Function at 0x4e75e0
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6c0dfb
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x7e500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x10c], ebx
mov esi, dword [ebp + 8]
xor ecx, ecx
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x12c], ebx
call fcn.00594540
test al, al
je 0x4e8fab
mov ecx, esi
call fcn.00594b80
test al, al
je 0x4e8fab
mov ecx, dword [ebp + 0xc]
call fcn.00594eb0
test al, al
je 0x4e8fab
xor eax, eax
lea ecx, [ebp - 0x90]
mov edx, esi
mov dword [ebp - 0x128], eax
mov dword [ebp - 4], eax
call fcn.004e6dc0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x80], 0
push 0x808068
jne 0x4e7967
mov edi, 4
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e8fce
push eax
push 0x720b07
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.00427530
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
push 0
push 0x720b07
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.00427530
mov byte [ebp - 4], 3
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e76f1
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00427530
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x44]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e7757
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e774d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd4
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x4e77a1
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7797
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd4
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e77d9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e77cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd4
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e794d
push 0
push 0x720b07
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00427530
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x78]
push 0
push 0x720b07
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.00427530
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 6
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0x44], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7850
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00427530
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x44]
call fcn.005b7140
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Unable_to_retrieve_AppData_Roaming_Path_in__s
push 0x720b07
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 6
add esp, 0x10
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x4e78cb
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e78c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd9
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x4e7915
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e790b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd9
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e794d
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7943
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fd9
push edx
push ecx
call fcn.0065106e
add esp, 8
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e8fde
jmp 0x4e8dea
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e8fe4
push eax
push 0x720b07
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.00427530
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2c]
push 0
push 0x720b07
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00427530
mov byte [ebp - 4], 9
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e79f0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e7a65
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7a5b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fea
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e7ab8
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7aae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fea
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4e7af6
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7aec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fea
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e7caa
push 0
push 0x720b07
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00427530
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x108]
push 0
push 0x720b07
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov ebx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [ebx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7b80
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
lea ecx, [ebp - 0x90]
cmp dword [ebp - 0x7c], 8
mov edx, eax
cmovae ecx, dword [ebp - 0x90]
push ecx
mov eax, dword [edx]
push str.SaveToVDIStorage
push str._s_:_Location_to_write_data_is__s
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0xc
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4e7c17
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7c0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fef
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e7c70
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7c66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fef
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e7cb0
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7c9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e8fef
push edx
push ecx
call fcn.0065106e
add esp, 8
jmp 0x4e7cb0
mov ebx, dword [ebp - 0x10c]
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e8ff4
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], al
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 2
call fcn.0052f8f0
test eax, eax
je 0x4e8055
push 0x808068
mov edi, 4
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e8ffa
push eax
push 0x720b07
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.00427530
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x108]
push 0
push 0x720b07
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov byte [ebp - 4], 0x11
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7d90
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e7e05
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7dfb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9000
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e7e5e
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7e54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9000
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e7e96
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7e8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9000
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e803b
push 0
push 0x720b07
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00427530
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x108]
push 0
push 0x720b07
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7f20
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Failed_in_fetching_encryption_key_in__s
push 0x720b07
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x14
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4e7faa
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7fa0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9005
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e8003
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e7ff9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9005
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e803b
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8031
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9005
push edx
push ecx
call fcn.0065106e
add esp, 8
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e900a
jmp 0x4e8d9c
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x78]
call fcn.004ed160
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
mov byte [ebp - 4], 0x17
cmp dword [edi + 0x14], 8
jb 0x4e80aa
mov edi, dword [edi]
lea edx, [ebp - 0xa8]
mov ecx, edi
call fcn.004ed160
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x2c]
call fcn.004e7010
add esp, 4
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x1c], 0
je 0x4e8950
cmp dword [ebp - 0x34], 0
je 0x4e8950
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x2c]
call fcn.004ff110
add esp, 4
test eax, eax
jne 0x4e8950
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
push dword [ebp - 0xc8]
mov edi, dword [ebp - 0xd8]
cmovae eax, edi
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0052e7a0
push 0x808068
mov byte [ebp - 4], 0x21
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e9010
push eax
push 0x720b07
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], al
call fcn.00427530
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x108]
push 0
push 0x720b07
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov byte [ebp - 4], 0x23
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e81e0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x24
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e8258
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e824e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9016
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e82b1
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e82a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9016
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4e82ef
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e82e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9016
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e84bb
push 0
push 0x720b07
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x124]
push 0
push 0x720b07
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00427530
mov ebx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x26
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [ebx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e8382
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x27
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
lea ecx, [ebp - 0x44]
mov esi, eax
cmovae edx, dword [ebp - 0x60]
cmp dword [ebp - 0x30], 0x10
push edx
cmovae ecx, dword [ebp - 0x44]
mov eax, dword [esi]
push ecx
push str.SaveToVDIStorage
push str._s_:_Encryption_key_used_is__s_to_encrypt__s
push esi
call dword [eax + 4]
mov byte [ebp - 4], 0x26
add esp, 0x14
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4e8422
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8418
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e901b
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e847b
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8471
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e901b
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4e84c1
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e84af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e901b
push edx
push ecx
call fcn.0065106e
add esp, 8
jmp 0x4e84c1
mov ebx, dword [ebp - 0x10c]
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e9020
call fcn.005b6ea0
lea eax, [ebp - 0x90]
push eax
call fcn.005ba520
mov esi, dword [eax]
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x28
test esi, esi
je 0x4e84fd
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ecx, eax
test cl, 2
je 0x4e8538
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
and ecx, 0xfffffffd
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x90]
call fcn.004fac70
test al, al
jne 0x4e88d1
push 0x808068
mov dword [ebp - 0x128], 4
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e9026
push eax
push 0x720b07
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.00427530
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x124]
push 0
push 0x720b07
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00427530
mov byte [ebp - 4], 0x2a
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e85f0
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x2b
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e8668
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e865e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e902c
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e86c1
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e86b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e902c
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4e86ff
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e86f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e902c
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e88b6
push 0
push 0x720b07
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00427530
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x124]
push 0
push 0x720b07
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00427530
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e8792
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x2e
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Failed_in_writing_content_to_file_in__s
push 0x720b07
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x2d
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4e881f
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8815
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9031
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e8878
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e886e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9031
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4e88b6
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e88ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9031
push edx
push ecx
call fcn.0065106e
add esp, 8
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e9036
mov edi, dword [ebp - 0xd8]
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ecx, eax
test cl, 2
jne 0x4e890c
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
or ecx, 2
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x4e8ca6
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8941
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e903c
push edx
push ecx
call fcn.0065106e
add esp, 8
jmp 0x4e8ca6
push 0x808068
mov dword [ebp - 0x128], 4
call fcn.006549b4
add esp, 4
test eax, eax
jne 0x4e9041
push eax
push 0x720b07
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], al
call fcn.00427530
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x60]
push 0
push 0x720b07
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.00427530
mov byte [ebp - 4], 0x1c
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e89e2
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4e8a57
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8a4d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9047
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e8aaa
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8aa0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9047
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4e8ae8
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8ade
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9047
push edx
push ecx
call fcn.0065106e
add esp, 8
test bl, bl
je 0x4e8c8b
push 0
push 0x720b07
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00427530
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x60]
push 0
push 0x720b07
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.00427530
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e8b70
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00427530
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x20
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0xf0]
call fcn.005b7140
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Error_in_encrypting_data__s
push 0x720b07
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x1f
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4e8bfa
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8bf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e904c
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4e8c4d
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8c43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e904c
push edx
push ecx
call fcn.0065106e
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4e8c8b
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8c81
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e904c
push edx
push ecx
call fcn.0065106e
add esp, 8
push 0x808068
call fcn.006549d9
add esp, 4
test eax, eax
jne 0x4e9051
mov edi, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xc4]
cmp eax, 0x10
jb 0x4e8cdc
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4e8cd2
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9057
push ecx
push edi
call fcn.0065106e
add esp, 8
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4e8d10
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8d06
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9057
push edx
push ecx
call fcn.0065106e
add esp, 8
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp edx, 0x10
jb 0x4e8d5c
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8d52
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9057
push edx
push ecx
call fcn.0065106e
add esp, 8
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x4e8d96
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8d8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e9057
push edx
push ecx
call fcn.0065106e
add esp, 8
mov edi, dword [ebp - 0x128]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x4e8dd0
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4e8dc6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e905c
push edx
push ecx
call fcn.0065106e
add esp, 8
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.00427170
lea ecx, [ebp - 0x90]
call fcn.00427170
mov eax, edi
jmp 0x4e8fb0
mov eax, 5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00650ddc
mov esp, ebp
pop ebp
ret 0x14
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
call fcn.0066bea5
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
push eax
call fcn.00654ca6
call fcn.0066bea5
call fcn.0066bea5
int3