Function at 0x4ad060
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x246c
call fcn.004e6a80
mov eax, dword [0x519bc0]
xor eax, esp
mov dword [esp + 0x2468], eax
mov eax, dword [esp + 0x2478]
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
je 0x4ad099
push 0x50
push eax
lea eax, [esp + 0xd4]
push eax
call fcn.004694f0
jmp 0x4ad0bb
mov ecx, dword [esp + 0x2478]
push ecx
lea edx, [esp + 0xd0]
push str.Profiles_d
push edx
mov edx, 0x50
call fcn.00497580
add esp, 0xc
push 0x800
push 0x501ac8
lea eax, [esp + 0x1478]
push eax
push str.ArcName
lea ecx, [esp + 0xdc]
push ecx
call fcn.0049c4e0
cmp word [esp + 0x1470], bx
je 0x4ad107
xor eax, eax
jmp 0x4ad0f0
movzx ecx, word [esp + eax + 0x1470]
mov word [eax + 0x55ac02], cx
add eax, 2
cmp cx, bx
jne 0x4ad0f0
push edi
cmp byte [esp + 0x2480], bl
je 0x4ad278
push str.FileNames
lea edx, [esp + 0xd4]
push edx
call fcn.0049c0d0
mov edi, eax
cmp edi, ebx
jle 0x4ad211
add edi, 0xa
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e687d
add esp, 4
push edi
push 0x501ac8
mov esi, eax
push esi
push str.FileNames
lea eax, [esp + 0xe0]
push eax
call fcn.0049c4e0
push ebx
push ebx
push 0x55bc04
push esi
call fcn.004a3ea0
push esi
call fcn.004e7a24
add esp, 4
push 0x800
push 0x501ac8
lea ecx, [esp + 0x47c]
push ecx
push str.CurDir
lea edx, [esp + 0xe0]
push edx
mov byte [0x56ce56], 1
call fcn.0049c4e0
cmp word [esp + 0x474], bx
je 0x4ad211
lea eax, [esp + 0x474]
push eax
call fcn.00445500
test al, al
je 0x4ad211
push 1
lea ecx, [esp + 0x478]
push ecx
mov ecx, 0x549cc0
call fcn.00495790
mov byte [0x56ce56], 1
cmp word [0x55ac02], bx
je 0x4ad211
push 0x55ac02
call fcn.00453130
test al, al
jne 0x4ad211
push 0x800
push 0x55ac02
push 0x55ac02
mov ecx, 0x549cc0
call fcn.0048ff60
push str.ExclNames
lea edx, [esp + 0xd4]
push edx
call fcn.0049c0d0
mov edi, eax
cmp edi, ebx
jle 0x4ad278
add edi, 0xa
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e687d
add esp, 4
push edi
push 0x501ac8
mov esi, eax
push esi
push str.ExclNames
lea eax, [esp + 0xe0]
push eax
call fcn.0049c4e0
push ebx
push ebx
push 0x55bc60
push esi
call fcn.004a3ea0
push esi
call fcn.004e7a24
add esp, 4
push str.StoreNames
lea ecx, [esp + 0xd4]
push ecx
call fcn.0049c0d0
cmp eax, 0x200
jg 0x4ad296
mov eax, 0x200
lea edi, [eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e687d
add esp, 4
push edi
push str..rar_.zip_.cab_.7z_.ace_.arj_.bz2_.gz_.lha_.lzh_.taz_.tgz_.xz_.txz
mov esi, eax
push esi
push str.StoreNames
lea eax, [esp + 0xe0]
push eax
call fcn.0049c4e0
push ebx
push ebx
push 0x55bd74
push esi
call fcn.004a3ea0
push esi
call fcn.004e7a24
add esp, 4
push ebx
push str.Default
lea ecx, [esp + 0xd8]
push ecx
call fcn.0049c510
push 1
push str.UseRAR
lea edx, [esp + 0xd8]
test eax, eax
push edx
setne byte [esp + 0x1b]
call fcn.0049c510
neg eax
sbb eax, eax
inc eax
mov dword [0x557bb0], eax
cmp eax, ebx
jne 0x4ad33f
push ebx
push 0x508680
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
mov byte [0x55598f], 1
test eax, eax
jne 0x4ad345
mov byte [0x55598f], bl
push 0x800
push 0x501ac8
push 0x550800
push str.SFXModule
lea ecx, [esp + 0xe0]
push ecx
call fcn.0049c4e0
cmp word [0x550800], bx
jne 0x4ad397
push ebx
push 0x502c8c
lea edx, [esp + 0xd8]
push edx
call fcn.0049c510
neg eax
sbb eax, eax
and eax, 0x2a
mov word [0x550800], ax
xor eax, eax
mov word [0x550802], ax
push 0x800
push 0x501ac8
push 0x557bba
push str.SFXIcon
lea ecx, [esp + 0xe0]
push ecx
call fcn.0049c4e0
push 0x800
push 0x501ac8
push 0x558bba
push str.SFXLogo
lea edx, [esp + 0xe0]
push edx
call fcn.0049c4e0
push ebx
push str.SFXElevate
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
test eax, eax
push 0x502a30
setne cl
push 0x55ac02
mov byte [0x559bba], cl
call fcn.00453770
movzx edx, al
xor eax, eax
cmp word [0x550800], bx
setne al
cmp edx, eax
jne 0x4ad433
push 1
push ebx
push 1
push ebx
push ebx
push 0x55ac02
mov ecx, 0x54be10
call fcn.0047bc30
test al, al
je 0x4ad457
cmp word [0x550800], bx
mov ecx, dword [0x557bb0]
setne dl
push ecx
movzx eax, dl
push eax
push 0x800
push 0x55ac02
call fcn.004acd50
push 0x800
push 0x501ac8
push 0x552806
push str.CmtFile
lea ecx, [esp + 0xe0]
push ecx
call fcn.0049c4e0
push 0x20000
call fcn.004e687d
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x4ad58c
push 0x20000
push ebx
push esi
push str.CmtDataWide
lea edx, [esp + 0xe0]
push edx
call fcn.0049c530
cmp word [esi], bx
jne 0x4ad50c
push 0x10000
push 0x501ac8
push esi
push str.CmtTextWide
lea eax, [esp + 0xe0]
push eax
call fcn.0049c4e0
cmp word [esi], bx
jne 0x4ad50c
push 0x10000
call fcn.004e687d
add esp, 4
push 0x10000
push ebx
mov edi, eax
push edi
push str.CmtTextData
lea ecx, [esp + 0xe0]
push ecx
call fcn.0049c530
push 0x10000
push esi
push edi
call fcn.0046c5a0
push edi
call fcn.004e7a24
add esp, 4
xor edx, edx
mov word [esi + 0x1fffe], dx
mov eax, dword [0x56ce3c]
push eax
cmp word [esi], bx
je 0x4ad575
call fcn.004e7a24
mov eax, esi
add esp, 4
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4ad530
sub eax, edx
sar eax, 1
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e687d
add esp, 4
mov dword [0x56ce3c], eax
mov ecx, esi
mov edx, eax
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x4ad562
jmp 0x4ad583
call fcn.004e7a24
add esp, 4
mov dword [0x56ce3c], ebx
push esi
call fcn.004e7a24
add esp, 4
push 0x32
push 0x501ac8
lea ecx, [esp + 0x278]
push ecx
push str.VolumeSize
lea edx, [esp + 0xe0]
push edx
call fcn.0049c4e0
mov ax, word [esp + 0x270]
cmp ax, bx
jne 0x4ad5d0
push ebx
push str.VolSize
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
cdq
jmp 0x4ad5fc
xor ecx, ecx
cmp ax, 0x41
sete cl
push ecx
call fcn.0046cac0
test eax, eax
je 0x4ad5ef
mov eax, 0x7fffffff
mov dword [0x55595c], eax
jmp 0x4ad602
lea edx, [esp + 0x270]
push edx
call fcn.0046cae0
mov dword [0x55595c], edx
push 2
mov dword [0x555958], eax
push str.VolSizeMod
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
push ebx
push str.VolPause
lea ecx, [esp + 0xd8]
push ecx
mov dword [0x559bc8], eax
call fcn.0049c510
push ebx
test eax, eax
push str.OldVolNames
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x555ad2], dl
call fcn.0049c510
push ebx
test eax, eax
push str.RecVolNumber
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555994], cl
call fcn.0049c510
push ebx
mov dword [0x555934], eax
push str.Update
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
push ebx
test eax, eax
push str.Fresh
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555948], cl
call fcn.0049c510
push ebx
test eax, eax
push str.SyncFiles
lea ecx, [esp + 0xd8]
setne al
push ecx
mov byte [0x555947], al
call fcn.0049c510
push ebx
test eax, eax
push str.Overwrite
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x555aaa], dl
call fcn.0049c510
push ebx
push str.Move
lea ecx, [esp + 0xd8]
push ecx
mov dword [0x555924], eax
call fcn.0049c510
push ebx
test eax, eax
push str.ArcRecBin
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x55598e], dl
call fcn.0049c510
push ebx
test eax, eax
push str.ArcWipe
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555992], cl
call fcn.0049c510
test eax, eax
push ebx
push str.WipeIfPassword
lea ecx, [esp + 0xd8]
setne al
push ecx
mov byte [0x555991], al
call fcn.0049c510
push ebx
test eax, eax
push str.Solid
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x559bc5], dl
call fcn.0049c510
push ebx
push str.Test
lea ecx, [esp + 0xd8]
push ecx
mov dword [0x55593c], eax
call fcn.0049c510
push ebx
test eax, eax
push str.RecEnabled
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x555ad1], dl
call fcn.0049c510
push 0x3e8
test eax, eax
push str.RecSize
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x56ce57], cl
call fcn.0049c510
mov dword [0x56ce58], eax
mov esi, 0xfffffffd
cmp byte [0x56ce57], bl
je 0x4ad7e3
cmp eax, ebx
jne 0x4ad7e3
mov dword [0x56ce58], esi
push ebx
push str.Recovery
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
mov ecx, dword [0x56ce58]
mov dword [0x555930], eax
cmp ecx, 0x3e8
jne 0x4ad827
cmp eax, ebx
setne cl
mov byte [0x56ce57], cl
cmp eax, ebx
je 0x4ad81f
mov dword [0x56ce58], eax
jmp 0x4ad83a
mov dword [0x56ce58], esi
jmp 0x4ad83a
movzx edx, byte [0x56ce57]
neg edx
sbb edx, edx
and edx, ecx
mov dword [0x555930], edx
push ebx
push str.EraseDest
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
push ebx
test eax, eax
push str.AddArcOnly
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555990], cl
call fcn.0049c510
push ebx
test eax, eax
push str.ClearArc
lea ecx, [esp + 0xd8]
setne al
push ecx
mov byte [0x555945], al
call fcn.0049c510
push ebx
test eax, eax
push str.Lock
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x555944], dl
call fcn.0049c510
mov edi, 3
push edi
test eax, eax
push str.Method
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555ad0], cl
call fcn.0049c510
push 0x400000
mov dword [0x555928], eax
push str.DictSizeLZ
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
push 0x2000000
push str.DictSize
lea ecx, [esp + 0xd8]
push ecx
mov dword [0x54f7fc], eax
call fcn.0049c510
push 0x100
mov dword [0x557bb4], eax
lea eax, [esp + 0x174]
xor edx, edx
push ebx
push eax
mov word [esp + 0x2e0], dx
call fcn.004e7970
add esp, 0xc
push 0x100
push ebx
lea ecx, [esp + 0x178]
push ecx
push str.PasswordWide
lea edx, [esp + 0xe0]
push edx
call fcn.0049c530
cmp eax, ebx
jne 0x4ad9af
push 0x100
push ebx
lea eax, [esp + 0x178]
push eax
push str.Password
lea ecx, [esp + 0xe0]
push ecx
mov byte [esp + 0x184], bl
call fcn.0049c530
xor ecx, ecx
cmp eax, ebx
jle 0x4ad993
jmp 0x4ad980
mov dl, cl
add dl, 0x49
xor byte [esp + ecx + 0x170], dl
je 0x4ad993
inc ecx
cmp ecx, eax
jl 0x4ad980
push 0x80
lea eax, [esp + 0x2d8]
push eax
lea ecx, [esp + 0x178]
push ecx
call fcn.0046c5a0
jmp 0x4ad9eb
xor ecx, ecx
cmp eax, ebx
jle 0x4ad9d1
jmp 0x4ad9c0
mov dl, cl
add dl, 0x49
xor byte [esp + ecx + 0x170], dl
inc ecx
cmp ecx, eax
jl 0x4ad9c0
push 0x80
lea eax, [esp + 0x2d8]
push eax
lea ecx, [esp + 0x178]
push ecx
call fcn.0046c620
cmp byte [esp + 0xf], bl
je 0x4ada01
cmp byte [0x554918], bl
jne 0x4ada31
cmp byte [0x55491a], bl
jne 0x4ada31
lea edx, [esp + 0x2d4]
push edx
mov ecx, 0x554818
call fcn.004669e0
push ebx
push str.EncryptHeaders
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
test eax, eax
setne cl
mov byte [0x55491a], cl
push 0x100
lea edx, [esp + 0x2d8]
push edx
call fcn.00466960
push 0x100
lea eax, [esp + 0x174]
push eax
call fcn.00466960
push ebx
push str.OpenShared
lea ecx, [esp + 0xd8]
push ecx
call fcn.0049c510
push ebx
test eax, eax
push str.ProcessOwners
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x55598d], dl
call fcn.0049c510
push 1
test eax, eax
push str.SaveStreams
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555980], cl
call fcn.0049c510
push ebx
test eax, eax
push str.SaveSymLinks
lea ecx, [esp + 0xd8]
setne al
push ecx
mov byte [0x555aac], al
call fcn.0049c510
push ebx
test eax, eax
push str.SaveHardLinks
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x555981], dl
call fcn.0049c510
push ebx
test eax, eax
push str.Background
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x555982], cl
call fcn.0049c510
push ebx
test eax, eax
push str.WaitForOther
lea ecx, [esp + 0xd8]
setne al
push ecx
mov byte [0x559bbb], al
call fcn.0049c510
push ebx
test eax, eax
push str.Shutdown
lea eax, [esp + 0xd8]
setne dl
push eax
mov byte [0x559bbc], dl
call fcn.0049c510
push ebx
test eax, eax
push str.GenerateArcName
lea edx, [esp + 0xd8]
setne cl
push edx
mov byte [0x556b99], cl
call fcn.0049c510
test eax, eax
setne al
mov byte [0x5559a8], al
push ebx
push str.VersionControl
lea ecx, [esp + 0xd8]
push ecx
call fcn.0049c510
push ebx
push 0x508314
lea edx, [esp + 0xd8]
push edx
mov dword [0x556b94], eax
call fcn.0049c510
neg eax
sbb eax, eax
neg eax
add eax, 2
push ebx
mov dword [0x55592c], eax
push str.FileCopies
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
neg eax
push 1
sbb eax, eax
push str.QuickOpen
lea ecx, [esp + 0xd8]
neg eax
push ecx
mov dword [0x555998], eax
call fcn.0049c510
push 0x80
push str.yyyymmddhhmmss
push 0x5559aa
push str.GenerateMask
lea edx, [esp + 0xe0]
push edx
mov dword [0x551800], eax
call fcn.0049c4e0
mov esi, 4
cmp word [0x5559aa], bx
je 0x4adc3d
mov ecx, str.yyyymmddhhnnss
mov eax, 0x5559aa
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4adc34
cmp dx, bx
je 0x4adc30
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4adc34
add eax, esi
add ecx, esi
cmp dx, bx
jne 0x4adc10
xor eax, eax
jmp 0x4adc39
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4adc56
xor eax, eax
nop
movzx ecx, word [eax + str.yyyymmddhhmmss]
mov word [eax + 0x5559aa], cx
add eax, 2
cmp cx, bx
jne 0x4adc40
push ebx
push str.FileTimeMode
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
push ebx
push str.FileDays
lea ecx, [esp + 0xd8]
push ecx
mov dword [0x56ce44], eax
call fcn.0049c510
push ebx
push str.FileHours
lea edx, [esp + 0xd8]
push edx
mov dword [0x56ce48], eax
call fcn.0049c510
push ebx
mov dword [0x56ce4c], eax
push str.FileMinutes
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
mov ecx, dword [0x56ce44]
mov dword [0x56ce50], eax
mov dword [0x555ab0], ebx
mov dword [0x555ab4], ebx
mov dword [0x555ab8], ebx
mov dword [0x555abc], ebx
cmp ecx, 1
je 0x4adcde
cmp ecx, 2
jne 0x4add37
mov ecx, dword [0x56ce4c]
mov edx, dword [0x56ce48]
push eax
push ecx
push edx
lea eax, [esp + 0x3e0]
push str._dd_dh_dm
push eax
mov edx, 0x50
call fcn.00497580
add esp, 0x14
cmp dword [0x56ce44], 1
jne 0x4add1f
lea ecx, [esp + 0x3d4]
push ecx
mov ecx, 0x555ab0
jmp 0x4add2c
lea edx, [esp + 0x3d4]
push edx
mov ecx, 0x555ab8
call fcn.0046af30
mov ecx, dword [0x56ce44]
cmp ecx, edi
je 0x4add3f
cmp ecx, esi
jne 0x4add93
push ebx
push str.FileTimeBefore
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
cmp eax, ebx
je 0x4add69
cmp dword [0x56ce44], edi
jne 0x4add69
push eax
mov ecx, 0x555ab0
call fcn.0046ade0
push ebx
push str.FileTimeAfter
lea ecx, [esp + 0xd8]
push ecx
call fcn.0049c510
cmp eax, ebx
je 0x4add93
cmp dword [0x56ce44], esi
jne 0x4add93
push eax
mov ecx, 0x555ab8
call fcn.0046ade0
push ebx
push str.ArcTimeOriginal
lea edx, [esp + 0xd8]
push edx
mov dword [0x555978], ebx
call fcn.0049c510
test eax, eax
je 0x4addba
mov dword [0x555978], 1
push ebx
push str.ArcTimeLatest
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
test eax, eax
je 0x4adddb
mov dword [0x555978], 2
push esi
push str.mtime
lea ecx, [esp + 0xd8]
push ecx
call fcn.0049c510
push ebx
push str.ctime
lea edx, [esp + 0xd8]
push edx
mov dword [0x556b9c], eax
call fcn.0049c510
push ebx
mov dword [0x556ba0], eax
push str.atime
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
mov ecx, dword [0x55bc18]
neg ecx
push ebx
sbb ecx, ecx
push str.PathsAbs
lea edx, [esp + 0xd8]
and ecx, 5
push edx
mov dword [0x556ba4], eax
mov dword [0x55594c], ecx
call fcn.0049c510
test eax, eax
je 0x4ade53
mov dword [0x55594c], edi
push ebx
push str.PathsNone
lea eax, [esp + 0xd8]
push eax
call fcn.0049c510
pop edi
test eax, eax
je 0x4ade75
mov dword [0x55594c], 1
push ebx
push str.PathsAbsDrive
lea ecx, [esp + 0xd4]
push ecx
call fcn.0049c510
test eax, eax
je 0x4ade92
mov dword [0x55594c], esi
push ebx
push str.ImmExec
lea edx, [esp + 0xd4]
push edx
call fcn.0049c510
push ebx
test eax, eax
push str.SeparateArc
lea ecx, [esp + 0xd4]
setne al
push ecx
mov byte [0x56ce54], al
call fcn.0049c510
push 0x800
push 0x501ac8
push 0x555b94
test eax, eax
push str.EmailArcTo
lea eax, [esp + 0xdc]
setne dl
push eax
mov byte [0x559bd5], dl
call fcn.0049c4e0
push 0xc0
push ebx
lea ecx, [esp + 0x14]
push ecx
push str.PackDetails
lea edx, [esp + 0xdc]
push edx
call fcn.0049c530
push 0xc0
push ebx
push 0x555ad4
call fcn.004e7970
add esp, 0xc
xor eax, eax
mov ecx, dword [eax + 0x518824]
mov edx, dword [eax + 0x518820]
lea ecx, [ecx + ecx*2]
mov esi, dword [esp + ecx*4 + 0xc]
lea ecx, [esp + ecx*4 + 0xc]
lea edx, [edx + edx*2]
lea edx, [edx*4 + 0x555ad4]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
add eax, 8
mov dword [edx + 4], esi
mov dword [edx + 8], ecx
cmp eax, 0x40
jb 0x4adf20
mov ecx, dword [esp + 0x2470]
pop esi
pop ebx
xor ecx, esp
call fcn.004e6a64
add esp, 0x246c
ret 0xc