Function at 0x476720
Capabilities:
Encode data using xor
Get common file path

Disassembly:
sub esp, 0x55c
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x558], eax
mov eax, dword [esp + 0x570]
push ebp
mov ebp, dword [esp + 0x570]
push esi
push edi
push str.Profiles_d
mov dword [esp + 0x10], eax
call fcn.004569c0
cmp dword [esp + 0x574], 0xffffffff
mov edi, eax
jne 0x4767ea
xor esi, esi
mov dword [esp + 0x574], edi
test edi, edi
jle 0x4767ea
push esi
lea ecx, [esp + 0x98]
push str.Profiles_d
push ecx
call fcn.0049deb5
add esp, 0xc
push 0x200
push 0x4b1914
lea edx, [esp + 0x16c]
push edx
push 0x4b44b0
lea eax, [esp + 0xa4]
push eax
call fcn.00456900
mov ecx, ebp
lea eax, [esp + 0x164]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4767d3
test dl, dl
je 0x4767cf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4767d3
add eax, 2
add ecx, 2
test dl, dl
jne 0x4767b3
xor eax, eax
jmp 0x4767d8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4767e3
inc esi
cmp esi, edi
jl 0x476770
jmp 0x4767ea
mov dword [esp + 0x574], esi
mov eax, dword [esp + 0xc]
test eax, eax
je 0x476801
push 0x50
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00465320
jmp 0x47681b
mov edx, dword [esp + 0x574]
push edx
lea eax, [esp + 0x14]
push str.Profiles_d
push eax
call fcn.0049deb5
add esp, 0xc
push ebp
push 0x4b44b0
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
cmp byte [esp + 0x570], 0
je 0x47686f
xor esi, esi
test edi, edi
jle 0x47686f
jmp 0x476840
push esi
lea edx, [esp + 0x98]
push str.Profiles_d
push edx
call fcn.0049deb5
add esp, 0xc
push 0
push 0x4b44a8
lea eax, [esp + 0x9c]
push eax
call fcn.00456800
inc esi
cmp esi, edi
jl 0x476840
movzx ecx, byte [esp + 0x570]
push ecx
push 0x4b44a8
lea edx, [esp + 0x18]
push edx
call fcn.00456800
push str.ArcName
lea eax, [esp + 0x14]
push eax
call fcn.00456740
push str.FileNames
lea ecx, [esp + 0x14]
push ecx
call fcn.00456740
push 0
push str.ImmExec
lea edx, [esp + 0x18]
push edx
call fcn.00456800
test ebx, ebx
je 0x4769c0
mov esi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x6b
push ebx
call esi
push eax
push str.ImmExec
lea eax, [esp + 0x18]
push eax
call fcn.00456800
push 0x6d
push ebx
call esi
push eax
push str.AddToMenu
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
push 0x66
push ebx
call esi
test eax, eax
je 0x476924
push 0x400
lea edx, [esp + 0x168]
push edx
push 0x67
push ebx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
lea eax, [esp + 0x164]
push eax
push str.ArcName
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
push 0x68
push ebx
call esi
test eax, eax
je 0x4769c0
push 0x69
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebp, eax
push ebp
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov esi, eax
add esi, 0xa
xor ecx, ecx
mov eax, esi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049e9f4
add esp, 4
push esi
mov edi, eax
push edi
push ebp
call fcn.0047de60
push edi
push str.FileNames
lea eax, [esp + 0x18]
push eax
call fcn.004567e0
push edi
call fcn.0049e845
add esp, 4
cmp byte [esp + 0x56c], 0
jne 0x476ff5
lea ecx, [esp + 0x164]
push ecx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea edx, [esp + 0x164]
push edx
push str.CurDir
lea eax, [esp + 0x18]
push eax
call fcn.004567c0
jmp 0x4769ce
cmp byte [esp + 0x56c], 0
jne 0x476ff5
mov ecx, dword [0x4e8190]
push ecx
call fcn.00465d30
mov esi, eax
push esi
call fcn.00464fd0
push eax
push str.ExclNames
lea edx, [esp + 0x18]
push edx
call fcn.004567c0
push esi
call fcn.0049e845
mov eax, dword [0x4e819c]
add esp, 4
push eax
call fcn.00465d30
mov esi, eax
push esi
call fcn.00464fd0
push eax
push str.StoreNames
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
push esi
call fcn.0049e845
add esp, 4
xor edx, edx
cmp dword [0x4e613c], edx
lea eax, [esp + 0x10]
sete dl
push edx
push str.UseRAR
push eax
call fcn.00456800
push 0x4e32b0
push str.SFXModule
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
push 0x4b1d54
lea edx, [esp + 0x14]
push edx
call fcn.00456740
push 0x4e6141
push str.SFXIcon
lea eax, [esp + 0x18]
push eax
call fcn.004567c0
push 0x4e6541
push str.SFXLogo
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
movzx edx, byte [0x4e6941]
push edx
push str.SFXElevate
lea eax, [esp + 0x18]
push eax
call fcn.00456800
push 0x4e42b0
push str.CmtFile
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
cmp byte [0x4e42b0], 0
je 0x476ac8
mov eax, 0x4b1914
jmp 0x476ad4
mov edx, dword [0x4f66d0]
push edx
call fcn.00464fd0
mov ecx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x476ae0
sub ecx, esi
inc ecx
push ecx
push eax
push str.CmtTextData
lea eax, [esp + 0x1c]
push eax
call fcn.00456860
mov eax, dword [0x4e5770]
mov ecx, dword [0x4e5774]
cmp eax, 0x7fffffff
jne 0x476b2b
cmp ecx, 0x7fffffff
jne 0x476b2b
mov ecx, dword [0x4b46e0]
mov dl, byte [0x4b46e4]
mov dword [esp + 0x60], ecx
mov byte [esp + 0x64], dl
jmp 0x476b37
lea edx, [esp + 0x60]
push edx
push ecx
push eax
call fcn.004653a0
lea eax, [esp + 0x60]
push eax
push str.VolumeSize
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
movzx edx, byte [0x4e585b]
push edx
push str.VolPause
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e5858]
push ecx
push str.OldVolNames
lea edx, [esp + 0x18]
push edx
call fcn.00456800
mov eax, dword [0x4e5750]
push eax
push str.RecVolNumber
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e5765]
push edx
push 0x4b3d88
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e5764]
push ecx
push str.Fresh
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e57a6]
push eax
push str.SyncFiles
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
mov edx, dword [0x4e5744]
push edx
push str.Overwrite
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e57a3]
push ecx
push str.Move
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e57a5]
push eax
push str.ArcRecBin
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e57a4]
push edx
push str.ArcWipe
lea eax, [esp + 0x18]
push eax
call fcn.00456800
mov ecx, dword [0x4e5758]
push ecx
push str.Solid
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e5762]
push eax
push 0x4b18bc
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e585a]
push edx
push str.Test
lea eax, [esp + 0x18]
push eax
call fcn.00456800
mov ecx, dword [0x4e574c]
push ecx
push str.Recovery
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e57a1]
push eax
push str.EraseDest
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e5761]
push edx
push str.AddArcOnly
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e5760]
push ecx
push str.ClearArc
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e5859]
push eax
push 0x4b203c
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
mov edx, dword [0x4e5748]
push edx
push str.Method
lea eax, [esp + 0x18]
push eax
call fcn.00456800
mov ecx, dword [0x4e2eac]
push ecx
push str.DictSizeLZ
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e6942]
push eax
push 0x4b4624
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e6943]
push edx
push str.WaitForOther
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e5d22]
push ecx
push str.Shutdown
lea edx, [esp + 0x18]
push edx
call fcn.00456800
xor eax, eax
jmp 0x476d60
mov cl, byte [eax + 0x4e52b8]
mov byte [esp + eax + 0xe4], cl
inc eax
test cl, cl
jne 0x476d60
lea eax, [esp + 0xe4]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x476d80
sub eax, edx
lea ecx, [eax + 1]
xor eax, eax
test ecx, ecx
jbe 0x476da3
mov dl, al
add dl, 0x49
xor byte [esp + eax + 0xe4], dl
inc eax
cmp eax, ecx
jb 0x476d92
push ecx
lea eax, [esp + 0xe8]
push eax
push str.Password
lea ecx, [esp + 0x1c]
push ecx
call fcn.00456860
movzx edx, byte [0x4e5338]
push edx
push str.EncryptHeaders
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e57a2]
push ecx
push str.OpenShared
lea edx, [esp + 0x18]
push edx
call fcn.00456800
movzx eax, byte [0x4e5794]
push eax
push str.ProcessOwners
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
movzx edx, byte [0x4e57f9]
push edx
push str.SaveStreams
lea eax, [esp + 0x18]
push eax
call fcn.00456800
movzx ecx, byte [0x4e57a7]
push ecx
push str.GenerateArcName
lea edx, [esp + 0x18]
push edx
call fcn.00456800
mov eax, dword [0x4e5d1c]
push eax
push str.VersionControl
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
push 0x4e57a8
push str.GenerateMask
lea edx, [esp + 0x18]
push edx
call fcn.004567c0
mov eax, dword [0x4f66d8]
push eax
push str.FileTimeMode
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
mov edx, dword [0x4f66dc]
push edx
push str.FileDays
lea eax, [esp + 0x18]
push eax
call fcn.00456800
mov ecx, dword [0x4f66e0]
push ecx
push str.FileHours
lea edx, [esp + 0x18]
push edx
call fcn.00456800
mov eax, dword [0x4f66e4]
push eax
push str.FileMinutes
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
mov ecx, 0x4e57fc
call fcn.00467ef0
push eax
push str.FileTimeBefore
lea edx, [esp + 0x18]
push edx
call fcn.00456800
mov ecx, 0x4e5820
call fcn.00467ef0
push eax
push str.FileTimeAfter
lea eax, [esp + 0x18]
push eax
call fcn.00456800
xor ecx, ecx
cmp dword [0x4e578c], 1
lea edx, [esp + 0x10]
sete cl
push ecx
push str.ArcTimeOriginal
push edx
call fcn.00456800
xor eax, eax
mov esi, 2
cmp dword [0x4e578c], esi
lea ecx, [esp + 0x10]
sete al
push eax
push str.ArcTimeLatest
push ecx
call fcn.00456800
mov edx, dword [0x4e5d24]
push edx
push str.mtime
lea eax, [esp + 0x18]
push eax
call fcn.00456800
mov ecx, dword [0x4e5d28]
push ecx
push str.ctime
lea edx, [esp + 0x18]
push edx
call fcn.00456800
mov eax, dword [0x4e5d2c]
push eax
push str.atime
lea ecx, [esp + 0x18]
push ecx
call fcn.00456800
xor edx, edx
cmp dword [0x4e5768], 3
lea eax, [esp + 0x10]
sete dl
push edx
push str.PathsAbs
push eax
call fcn.00456800
xor ecx, ecx
cmp dword [0x4e5768], esi
lea edx, [esp + 0x10]
sete cl
push ecx
push str.PathsNone
push edx
call fcn.00456800
xor eax, eax
cmp dword [0x4e5768], 5
lea ecx, [esp + 0x10]
sete al
push eax
push str.PathsAbsDrive
push ecx
call fcn.00456800
movzx edx, byte [0x4f66ea]
push edx
push str.SeparateArc
lea eax, [esp + 0x18]
push eax
call fcn.00456800
push 0x4e591c
push str.EmailArcTo
lea ecx, [esp + 0x18]
push ecx
call fcn.004567c0
push 0xc0
push 0x4e585c
push str.PackDetails
lea edx, [esp + 0x1c]
push edx
call fcn.00456860
mov ecx, dword [esp + 0x564]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.0049dea6
add esp, 0x55c
ret 0x14