Function at 0x49a4f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d437b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x33ac
call fcn.004bfc70
mov eax, dword [0x4ea93c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x10]
xor ebx, ebx
cmp eax, ebx
je 0x49a540
push 0x50
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.0047e340
jmp 0x49a55d
mov ecx, dword [ebp + 8]
push ecx
push str.Profiles_d
lea edx, [ebp - 0xb4]
push edx
mov edx, 0x50
call fcn.0043a6e0
add esp, 0xc
push 0x800
push 0x4d69fc
lea eax, [ebp - 0x13b8]
push eax
push str.ArcName
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bcb0
cmp word [ebp - 0x13b8], bx
je 0x49a5a7
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [ebp + eax - 0x13b8]
mov word [eax + 0x54fd12], cx
add eax, 2
cmp cx, bx
jne 0x49a590
cmp byte [ebp + 0xc], bl
je 0x49a76b
push str.FileNames
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bd30
cmp eax, ebx
jle 0x49a707
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bfc47
add esp, 4
mov esi, eax
push edi
push 0x4d69fc
push esi
push str.FileNames
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bcb0
push ebx
push ebx
push 0x550d14
push esi
call fcn.0047eca0
push esi
call fcn.004c061a
add esp, 4
mov byte [0x56b782], 1
mov byte [0x54ecd0], 1
push 0x800
push 0x4d69fc
lea ecx, [ebp - 0x23b8]
push ecx
push str.CurDir
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bcb0
cmp word [ebp - 0x23b8], bx
je 0x49a707
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x110]
call fcn.0047e890
mov byte [ebp - 4], 1
mov ecx, 0x550d14
call fcn.0047e680
mov ecx, 0x550d14
call fcn.0047ea80
mov esi, eax
cmp esi, ebx
je 0x49a6c6
push esi
call fcn.004601f0
test al, al
je 0x49a699
push esi
lea ecx, [ebp - 0x110]
call fcn.0047e700
jmp 0x49a671
push 0x800
lea eax, [ebp - 0x33b8]
push eax
push esi
lea ecx, [ebp - 0x23b8]
push ecx
call fcn.0045f4f0
lea edx, [ebp - 0x33b8]
push edx
lea ecx, [ebp - 0x110]
call fcn.0047e700
jmp 0x49a671
lea eax, [ebp - 0x110]
push eax
mov ecx, 0x550d14
call fcn.0042d750
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x110]
call fcn.004104a0
mov dword [ebp - 4], 0xffffffff
jmp 0x49a707
push str.ExclNames
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bd30
cmp eax, ebx
jle 0x49a76b
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bfc47
add esp, 4
mov esi, eax
push edi
push 0x4d69fc
push esi
push str.ExclNames
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bcb0
push ebx
push ebx
push 0x550d70
push esi
call fcn.0047eca0
push esi
call fcn.004c061a
add esp, 4
push str.StoreNames
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bd30
cmp eax, 0x200
jg 0x49a788
mov eax, 0x200
lea edi, [eax + eax + 0xa]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bfc47
add esp, 4
mov esi, eax
push edi
push str..rar_.zip_.cab_.7z_.ace_.arj_.bz2_.gz_.lha_.lzh_.taz_.tgz
push esi
push str.StoreNames
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bcb0
push ebx
push ebx
push 0x550e84
push esi
call fcn.0047eca0
push esi
call fcn.004c061a
add esp, 4
push ebx
push str.Default
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne byte [ebp - 0x33b9]
push 1
push str.UseRAR
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
neg eax
sbb eax, eax
inc eax
mov dword [0x54ccb0], eax
cmp eax, ebx
jne 0x49a830
push ebx
push 0x4d7470
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
je 0x49a830
mov byte [0x54aa8f], 1
push 0x800
push 0x4d69fc
push 0x545908
push str.SFXModule
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bcb0
cmp word [0x545908], bx
jne 0x49a880
push ebx
push 0x4d71f0
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
neg eax
sbb eax, eax
and eax, 0x2a
mov word [0x545908], ax
xor eax, eax
mov word [0x54590a], ax
push 0x800
push 0x4d69fc
push 0x54ccb6
push str.SFXIcon
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bcb0
push 0x800
push 0x4d69fc
push 0x54dcb6
push str.SFXLogo
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bcb0
push ebx
push str.SFXElevate
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54ecb6], cl
push 0x4d680c
push 0x54fd12
call fcn.0045fb20
movzx edx, al
xor eax, eax
cmp word [0x545908], bx
setne al
cmp edx, eax
jne 0x49a919
push 1
push ebx
push 1
push ebx
push ebx
push 0x54fd12
mov ecx, 0x540eb0
call fcn.00418dd0
test al, al
je 0x49a93d
mov ecx, dword [0x54ccb0]
push ecx
cmp word [0x545908], bx
setne dl
movzx eax, dl
push eax
push 0x800
push 0x54fd12
call fcn.00496a10
push 0x800
push 0x4d69fc
push 0x54790e
push str.CmtFile
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bcb0
push 0x20000
call fcn.004bfc47
add esp, 4
mov esi, eax
cmp esi, ebx
je 0x49aa6c
push 0x20000
push ebx
push esi
push str.CmtDataWide
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bd00
cmp word [esi], bx
jne 0x49a9ee
push 0x10000
push 0x4d69fc
push esi
push str.CmtTextWide
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bcb0
cmp word [esi], bx
jne 0x49a9ee
push 0x10000
call fcn.004bfc47
add esp, 4
mov edi, eax
push 0x10000
push ebx
push edi
push str.CmtTextData
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bd00
push 0x10000
push esi
push edi
call fcn.004859f0
push edi
call fcn.004c061a
add esp, 4
xor edx, edx
mov word [esi + 0x1fffe], dx
mov eax, dword [0x56b768]
push eax
cmp word [esi], bx
je 0x49aa55
call fcn.004c061a
add esp, 4
mov eax, esi
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x49aa10
sub eax, edx
sar eax, 1
inc eax
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bfc47
add esp, 4
mov dword [0x56b768], eax
mov ecx, esi
mov edx, eax
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x49aa42
jmp 0x49aa63
call fcn.004c061a
add esp, 4
mov dword [0x56b768], ebx
push esi
call fcn.004c061a
add esp, 4
push 0x32
push 0x4d69fc
lea ecx, [ebp - 0x2b8]
push ecx
push str.VolumeSize
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bcb0
mov ax, word [ebp - 0x2b8]
cmp ax, bx
jne 0x49aaac
push ebx
push str.VolSize
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
cdq
jmp 0x49aad7
xor ecx, ecx
cmp ax, 0x41
sete cl
push ecx
call fcn.00485f10
test eax, eax
je 0x49aacb
mov eax, 0x7fffffff
mov dword [0x54aa5c], eax
jmp 0x49aadd
lea edx, [ebp - 0x2b8]
push edx
call fcn.00485f30
mov dword [0x54aa5c], edx
mov dword [0x54aa58], eax
push 2
push str.VolSizeMod
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54ecc4], eax
push ebx
push str.VolPause
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54abd2], dl
push ebx
push str.OldVolNames
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa94], cl
push ebx
push str.RecVolNumber
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
mov dword [0x54aa34], eax
push ebx
push str.Update
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa48], cl
push ebx
push str.Fresh
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54aa47], al
push ebx
push str.SyncFiles
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54abaa], dl
push ebx
push str.Overwrite
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54aa24], eax
push ebx
push str.Move
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54aa8e], dl
push ebx
push str.ArcRecBin
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa92], cl
push ebx
push str.ArcWipe
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54aa91], al
push ebx
push str.WipeIfPassword
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54ecc1], dl
push 1
push str.Solid
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54aa3c], eax
push ebx
push str.Test
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54abd1], dl
push ebx
push str.Recovery
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54aa30], eax
push ebx
push str.EraseDest
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54aa90], dl
push ebx
push str.AddArcOnly
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa45], cl
push ebx
push str.ClearArc
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54aa44], al
push ebx
push str.Lock
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54abd0], dl
mov esi, 3
push esi
push str.Method
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54aa28], eax
push 0x400000
push str.DictSizeLZ
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
mov dword [0x544904], eax
push 0x2000000
push str.DictSize
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
mov dword [0x56b784], eax
xor eax, eax
mov word [ebp - 0x3b8], ax
push 0x100
push ebx
lea ecx, [ebp - 0x254]
push ecx
call fcn.004c05a0
add esp, 0xc
push 0x100
push ebx
lea edx, [ebp - 0x254]
push edx
push str.PasswordWide
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bd00
cmp eax, ebx
jne 0x49addd
mov byte [ebp - 0x254], bl
push 0x100
push ebx
lea ecx, [ebp - 0x254]
push ecx
push str.Password
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bd00
xor ecx, ecx
cmp eax, ebx
jle 0x49adc3
jmp 0x49adb0
mov dl, cl
add dl, 0x49
xor byte [ebp + ecx - 0x254], dl
je 0x49adc3
inc ecx
cmp ecx, eax
jl 0x49adb0
push 0x80
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004859f0
jmp 0x49ae0c
xor ecx, ecx
cmp eax, ebx
jle 0x49adf4
mov dl, cl
add dl, 0x49
xor byte [ebp + ecx - 0x254], dl
inc ecx
cmp ecx, eax
jl 0x49ade3
push 0x80
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.00485a70
cmp byte [ebp - 0x33b9], bl
je 0x49ae24
cmp byte [0x549a18], bl
jne 0x49ae52
cmp byte [0x549a1a], bl
jne 0x49ae52
lea edx, [ebp - 0x3b8]
push edx
mov ecx, 0x549918
call fcn.00477920
push ebx
push str.EncryptHeaders
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x549a1a], cl
push 0x100
lea edx, [ebp - 0x3b8]
push edx
call fcn.004778a0
push 0x100
lea eax, [ebp - 0x254]
push eax
call fcn.004778a0
push ebx
push str.OpenShared
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54aa8d], dl
push ebx
push str.ProcessOwners
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa80], cl
mov edi, 1
push edi
push str.SaveStreams
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54abac], al
push ebx
push str.SaveSymLinks
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54aa81], dl
push ebx
push str.SaveHardLinks
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54aa82], cl
push ebx
push str.Background
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54ecb7], al
push ebx
push str.WaitForOther
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54ecb8], dl
push ebx
push str.Shutdown
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
setne cl
mov byte [0x54bc99], cl
push ebx
push str.GenerateArcName
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x54aaa8], al
push ebx
push str.VersionControl
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
mov dword [0x54bc94], eax
push ebx
push str.BLAKE2
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
neg eax
sbb eax, eax
neg eax
add eax, 2
mov dword [0x54aa2c], eax
push ebx
push str.FileCopies
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
neg eax
sbb eax, eax
neg eax
mov dword [0x54aa98], eax
push edi
push str.QuickOpen
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
mov dword [0x546908], eax
push 0x80
push str.yyyymmddhhmmss
push 0x54aaaa
push str.GenerateMask
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bcb0
cmp word [0x54aaaa], bx
je 0x49b04f
mov ecx, str.yyyymmddhhnnss
mov eax, 0x54aaaa
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x49b046
cmp dx, bx
je 0x49b042
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x49b046
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x49b020
xor eax, eax
jmp 0x49b04b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x49b067
xor eax, eax
movzx ecx, word [eax + str.yyyymmddhhmmss]
mov word [eax + 0x54aaaa], cx
add eax, 2
cmp cx, bx
jne 0x49b051
push ebx
push str.FileTimeMode
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x56b770], eax
push ebx
push str.FileDays
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
mov dword [0x56b774], eax
push ebx
push str.FileHours
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
mov dword [0x56b778], eax
push ebx
push str.FileMinutes
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x56b77c], eax
mov dword [0x54abb0], ebx
mov dword [0x54abb4], ebx
mov dword [0x54abb8], ebx
mov dword [0x54abbc], ebx
mov ecx, dword [0x56b770]
cmp ecx, edi
je 0x49b0ea
cmp ecx, 2
jne 0x49b13f
push eax
mov ecx, dword [0x56b778]
push ecx
mov edx, dword [0x56b774]
push edx
push str._dd_dh_dm
lea eax, [ebp - 0x154]
push eax
mov edx, 0x50
call fcn.0043a6e0
add esp, 0x14
cmp dword [0x56b770], edi
jne 0x49b128
lea ecx, [ebp - 0x154]
push ecx
mov ecx, 0x54abb0
jmp 0x49b134
lea edx, [ebp - 0x154]
push edx
mov ecx, 0x54abb8
call fcn.004819d0
mov ecx, dword [0x56b770]
cmp ecx, esi
je 0x49b148
cmp ecx, 4
jne 0x49b19b
push ebx
push str.FileTimeBefore
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
cmp eax, ebx
je 0x49b171
cmp dword [0x56b770], esi
jne 0x49b171
push eax
mov ecx, 0x54abb0
call fcn.00481880
push ebx
push str.FileTimeAfter
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
cmp eax, ebx
je 0x49b19b
cmp dword [0x56b770], 4
jne 0x49b19b
push eax
mov ecx, 0x54abb8
call fcn.00481880
mov dword [0x54aa78], ebx
push ebx
push str.ArcTimeOriginal
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
je 0x49b1bd
mov dword [0x54aa78], edi
push ebx
push str.ArcTimeLatest
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
je 0x49b1dd
mov dword [0x54aa78], 2
push 4
push str.mtime
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
mov dword [0x54bc9c], eax
push ebx
push str.ctime
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
mov dword [0x54bca0], eax
push ebx
push str.atime
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
mov dword [0x54bca4], eax
mov ecx, dword [0x550d28]
neg ecx
sbb ecx, ecx
and ecx, 5
mov dword [0x54aa4c], ecx
push ebx
push str.PathsAbs
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
je 0x49b252
mov dword [0x54aa4c], esi
push ebx
push str.PathsNone
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bce0
test eax, eax
je 0x49b26e
mov dword [0x54aa4c], edi
push ebx
push str.PathsAbsDrive
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
je 0x49b28e
mov dword [0x54aa4c], 4
push ebx
push str.ImmExec
lea edx, [ebp - 0xb4]
push edx
call fcn.0046bce0
test eax, eax
setne al
mov byte [0x56b780], al
push ebx
push str.SeparateArc
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bce0
test eax, eax
setne dl
mov byte [0x54ecd1], dl
push 0x800
push 0x4d69fc
push 0x54ac94
push str.EmailArcTo
lea eax, [ebp - 0xb4]
push eax
call fcn.0046bcb0
push 0xc0
push ebx
push 0x54abd4
push str.PackDetails
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046bd00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004bfc52
mov esp, ebp
pop ebp
ret 0xc