Function at 0x499690
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ee3e1
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x32d0
call fcn.004c0dd0
mov eax, dword [0x51eed4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2a54], ecx
mov dword [ebp - 0x2a50], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.0049fc60
mov byte [ebp - 4], 1
push 0x2000
call fcn.004c0518
add esp, 4
mov dword [ebp - 0x1e34], eax
mov eax, dword [ebp - 0x1e34]
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x1e38], 0x12
mov ecx, dword [ebp - 0x1e38]
push ecx
call fcn.004c0518
add esp, 4
mov dword [ebp - 0x1e3c], eax
cmp dword [ebp - 0x1e3c], 0
je 0x49976a
mov edx, dword [ebp - 0x1e38]
push edx
push 0
mov eax, dword [ebp - 0x1e3c]
push eax
call fcn.004bfe20
add esp, 0xc
mov ecx, dword [ebp - 0x1e3c]
mov dword [ebp - 0x2a58], ecx
jmp 0x499774
mov dword [ebp - 0x2a58], 0
mov edx, dword [ebp - 0x2a58]
mov dword [ebp - 0x2ac], edx
lea ecx, [ebp - 0x54]
call fcn.00481e90
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.00480c00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.00402ab0
mov byte [ebp - 4], 4
lea ecx, [ebp + 8]
call fcn.00480e10
push eax
push 0x4f6380
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x2a8]
push ecx
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xffffffff
jne 0x499848
push str.Invalid_handle_Error
mov ecx, 0x521b96
call fcn.004bdd50
mov byte [ebp - 0x1e3d], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.00402bb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.00480cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.00487c30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.0049fce0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00480cf0
mov al, byte [ebp - 0x1e3d]
jmp 0x49ef3f
mov byte [ebp - 4], 5
push str._Locker_Backup.db
lea eax, [ebp - 0x27c]
push eax
call fcn.004c0d36
add esp, 8
test eax, eax
je 0x49edf2
push str._RECYCLE.BIN
lea ecx, [ebp - 0x27c]
push ecx
call fcn.004c0d36
add esp, 8
test eax, eax
je 0x49edf2
push str.Recycle_Bin
lea edx, [ebp - 0x27c]
push edx
call fcn.004c0d36
add esp, 8
test eax, eax
je 0x49edf2
push str.System_Volume_Information
lea eax, [ebp - 0x27c]
push eax
call fcn.004c0d36
add esp, 8
test eax, eax
je 0x49edf2
push 0x4f6430
lea ecx, [ebp - 0x27c]
push ecx
call fcn.004c0dfb
add esp, 8
test eax, eax
je 0x49edf2
push 0x4f6434
lea edx, [ebp - 0x27c]
push edx
call fcn.004c0dfb
add esp, 8
test eax, eax
je 0x49edf2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e44], esp
lea eax, [ebp - 0x27c]
push eax
call fcn.00480c70
mov dword [ebp - 0x2a5c], eax
call fcn.0049f190
add esp, 0x1c
mov byte [ebp - 0x2a5d], al
movzx ecx, byte [ebp - 0x2a5d]
test ecx, ecx
jne 0x49edf2
cmp dword [ebp - 0x288], 0
jne 0x499947
mov edx, dword [ebp - 0x2a8]
and edx, 0x10
jne 0x499947
jmp 0x49edf2
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2a64], eax
mov eax, dword [ebp - 0x2a64]
mov dword [ebp - 0x1e4c], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1e4c], 0
je 0x4999e5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e50], esp
push ecx
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x2a54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2a68], eax
mov ecx, dword [ebp - 0x1e4c]
call fcn.004897d0
mov dword [ebp - 0x2a6c], eax
mov eax, dword [ebp - 0x2a6c]
mov dword [ebp - 0x2a70], eax
jmp 0x4999ef
mov dword [ebp - 0x2a70], 0
mov ecx, dword [ebp - 0x2a70]
mov dword [ebp - 0x1e48], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x2a54]
mov eax, dword [ebp - 0x1e48]
mov dword [edx + 4], eax
push 0x4f643c
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 4]
call fcn.004897b0
mov dword [ebp - 0x2a74], eax
lea edx, [ebp - 0x370]
push edx
mov ecx, dword [ebp - 0x2a74]
call fcn.00402230
mov dword [ebp - 0x2a78], eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2a54]
cmp dword [eax + 4], 0
je 0x499aab
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x1e58], edx
mov eax, dword [ebp - 0x1e58]
mov dword [ebp - 0x1e54], eax
cmp dword [ebp - 0x1e54], 0
je 0x499a94
push 1
mov ecx, dword [ebp - 0x1e54]
call fcn.0049f490
mov dword [ebp - 0x2a7c], eax
mov ecx, dword [ebp - 0x2a7c]
mov dword [ebp - 0x2a80], ecx
jmp 0x499a9e
mov dword [ebp - 0x2a80], 0
mov edx, dword [ebp - 0x2a54]
mov dword [edx + 4], 0
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2a84], eax
mov eax, dword [ebp - 0x2a84]
mov dword [ebp - 0x1e60], eax
mov byte [ebp - 4], 8
cmp dword [ebp - 0x1e60], 0
je 0x499b21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e64], esp
push ecx
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x2a54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x2a88], eax
mov ecx, dword [ebp - 0x1e60]
call fcn.004897d0
mov dword [ebp - 0x2a8c], eax
mov eax, dword [ebp - 0x2a8c]
mov dword [ebp - 0x2a90], eax
jmp 0x499b2b
mov dword [ebp - 0x2a90], 0
mov ecx, dword [ebp - 0x2a90]
mov dword [ebp - 0x1e5c], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x2a54]
mov eax, dword [ebp - 0x1e5c]
mov dword [edx + 4], eax
push 0x4f6444
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 4]
call fcn.004897b0
mov dword [ebp - 0x2a94], eax
lea edx, [ebp - 0x354]
push edx
mov ecx, dword [ebp - 0x2a94]
call fcn.00402230
mov dword [ebp - 0x2a98], eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x2a54]
cmp dword [eax + 4], 0
je 0x499be7
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x1e6c], edx
mov eax, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e68], eax
cmp dword [ebp - 0x1e68], 0
je 0x499bd0
push 1
mov ecx, dword [ebp - 0x1e68]
call fcn.0049f490
mov dword [ebp - 0x2a9c], eax
mov ecx, dword [ebp - 0x2a9c]
mov dword [ebp - 0x2aa0], ecx
jmp 0x499bda
mov dword [ebp - 0x2aa0], 0
mov edx, dword [ebp - 0x2a54]
mov dword [edx + 4], 0
lea ecx, [ebp - 0x370]
call fcn.00402bd0
mov dword [ebp - 0x2aa4], eax
push 0xa
push 0
mov eax, dword [ebp - 0x2aa4]
push eax
call fcn.004c1554
add esp, 0xc
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
lea ecx, [ebp - 0x354]
call fcn.00402bd0
mov dword [ebp - 0x2aa8], eax
push 0xa
push 0
mov ecx, dword [ebp - 0x2aa8]
push ecx
call fcn.004c1554
add esp, 0xc
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], edx
mov edx, dword [ebp - 0x288]
xor eax, eax
add edx, dword [ebp - 0x378]
adc eax, dword [ebp - 0x374]
mov dword [ebp - 0x2ab0], edx
mov dword [ebp - 0x2aac], eax
mov ecx, dword [ebp - 0x2aac]
cmp ecx, dword [ebp - 0x334]
jb 0x499ca8
ja 0x499c85
mov edx, dword [ebp - 0x2ab0]
cmp edx, dword [ebp - 0x338]
jbe 0x499ca8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
jmp 0x49ee0e
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x328]
call fcn.00480d30
lea ecx, [ebp + 8]
call fcn.00480e10
mov dword [ebp - 0x2ab4], eax
lea ecx, [ebp - 0x27c]
push ecx
mov edx, dword [ebp - 0x2ab4]
push edx
push 0x4f644c
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x32c]
push ecx
lea ecx, [ebp - 0x30c]
call fcn.00480d30
mov edx, dword [ebp - 0x32c]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.0049fdc0
mov byte [ebp - 0x2ab5], al
mov al, byte [ebp - 0x2ab5]
mov byte [ebp - 0x2b8], al
movzx ecx, byte [ebp - 0x2b8]
test ecx, ecx
je 0x499e4d
push 0x4f6458
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e74], esp
mov edx, dword [ebp - 0x32c]
push edx
call fcn.00480c70
mov dword [ebp - 0x2abc], eax
lea eax, [ebp - 0x1e90]
push eax
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2ac0], eax
mov ecx, dword [ebp - 0x2ac0]
mov dword [ebp - 0x2ac4], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x2a50]
or edx, 1
mov dword [ebp - 0x2a50], edx
mov eax, dword [ebp - 0x2ac4]
push eax
lea ecx, [ebp - 0x1eac]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.0049fed0
mov dword [ebp - 0x2ac8], eax
mov ecx, dword [ebp - 0x2ac8]
mov dword [ebp - 0x2acc], ecx
mov dword [ebp - 4], 0xb
mov edx, dword [ebp - 0x2a50]
or edx, 2
mov dword [ebp - 0x2a50], edx
mov eax, dword [ebp - 0x2acc]
push eax
lea ecx, [ebp - 0x1ec8]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.0049fdf0
mov dword [ebp - 0x2ad0], eax
mov ecx, dword [ebp - 0x2ad0]
mov dword [ebp - 0x2ad4], ecx
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0x2a50]
or edx, 4
mov dword [ebp - 0x2a50], edx
mov ecx, dword [ebp - 0x2ad4]
call fcn.004825a0
mov dword [ebp - 0x2ad8], eax
mov eax, dword [ebp - 0x2ad8]
mov dword [ebp - 0x2adc], eax
jmp 0x499f45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1ecc], esp
mov edx, dword [ebp - 0x32c]
push edx
call fcn.00480c70
mov dword [ebp - 0x2ae0], eax
lea eax, [ebp - 0x1ee8]
push eax
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2ae4], eax
mov ecx, dword [ebp - 0x2ae4]
mov dword [ebp - 0x2ae8], ecx
mov dword [ebp - 4], 0xd
mov edx, dword [ebp - 0x2a50]
or edx, 8
mov dword [ebp - 0x2a50], edx
mov eax, dword [ebp - 0x2ae8]
push eax
lea ecx, [ebp - 0x1f04]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.0049fed0
mov dword [ebp - 0x2aec], eax
mov ecx, dword [ebp - 0x2aec]
mov dword [ebp - 0x2af0], ecx
mov dword [ebp - 4], 0xe
mov edx, dword [ebp - 0x2a50]
or edx, 0x10
mov dword [ebp - 0x2a50], edx
mov eax, dword [ebp - 0x2af0]
push eax
lea ecx, [ebp - 0x1f20]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.0049fdf0
mov dword [ebp - 0x2af4], eax
mov ecx, dword [ebp - 0x2af4]
mov dword [ebp - 0x2af8], ecx
mov dword [ebp - 4], 0xf
mov edx, dword [ebp - 0x2a50]
or edx, 0x20
mov dword [ebp - 0x2a50], edx
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2adc], eax
mov ecx, dword [ebp - 0x2adc]
mov dword [ebp - 0x1e70], ecx
mov edx, dword [ebp - 0x1e70]
push edx
lea ecx, [ebp - 0x2f0]
call fcn.00480d10
mov dword [ebp - 4], 0xe
mov eax, dword [ebp - 0x2a50]
and eax, 0x20
je 0x499f87
and dword [ebp - 0x2a50], 0xffffffdf
lea ecx, [ebp - 0x1f20]
call fcn.00480cf0
mov dword [ebp - 4], 0xd
mov ecx, dword [ebp - 0x2a50]
and ecx, 0x10
je 0x499fab
and dword [ebp - 0x2a50], 0xffffffef
lea ecx, [ebp - 0x1f04]
call fcn.00480cf0
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0x2a50]
and edx, 8
je 0x499fcf
and dword [ebp - 0x2a50], 0xfffffff7
lea ecx, [ebp - 0x1ee8]
call fcn.00480cf0
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x2a50]
and eax, 4
je 0x499ff3
and dword [ebp - 0x2a50], 0xfffffffb
lea ecx, [ebp - 0x1ec8]
call fcn.00480cf0
mov dword [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2a50]
and ecx, 2
je 0x49a017
and dword [ebp - 0x2a50], 0xfffffffd
lea ecx, [ebp - 0x1eac]
call fcn.00480cf0
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x2a50]
and edx, 1
je 0x49a03b
and dword [ebp - 0x2a50], 0xfffffffe
lea ecx, [ebp - 0x1e90]
call fcn.00480cf0
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x32c]
push ecx
call fcn.0048d6c0
add esp, 8
mov edx, dword [ebp - 0x50]
push edx
push 0x4f645c
mov eax, dword [ebp - 0x2ac]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp - 0x2ac]
push ecx
lea ecx, [ebp - 0x2d4]
call fcn.00480d30
movzx edx, byte [ebp - 0x2b8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f24], esp
lea eax, [ebp - 0x2f0]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2afc], eax
lea ecx, [ebp - 0x1f40]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2b00], eax
mov edx, dword [ebp - 0x2b00]
mov dword [ebp - 0x2b04], edx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2b04]
call fcn.00480e10
mov dword [ebp - 0x2b08], eax
mov eax, dword [ebp - 0x2b08]
push eax
push 1
lea ecx, [ebp - 0x30c]
call fcn.00480e10
mov dword [ebp - 0x2b0c], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f44], esp
mov edx, dword [ebp - 0x2b0c]
push edx
call fcn.00480c70
mov dword [ebp - 0x2b10], eax
lea eax, [ebp - 0x1f60]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2b14], eax
mov ecx, dword [ebp - 0x2b14]
mov dword [ebp - 0x2b18], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2b18]
call fcn.00480de0
mov dword [ebp - 0x2b1c], eax
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x2b20], eax
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2a54]
lea ecx, [ecx + eax + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2b24], eax
mov edx, dword [ebp - 0x2b1c]
push edx
mov eax, dword [ebp - 0x2b20]
push eax
mov ecx, dword [ebp - 0x2b24]
push ecx
push str.SELECT__FROM__user_locker_data__where__UserID____s_AND__GUID____s_AND__LocalPath____s_AND__RemotePath____s_AND__Directory____d_
lea edx, [ebp - 0x54]
push edx
call fcn.00485c10
add esp, 0x1c
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1f60]
call fcn.00480cf0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1f40]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x2b28], eax
mov eax, dword [ebp - 0x2b28]
push eax
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.0049f4c0
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa920
mov dword [ebp - 0x2b2c], eax
cmp dword [ebp - 0x2b2c], 0
jbe 0x49c73c
movzx edx, byte [ebp - 0x2b8]
test edx, edx
je 0x49a659
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2b30], eax
mov eax, dword [ebp - 0x2b30]
mov dword [ebp - 0x1f68], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x1f68], 0
je 0x49a2cb
sub esp, 0x1c
mov dword [ebp - 0x2b34], esp
mov dword [ebp - 0x1f6c], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f70], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2b38], eax
mov eax, dword [ebp - 0x2b34]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x2b3c], eax
mov ecx, dword [ebp - 0x2b3c]
mov dword [ebp - 0x2b40], ecx
mov ecx, dword [ebp - 0x1f68]
call fcn.004897d0
mov dword [ebp - 0x2b44], eax
mov edx, dword [ebp - 0x2b44]
mov dword [ebp - 0x2b48], edx
jmp 0x49a2d5
mov dword [ebp - 0x2b48], 0
mov eax, dword [ebp - 0x2b48]
mov dword [ebp - 0x1f64], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ebp - 0x1f64]
mov dword [ecx + 4], edx
push 0x4f6580
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x2b4c], eax
lea ecx, [ebp - 0x1f8c]
push ecx
mov ecx, dword [ebp - 0x2b4c]
call fcn.00402230
mov dword [ebp - 0x2b50], eax
mov edx, dword [ebp - 0x2b50]
mov dword [ebp - 0x2b54], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x2b54]
push eax
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1f8c]
call fcn.00402bb0
mov ecx, dword [ebp - 0x2a54]
cmp dword [ecx + 4], 0
je 0x49a3bb
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 4]
mov dword [ebp - 0x1f94], eax
mov ecx, dword [ebp - 0x1f94]
mov dword [ebp - 0x1f90], ecx
cmp dword [ebp - 0x1f90], 0
je 0x49a3a4
push 1
mov ecx, dword [ebp - 0x1f90]
call fcn.0049f490
mov dword [ebp - 0x2b58], eax
mov edx, dword [ebp - 0x2b58]
mov dword [ebp - 0x2b5c], edx
jmp 0x49a3ae
mov dword [ebp - 0x2b5c], 0
mov eax, dword [ebp - 0x2a54]
mov dword [eax + 4], 0
push 0x4f6588
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x2b60], eax
cmp dword [ebp - 0x2b60], 0
jne 0x49a614
mov byte [ebp - 4], 0x14
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f98], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2b64], eax
lea eax, [ebp - 0x1fb4]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x2b68], eax
lea ecx, [ebp - 0x1fb4]
call fcn.00480cf0
jmp 0x49a60d
mov dword [ebp - 4], 9
jmp 0x49a61b
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7d50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1fec], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2ba0], eax
mov ecx, dword [ebp - 0x2a54]
call fcn.00499690
jmp 0x49c737
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7b20
push 3
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a84b0
mov dword [ebp - 0x2ba4], eax
mov ecx, dword [ebp - 0x2ba4]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.00480d30
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call fcn.004a3ac0
add esp, 8
mov byte [ebp - 0x2ba5], al
movzx eax, byte [ebp - 0x2ba5]
test eax, eax
je 0x49c109
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 0
push 0x4f65a0
lea ecx, [ebp - 0x3e8]
push ecx
call fcn.004c2937
add esp, 8
mov dword [ebp - 0xc1c], 0
mov dword [ebp - 0xc20], 0x820
push 0x820
push 0
lea edx, [ebp - 0xc18]
push edx
call fcn.004bfe20
add esp, 0xc
lea eax, [ebp - 0xc1c]
push eax
push 0x20019
push 0
push 0x4f65a8
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x49a7a7
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2bac], eax
lea eax, [ebp - 0xc20]
push eax
lea ecx, [ebp - 0xc18]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x2bac]
push edx
mov eax, dword [ebp - 0xc1c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x49a7a7
push 0x31
lea ecx, [ebp - 0xc18]
push ecx
lea edx, [ebp - 0x3e8]
push edx
call fcn.004c2e92
add esp, 0xc
mov eax, dword [ebp - 0xc1c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2bb0], eax
push 0
mov eax, dword [ebp - 0x2bb0]
push eax
push 0x4f6608
mov ecx, dword [ebp - 0x2a54]
call fcn.0049efe0
mov dword [ebp - 0x2bb4], eax
mov ecx, dword [ebp - 0x2bb4]
mov dword [ebp - 0x3ec], ecx
cmp dword [ebp - 0x3ec], 0
je 0x49a8f5
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0xc24], eax
push 0xa
push 0
lea ecx, [ebp - 0x3e8]
push ecx
call fcn.004c2e66
add esp, 0xc
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
mov edx, dword [ebp - 0x3f8]
sub edx, dword [ebp - 0xc28]
mov eax, dword [ebp - 0x3f4]
sbb eax, dword [ebp - 0xc24]
mov dword [ebp - 0x3f8], edx
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
push ecx
mov edx, dword [ebp - 0x3f8]
push edx
push 0x4f666c
lea eax, [ebp - 0x3e8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2bb8], eax
push 0
mov eax, dword [ebp - 0x2bb8]
push eax
push 0x4f6678
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f080
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2bbc], eax
lea eax, [ebp - 0x3e8]
push eax
mov ecx, dword [ebp - 0x2bbc]
push ecx
push 0x4f66e0
mov ecx, dword [ebp - 0x2a54]
call fcn.0049ef60
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2bc0], eax
mov edx, dword [ebp - 0x2bc0]
mov dword [ebp - 0x1ff4], edx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x1ff4], 0
je 0x49a9a6
sub esp, 0x1c
mov dword [ebp - 0x2bc4], esp
mov dword [ebp - 0x1ff8], esp
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x1ffc], esp
lea ecx, [ebp - 0x2f0]
push ecx
push eax
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2bc8], eax
mov edx, dword [ebp - 0x2bc4]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x4c]
call eax
mov dword [ebp - 0x2bcc], eax
mov ecx, dword [ebp - 0x2bcc]
mov dword [ebp - 0x2bd0], ecx
mov ecx, dword [ebp - 0x1ff4]
call fcn.004897d0
mov dword [ebp - 0x2bd4], eax
mov edx, dword [ebp - 0x2bd4]
mov dword [ebp - 0x2bd8], edx
jmp 0x49a9b0
mov dword [ebp - 0x2bd8], 0
mov eax, dword [ebp - 0x2bd8]
mov dword [ebp - 0x1ff0], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ebp - 0x1ff0]
mov dword [ecx + 4], edx
push 0x4f673c
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x2bdc], eax
lea ecx, [ebp - 0x2018]
push ecx
mov ecx, dword [ebp - 0x2bdc]
call fcn.00402230
mov dword [ebp - 0x2be0], eax
mov edx, dword [ebp - 0x2be0]
mov dword [ebp - 0x2be4], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x2be4]
push eax
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2018]
call fcn.00402bb0
mov ecx, dword [ebp - 0x2a54]
cmp dword [ecx + 4], 0
je 0x49aa96
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2020], eax
mov ecx, dword [ebp - 0x2020]
mov dword [ebp - 0x201c], ecx
cmp dword [ebp - 0x201c], 0
je 0x49aa7f
push 1
mov ecx, dword [ebp - 0x201c]
call fcn.0049f490
mov dword [ebp - 0x2be8], eax
mov edx, dword [ebp - 0x2be8]
mov dword [ebp - 0x2bec], edx
jmp 0x49aa89
mov dword [ebp - 0x2bec], 0
mov eax, dword [ebp - 0x2a54]
mov dword [eax + 4], 0
push 0x4f6744
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x2bf0], eax
cmp dword [ebp - 0x2bf0], 0
jne 0x49acef
mov byte [ebp - 4], 0x1a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2024], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2bf4], eax
lea eax, [ebp - 0x2040]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x2bf8], eax
lea ecx, [ebp - 0x2040]
call fcn.00480cf0
jmp 0x49ace8
mov dword [ebp - 4], 9
jmp 0x49acf6
mov byte [ebp - 4], 0x1e
push 0x4f6824
lea ecx, [ebp - 0x209c]
call fcn.00402ae0
mov dword [ebp - 0x2c30], eax
mov byte [ebp - 4], 0x1f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x207c], esp
push 0x4f6760
call fcn.00480c70
mov dword [ebp - 0x2c34], eax
mov eax, dword [ebp - 0x2c34]
mov dword [ebp - 0x2c38], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x209c]
push ecx
lea edx, [ebp - 0x20b8]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2c3c], eax
mov edx, dword [ebp - 0x2c3c]
mov dword [ebp - 0x2c40], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x2c40]
push eax
lea ecx, [ebp - 0x20d4]
push ecx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2c44], eax
mov edx, dword [ebp - 0x2c44]
mov dword [ebp - 0x2c48], edx
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x2c48]
call fcn.00480e10
mov dword [ebp - 0x2c4c], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2c50], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2c54], eax
mov ecx, dword [ebp - 0x2c4c]
push ecx
mov edx, dword [ebp - 0x2c50]
push edx
mov eax, dword [ebp - 0x2c54]
push eax
push 0x4f683c
mov ecx, dword [ebp - 0x2a54]
push ecx
call fcn.0049f6f0
add esp, 0x14
mov dword [ebp - 0x2c58], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2080], esp
mov edx, dword [ebp - 0x2c58]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2c5c], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2c5d], al
movzx eax, byte [ebp - 0x2c5d]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2075], al
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x20d4]
call fcn.00480cf0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x20b8]
call fcn.00402bb0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x209c]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2075]
test ecx, ecx
je 0x49aecd
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
mov byte [ebp - 4], 5
jmp 0x49ee0e
push str.update_data_new
lea ecx, [ebp - 0x20fc]
call fcn.00402ae0
mov dword [ebp - 0x2c64], eax
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20dc], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_update_data_new.php
call fcn.00480c70
mov dword [ebp - 0x2c68], eax
mov ecx, dword [ebp - 0x2c68]
mov dword [ebp - 0x2c6c], ecx
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x20fc]
push edx
lea edx, [ebp - 0x2118]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2c70], eax
mov eax, dword [ebp - 0x2c70]
mov dword [ebp - 0x2c74], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x2c74]
push ecx
lea edx, [ebp - 0x2134]
push edx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2c78], eax
mov eax, dword [ebp - 0x2c78]
mov dword [ebp - 0x2c7c], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x2c7c]
call fcn.00480e10
mov dword [ebp - 0x2c80], eax
mov ecx, dword [ebp - 0x2c80]
push ecx
push 0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
push 0
push 0x4f6930
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2c84], eax
mov eax, dword [ebp - 0x2c84]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x2c88], eax
mov edx, dword [ebp - 0x2c88]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2138], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2c8c], eax
lea ecx, [ebp - 0x2154]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2c90], eax
mov edx, dword [ebp - 0x2c90]
mov dword [ebp - 0x2c94], edx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2c94]
call fcn.00480e10
mov dword [ebp - 0x2c98], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2c9c], eax
mov ecx, dword [ebp - 0x2c98]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2c9c]
push edx
push 0x4f6948
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x30
mov dword [ebp - 0x2ca0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20e0], esp
mov edx, dword [ebp - 0x2ca0]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2ca4], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2ca5], al
movzx eax, byte [ebp - 0x2ca5]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x20d5], al
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2154]
call fcn.00480cf0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x2134]
call fcn.00480cf0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2118]
call fcn.00402bb0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x20fc]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x20d5]
test ecx, ecx
je 0x49b145
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
mov byte [ebp - 4], 5
jmp 0x49edf2
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x2a54]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x49b2fe
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa1c0
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x2cac], eax
mov ecx, dword [ebp - 0x2cac]
push ecx
movzx edx, byte [ebp - 0x2b8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2158], esp
lea eax, [ebp - 0x2f0]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2cb0], eax
lea ecx, [ebp - 0x2174]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2cb4], eax
mov edx, dword [ebp - 0x2cb4]
mov dword [ebp - 0x2cb8], edx
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x2cb8]
call fcn.00480e10
mov dword [ebp - 0x2cbc], eax
mov eax, dword [ebp - 0x2cbc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2178], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2cc0], eax
lea eax, [ebp - 0x2194]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2cc4], eax
mov ecx, dword [ebp - 0x2cc4]
mov dword [ebp - 0x2cc8], ecx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x2cc8]
call fcn.00480e10
mov dword [ebp - 0x2ccc], eax
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2a54]
lea ecx, [edx + ecx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2ccc]
add eax, 2
push eax
mov ecx, dword [ebp - 0x2cd0]
push ecx
push 0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
push 0
push 0x4f6a00
push str.UPDATE__user_locker_data__SET__CRCHash__s___IsDeleted__d___FileSize__u___Uploaded__d_WHERE__UserID__s_AND__LocalPath__s_AND__RemotePath__s_AND__Directory__d_AND__GUID__s
lea eax, [ebp - 0x54]
push eax
call fcn.00485c10
add esp, 0x2c
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2194]
call fcn.00480cf0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x2174]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x2cd4], eax
mov ecx, dword [ebp - 0x2cd4]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a9c70
jmp 0x49b377
mov dword [ebp - 4], 0x1e
push 1
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x2a54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x84]
call edx
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2ce4], eax
mov eax, dword [ebp - 0x2ce4]
mov dword [ebp - 0x21b8], eax
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x21b8], 0
je 0x49b482
sub esp, 0x1c
mov dword [ebp - 0x2ce8], esp
mov dword [ebp - 0x21bc], esp
push 1
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x21c0], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2cec], eax
mov eax, dword [ebp - 0x2cec]
mov dword [ebp - 0x2cf0], eax
mov byte [ebp - 4], 0x33
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x21c4], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2cf4], eax
mov eax, dword [ebp - 0x2ce8]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov byte [ebp - 4], 0x32
mov eax, dword [edx + 0x70]
call eax
mov dword [ebp - 0x2cf8], eax
mov ecx, dword [ebp - 0x2cf8]
mov dword [ebp - 0x2cfc], ecx
mov ecx, dword [ebp - 0x21b8]
call fcn.004897d0
mov dword [ebp - 0x2d00], eax
mov edx, dword [ebp - 0x2d00]
mov dword [ebp - 0x2d04], edx
jmp 0x49b48c
mov dword [ebp - 0x2d04], 0
mov eax, dword [ebp - 0x2d04]
mov dword [ebp - 0x21b4], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ebp - 0x21b4]
mov dword [ecx + 4], edx
push 0x4f6b90
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x2d08], eax
lea ecx, [ebp - 0x21e0]
push ecx
mov ecx, dword [ebp - 0x2d08]
call fcn.00402230
mov dword [ebp - 0x2d0c], eax
mov edx, dword [ebp - 0x2d0c]
mov dword [ebp - 0x2d10], edx
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x2d10]
push eax
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x21e0]
call fcn.00402bb0
mov ecx, dword [ebp - 0x2a54]
cmp dword [ecx + 4], 0
je 0x49b572
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 4]
mov dword [ebp - 0x21e8], eax
mov ecx, dword [ebp - 0x21e8]
mov dword [ebp - 0x21e4], ecx
cmp dword [ebp - 0x21e4], 0
je 0x49b55b
push 1
mov ecx, dword [ebp - 0x21e4]
call fcn.0049f490
mov dword [ebp - 0x2d14], eax
mov edx, dword [ebp - 0x2d14]
mov dword [ebp - 0x2d18], edx
jmp 0x49b565
mov dword [ebp - 0x2d18], 0
mov eax, dword [ebp - 0x2a54]
mov dword [eax + 4], 0
jmp 0x49ba09
mov dword [ebp - 4], 9
jmp 0x49ba17
push 0x4f6bc0
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x2d98], eax
cmp dword [ebp - 0x2d98], 0
jne 0x49c104
push 0x4f6c90
lea ecx, [ebp - 0x22a0]
call fcn.00402ae0
mov dword [ebp - 0x2d9c], eax
mov byte [ebp - 4], 0x3c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2280], esp
push 0x4f6bc8
call fcn.00480c70
mov dword [ebp - 0x2da0], eax
mov eax, dword [ebp - 0x2da0]
mov dword [ebp - 0x2da4], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x22a0]
push ecx
lea edx, [ebp - 0x22bc]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2da8], eax
mov edx, dword [ebp - 0x2da8]
mov dword [ebp - 0x2dac], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x2dac]
push eax
lea ecx, [ebp - 0x22d8]
push ecx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2db0], eax
mov edx, dword [ebp - 0x2db0]
mov dword [ebp - 0x2db4], edx
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x2db4]
call fcn.00480e10
mov dword [ebp - 0x2db8], eax
mov eax, dword [ebp - 0x2db8]
push eax
push 1
mov ecx, dword [ebp - 0x28c]
imul ecx, ecx, 0
add ecx, dword [ebp - 0x288]
push ecx
push 0
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x2dbc], eax
mov edx, dword [ebp - 0x2dbc]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2dc0], eax
mov eax, dword [ebp - 0x2dc0]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x2dc4], eax
mov edx, dword [ebp - 0x2dc4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x22dc], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2dc8], eax
lea ecx, [ebp - 0x22f8]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2dcc], eax
mov edx, dword [ebp - 0x2dcc]
mov dword [ebp - 0x2dd0], edx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x2dd0]
call fcn.00480e10
mov dword [ebp - 0x2dd4], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2dd8], eax
mov ecx, dword [ebp - 0x2dd4]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2dd8]
push edx
push 0x4f6cb0
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x30
mov dword [ebp - 0x2ddc], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2284], esp
mov edx, dword [ebp - 0x2ddc]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2de0], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2de1], al
movzx eax, byte [ebp - 0x2de1]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2279], al
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x22f8]
call fcn.00480cf0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x22d8]
call fcn.00480cf0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x22bc]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x22a0]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2279]
test ecx, ecx
je 0x49bcbe
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
jmp 0x49edf2
mov byte [ebp - 4], 0x44
mov dword [ebp - 0xca4], 0
mov dword [ebp - 0xcb0], 0
mov dword [ebp - 0xcac], 0
mov ecx, dword [ebp - 0x2a54]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x49beaa
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa1c0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
push 0
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2de8], eax
mov eax, dword [ebp - 0x2de8]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x22fc], esp
lea edx, [ebp - 0x2f0]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2dec], eax
lea eax, [ebp - 0x2318]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2df0], eax
mov ecx, dword [ebp - 0x2df0]
mov dword [ebp - 0x2df4], ecx
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x2df4]
call fcn.00480e10
mov dword [ebp - 0x2df8], eax
mov edx, dword [ebp - 0x2df8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x231c], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2dfc], eax
lea ecx, [ebp - 0x2338]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2e00], eax
mov edx, dword [ebp - 0x2e00]
mov dword [ebp - 0x2e04], edx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x2e04]
call fcn.00480e10
mov dword [ebp - 0x2e08], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2e0c], eax
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x2e10], eax
mov ecx, dword [ebp - 0x2e08]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2e0c]
push edx
mov eax, dword [ebp - 0x2e10]
push eax
push 1
push 0x4f6d68
lea ecx, [ebp - 0x54]
push ecx
call fcn.00485c10
add esp, 0x2c
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x2338]
call fcn.00480cf0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2318]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x2e14], eax
mov edx, dword [ebp - 0x2e14]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a9c70
push 0x4f6eec
lea ecx, [ebp - 0xca0]
push ecx
call fcn.004c2937
add esp, 8
mov dword [ebp - 0x14d4], 0
mov dword [ebp - 0x14d8], 0x820
push 0x820
push 0
lea edx, [ebp - 0x14d0]
push edx
call fcn.004bfe20
add esp, 0xc
lea eax, [ebp - 0x14d4]
push eax
push 0x20019
push 0
push 0x4f6ef0
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x49bf68
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2e18], eax
lea eax, [ebp - 0x14d8]
push eax
lea ecx, [ebp - 0x14d0]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x2e18]
push edx
mov eax, dword [ebp - 0x14d4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x49bf68
push 0x31
lea ecx, [ebp - 0x14d0]
push ecx
lea edx, [ebp - 0xca0]
push edx
call fcn.004c2e92
add esp, 0xc
mov eax, dword [ebp - 0x14d4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x4f6f50
lea ecx, [ebp - 0xca0]
push ecx
call fcn.004c0dfb
add esp, 8
test eax, eax
jne 0x49bfca
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x14e0], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x14dc], eax
mov ecx, dword [ebp - 0x14dc]
push ecx
mov edx, dword [ebp - 0x14e0]
push edx
push 0x4f6f54
lea eax, [ebp - 0xca0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x49c048
push 0xa
push 0
lea ecx, [ebp - 0xca0]
push ecx
call fcn.004c2e66
add esp, 0xc
mov dword [ebp - 0xcb0], eax
mov dword [ebp - 0xcac], edx
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x14e8], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x14e4], eax
mov ecx, dword [ebp - 0xcb0]
add ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0xcac]
adc edx, dword [ebp - 0x14e4]
mov dword [ebp - 0xcb0], ecx
mov dword [ebp - 0xcac], edx
mov eax, dword [ebp - 0xcac]
push eax
mov ecx, dword [ebp - 0xcb0]
push ecx
push 0x4f6f5c
lea edx, [ebp - 0xca0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2e1c], eax
lea eax, [ebp - 0xca0]
push eax
mov ecx, dword [ebp - 0x2e1c]
push ecx
push 0x4f6f68
mov ecx, dword [ebp - 0x2a54]
call fcn.0049ef60
jmp 0x49c0fd
mov dword [ebp - 4], 9
jmp 0x49c726
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7d50
movzx eax, byte [ebp - 0x2b8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2358], esp
lea edx, [ebp - 0x2f0]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2e2c], eax
lea eax, [ebp - 0x2374]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2e30], eax
mov ecx, dword [ebp - 0x2e30]
mov dword [ebp - 0x2e34], ecx
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x2e34]
call fcn.00480e10
mov dword [ebp - 0x2e38], eax
mov edx, dword [ebp - 0x2e38]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2378], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2e3c], eax
lea ecx, [ebp - 0x2394]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2e40], eax
mov edx, dword [ebp - 0x2e40]
mov dword [ebp - 0x2e44], edx
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x2e44]
call fcn.00480e10
mov dword [ebp - 0x2e48], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x2e4c], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2e50], eax
mov ecx, dword [ebp - 0x2e48]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2e4c]
push edx
mov eax, dword [ebp - 0x2e50]
push eax
push str.SELECT__FROM__user_locker_data__where__UserID____s_AND__GUID____s_AND__LocalPath____s_AND__RemotePath____s_AND__Directory____d_AND__IsDeleted___0_
lea ecx, [ebp - 0x54]
push ecx
call fcn.00485c10
add esp, 0x1c
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2394]
call fcn.00480cf0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2374]
call fcn.00480cf0
lea edx, [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
call fcn.004a44c0
mov byte [ebp - 0x2e51], al
movzx ecx, byte [ebp - 0x2e51]
test ecx, ecx
jne 0x49c726
push str.update_data_isdeleted
lea ecx, [ebp - 0x23bc]
call fcn.00402ae0
mov dword [ebp - 0x2e58], eax
mov byte [ebp - 4], 0x4b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x239c], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_update_data_isdeleted.php
call fcn.00480c70
mov dword [ebp - 0x2e5c], eax
mov edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], edx
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x23bc]
push eax
lea edx, [ebp - 0x23d8]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e68], ecx
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x2e68]
push edx
lea eax, [ebp - 0x23f4]
push eax
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2e6c], eax
mov ecx, dword [ebp - 0x2e6c]
mov dword [ebp - 0x2e70], ecx
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x2e70]
call fcn.00480e10
mov dword [ebp - 0x2e74], eax
mov edx, dword [ebp - 0x2e74]
push edx
push 0
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e78]
push eax
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2e7c], eax
mov eax, dword [ebp - 0x2e7c]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x2e80], eax
mov edx, dword [ebp - 0x2e80]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x23f8], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2e84], eax
lea ecx, [ebp - 0x2414]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2e88], eax
mov edx, dword [ebp - 0x2e88]
mov dword [ebp - 0x2e8c], edx
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x2e8c]
call fcn.00480e10
mov dword [ebp - 0x2e90], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2e94], eax
mov ecx, dword [ebp - 0x2e90]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2e94]
push edx
push str.param1_sparam2_sparam3_sparam4_dparam5_sparam6_sparam7_d_s
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x28
mov dword [ebp - 0x2e98], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x23a0], esp
mov edx, dword [ebp - 0x2e98]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2e9c], eax
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2e9d], al
movzx eax, byte [ebp - 0x2e9d]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2395], al
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x2414]
call fcn.00480cf0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x23f4]
call fcn.00480cf0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x23d8]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x23bc]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2395]
test ecx, ecx
je 0x49c4ee
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
jmp 0x49edf2
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x2a54]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x49c6a6
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa1c0
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x2ea4], eax
mov ecx, dword [ebp - 0x2ea4]
push ecx
movzx edx, byte [ebp - 0x2b8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2418], esp
lea eax, [ebp - 0x2f0]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2ea8], eax
lea ecx, [ebp - 0x2434]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2eac], eax
mov edx, dword [ebp - 0x2eac]
mov dword [ebp - 0x2eb0], edx
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x2eb0]
call fcn.00480e10
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x2eb4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2438], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2eb8], eax
lea eax, [ebp - 0x2454]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2ebc], eax
mov ecx, dword [ebp - 0x2ebc]
mov dword [ebp - 0x2ec0], ecx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x2ec0]
call fcn.00480e10
mov dword [ebp - 0x2ec4], eax
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2a54]
lea ecx, [edx + ecx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2ec8], eax
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x2ecc], eax
mov eax, dword [ebp - 0x2ec4]
add eax, 2
push eax
mov ecx, dword [ebp - 0x2ec8]
push ecx
mov edx, dword [ebp - 0x2ecc]
push edx
push str.UPDATE__user_locker_data__SET__CRCHash__s___IsDeleted_0_WHERE__UserID__s_AND__LocalPath__s_AND__RemotePath__s_AND__Directory__d_AND__GUID__s
lea eax, [ebp - 0x54]
push eax
call fcn.00485c10
add esp, 0x20
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x2454]
call fcn.00480cf0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2434]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x2ed0], eax
mov ecx, dword [ebp - 0x2ed0]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a9c70
jmp 0x49c71f
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
jmp 0x49edd4
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7d50
movzx eax, byte [ebp - 0x2b8]
test eax, eax
je 0x49d277
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x2ee0], eax
mov ecx, dword [ebp - 0x2ee0]
mov dword [ebp - 0x2478], ecx
mov byte [ebp - 4], 0x58
cmp dword [ebp - 0x2478], 0
je 0x49c80d
sub esp, 0x1c
mov dword [ebp - 0x2ee4], esp
mov dword [ebp - 0x247c], esp
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x2480], esp
lea eax, [ebp - 0x2f0]
push eax
push edx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2ee8], eax
mov ecx, dword [ebp - 0x2ee4]
push ecx
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x2a54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x2eec], eax
mov eax, dword [ebp - 0x2eec]
mov dword [ebp - 0x2ef0], eax
mov ecx, dword [ebp - 0x2478]
call fcn.004897d0
mov dword [ebp - 0x2ef4], eax
mov ecx, dword [ebp - 0x2ef4]
mov dword [ebp - 0x2ef8], ecx
jmp 0x49c817
mov dword [ebp - 0x2ef8], 0
mov edx, dword [ebp - 0x2ef8]
mov dword [ebp - 0x2474], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [ebp - 0x2474]
mov dword [eax + 4], ecx
push 0x4f73b8
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 4]
call fcn.004897b0
mov dword [ebp - 0x2efc], eax
lea eax, [ebp - 0x249c]
push eax
mov ecx, dword [ebp - 0x2efc]
call fcn.00402230
mov dword [ebp - 0x2f00], eax
mov ecx, dword [ebp - 0x2f00]
mov dword [ebp - 0x2f04], ecx
mov byte [ebp - 4], 0x59
mov edx, dword [ebp - 0x2f04]
push edx
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x249c]
call fcn.00402bb0
mov eax, dword [ebp - 0x2a54]
cmp dword [eax + 4], 0
je 0x49c8fd
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x24a4], edx
mov eax, dword [ebp - 0x24a4]
mov dword [ebp - 0x24a0], eax
cmp dword [ebp - 0x24a0], 0
je 0x49c8e6
push 1
mov ecx, dword [ebp - 0x24a0]
call fcn.0049f490
mov dword [ebp - 0x2f08], eax
mov ecx, dword [ebp - 0x2f08]
mov dword [ebp - 0x2f0c], ecx
jmp 0x49c8f0
mov dword [ebp - 0x2f0c], 0
mov edx, dword [ebp - 0x2a54]
mov dword [edx + 4], 0
push 0x4f73c0
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x2f10], eax
cmp dword [ebp - 0x2f10], 0
jne 0x49cb56
mov byte [ebp - 4], 0x5a
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x24a8], esp
lea ecx, [ebp - 0x2f0]
push ecx
push eax
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x2f14], eax
lea edx, [ebp - 0x24c4]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x2f18], eax
lea ecx, [ebp - 0x24c4]
call fcn.00480cf0
jmp 0x49cb4f
mov dword [ebp - 4], 9
jmp 0x49cb5d
push str.select_data
lea ecx, [ebp - 0x2520]
call fcn.00402ae0
mov dword [ebp - 0x2f50], eax
mov byte [ebp - 4], 0x5e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2500], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_select_data.php
call fcn.00480c70
mov dword [ebp - 0x2f54], eax
mov eax, dword [ebp - 0x2f54]
mov dword [ebp - 0x2f58], eax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x2520]
push ecx
lea edx, [ebp - 0x253c]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2f5c], eax
mov edx, dword [ebp - 0x2f5c]
mov dword [ebp - 0x2f60], edx
mov byte [ebp - 4], 0x60
mov eax, dword [ebp - 0x2f60]
push eax
lea ecx, [ebp - 0x2558]
push ecx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2f64], eax
mov edx, dword [ebp - 0x2f64]
mov dword [ebp - 0x2f68], edx
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x2f68]
call fcn.00480e10
mov dword [ebp - 0x2f6c], eax
mov eax, dword [ebp - 0x2f6c]
push eax
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x2f70], eax
mov eax, dword [ebp - 0x2f70]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x2f74], eax
mov edx, dword [ebp - 0x2f74]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x255c], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2f78], eax
lea ecx, [ebp - 0x2578]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2f7c], eax
mov edx, dword [ebp - 0x2f7c]
mov dword [ebp - 0x2f80], edx
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2f80]
call fcn.00480e10
mov dword [ebp - 0x2f84], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2f88], eax
mov ecx, dword [ebp - 0x2f84]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x2f88]
push edx
push str.param1_sparam2_sparam3_sparam4_dparam5_s_s
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x20
mov dword [ebp - 0x2f8c], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2504], esp
mov edx, dword [ebp - 0x2f8c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2f90], eax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2f91], al
movzx eax, byte [ebp - 0x2f91]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x24f9], al
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x2578]
call fcn.00480cf0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x2558]
call fcn.00480cf0
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x253c]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2520]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x24f9]
test ecx, ecx
je 0x49cffc
push 0x4f75a0
lea ecx, [ebp - 0x25a0]
call fcn.00402ae0
mov dword [ebp - 0x2f98], eax
mov byte [ebp - 4], 0x66
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2580], esp
push 0x4f74f0
call fcn.00480c70
mov dword [ebp - 0x2f9c], eax
mov edx, dword [ebp - 0x2f9c]
mov dword [ebp - 0x2fa0], edx
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x25a0]
push eax
lea edx, [ebp - 0x25bc]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x2fa4], eax
mov ecx, dword [ebp - 0x2fa4]
mov dword [ebp - 0x2fa8], ecx
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x2fa8]
push edx
lea eax, [ebp - 0x25d8]
push eax
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x2fac], eax
mov ecx, dword [ebp - 0x2fac]
mov dword [ebp - 0x2fb0], ecx
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x2fb0]
call fcn.00480e10
mov dword [ebp - 0x2fb4], eax
mov edx, dword [ebp - 0x2fb4]
push edx
movzx eax, byte [ebp - 0x2b8]
push eax
mov ecx, dword [ebp - 0x28c]
imul ecx, ecx, 0
add ecx, dword [ebp - 0x288]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x2fb8], eax
mov ecx, dword [ebp - 0x2fb8]
push ecx
movzx edx, byte [ebp - 0x2b8]
push edx
push 0x4f75ac
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x2fbc], eax
mov eax, dword [ebp - 0x2fbc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x25dc], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2fc0], eax
lea eax, [ebp - 0x25f8]
push eax
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x2fc4], eax
mov ecx, dword [ebp - 0x2fc4]
mov dword [ebp - 0x2fc8], ecx
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x2fc8]
call fcn.00480e10
mov dword [ebp - 0x2fcc], eax
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2a54]
lea ecx, [edx + ecx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x2fd0], eax
mov eax, dword [ebp - 0x2fcc]
add eax, 2
push eax
mov ecx, dword [ebp - 0x2fd0]
push ecx
push 0x4f75b0
mov edx, dword [ebp - 0x2a54]
push edx
call fcn.0049f6f0
add esp, 0x2c
mov dword [ebp - 0x2fd4], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2584], esp
mov eax, dword [ebp - 0x2fd4]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2fd8], eax
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x2fd9], al
movzx ecx, byte [ebp - 0x2fd9]
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x2579], cl
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x25f8]
call fcn.00480cf0
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x25d8]
call fcn.00480cf0
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x25bc]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x25a0]
call fcn.00402bb0
movzx edx, byte [ebp - 0x2579]
test edx, edx
je 0x49cffc
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
jmp 0x49edf2
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x2a54]
movzx eax, byte [edx + 0xd]
test eax, eax
jne 0x49d1b9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004aa1c0
movzx eax, byte [ebp - 0x2b8]
push eax
mov ecx, dword [ebp - 0x28c]
imul ecx, ecx, 0
add ecx, dword [ebp - 0x288]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x2fe0], eax
mov ecx, dword [ebp - 0x2fe0]
push ecx
movzx edx, byte [ebp - 0x2b8]
push edx
push 0x4f7654
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x25fc], esp
lea eax, [ebp - 0x2f0]
push eax
call fcn.00480cb0
mov dword [ebp - 0x2fe4], eax
lea ecx, [ebp - 0x2618]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2fe8], eax
mov edx, dword [ebp - 0x2fe8]
mov dword [ebp - 0x2fec], edx
mov byte [ebp - 4], 0x6f
mov ecx, dword [ebp - 0x2fec]
call fcn.00480e10
mov dword [ebp - 0x2ff0], eax
mov eax, dword [ebp - 0x2ff0]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x261c], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x2ff4], eax
lea eax, [ebp - 0x2638]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x2ff8], eax
mov ecx, dword [ebp - 0x2ff8]
mov dword [ebp - 0x2ffc], ecx
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x2ffc]
call fcn.00480e10
mov dword [ebp - 0x3000], eax
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2a54]
lea ecx, [edx + ecx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x3004], eax
mov eax, dword [ebp - 0x3000]
add eax, 2
push eax
mov ecx, dword [ebp - 0x3004]
push ecx
push 0x4f7658
lea edx, [ebp - 0x54]
push edx
call fcn.00485c10
add esp, 0x28
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x2638]
call fcn.00480cf0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x2618]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x3008], eax
mov eax, dword [ebp - 0x3008]
push eax
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a9c70
jmp 0x49d232
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7d50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2658], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x3018], eax
mov ecx, dword [ebp - 0x2a54]
call fcn.00499690
jmp 0x49edd4
push str.select_full_data
lea ecx, [ebp - 0x2680]
call fcn.00402ae0
mov dword [ebp - 0x301c], eax
mov byte [ebp - 4], 0x73
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2660], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_select_full_data.php
call fcn.00480c70
mov dword [ebp - 0x3020], eax
mov ecx, dword [ebp - 0x3020]
mov dword [ebp - 0x3024], ecx
mov byte [ebp - 4], 0x74
lea edx, [ebp - 0x2680]
push edx
lea edx, [ebp - 0x269c]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x3028], eax
mov eax, dword [ebp - 0x3028]
mov dword [ebp - 0x302c], eax
mov byte [ebp - 4], 0x75
mov ecx, dword [ebp - 0x302c]
push ecx
lea edx, [ebp - 0x26b8]
push edx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x3030], eax
mov eax, dword [ebp - 0x3030]
mov dword [ebp - 0x3034], eax
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0x3034]
call fcn.00480e10
mov dword [ebp - 0x3038], eax
mov ecx, dword [ebp - 0x3038]
push ecx
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x303c], eax
mov edx, dword [ebp - 0x303c]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x3040], eax
mov eax, dword [ebp - 0x3040]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x3044], eax
mov edx, dword [ebp - 0x3044]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x26bc], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x3048], eax
lea ecx, [ebp - 0x26d8]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x304c], eax
mov edx, dword [ebp - 0x304c]
mov dword [ebp - 0x3050], edx
mov byte [ebp - 4], 0x77
mov ecx, dword [ebp - 0x3050]
call fcn.00480e10
mov dword [ebp - 0x3054], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x3058], eax
mov ecx, dword [ebp - 0x3054]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x3058]
push edx
push str.param1_sparam2_sparam3_sparam4_dparam5_sparam6_s_s
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x24
mov dword [ebp - 0x305c], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2664], esp
mov edx, dword [ebp - 0x305c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x3060], eax
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x3061], al
movzx eax, byte [ebp - 0x3061]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2659], al
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x26d8]
call fcn.00480cf0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x26b8]
call fcn.00480cf0
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x269c]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2680]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2659]
test ecx, ecx
je 0x49edc3
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x3068], eax
mov edx, dword [ebp - 0x3068]
mov dword [ebp - 0x26e0], edx
mov byte [ebp - 4], 0x7b
cmp dword [ebp - 0x26e0], 0
je 0x49d56b
sub esp, 0x1c
mov dword [ebp - 0x306c], esp
mov dword [ebp - 0x26e4], esp
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x26e8], esp
lea ecx, [ebp - 0x2f0]
push ecx
push eax
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x3070], eax
mov edx, dword [ebp - 0x306c]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x4c]
call eax
mov dword [ebp - 0x3074], eax
mov ecx, dword [ebp - 0x3074]
mov dword [ebp - 0x3078], ecx
mov ecx, dword [ebp - 0x26e0]
call fcn.004897d0
mov dword [ebp - 0x307c], eax
mov edx, dword [ebp - 0x307c]
mov dword [ebp - 0x3080], edx
jmp 0x49d575
mov dword [ebp - 0x3080], 0
mov eax, dword [ebp - 0x3080]
mov dword [ebp - 0x26dc], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ebp - 0x26dc]
mov dword [ecx + 4], edx
push 0x4f7904
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x3084], eax
lea ecx, [ebp - 0x2704]
push ecx
mov ecx, dword [ebp - 0x3084]
call fcn.00402230
mov dword [ebp - 0x3088], eax
mov edx, dword [ebp - 0x3088]
mov dword [ebp - 0x308c], edx
mov byte [ebp - 4], 0x7c
mov eax, dword [ebp - 0x308c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2704]
call fcn.00402bb0
mov ecx, dword [ebp - 0x2a54]
cmp dword [ecx + 4], 0
je 0x49d65b
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 4]
mov dword [ebp - 0x270c], eax
mov ecx, dword [ebp - 0x270c]
mov dword [ebp - 0x2708], ecx
cmp dword [ebp - 0x2708], 0
je 0x49d644
push 1
mov ecx, dword [ebp - 0x2708]
call fcn.0049f490
mov dword [ebp - 0x3090], eax
mov edx, dword [ebp - 0x3090]
mov dword [ebp - 0x3094], edx
jmp 0x49d64e
mov dword [ebp - 0x3094], 0
mov eax, dword [ebp - 0x2a54]
mov dword [eax + 4], 0
push 0x4f790c
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x3098], eax
cmp dword [ebp - 0x3098], 0
jne 0x49d8b4
mov byte [ebp - 4], 0x7d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2710], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x309c], eax
lea eax, [ebp - 0x272c]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x30a0], eax
lea ecx, [ebp - 0x272c]
call fcn.00480cf0
jmp 0x49d8ad
mov dword [ebp - 4], 9
jmp 0x49d8bb
mov byte [ebp - 4], 0x81
push str.user_locker_status_new
lea ecx, [ebp - 0x2788]
call fcn.00402ae0
mov dword [ebp - 0x30d8], eax
mov byte [ebp - 4], 0x82
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2768], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_user_locker_status_new.php
call fcn.00480c70
mov dword [ebp - 0x30dc], eax
mov eax, dword [ebp - 0x30dc]
mov dword [ebp - 0x30e0], eax
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x2788]
push ecx
lea edx, [ebp - 0x27a4]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x30e4], eax
mov edx, dword [ebp - 0x30e4]
mov dword [ebp - 0x30e8], edx
mov byte [ebp - 4], 0x84
mov eax, dword [ebp - 0x30e8]
push eax
lea ecx, [ebp - 0x27c0]
push ecx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x30ec], eax
mov edx, dword [ebp - 0x30ec]
mov dword [ebp - 0x30f0], edx
mov byte [ebp - 4], 0x85
mov ecx, dword [ebp - 0x30f0]
call fcn.00480e10
mov dword [ebp - 0x30f4], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x30f8], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x30fc], eax
mov ecx, dword [ebp - 0x30f4]
push ecx
mov edx, dword [ebp - 0x30f8]
push edx
mov eax, dword [ebp - 0x30fc]
push eax
push str.param1_sparam2_s_s
mov ecx, dword [ebp - 0x2a54]
push ecx
call fcn.0049f6f0
add esp, 0x14
mov dword [ebp - 0x3100], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x276c], esp
mov edx, dword [ebp - 0x3100]
push edx
call fcn.00480cb0
mov dword [ebp - 0x3104], eax
mov byte [ebp - 4], 0x87
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x3105], al
movzx eax, byte [ebp - 0x3105]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2761], al
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x27c0]
call fcn.00480cf0
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x27a4]
call fcn.00402bb0
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x2788]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2761]
test ecx, ecx
je 0x49da92
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
mov byte [ebp - 4], 5
jmp 0x49ee0e
push str.insert_data
lea ecx, [ebp - 0x27e8]
call fcn.00402ae0
mov dword [ebp - 0x310c], eax
mov byte [ebp - 4], 0x88
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x27c8], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_insert_data.php
call fcn.00480c70
mov dword [ebp - 0x3110], eax
mov ecx, dword [ebp - 0x3110]
mov dword [ebp - 0x3114], ecx
mov byte [ebp - 4], 0x89
lea edx, [ebp - 0x27e8]
push edx
lea edx, [ebp - 0x2804]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x3118], eax
mov eax, dword [ebp - 0x3118]
mov dword [ebp - 0x311c], eax
mov byte [ebp - 4], 0x8a
mov ecx, dword [ebp - 0x311c]
push ecx
lea edx, [ebp - 0x2820]
push edx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x3120], eax
mov eax, dword [ebp - 0x3120]
mov dword [ebp - 0x3124], eax
mov byte [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x3124]
call fcn.00480e10
mov dword [ebp - 0x3128], eax
mov ecx, dword [ebp - 0x3128]
push ecx
push 0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x312c], eax
mov eax, dword [ebp - 0x312c]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
push 0x4f7aec
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x3130], eax
mov edx, dword [ebp - 0x3130]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2824], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x3134], eax
lea ecx, [ebp - 0x2840]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x3138], eax
mov edx, dword [ebp - 0x3138]
mov dword [ebp - 0x313c], edx
mov byte [ebp - 4], 0x8c
mov ecx, dword [ebp - 0x313c]
call fcn.00480e10
mov dword [ebp - 0x3140], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x3144], eax
mov ecx, dword [ebp - 0x3140]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x3144]
push edx
push str.param1_sparam2_sparam3_sparam4_sparam5_dparam6_sparam7_uparam8_d_s
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x2c
mov dword [ebp - 0x3148], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x27cc], esp
mov edx, dword [ebp - 0x3148]
push edx
call fcn.00480cb0
mov dword [ebp - 0x314c], eax
mov byte [ebp - 4], 0x8f
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x314d], al
movzx eax, byte [ebp - 0x314d]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x27c1], al
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x2840]
call fcn.00480cf0
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x2820]
call fcn.00480cf0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x2804]
call fcn.00402bb0
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x27e8]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x27c1]
test ecx, ecx
je 0x49dd08
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
mov byte [ebp - 4], 5
jmp 0x49edf2
mov byte [ebp - 4], 0x90
mov ecx, dword [ebp - 0x2a54]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x49dec1
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa1c0
push 0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x3154], eax
mov eax, dword [ebp - 0x3154]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
push str.00000000
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2844], esp
lea edx, [ebp - 0x2f0]
push edx
call fcn.00480cb0
mov dword [ebp - 0x3158], eax
lea eax, [ebp - 0x2860]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x315c], eax
mov ecx, dword [ebp - 0x315c]
mov dword [ebp - 0x3160], ecx
mov byte [ebp - 4], 0x91
mov ecx, dword [ebp - 0x3160]
call fcn.00480e10
mov dword [ebp - 0x3164], eax
mov edx, dword [ebp - 0x3164]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2864], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x3168], eax
lea ecx, [ebp - 0x2880]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x316c], eax
mov edx, dword [ebp - 0x316c]
mov dword [ebp - 0x3170], edx
mov byte [ebp - 4], 0x92
mov ecx, dword [ebp - 0x3170]
call fcn.00480e10
mov dword [ebp - 0x3174], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x3178], eax
mov ecx, dword [ebp - 0x3174]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x3178]
push edx
push str.INSERT_INTO__user_locker_data____UserID____LocalPath____RemotePath____CRCHash____Directory____GUID____FileSize____Uploaded___VALUES____s___s___s___s___d___s___u___d__
lea eax, [ebp - 0x54]
push eax
call fcn.00485c10
add esp, 0x28
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x2880]
call fcn.00480cf0
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2860]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x317c], eax
mov ecx, dword [ebp - 0x317c]
push ecx
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a9c70
jmp 0x49df3a
mov dword [ebp - 4], 0x81
mov dword [ebp - 0x156c], 0
push 0x4f7d1c
lea edx, [ebp - 0x1568]
push edx
call fcn.004c2937
add esp, 8
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x318c], eax
push 0
mov eax, dword [ebp - 0x318c]
push eax
push 0x4f7d20
mov ecx, dword [ebp - 0x2a54]
call fcn.0049efe0
mov dword [ebp - 0x3190], eax
mov ecx, dword [ebp - 0x3190]
mov dword [ebp - 0x156c], ecx
cmp dword [ebp - 0x156c], 0
je 0x49e03d
push 0
push 0x4f7d84
lea edx, [ebp - 0x1568]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x3194], eax
push 0
mov eax, dword [ebp - 0x3194]
push eax
push str.SoftwareNewSoftwaresFolder_LockBackupStatus_
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f080
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x3198], eax
lea eax, [ebp - 0x1568]
push eax
mov ecx, dword [ebp - 0x3198]
push ecx
push 0x4f7df8
mov ecx, dword [ebp - 0x2a54]
call fcn.0049ef60
push 1
mov edx, dword [ebp - 0x2a54]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x2a54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x84]
call edx
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x319c], eax
mov eax, dword [ebp - 0x319c]
mov dword [ebp - 0x28a4], eax
mov byte [ebp - 4], 0x95
cmp dword [ebp - 0x28a4], 0
je 0x49e141
sub esp, 0x1c
mov dword [ebp - 0x31a0], esp
mov dword [ebp - 0x28a8], esp
push 1
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28ac], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.00480cb0
mov dword [ebp - 0x31a4], eax
mov eax, dword [ebp - 0x31a4]
mov dword [ebp - 0x31a8], eax
mov byte [ebp - 4], 0x96
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28b0], esp
lea edx, [ebp - 0x2f0]
push edx
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x31ac], eax
mov eax, dword [ebp - 0x31a0]
push eax
mov ecx, dword [ebp - 0x2a54]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov byte [ebp - 4], 0x95
mov eax, dword [edx + 0x70]
call eax
mov dword [ebp - 0x31b0], eax
mov ecx, dword [ebp - 0x31b0]
mov dword [ebp - 0x31b4], ecx
mov ecx, dword [ebp - 0x28a4]
call fcn.004897d0
mov dword [ebp - 0x31b8], eax
mov edx, dword [ebp - 0x31b8]
mov dword [ebp - 0x31bc], edx
jmp 0x49e14b
mov dword [ebp - 0x31bc], 0
mov eax, dword [ebp - 0x31bc]
mov dword [ebp - 0x28a0], eax
mov byte [ebp - 4], 0x81
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ebp - 0x28a0]
mov dword [ecx + 4], edx
push 0x4f7e54
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x31c0], eax
lea ecx, [ebp - 0x28cc]
push ecx
mov ecx, dword [ebp - 0x31c0]
call fcn.00402230
mov dword [ebp - 0x31c4], eax
mov edx, dword [ebp - 0x31c4]
mov dword [ebp - 0x31c8], edx
mov byte [ebp - 4], 0x97
mov eax, dword [ebp - 0x31c8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00405f40
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x28cc]
call fcn.00402bb0
mov ecx, dword [ebp - 0x2a54]
cmp dword [ecx + 4], 0
je 0x49e231
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 4]
mov dword [ebp - 0x28d4], eax
mov ecx, dword [ebp - 0x28d4]
mov dword [ebp - 0x28d0], ecx
cmp dword [ebp - 0x28d0], 0
je 0x49e21a
push 1
mov ecx, dword [ebp - 0x28d0]
call fcn.0049f490
mov dword [ebp - 0x31cc], eax
mov edx, dword [ebp - 0x31cc]
mov dword [ebp - 0x31d0], edx
jmp 0x49e224
mov dword [ebp - 0x31d0], 0
mov eax, dword [ebp - 0x2a54]
mov dword [eax + 4], 0
jmp 0x49e6c8
mov dword [ebp - 4], 9
jmp 0x49e6d6
push 0x4f7e84
lea ecx, [ebp - 0x30]
call fcn.004a0130
mov dword [ebp - 0x3250], eax
cmp dword [ebp - 0x3250], 0
jne 0x49edc3
push str.update_data_uploaded_new
lea ecx, [ebp - 0x298c]
call fcn.00402ae0
mov dword [ebp - 0x3254], eax
mov byte [ebp - 4], 0x9f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x296c], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_update_data_uploaded_new.php
call fcn.00480c70
mov dword [ebp - 0x3258], eax
mov eax, dword [ebp - 0x3258]
mov dword [ebp - 0x325c], eax
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x298c]
push ecx
lea edx, [ebp - 0x29a8]
mov ecx, dword [ebp - 0x2a54]
call fcn.0049f4e0
mov dword [ebp - 0x3260], eax
mov edx, dword [ebp - 0x3260]
mov dword [ebp - 0x3264], edx
mov byte [ebp - 4], 0xa1
mov eax, dword [ebp - 0x3264]
push eax
lea ecx, [ebp - 0x29c4]
push ecx
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x3268], eax
mov edx, dword [ebp - 0x3268]
mov dword [ebp - 0x326c], edx
mov byte [ebp - 4], 0xa2
mov ecx, dword [ebp - 0x326c]
call fcn.00480e10
mov dword [ebp - 0x3270], eax
mov eax, dword [ebp - 0x3270]
push eax
push 1
mov ecx, dword [ebp - 0x28c]
imul ecx, ecx, 0
add ecx, dword [ebp - 0x288]
push ecx
push 0
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x3274], eax
mov edx, dword [ebp - 0x3274]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x3278], eax
mov eax, dword [ebp - 0x3278]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x2f0]
call fcn.00480e10
mov dword [ebp - 0x327c], eax
mov edx, dword [ebp - 0x327c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x29c8], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x3280], eax
lea ecx, [ebp - 0x29e4]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x3284], eax
mov edx, dword [ebp - 0x3284]
mov dword [ebp - 0x3288], edx
mov byte [ebp - 4], 0xa3
mov ecx, dword [ebp - 0x3288]
call fcn.00480e10
mov dword [ebp - 0x328c], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x3290], eax
mov ecx, dword [ebp - 0x328c]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x3290]
push edx
push str.param1_sparam2_sparam3_sparam4_dparam5_sparam6_sparam7_dparam8_uparam9_d_s
mov eax, dword [ebp - 0x2a54]
push eax
call fcn.0049f6f0
add esp, 0x30
mov dword [ebp - 0x3294], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2970], esp
mov edx, dword [ebp - 0x3294]
push edx
call fcn.00480cb0
mov dword [ebp - 0x3298], eax
mov byte [ebp - 4], 0xa6
mov ecx, dword [ebp - 0x2a54]
call fcn.00496940
mov byte [ebp - 0x3299], al
movzx eax, byte [ebp - 0x3299]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x2965], al
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x29e4]
call fcn.00480cf0
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x29c4]
call fcn.00480cf0
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x29a8]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x298c]
call fcn.00402bb0
movzx ecx, byte [ebp - 0x2965]
test ecx, ecx
je 0x49e97d
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
jmp 0x49edf2
mov byte [ebp - 4], 0xa7
mov ecx, dword [ebp - 0x2a54]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x49eb4b
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004aa1c0
mov edx, dword [ebp - 0x28c]
imul edx, edx, 0
add edx, dword [ebp - 0x288]
push edx
push 0
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x32a0], eax
mov eax, dword [ebp - 0x32a0]
push eax
movzx ecx, byte [ebp - 0x2b8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x29e8], esp
lea edx, [ebp - 0x2f0]
push edx
call fcn.00480cb0
mov dword [ebp - 0x32a4], eax
lea eax, [ebp - 0x2a04]
push eax
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x32a8], eax
mov ecx, dword [ebp - 0x32a8]
mov dword [ebp - 0x32ac], ecx
mov byte [ebp - 4], 0xa8
mov ecx, dword [ebp - 0x32ac]
call fcn.00480e10
mov dword [ebp - 0x32b0], eax
mov edx, dword [ebp - 0x32b0]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2a08], esp
lea eax, [ebp - 0x30c]
push eax
call fcn.00480cb0
mov dword [ebp - 0x32b4], eax
lea ecx, [ebp - 0x2a24]
push ecx
call fcn.0048e910
add esp, 0x20
mov dword [ebp - 0x32b8], eax
mov edx, dword [ebp - 0x32b8]
mov dword [ebp - 0x32bc], edx
mov byte [ebp - 4], 0xa9
mov ecx, dword [ebp - 0x32bc]
call fcn.00480e10
mov dword [ebp - 0x32c0], eax
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2a54]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x32c4], eax
lea ecx, [ebp - 0x2d4]
call fcn.00480e10
mov dword [ebp - 0x32c8], eax
mov ecx, dword [ebp - 0x32c0]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x32c4]
push edx
mov eax, dword [ebp - 0x32c8]
push eax
push 1
push str.UPDATE__user_locker_data__SET__Uploaded__d___CRCHash__s_WHERE__UserID__s_AND__LocalPath__s_AND__RemotePath__s_AND__Directory__d_AND__GUID__s_AND__IsDeleted__d_AND__FileSize__u
lea ecx, [ebp - 0x54]
push ecx
call fcn.00485c10
add esp, 0x2c
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x2a24]
call fcn.00480cf0
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x2a04]
call fcn.00480cf0
lea ecx, [ebp - 0x54]
call fcn.004a0090
mov dword [ebp - 0x32cc], eax
mov edx, dword [ebp - 0x32cc]
push edx
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7af0
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00489740
mov edx, dword [ebp - 0x2a54]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a9c70
mov dword [ebp - 0x15e4], 0
mov dword [ebp - 0x15f0], 0
mov dword [ebp - 0x15ec], 0
push 0x4f81b4
lea ecx, [ebp - 0x15e0]
push ecx
call fcn.004c2937
add esp, 8
mov dword [ebp - 0x1e14], 0
mov dword [ebp - 0x1e18], 0x820
push 0x820
push 0
lea edx, [ebp - 0x1e10]
push edx
call fcn.004bfe20
add esp, 0xc
lea eax, [ebp - 0x1e14]
push eax
push 0x20019
push 0
push str.SoftwareNewSoftwaresFolder_LockBackupData_
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x49ec27
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a54]
add ecx, dword [edx + 4]
call fcn.00480e10
mov dword [ebp - 0x32d0], eax
lea eax, [ebp - 0x1e18]
push eax
lea ecx, [ebp - 0x1e10]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x32d0]
push edx
mov eax, dword [ebp - 0x1e14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x49ec27
push 0x31
lea ecx, [ebp - 0x1e10]
push ecx
lea edx, [ebp - 0x15e0]
push edx
call fcn.004c2e92
add esp, 0xc
mov eax, dword [ebp - 0x1e14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x4f8218
lea ecx, [ebp - 0x15e0]
push ecx
call fcn.004c0dfb
add esp, 8
test eax, eax
jne 0x49ec89
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x1e20], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1e1c], eax
mov ecx, dword [ebp - 0x1e1c]
push ecx
mov edx, dword [ebp - 0x1e20]
push edx
push 0x4f821c
lea eax, [ebp - 0x15e0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x49ed07
push 0xa
push 0
lea ecx, [ebp - 0x15e0]
push ecx
call fcn.004c2e66
add esp, 0xc
mov dword [ebp - 0x15f0], eax
mov dword [ebp - 0x15ec], edx
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x1e28], edx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1e24], eax
mov ecx, dword [ebp - 0x15f0]
add ecx, dword [ebp - 0x1e28]
mov edx, dword [ebp - 0x15ec]
adc edx, dword [ebp - 0x1e24]
mov dword [ebp - 0x15f0], ecx
mov dword [ebp - 0x15ec], edx
mov eax, dword [ebp - 0x15ec]
push eax
mov ecx, dword [ebp - 0x15f0]
push ecx
push 0x4f8224
lea edx, [ebp - 0x15e0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x2a54]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a54]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
mov dword [ebp - 0x32d4], eax
lea eax, [ebp - 0x15e0]
push eax
mov ecx, dword [ebp - 0x32d4]
push ecx
push str.SoftwareNewSoftwaresFolder_LockBackupData
mov ecx, dword [ebp - 0x2a54]
call fcn.0049ef60
jmp 0x49edbc
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x2a54]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x354]
call fcn.00402bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.00402bb0
lea eax, [ebp - 0x2a8]
push eax
mov ecx, dword [ebp - 0x330]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x49984c
jmp 0x49ee3d
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x2a44], ecx
mov edx, dword [ebp - 0x2a44]
push edx
call fcn.004c0415
add esp, 4
mov dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x2a48], eax
mov ecx, dword [ebp - 0x2a48]
push ecx
call fcn.004c0415
add esp, 4
mov dword [ebp - 0x2ac], 0
mov edx, dword [ebp - 0x330]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x49eef0
mov byte [ebp - 0x2a49], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.00402bb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.00480cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.00487c30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.0049fce0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00480cf0
mov al, byte [ebp - 0x2a49]
jmp 0x49ef3f
mov byte [ebp - 0x2a4a], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.00402bb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.00480cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.00487c30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x328]
call fcn.0049fce0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00480cf0
mov al, byte [ebp - 0x2a4a]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004be1d6
mov esp, ebp
pop ebp
ret 0x1c