cmp esi, 1
je 0x4b1c99
mov eax, 1
jmp 0x4b1c9b
test ebp, ebp
je 0x4b2115
mov eax, dword [esp + 0x124]
test eax, eax
je 0x4b2115
nop
mov esi, dword [eax - 4]
sub eax, 8
push eax
call fcn.004f252e
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b2100
mov eax, 3
jmp 0x4b1c9b