Function at 0x4ef810
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6a8fab
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x7ca00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x10c], ebx
mov esi, dword [ebp + 8]
xor ecx, ecx
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x12c], ebx
call fcn.005a08e0
test al, al
je 0x4f11db
mov ecx, esi
call fcn.005a0f20
test al, al
je 0x4f11db
mov ecx, dword [ebp + 0xc]
call fcn.005a1250
test al, al
je 0x4f11db
xor eax, eax
lea ecx, [ebp - 0x90]
mov edx, esi
mov dword [ebp - 0x128], eax
mov dword [ebp - 4], eax
call fcn.004eeff0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x80], 0
push 0x7ec3b8
jne 0x4efb97
mov edi, 4
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f11fe
push eax
push 0x708717
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.00428b60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
push 0
push 0x708717
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.00428b60
mov byte [ebp - 4], 3
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ef921
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00428b60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x44]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4ef987
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4ef97d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1204
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x4ef9d1
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4ef9c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1204
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4efa09
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4ef9ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1204
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4efb7d
push 0
push 0x708717
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00428b60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x78]
push 0
push 0x708717
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.00428b60
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 6
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0x44], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4efa80
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00428b60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x44]
call fcn.005c4a20
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Unable_to_retrieve_AppData_Roaming_Path_in__s
push 0x708717
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 6
add esp, 0x10
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x4efafb
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efaf1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1209
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x4efb45
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efb3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1209
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4efb7d
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efb73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1209
push edx
push ecx
call fcn.0063e103
add esp, 8
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f120e
jmp 0x4f101a
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f1214
push eax
push 0x708717
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.00428b60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2c]
push 0
push 0x708717
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00428b60
mov byte [ebp - 4], 9
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4efc20
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4efc95
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efc8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121a
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4efce8
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efcde
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121a
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4efd26
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efd1c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121a
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4efeda
push 0
push 0x708717
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00428b60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x108]
push 0
push 0x708717
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov ebx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [ebx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4efdb0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
lea ecx, [ebp - 0x90]
cmp dword [ebp - 0x7c], 8
mov edx, eax
cmovae ecx, dword [ebp - 0x90]
push ecx
mov eax, dword [edx]
push str.SaveToVDIStorage
push str._s_:_Location_to_write_data_is__s
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0xc
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4efe47
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efe3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121f
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4efea0
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efe96
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121f
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4efee0
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4efece
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f121f
push edx
push ecx
call fcn.0063e103
add esp, 8
jmp 0x4efee0
mov ebx, dword [ebp - 0x10c]
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f1224
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], al
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 2
call fcn.00539b70
test eax, eax
je 0x4f0285
push 0x7ec3b8
mov edi, 4
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f122a
push eax
push 0x708717
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.00428b60
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x108]
push 0
push 0x708717
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov byte [ebp - 4], 0x11
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4effc0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4f0035
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f002b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1230
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f008e
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1230
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4f00c6
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f00bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1230
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4f026b
push 0
push 0x708717
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00428b60
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x108]
push 0
push 0x708717
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f0150
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Failed_in_fetching_encryption_key_in__s
push 0x708717
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x14
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4f01da
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f01d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1235
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f0233
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0229
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1235
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4f026b
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0261
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1235
push edx
push ecx
call fcn.0063e103
add esp, 8
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f123a
jmp 0x4f0fcc
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x78]
call fcn.004f58c0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
mov byte [ebp - 4], 0x17
cmp dword [edi + 0x14], 8
jb 0x4f02da
mov edi, dword [edi]
lea edx, [ebp - 0xa8]
mov ecx, edi
call fcn.004f58c0
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x2c]
call fcn.004ef240
add esp, 4
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x1c], 0
je 0x4f0b80
cmp dword [ebp - 0x34], 0
je 0x4f0b80
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x2c]
call fcn.00507760
add esp, 4
test eax, eax
jne 0x4f0b80
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
push dword [ebp - 0xc8]
mov edi, dword [ebp - 0xd8]
cmovae eax, edi
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00538a20
push 0x7ec3b8
mov byte [ebp - 4], 0x21
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f1240
push eax
push 0x708717
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], al
call fcn.00428b60
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x108]
push 0
push 0x708717
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov byte [ebp - 4], 0x23
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f0410
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x24
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4f0488
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f047e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1246
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f04e1
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f04d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1246
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4f051f
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0515
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1246
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4f06eb
push 0
push 0x708717
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x124]
push 0
push 0x708717
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00428b60
mov ebx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x26
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [ebx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f05b2
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x27
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
lea ecx, [ebp - 0x44]
mov esi, eax
cmovae edx, dword [ebp - 0x60]
cmp dword [ebp - 0x30], 0x10
push edx
cmovae ecx, dword [ebp - 0x44]
mov eax, dword [esi]
push ecx
push str.SaveToVDIStorage
push str._s_:_Encryption_key_used_is__s_to_encrypt__s
push esi
call dword [eax + 4]
mov byte [ebp - 4], 0x26
add esp, 0x14
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4f0652
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0648
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f124b
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f06ab
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f06a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f124b
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4f06f1
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f06df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f124b
push edx
push ecx
call fcn.0063e103
add esp, 8
jmp 0x4f06f1
mov ebx, dword [ebp - 0x10c]
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f1250
call fcn.005c4780
lea eax, [ebp - 0x90]
push eax
call fcn.005c7e00
mov esi, dword [eax]
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x28
test esi, esi
je 0x4f072d
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ecx, eax
test cl, 2
je 0x4f0768
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
and ecx, 0xfffffffd
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x90]
call fcn.005032c0
test al, al
jne 0x4f0b01
push 0x7ec3b8
mov dword [ebp - 0x128], 4
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f1256
push eax
push 0x708717
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.00428b60
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x124]
push 0
push 0x708717
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00428b60
mov byte [ebp - 4], 0x2a
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f0820
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x2b
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4f0898
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f088e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f125c
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f08f1
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f08e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f125c
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4f092f
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0925
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f125c
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4f0ae6
push 0
push 0x708717
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.00428b60
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x124]
push 0
push 0x708717
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00428b60
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f09c2
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x2e
push eax
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Failed_in_writing_content_to_file_in__s
push 0x708717
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x2d
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4f0a4f
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0a45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1261
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f0aa8
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0a9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1261
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4f0ae6
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0adc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1261
push edx
push ecx
call fcn.0063e103
add esp, 8
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f1266
mov edi, dword [ebp - 0xd8]
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ecx, eax
test cl, 2
jne 0x4f0b3c
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
or ecx, 2
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x4f0ed6
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0b71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f126c
push edx
push ecx
call fcn.0063e103
add esp, 8
jmp 0x4f0ed6
push 0x7ec3b8
mov dword [ebp - 0x128], 4
call fcn.00641a44
add esp, 4
test eax, eax
jne 0x4f1271
push eax
push 0x708717
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], al
call fcn.00428b60
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x60]
push 0
push 0x708717
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.00428b60
mov byte [ebp - 4], 0x1c
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f0c12
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xdc]
test eax, eax
setne bl
cmp edx, 0x10
jb 0x4f0c87
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0c7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1277
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f0cda
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0cd0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1277
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4f0d18
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0d0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1277
push edx
push ecx
call fcn.0063e103
add esp, 8
test bl, bl
je 0x4f0ebb
push 0
push 0x708717
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.00428b60
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x60]
push 0
push 0x708717
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.00428b60
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov edx, dword [edx + 4]
mov ecx, edx
mov byte [ebp - 0xf0], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f0da0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00428b60
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x20
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0xf0]
call fcn.005c4a20
add esp, 4
mov ecx, eax
mov eax, dword [ecx]
push str.SaveToVDIStorage
push str.Error_in_encrypting_data__s
push 0x708717
push ecx
call dword [eax + 0x24]
mov byte [ebp - 4], 0x1f
add esp, 0x10
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4f0e2a
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0e20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f127c
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4f0e7d
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0e73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f127c
push edx
push ecx
call fcn.0063e103
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x110]
cmp edx, 0x10
jb 0x4f0ebb
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0eb1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f127c
push edx
push ecx
call fcn.0063e103
add esp, 8
push 0x7ec3b8
call fcn.00641a69
add esp, 4
test eax, eax
jne 0x4f1281
mov edi, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xc4]
cmp eax, 0x10
jb 0x4f0f0c
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4f0f02
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1287
push ecx
push edi
call fcn.0063e103
add esp, 8
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4f0f40
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0f36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1287
push edx
push ecx
call fcn.0063e103
add esp, 8
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp edx, 0x10
jb 0x4f0f8c
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0f82
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1287
push edx
push ecx
call fcn.0063e103
add esp, 8
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x4f0fc6
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0fbc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f1287
push edx
push ecx
call fcn.0063e103
add esp, 8
mov edi, dword [ebp - 0x128]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x4f1000
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4f0ff6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f128c
push edx
push ecx
call fcn.0063e103
add esp, 8
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.00428770
lea ecx, [ebp - 0x90]
call fcn.00428770
mov eax, edi
jmp 0x4f11e0
mov eax, 5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0063de71
mov esp, ebp
pop ebp
ret 0x14
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
call fcn.006534c5
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
push eax
call fcn.00641d36
call fcn.006534c5
call fcn.006534c5
int3