Function at 0x4c9ab0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xd0
call fcn.00411b70
mov eax, dword [0x539050]
xor eax, esp
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
push ebp
push esi
mov esi, dword [esp + 0xe4]
xor ebp, ebp
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x100]
shr esi, 3
push edi
mov edi, dword [esp + 0xf0]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x2c], 2
cmp esi, 0x14
je 0x4c9b59
cmp esi, 0x1c
je 0x4c9b59
cmp esi, 0x20
je 0x4c9b59
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.004047dd
add esp, 0xd0
ret
cmp eax, ebp
jne 0x4c9b66
call fcn.0047bdf0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xe4]
cmp eax, 0x200
jae 0x4c9b79
mov eax, 0x200
add eax, 0x3f
shr eax, 6
shl eax, 6
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xf4]
cmp eax, ebp
je 0x4c9b9a
cmp eax, esi
jae 0x4c9b9c
xor edi, edi
cmp eax, esi
jbe 0x4c9ba7
mov eax, esi
mov dword [esp + 0xf4], eax
cmp edi, ebp
je 0x4c9bbd
push eax
lea eax, [esp + 0x9c]
push edi
push eax
call fcn.00406080
add esp, 0xc
push ebx
call fcn.00480310
mov ebx, eax
cmp ebx, ebp
je 0x4ca1b3
call fcn.004b34c0
mov dword [esp + 0x28], eax
test eax, eax
je 0x4ca193
push ebx
call fcn.004803a0
push ebx
call fcn.00480430
push ebx
mov dword [esp + 0x1c], eax
call fcn.00480430
push ebx
mov dword [esp + 0x50], eax
call fcn.00480430
push ebx
mov dword [esp + 0x40], eax
call fcn.00480430
push ebx
mov dword [esp + 0x34], eax
call fcn.00480430
push ebx
mov dword [esp + 0x70], eax
call fcn.00480430
push ebx
mov dword [esp + 0x58], eax
call fcn.00480430
push ebx
mov dword [esp + 0x70], eax
call fcn.00480430
mov edi, eax
mov eax, dword [esp + 0x10c]
dec eax
add esp, 0x24
push eax
mov dword [esp + 0x1c], edi
call fcn.0046ee40
push eax
push edi
call fcn.0049b480
add esp, 0xc
test eax, eax
je 0x4ca193
lea esp, [esp]
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x14]
push edi
push 0
push ecx
call fcn.004ceb50
inc edi
add esp, 0xc
mov dword [esp + 0x3c], edi
test eax, eax
je 0x4ca193
xor edi, edi
cmp dword [esp + 0xf8], edi
jne 0x4c9cac
lea edx, [esp + 0x9c]
push esi
push edx
call fcn.00465fc0
add esp, 8
test eax, eax
jl 0x4ca193
mov edi, 1
jmp 0x4c9cb3
mov dword [esp + 0xf8], edi
push esi
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x84]
push ecx
call fcn.00406080
push esi
lea edx, [esp + 0xac]
push edx
lea eax, [esp + 0xd0]
push eax
call fcn.00406080
lea eax, [esi - 1]
add esp, 0x18
test eax, eax
jl 0x4c9cfc
lea esp, [esp]
add byte [esp + eax + 0x7c], 1
jne 0x4c9cfc
sub eax, 1
jns 0x4c9cf0
mov ecx, dword [esp + 0x20]
push 0
push ecx
push 0
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0xac]
push esi
push eax
call fcn.00478d10
add esp, 0x18
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x20]
push 0
push ecx
push 0
lea edx, [esp + 0xc8]
push edx
lea eax, [esp + 0x8c]
push esi
push eax
call fcn.00478d10
add esp, 0x18
test eax, eax
je 0x4ca193
xor eax, eax
test esi, esi
jle 0x4c9d63
mov cl, byte [esp + eax + 0xbc]
xor byte [esp + eax + 0x5c], cl
inc eax
cmp eax, esi
jl 0x4c9d53
mov edx, dword [esp + 0x1c]
or byte [esp + 0x5c], 0x80
or byte [esp + esi + 0x5b], 1
push edx
lea eax, [esp + 0x60]
push esi
push eax
call fcn.0046f230
add esp, 0xc
test eax, eax
je 0x4ca193
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push ebp
push edi
push ebx
push 0x32
push ecx
call fcn.004cefb0
add esp, 0x14
test eax, eax
jg 0x4c9dad
je 0x4c9c60
jmp 0x4ca193
push 0
push 2
push ebp
call fcn.004ceb50
add esp, 0xc
test eax, eax
je 0x4ca193
push 0
mov edx, ebp
push 3
push edx
call fcn.004ceb50
add esp, 0xc
test eax, eax
je 0x4ca193
mov eax, dword [esp + 0xe8]
lea ecx, [eax - 1]
mov eax, 0xcccccccd
mul ecx
mov ebp, edx
mov dword [esp + 0x24], 0
shr ebp, 7
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4c9e17
mov edx, dword [esp + 0x14]
push eax
push 0
push edx
call fcn.004ceb50
add esp, 0xc
test eax, eax
je 0x4ca193
mov eax, dword [esp + 0x2c]
push 0
push eax
call fcn.0046f1d0
add esp, 8
xor edi, edi
test ebp, ebp
jl 0x4c9eca
lea eax, [esi - 1]
test eax, eax
jl 0x4c9e43
add byte [esp + eax + 0x7c], 1
jne 0x4c9e43
sub eax, 1
jns 0x4c9e37
mov ecx, dword [esp + 0x20]
push 0
push ecx
push 0
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0x8c]
push esi
push eax
call fcn.00478d10
add esp, 0x18
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x10]
push ecx
lea edx, [esp + 0x60]
push esi
push edx
call fcn.0046f230
add esp, 0xc
test eax, eax
je 0x4ca193
lea eax, [esi*8]
imul eax, edi
push eax
mov eax, dword [esp + 0x14]
push eax
push eax
call fcn.0049b480
add esp, 0xc
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
push ecx
push eax
push eax
call fcn.0049d680
add esp, 0xc
test eax, eax
je 0x4ca193
inc edi
cmp edi, ebp
jle 0x4c9e30
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0x2c]
dec eax
push eax
push edi
call fcn.0046f550
add esp, 8
test eax, eax
je 0x4ca193
push edi
mov edi, dword [esp + 0x58]
push edi
call fcn.0046f120
add esp, 8
test eax, eax
je 0x4ca193
mov edx, dword [esp + 0x18]
push edx
push edi
push edi
call fcn.0049d680
add esp, 0xc
test eax, eax
je 0x4ca193
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.0049b330
add esp, 8
test eax, eax
je 0x4ca193
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
push ebx
push edx
push edi
push eax
push 0
call fcn.004c4840
add esp, 0x14
test eax, eax
je 0x4ca193
call fcn.0046ee40
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x10]
push eax
push ecx
push edx
call fcn.0049d5b0
add esp, 0xc
test eax, eax
je 0x4ca193
mov eax, dword [esp + 0x10]
push eax
push edi
mov edi, dword [esp + 0x54]
push edi
call fcn.0049d5b0
add esp, 0xc
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x18]
push ecx
push edi
call fcn.0046f3e0
add esp, 8
test eax, eax
jl 0x4c9fb7
mov edx, dword [esp + 0x14]
push edx
push 1
push ebx
push 0x32
push edi
call fcn.004cefb0
add esp, 0x14
test eax, eax
jg 0x4c9fd0
jne 0x4ca193
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x1000
mov dword [esp + 0x24], eax
jl 0x4c9df7
jmp 0x4c9c60
mov eax, dword [esp + 0x14]
push 1
push 2
push eax
call fcn.004ceb50
add esp, 0xc
test eax, eax
je 0x4ca193
call fcn.0046ee40
mov ebp, dword [esp + 0x18]
push eax
push edi
push ebp
call fcn.0049d5b0
add esp, 0xc
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
push ebx
push ecx
push ebp
push 0
push edx
call fcn.004c4840
add esp, 0x14
test eax, eax
je 0x4ca193
push 2
push ebp
call fcn.0046f1d0
add esp, 8
test eax, eax
je 0x4ca193
mov eax, dword [esp + 0x28]
push ebx
push edi
push eax
call fcn.004b3230
add esp, 0xc
test eax, eax
je 0x4ca193
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
push ecx
push ebx
push edi
push edx
mov eax, ebp
mov ebp, dword [esp + 0x50]
push eax
push ebp
call fcn.004b4310
add esp, 0x18
test eax, eax
je 0x4ca193
cmp dword [ebp + 4], 1
jne 0x4ca0c8
mov ecx, dword [ebp]
cmp dword [ecx], 1
jne 0x4ca0c8
cmp dword [ebp + 0xc], 0
jne 0x4ca0c8
call fcn.0046ee40
push eax
mov eax, dword [esp + 0x1c]
push eax
push eax
call fcn.0049d680
add esp, 0xc
test eax, eax
je 0x4ca193
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
inc dword [esp + 0x30]
push edx
push ebx
push edi
push eax
push ecx
push ebp
call fcn.004b4310
add esp, 0x18
test eax, eax
jne 0x4ca071
jmp 0x4ca193
mov edx, dword [esp + 0x14]
push 1
push 3
push edx
call fcn.004ceb50
add esp, 0xc
test eax, eax
je 0x4ca193
mov ebp, dword [esp + 0x58]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x34], 1
test eax, eax
je 0x4ca0fd
push eax
call fcn.0046ef30
add esp, 4
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4ca10d
push eax
call fcn.0046ef30
add esp, 4
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4ca11d
push eax
call fcn.0046ef30
add esp, 4
push edi
call fcn.0046f870
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x20]
push eax
call fcn.0046f870
mov ecx, dword [esp + 0x48]
push ecx
mov dword [ebp + 0x10], eax
call fcn.0046f870
add esp, 0xc
cmp dword [ebp + 0xc], 0
mov dword [ebp + 0x14], eax
je 0x4ca153
cmp dword [ebp + 0x10], 0
je 0x4ca153
test eax, eax
jne 0x4ca15d
mov dword [esp + 0x34], 0
jmp 0x4ca193
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4ca16b
mov edx, dword [esp + 0x24]
mov dword [eax], edx
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4ca179
mov ecx, dword [esp + 0x30]
mov dword [eax], ecx
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4ca193
push esi
lea edx, [esp + 0xa0]
push edx
push eax
call fcn.00406080
add esp, 0xc
push ebx
call fcn.004803f0
push ebx
call fcn.00480370
mov eax, dword [esp + 0x30]
add esp, 8
test eax, eax
je 0x4ca1b3
push eax
call fcn.004b31f0
add esp, 4
mov ecx, dword [esp + 0xdc]
mov eax, dword [esp + 0x34]
pop ebx
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004047dd
add esp, 0xd0
ret