Function at 0x47f6c0
Capabilities:
Encode data using xor
Get graphical window text

Disassembly:
sub esp, 0xaac
mov eax, dword [0x4ca3b0]
xor eax, esp
mov dword [esp + 0xaa8], eax
mov eax, dword [esp + 0xac0]
push ebp
mov ebp, dword [esp + 0xac0]
push esi
push edi
push str.Profiles_d
mov dword [esp + 0x10], eax
call fcn.0045b2d0
cmp dword [esp + 0xac4], 0xffffffff
mov edi, eax
jne 0x47f7a5
xor esi, esi
mov dword [esp + 0xac4], edi
test edi, edi
jle 0x47f7a5
jmp 0x47f720
push esi
lea ecx, [esp + 0x118]
push str.Profiles_d
push ecx
mov edx, 0x50
call fcn.0046b810
add esp, 0xc
push 0x200
push 0x4b8d34
lea edx, [esp + 0x2bc]
push edx
push str.Name
lea eax, [esp + 0x124]
push eax
call fcn.0045b200
mov ecx, ebp
lea eax, [esp + 0x2b4]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47f78e
test dx, dx
je 0x47f78a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47f78e
add eax, 4
add ecx, 4
test dx, dx
jne 0x47f768
xor eax, eax
jmp 0x47f793
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x47f79e
inc esi
cmp esi, edi
jl 0x47f720
jmp 0x47f7a5
mov dword [esp + 0xac4], esi
mov eax, dword [esp + 0xc]
test eax, eax
je 0x47f7bc
push 0x50
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.0046a270
jmp 0x47f7db
mov edx, dword [esp + 0xac4]
push edx
lea eax, [esp + 0x14]
push str.Profiles_d
push eax
mov edx, 0x50
call fcn.0046b810
add esp, 0xc
push ebp
push str.Name
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
cmp byte [esp + 0xac0], 0
je 0x47f834
xor esi, esi
test edi, edi
jle 0x47f834
jmp 0x47f800
push esi
lea edx, [esp + 0x118]
push str.Profiles_d
push edx
mov edx, 0x50
call fcn.0046b810
add esp, 0xc
push 0
push str.Default
lea eax, [esp + 0x11c]
push eax
call fcn.0045b150
inc esi
cmp esi, edi
jl 0x47f800
movzx ecx, byte [esp + 0xac0]
push ecx
push str.Default
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
push str.ArcName
lea eax, [esp + 0x14]
push eax
call fcn.0045add0
push str.FileNames
lea ecx, [esp + 0x14]
push ecx
call fcn.0045add0
push 0
push str.ImmExec
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
test ebx, ebx
je 0x47f985
mov esi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x6b
push ebx
call esi
push eax
push str.ImmExec
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
push 0x6d
push ebx
call esi
push eax
push str.AddToMenu
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
push 0x66
push ebx
call esi
test eax, eax
je 0x47f8e9
push 0x400
lea edx, [esp + 0x2b8]
push edx
push 0x67
push ebx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea eax, [esp + 0x2b4]
push eax
push str.ArcName
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
push 0x68
push ebx
call esi
test eax, eax
je 0x47f985
push 0x69
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebp, eax
push ebp
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
add esi, 0xa
xor ecx, ecx
mov eax, esi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a4a54
add esp, 4
push esi
mov edi, eax
push edi
push ebp
call dword [sym.imp.USER32.dll_GetWindowTextW]
push edi
push str.FileNames
lea eax, [esp + 0x18]
push eax
call fcn.0045b130
push edi
call fcn.004a48a5
add esp, 4
cmp byte [esp + 0xabc], 0
jne 0x47ffc3
push 0x400
lea ecx, [esp + 0x2b8]
push ecx
call fcn.004850e0
lea edx, [esp + 0x2b4]
push edx
push str.CurDir
lea eax, [esp + 0x18]
push eax
call fcn.0045b130
jmp 0x47f993
cmp byte [esp + 0xabc], 0
jne 0x47ffc3
mov ecx, dword [0x4f7820]
push ecx
call fcn.0046ae00
mov esi, eax
push esi
call fcn.00469f10
push eax
push str.ExclNames
lea edx, [esp + 0x18]
push edx
call fcn.0045b130
push esi
call fcn.004a48a5
mov eax, dword [0x4f782c]
add esp, 4
push eax
call fcn.0046ae00
mov esi, eax
push esi
call fcn.00469f10
push eax
push str.StoreNames
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
push esi
call fcn.004a48a5
add esp, 4
xor edx, edx
cmp dword [0x4f4fbc], edx
lea eax, [esp + 0x10]
sete dl
push edx
push str.UseRAR
push eax
call fcn.0045b150
push 0x4f14b0
push str.SFXModule
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
push 0x4b8fd8
lea edx, [esp + 0x14]
push edx
call fcn.0045add0
push 0x4f4fc2
push str.SFXIcon
lea eax, [esp + 0x18]
push eax
call fcn.0045b130
push 0x4f57c2
push str.SFXLogo
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
movzx edx, byte [0x4f5fc2]
push edx
push 0x4bc450
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
push 0x4f2cb0
push str.CmtFile
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
cmp word [0x4f2cb0], 0
je 0x47fa8e
mov eax, 0x4b8d34
jmp 0x47fa9a
mov edx, dword [0x50c2fc]
push edx
call fcn.00469f10
push eax
push str.CmtTextWide
lea eax, [esp + 0x18]
push eax
call fcn.0045b130
mov eax, dword [0x4f45f0]
mov ecx, dword [0x4f45f4]
cmp eax, 0x7fffffff
jne 0x47fae9
cmp ecx, 0x7fffffff
jne 0x47fae9
xor eax, eax
jmp 0x47fad0
movzx ecx, word [eax + str.Auto]
mov word [esp + eax + 0xb0], cx
add eax, 2
test cx, cx
jne 0x47fad0
jmp 0x47faf8
lea edx, [esp + 0xb0]
push edx
push ecx
push eax
call fcn.0046a300
lea eax, [esp + 0xb0]
push eax
push str.VolumeSize
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b130
movzx edx, byte [0x4f46db]
push edx
push str.VolPause
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f46d8]
push ecx
push str.OldVolNames
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
mov eax, dword [0x4f45d0]
push eax
push str.RecVolNumber
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f45e5]
push edx
push str.Update
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f45e4]
push ecx
push str.Fresh
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f4677]
push eax
push str.SyncFiles
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
mov edx, dword [0x4f45c4]
push edx
push str.Overwrite
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f4622]
push ecx
push str.Move
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f4625]
push eax
push str.ArcRecBin
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f4624]
push edx
push str.ArcWipe
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
mov ecx, dword [0x4f45d8]
push ecx
push str.Solid
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f45e2]
push eax
push 0x4bd8b4
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f46da]
push edx
push str.Test
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
mov ecx, dword [0x4f45cc]
push ecx
push str.Recovery
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f4623]
push eax
push str.EraseDest
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f45e1]
push edx
push str.AddArcOnly
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f45e0]
push ecx
push str.ClearArc
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f46d9]
push eax
push str.Lock
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
mov edx, dword [0x4f45c8]
push edx
push str.Method
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
mov ecx, dword [0x4f0cac]
push ecx
push str.DictSizeLZ
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f5fc3]
push eax
push str.Background
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f5fc4]
push edx
push str.WaitForOther
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f4ba2]
push ecx
push str.Shutdown
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
push 0x80
lea eax, [esp + 0x1b8]
push eax
push 0x4f40b8
call fcn.00472890
mov eax, 0x4f40b8
lea edx, [eax + 2]
jmp 0x47fd40
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x47fd40
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
xor eax, eax
test ecx, ecx
jbe 0x47fd71
lea esp, [esp]
mov dl, al
add dl, 0x49
xor byte [esp + eax + 0x1b4], dl
inc eax
cmp eax, ecx
jb 0x47fd60
push ecx
lea eax, [esp + 0x1b8]
push eax
push str.PasswordWide
lea ecx, [esp + 0x1c]
push ecx
call fcn.0045b1b0
movzx edx, byte [0x4f41b8]
push edx
push str.EncryptHeaders
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f4621]
push ecx
push str.OpenShared
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
movzx eax, byte [0x4f4614]
push eax
push str.ProcessOwners
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
movzx edx, byte [0x4f4679]
push edx
push str.SaveStreams
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
movzx ecx, byte [0x4f4626]
push ecx
push str.GenerateArcName
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
mov eax, dword [0x4f4b9c]
push eax
push str.VersionControl
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
push 0x4f4627
push str.GenerateMask
lea edx, [esp + 0x18]
push edx
call fcn.0045b650
mov eax, dword [0x50c304]
push eax
push str.FileTimeMode
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
mov edx, dword [0x50c308]
push edx
push str.FileDays
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
mov ecx, dword [0x50c30c]
push ecx
push str.FileHours
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
mov eax, dword [0x50c310]
push eax
push str.FileMinutes
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
mov ecx, 0x4f467c
call fcn.0046d000
push eax
push str.FileTimeBefore
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
mov ecx, 0x4f46a0
call fcn.0046d000
push eax
push str.FileTimeAfter
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
xor ecx, ecx
mov esi, 1
cmp dword [0x4f460c], esi
lea edx, [esp + 0x10]
sete cl
push ecx
push str.ArcTimeOriginal
push edx
call fcn.0045b150
xor eax, eax
cmp dword [0x4f460c], 2
lea ecx, [esp + 0x10]
sete al
push eax
push str.ArcTimeLatest
push ecx
call fcn.0045b150
mov edx, dword [0x4f4ba4]
push edx
push str.mtime
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
mov ecx, dword [0x4f4ba8]
push ecx
push str.ctime
lea edx, [esp + 0x18]
push edx
call fcn.0045b150
mov eax, dword [0x4f4bac]
push eax
push str.atime
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b150
xor edx, edx
cmp dword [0x4f45e8], 3
lea eax, [esp + 0x10]
sete dl
push edx
push str.PathsAbs
push eax
call fcn.0045b150
xor ecx, ecx
cmp dword [0x4f45e8], esi
lea edx, [esp + 0x10]
sete cl
push ecx
push str.PathsNone
push edx
call fcn.0045b150
xor eax, eax
cmp dword [0x4f45e8], 4
lea ecx, [esp + 0x10]
sete al
push eax
push str.PathsAbsDrive
push ecx
call fcn.0045b150
movzx edx, byte [0x50c316]
push edx
push str.SeparateArc
lea eax, [esp + 0x18]
push eax
call fcn.0045b150
push 0x4f479c
push str.EmailArcTo
lea ecx, [esp + 0x18]
push ecx
call fcn.0045b650
push 0xc0
push 0x4f46dc
push str.PackDetails
lea edx, [esp + 0x1c]
push edx
call fcn.0045b1b0
mov ecx, dword [esp + 0xab4]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004a3c63
add esp, 0xaac
ret 0x14