Function at 0x4c9f90
Capabilities:
Encode data using xor

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0xffffffffffffffff
push 1
call fcn.0046f6b0
push 0xffffffffffffffff
push 2
mov ebp, eax
call fcn.0046f6b0
mov esi, eax
push ebp
mov dword [esp + 0x24], esi
call fcn.00467ee0
push esi
mov ebx, eax
call fcn.00467ee0
add esp, 0x18
mov edi, eax
test ebp, ebp
je 0x4ca2cc
test esi, esi
je 0x4ca2cc
mov ecx, dword [ebp]
mov eax, ecx
and eax, 0x1a
je 0x4ca067
test byte [esi], 0x1a
jne 0x4c9fea
cmp edi, 1
jne 0x4ca067
push ebp
call fcn.00468120
add esp, 4
mov dword [esp + 0x10], edx
mov ebx, eax
cmp edi, 1
jne 0x4ca00a
push ebp
call fcn.00467f00
movzx eax, byte [eax]
cdq
jmp 0x4ca010
push esi
call fcn.00468120
mov ecx, eax
add esp, 4
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x4ca04f
sub eax, 1
mov eax, dword [esp + 0x10]
je 0x4ca03b
xor eax, edx
xor ebx, ecx
push eax
push ebx
call fcn.00470670
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
or eax, edx
or ebx, ecx
push eax
push ebx
call fcn.00470670
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [esp + 0x10]
and ebx, ecx
and eax, edx
push eax
push ebx
call fcn.00470670
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
test ecx, 0x400
je 0x4ca21b
mov ecx, dword [esi]
test ecx, 0x400
je 0x4ca161
mov eax, edi
or eax, ebx
push ebp
je 0x4ca153
call fcn.00467f00
push dword [esp + 0x14]
mov esi, eax
call fcn.00467f00
add esp, 8
lea ecx, [ebx + 1]
mov ebp, eax
push ecx
push esi
push ecx
call fcn.0047f870
add esp, 4
push eax
call fcn.0052ae60
mov esi, eax
add esp, 0xc
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x4ca123
sub eax, 1
je 0x4ca0f3
xor ecx, ecx
xor edx, edx
test ebx, ebx
je 0x4ca143
mov al, byte [ecx + ebp]
inc ecx
xor byte [edx + esi], al
xor eax, eax
cmp ecx, edi
cmove ecx, eax
inc edx
cmp edx, ebx
jb 0x4ca0d0
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
xor ecx, ecx
xor edx, edx
test ebx, ebx
je 0x4ca143
nop dword [eax + eax]
mov al, byte [ecx + ebp]
inc ecx
or byte [edx + esi], al
xor eax, eax
cmp ecx, edi
cmove ecx, eax
inc edx
cmp edx, ebx
jb 0x4ca100
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
xor ecx, ecx
xor edx, edx
test ebx, ebx
je 0x4ca143
nop dword [eax + eax]
mov al, byte [ecx + ebp]
inc ecx
and byte [edx + esi], al
xor eax, eax
cmp ecx, edi
cmove ecx, eax
inc edx
cmp edx, ebx
jb 0x4ca130
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
call fcn.00469780
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
test cl, 0x1a
jne 0x4ca16f
cmp edi, 1
jne 0x4ca21b
push ebp
test ebx, ebx
je 0x4ca153
call fcn.00467f00
add esp, 4
lea ecx, [ebx + 1]
push ecx
push eax
push ecx
call fcn.0047f870
add esp, 4
push eax
call fcn.0052ae60
add esp, 0xc
mov esi, eax
push dword [esp + 0x10]
cmp edi, 1
jne 0x4ca1a7
call fcn.00467f00
mov dl, byte [eax]
jmp 0x4ca1ae
call fcn.004680f0
mov dl, al
mov eax, dword [esp + 0x1c]
add esp, 4
mov ecx, ebx
sub eax, 0
je 0x4ca200
sub eax, 1
je 0x4ca1e0
dec ecx
xor byte [esi + ecx], dl
lea eax, [esi + ecx]
test ecx, ecx
jne 0x4ca1c1
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
dec ecx
or byte [esi + ecx], dl
lea eax, [esi + ecx]
test ecx, ecx
jne 0x4ca1e0
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
dec ecx
and byte [esi + ecx], dl
lea eax, [esi + ecx]
test ecx, ecx
jne 0x4ca200
push ebx
push esi
call fcn.00470390
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
test eax, eax
jne 0x4ca228
cmp ebx, 1
jne 0x4ca2cc
test dword [esi], 0x400
je 0x4ca2cc
push esi
call fcn.00467f00
add esp, 4
mov esi, eax
push ebp
cmp ebx, 1
jne 0x4ca24f
call fcn.00467f00
movsx ecx, byte [eax]
jmp 0x4ca256
call fcn.004680f0
mov ecx, eax
mov eax, dword [esp + 0x1c]
add esp, 4
sub eax, 0
je 0x4ca2ac
sub eax, 1
je 0x4ca28c
test edi, edi
je 0x4ca2bc
nop dword [eax + eax]
movzx eax, byte [esi + edi - 1]
dec edi
xor ecx, eax
test edi, edi
jne 0x4ca270
pop edi
pop esi
pop ebp
pop ebx
add esp, 4
mov dword [esp + 4], ecx
jmp fcn.004705c0
test edi, edi
je 0x4ca2bc
movzx eax, byte [esi + edi - 1]
dec edi
or ecx, eax
test edi, edi
jne 0x4ca290
pop edi
pop esi
pop ebp
pop ebx
add esp, 4
mov dword [esp + 4], ecx
jmp fcn.004705c0
test edi, edi
je 0x4ca2bc
movzx eax, byte [esi + edi - 1]
dec edi
and ecx, eax
test edi, edi
jne 0x4ca2b0
pop edi
pop esi
pop ebp
pop ebx
add esp, 4
mov dword [esp + 4], ecx
jmp fcn.004705c0
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4ca2db
mov eax, 0x70f4ec
jmp 0x4ca2eb
cmp ecx, 1
mov eax, 0x7297b8
mov edx, 0x7297bc
cmovne eax, edx
push esi
push ebp
push 2
push eax
push 0
push 0x440
push 1
call fcn.00447f30
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret