Function at 0x47ea70
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x135c
call fcn.004a4490
mov eax, dword [0x4ca3b0]
xor eax, esp
mov dword [esp + 0x1358], eax
mov eax, dword [esp + 0x1368]
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
je 0x47eaa6
push 0x50
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0046a270
jmp 0x47eac5
mov ecx, dword [esp + 0x1368]
push ecx
lea edx, [esp + 0x10]
push str.Profiles_d
push edx
mov edx, 0x50
call fcn.0046b810
add esp, 0xc
push 0x400
push 0x4b8d34
lea eax, [esp + 0x368]
push eax
push str.ArcName
lea ecx, [esp + 0x1c]
push ecx
call fcn.0045b200
cmp word [esp + 0x360], bx
je 0x47eb17
xor eax, eax
jmp 0x47eb00
movzx ecx, word [esp + eax + 0x360]
mov word [eax + 0x4f701c], cx
add eax, 2
cmp cx, bx
jne 0x47eb00
push edi
cmp byte [esp + 0x1370], bl
je 0x47ec29
push str.FileNames
lea edx, [esp + 0x14]
push edx
call fcn.0045b280
cmp eax, ebx
jle 0x47ebc7
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a4a54
add esp, 4
push edi
push 0x4b8d34
mov esi, eax
push esi
push str.FileNames
lea eax, [esp + 0x20]
push eax
call fcn.0045b200
mov ecx, dword [0x4f781c]
push ebx
push ebx
push ecx
push esi
call fcn.0046ac00
push esi
call fcn.004a48a5
add esp, 4
push 0x400
push 0x4b8d34
lea edx, [esp + 0xb6c]
push edx
push str.CurDir
lea eax, [esp + 0x20]
push eax
call fcn.0045b200
lea ecx, [esp + 0xb64]
push ecx
call fcn.004850c0
mov byte [0x50c317], 1
mov byte [0x4f5fd4], 1
push str.ExclNames
lea edx, [esp + 0x14]
push edx
call fcn.0045b280
cmp eax, ebx
jle 0x47ec29
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a4a54
add esp, 4
push edi
push 0x4b8d34
mov esi, eax
push esi
push str.ExclNames
lea eax, [esp + 0x20]
push eax
call fcn.0045b200
mov ecx, dword [0x4f7820]
push ebx
push ebx
push ecx
push esi
call fcn.0046ac00
push esi
call fcn.004a48a5
add esp, 4
push str.StoreNames
lea edx, [esp + 0x14]
push edx
call fcn.0045b280
cmp eax, 0x200
jg 0x47ec44
mov eax, 0x200
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a4a54
add esp, 4
push edi
push str..rar_.zip_.cab_.7z_.ace_.arj_.bz2_.gz_.lha_.lzh_.taz_.tgz
mov esi, eax
push esi
push str.StoreNames
lea eax, [esp + 0x20]
push eax
call fcn.0045b200
mov ecx, dword [0x4f782c]
push ebx
push ebx
push ecx
push esi
call fcn.0046ac00
push esi
call fcn.004a48a5
add esp, 4
push ebx
push str.Default
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
push 1
test eax, eax
push str.UseRAR
lea eax, [esp + 0x18]
push eax
setne byte [esp + 0x1b]
call fcn.0045b230
push 0x400
push 0x4b8d34
neg eax
push 0x4f14b0
sbb eax, eax
push str.SFXModule
lea ecx, [esp + 0x20]
inc eax
push ecx
mov dword [0x4f4fbc], eax
call fcn.0045b200
cmp word [0x4f14b0], bx
jne 0x47ed11
push ebx
push 0x4b8fd8
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
neg eax
sbb eax, eax
and eax, 0x2a
mov word [0x4f14b0], ax
xor eax, eax
mov word [0x4f14b2], ax
push 0x400
push 0x4b8d34
push 0x4f4fc2
push str.SFXIcon
lea ecx, [esp + 0x20]
push ecx
call fcn.0045b200
cmp word [0x4f4fc2], bx
jne 0x47ed56
push 0x400
push 0x4b8d34
push 0x4f4fc2
push str.SFXIcon
push str.SFXDefault
call fcn.0045b200
push 0x400
push 0x4b8d34
push 0x4f57c2
push str.SFXLogo
lea edx, [esp + 0x20]
push edx
call fcn.0045b200
cmp word [0x4f57c2], bx
jne 0x47ed9b
push 0x400
push 0x4b8d34
push 0x4f57c2
push str.SFXLogo
push str.SFXDefault
call fcn.0045b200
push ebx
push 0x4bc450
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
test eax, eax
setne al
mov byte [0x4f5fc2], al
cmp al, bl
jne 0x47edd4
push ebx
push 0x4bc450
push str.SFXDefault
call fcn.0045b230
test eax, eax
setne cl
mov byte [0x4f5fc2], cl
push 0x4b8dc4
push 0x4f701c
call fcn.004519a0
test al, al
mov ax, word [0x4f14b0]
je 0x47edf2
cmp ax, bx
jne 0x47ee0d
mov edx, dword [0x4f4fbc]
cmp ax, bx
setne al
movzx ecx, al
push edx
push ecx
push 0x4f701c
call fcn.0047e6d0
push 0x400
push 0x4b8d34
push 0x4f2cb0
push str.CmtFile
lea edx, [esp + 0x20]
push edx
call fcn.0045b200
push 0x20000
call fcn.004a4a54
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x47ef1c
push 0x10000
push 0x4b8d34
push esi
push str.CmtTextWide
lea eax, [esp + 0x20]
push eax
call fcn.0045b200
cmp word [esi], bx
jne 0x47ee9b
push 0x10000
call fcn.004a4a54
add esp, 4
push 0x10000
push ebx
mov edi, eax
push edi
push str.CmtTextData
lea ecx, [esp + 0x20]
push ecx
call fcn.0045b250
push 0x10000
push esi
push edi
call fcn.00472850
push edi
call fcn.004a48a5
add esp, 4
xor edx, edx
mov word [esi + 0x1fffe], dx
mov eax, dword [0x50c2fc]
push eax
cmp word [esi], bx
je 0x47ef05
call fcn.004a48a5
mov eax, esi
add esp, 4
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x47eec0
sub eax, edx
sar eax, 1
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a4a54
add esp, 4
mov dword [0x50c2fc], eax
mov ecx, esi
mov edx, eax
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x47eef2
jmp 0x47ef13
call fcn.004a48a5
add esp, 4
mov dword [0x50c2fc], ebx
push esi
call fcn.004a48a5
add esp, 4
push 0x32
push 0x4b8d34
lea ecx, [esp + 0x208]
push ecx
push str.VolumeSize
lea edx, [esp + 0x20]
push edx
call fcn.0045b200
mov ax, word [esp + 0x200]
cmp ax, bx
jne 0x47ef5a
push ebx
push str.VolSize
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
cdq
jmp 0x47ef86
xor ecx, ecx
cmp ax, 0x41
sete cl
push ecx
call fcn.00472e60
test eax, eax
je 0x47ef79
mov eax, 0x7fffffff
mov dword [0x4f45f4], eax
jmp 0x47ef8c
lea edx, [esp + 0x200]
push edx
call fcn.0046a3a0
mov dword [0x4f45f4], edx
push ebx
mov dword [0x4f45f0], eax
push str.VolPause
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push ebx
test eax, eax
push str.OldVolNames
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f46db], cl
call fcn.0045b230
push ebx
test eax, eax
push str.RecVolNumber
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f46d8], al
call fcn.0045b230
push ebx
push str.Update
lea edx, [esp + 0x18]
push edx
mov dword [0x4f45d0], eax
call fcn.0045b230
push ebx
test eax, eax
push str.Fresh
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f45e5], al
call fcn.0045b230
push ebx
test eax, eax
push str.SyncFiles
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f45e4], dl
call fcn.0045b230
push ebx
test eax, eax
push str.Overwrite
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f4677], cl
call fcn.0045b230
push ebx
mov dword [0x4f45c4], eax
push str.Move
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push ebx
test eax, eax
push str.ArcRecBin
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f4622], cl
call fcn.0045b230
push ebx
test eax, eax
push str.ArcWipe
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f4625], al
call fcn.0045b230
test eax, eax
push 1
setne dl
push str.Solid
lea eax, [esp + 0x18]
mov byte [0x4f4624], dl
push eax
call fcn.0045b230
push 1
push 0x4bd8b4
lea ecx, [esp + 0x18]
push ecx
mov dword [0x4f45d8], eax
call fcn.0045b230
push ebx
test eax, eax
push str.Test
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f45e2], dl
call fcn.0045b230
push ebx
test eax, eax
push str.Recovery
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f46da], cl
call fcn.0045b230
push ebx
mov dword [0x4f45cc], eax
push str.EraseDest
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push ebx
test eax, eax
push str.AddArcOnly
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f4623], cl
call fcn.0045b230
push ebx
test eax, eax
push str.ClearArc
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f45e1], al
call fcn.0045b230
push ebx
test eax, eax
push str.Lock
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f45e0], dl
call fcn.0045b230
mov edi, 3
push edi
test eax, eax
push str.Method
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f46d9], cl
call fcn.0045b230
mov dword [0x4f45c8], eax
call fcn.0047c160
push eax
push str.DictSizeLZ
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push pe_nt_image_headers32
lea edx, [esp + 0xb4]
xor ecx, ecx
push ebx
push edx
mov dword [0x4f0cac], eax
mov word [esp + 0x270], cx
call fcn.004a44c0
add esp, 0xc
push pe_nt_image_headers32
push ebx
lea eax, [esp + 0xb8]
push eax
push str.PasswordWide
lea ecx, [esp + 0x20]
push ecx
call fcn.0045b250
cmp eax, ebx
jne 0x47f22f
push pe_nt_image_headers32
push ebx
lea edx, [esp + 0xb8]
push edx
push str.Password
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0xc4], bl
call fcn.0045b250
xor ecx, ecx
cmp eax, ebx
jle 0x47f213
lea esp, [esp]
mov dl, cl
add dl, 0x49
xor byte [esp + ecx + 0xb0], dl
je 0x47f213
inc ecx
cmp ecx, eax
jl 0x47f200
push 0x80
lea eax, [esp + 0x268]
push eax
lea ecx, [esp + 0xb8]
push ecx
call fcn.00472850
jmp 0x47f26b
xor ecx, ecx
cmp eax, ebx
jle 0x47f251
jmp 0x47f240
mov dl, cl
add dl, 0x49
xor byte [esp + ecx + 0xb0], dl
inc ecx
cmp ecx, eax
jl 0x47f240
push 0x80
lea eax, [esp + 0x268]
push eax
lea ecx, [esp + 0xb8]
push ecx
call fcn.004728d0
cmp byte [esp + 0xf], bl
je 0x47f282
cmp word [0x4f40b8], bx
jne 0x47f2c1
cmp byte [0x4f41b8], bl
jne 0x47f2c1
xor eax, eax
jmp 0x47f290
movzx ecx, word [esp + eax + 0x264]
mov word [eax + 0x4f40b8], cx
add eax, 2
cmp cx, bx
jne 0x47f290
push ebx
push str.EncryptHeaders
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
test eax, eax
setne al
mov byte [0x4f41b8], al
push ebx
push str.OpenShared
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b230
push ebx
test eax, eax
push str.ProcessOwners
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f4621], dl
call fcn.0045b230
push 1
test eax, eax
push str.SaveStreams
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f4614], cl
call fcn.0045b230
push ebx
test eax, eax
push str.Background
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f4679], al
call fcn.0045b230
push ebx
test eax, eax
push str.WaitForOther
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f5fc3], dl
call fcn.0045b230
push ebx
test eax, eax
push str.Shutdown
lea edx, [esp + 0x18]
setne cl
push edx
mov byte [0x4f5fc4], cl
call fcn.0045b230
push ebx
test eax, eax
push str.GenerateArcName
lea ecx, [esp + 0x18]
setne al
push ecx
mov byte [0x4f4ba2], al
call fcn.0045b230
push ebx
test eax, eax
push str.VersionControl
lea eax, [esp + 0x18]
setne dl
push eax
mov byte [0x4f4626], dl
call fcn.0045b230
push 0x50
push str.yyyymmddhhmmss
push 0x4f4627
push str.GenerateMask
lea ecx, [esp + 0x20]
push ecx
mov dword [0x4f4b9c], eax
call fcn.0045b6c0
cmp byte [0x4f4627], bl
je 0x47f3e9
mov ecx, str.yyyymmddhhnnss
mov eax, 0x4f4627
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x47f3e0
cmp dl, bl
je 0x47f3dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x47f3e0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x47f3c0
xor eax, eax
jmp 0x47f3e5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x47f423
mov edx, dword [str.yyyymmddhhmmss]
mov eax, dword [0x4bbcfc]
mov ecx, dword [0x4bbd00]
mov dword [0x4f4627], edx
mov dx, word [0x4bbd04]
mov dword [0x4f462b], eax
mov al, byte [0x4bbd06]
mov dword [0x4f462f], ecx
mov word [0x4f4633], dx
mov byte [0x4f4635], al
push ebx
push str.FileTimeMode
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b230
push ebx
push str.FileDays
lea edx, [esp + 0x18]
push edx
mov dword [0x50c304], eax
call fcn.0045b230
push ebx
mov dword [0x50c308], eax
push str.FileHours
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push ebx
push str.FileMinutes
lea ecx, [esp + 0x18]
push ecx
mov dword [0x50c30c], eax
call fcn.0045b230
mov ecx, dword [0x50c304]
mov dword [0x50c310], eax
mov dword [0x4f467c], ebx
mov dword [0x4f46a0], ebx
cmp ecx, 1
je 0x47f493
cmp ecx, 2
jne 0x47f4e6
mov edx, dword [0x50c30c]
push eax
mov eax, dword [0x50c308]
push edx
push eax
lea ecx, [esp + 0x1bc]
push str._dd_dh_dm
push ecx
call fcn.004a3c72
add esp, 0x14
cmp dword [0x50c304], 1
jne 0x47f4ce
lea edx, [esp + 0x1b0]
push edx
mov ecx, 0x4f467c
jmp 0x47f4db
lea eax, [esp + 0x1b0]
push eax
mov ecx, 0x4f46a0
call fcn.0046d4c0
mov ecx, dword [0x50c304]
mov esi, 4
cmp ecx, edi
je 0x47f4f3
cmp ecx, esi
jne 0x47f541
push ebx
push str.FileTimeBefore
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b230
cmp eax, ebx
je 0x47f51a
cmp dword [0x50c304], edi
jne 0x47f51a
push eax
mov ecx, 0x4f467c
call fcn.0046d030
push ebx
push str.FileTimeAfter
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
cmp eax, ebx
je 0x47f541
cmp dword [0x50c304], esi
jne 0x47f541
push eax
mov ecx, 0x4f46a0
call fcn.0046d030
push ebx
push str.ArcTimeOriginal
lea eax, [esp + 0x18]
push eax
mov dword [0x4f460c], ebx
call fcn.0045b230
test eax, eax
je 0x47f565
mov dword [0x4f460c], 1
push ebx
push str.ArcTimeLatest
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b230
test eax, eax
je 0x47f583
mov dword [0x4f460c], 2
push esi
push str.mtime
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
push ebx
mov dword [0x4f4ba4], eax
push str.ctime
lea eax, [esp + 0x18]
push eax
call fcn.0045b230
push ebx
push str.atime
lea ecx, [esp + 0x18]
push ecx
mov dword [0x4f4ba8], eax
call fcn.0045b230
mov edx, dword [0x4f781c]
mov dword [0x4f4bac], eax
mov eax, dword [edx + 0x20]
neg eax
push ebx
sbb eax, eax
push str.PathsAbs
lea ecx, [esp + 0x18]
and eax, 5
push ecx
mov dword [0x4f45e8], eax
call fcn.0045b230
test eax, eax
je 0x47f5f1
mov dword [0x4f45e8], edi
push ebx
push str.PathsNone
lea edx, [esp + 0x18]
push edx
call fcn.0045b230
pop edi
test eax, eax
je 0x47f610
mov dword [0x4f45e8], 1
push ebx
push str.PathsAbsDrive
lea eax, [esp + 0x14]
push eax
call fcn.0045b230
test eax, eax
je 0x47f62a
mov dword [0x4f45e8], esi
push ebx
push str.ImmExec
lea ecx, [esp + 0x14]
push ecx
call fcn.0045b230
push ebx
test eax, eax
push str.SeparateArc
lea eax, [esp + 0x14]
setne dl
push eax
mov byte [0x50c314], dl
call fcn.0045b230
push 0x400
push 0x4b8a2e
push 0x4f479c
test eax, eax
push str.EmailArcTo
lea edx, [esp + 0x1c]
setne cl
push edx
mov byte [0x50c316], cl
call fcn.0045b6c0
push 0xc0
push ebx
push 0x4f46dc
push str.PackDetails
lea eax, [esp + 0x1c]
push eax
call fcn.0045b250
mov ecx, dword [esp + 0x1360]
pop esi
pop ebx
xor ecx, esp
call fcn.004a3c63
add esp, 0x135c
ret 0xc