Function at 0x11cf6690
Capabilities:
Move file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fa3deb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x830
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0xffffffffffffffdd
lea ecx, [esp + 0x58]
call fcn.11e15fa0
mov eax, dword [ebp + 0xb4]
xor ebx, ebx
push ebx
cmp eax, ebx
push ebx
mov dword [esp + 0x850], ebx
push ebx
mov ecx, 0x1212b5c0
je 0x11cf68f7
call fcn.11d60760
mov edi, dword [esp + 0x858]
test eax, eax
je 0x11cf682b
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cf682b
push edi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, 0x1212b5c0
push eax
mov byte [esp + 0x84c], 1
call fcn.11d6b710
test eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
sete byte [esp + 0x2b]
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
je 0x11cf682b
lea ecx, [esp + 0x30]
call fcn.11e16080
lea ecx, [esp + 0x54]
mov byte [esp + 0x848], 2
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push ebp
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebx
je 0x11cf67d7
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x854]
push edi
push edx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebx
jmp 0x11cf6812
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cf6812
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x854]
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf6812
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0
call fcn.11e16090
jmp 0x11cf96f1
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push ebp
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebx
je 0x11cf68b4
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x854]
push edi
push edx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebx
mov esi, dword [esi + 0x14]
jmp 0x11cf96f1
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cf68ef
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x854]
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf68ef
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
jmp 0x11cf96f1
call fcn.11d60760
test eax, eax
jne 0x11cf6912
push ebx
push 0x12118e98
call fcn.11c92320
add esp, 8
test eax, eax
je 0x11cf6920
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cf694e
mov ecx, dword [esp + 0x858]
mov edx, dword [esp + 0x854]
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x854]
push ecx
push edx
push eax
mov ecx, 0x1212ae38
call fcn.11d24270
mov esi, eax
jmp 0x11cf96f1
push 2
lea ecx, [esp + 0x6c]
call fcn.11e15fa0
mov ebx, dword [esp + 0x858]
mov esi, dword [esp + 0x854]
test ebx, ebx
mov byte [esp + 0x848], 3
je 0x11cf961d
cmp byte [ebx], 0
je 0x11cf961d
test esi, esi
je 0x11cf961d
cmp byte [esi], 0
je 0x11cf961d
push esi
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x848], 4
push ecx
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11cf69ef
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf69dc
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SafeDoc
push 8
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x850]
mov dword [eax + 0x10], 5
jmp 0x11cf87e8
mov ecx, 0x1212b5c0
call fcn.11d68870
test eax, eax
je 0x11cf70be
xor edx, edx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xaa]
mov word [esp + 0xa8], dx
mov word [esp + 0x3b4], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
push esi
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x14]
stosw word es:[edi], ax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0xa8]
push 0x104
push ecx
push eax
mov byte [esp + 0x854], 5
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x3b4]
push 0x104
push edx
push eax
mov byte [esp + 0x854], 6
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
mov ecx, ebp
call fcn.11d13f30
lea edx, [esp + 0xa8]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11cf6b24
lea eax, [esp + 0x3b4]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11cf6b24
lea ecx, [esp + 0x3b4]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7e8b0
test eax, eax
jne 0x11cf6b24
lea edx, [esp + 0x3b4]
mov ecx, 0x1212b028
push edx
call fcn.11d139a0
test eax, eax
je 0x11cf72fb
lea eax, [esp + 0xa8]
push eax
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cf95a0
lea ecx, [esp + 0x3b4]
push ecx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cf95a0
lea edx, [esp + 0xa8]
push edx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cf956f
lea eax, [esp + 0x3b4]
push eax
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cf956f
lea ecx, [esp + 0x30]
lea edx, [esp + 0x3b4]
push ecx
lea eax, [esp + 0xac]
xor edi, edi
push edx
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x3c], edi
call fcn.11d7ae10
test eax, eax
je 0x11cf6bc6
lea ecx, [esp + 0xa8]
push ecx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
jne 0x11cf7390
lea edx, [esp + 0x2c]
lea eax, [esp + 0x3b4]
push edx
lea ecx, [esp + 0xac]
push eax
push ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0x38], edi
call fcn.11d7a880
test eax, eax
je 0x11cf7503
push esi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0xd
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x38], eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0xe
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov edi, eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x11cf6c6b
cmp edi, 0xffffffff
jne 0x11cf6c6b
test byte [esp + 0x38], 0x10
jne 0x11cf7584
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11cf6c87
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11cf6c9f
lea edx, [esp + 0xa8]
push edx
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11cf76a0
push esi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x13
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
push esi
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, ebp
push eax
mov byte [esp + 0x84c], 0x14
call fcn.11d139a0
test eax, eax
jne 0x11cf6d24
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, ebp
push eax
mov byte [esp + 0x84c], 0x15
call fcn.11d139a0
lea ecx, [esp + 0x10]
mov edi, eax
mov byte [esp + 0x848], 0x14
call fcn.11e7f280
test edi, edi
je 0x11cf6d37
mov edx, dword [esp + 0x18]
mov byte [esp + 0x2b], 1
cmp edx, 0xffffffff
setne al
test al, al
jne 0x11cf6d3c
mov byte [esp + 0x2b], 0
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
je 0x11cf6ec2
mov al, byte [esp + 0x18]
push 0
test al, 0x10
push 0
je 0x11cf6d9c
lea eax, [esp + 0xb0]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11cf6ec2
push eax
lea ecx, [esp + 0x3b8]
push eax
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cf6e0f
jmp 0x11cf6ec2
lea edx, [esp + 0xb0]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7b5d0
test eax, eax
jne 0x11cf6dce
push eax
push eax
lea eax, [esp + 0x3bc]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11cf77c5
push 0
lea ecx, [esp + 0xac]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cf6ec2
push 0
lea edx, [esp + 0x3b8]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cf785f
jmp 0x11cf6ec2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf6e41
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
push 0x3126
push str._CSafeDoc::OnMoveFileA__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x16
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov edi, eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
cmp edi, 0xffffffff
je 0x11cf76db
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf6ec2
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov edx, dword [eax]
mov byte [esp + 0x848], 0x17
push edx
push 0x312b
push str._CSafeDoc::OnMoveFileA__Line:_d_Dst__s__exist.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x11cf70be
test al, 0x10
je 0x11cf70be
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cf70be
lea edx, [esp + 0xa8]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
jne 0x11cf6f27
lea eax, [esp + 0x3b4]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7bec0
test eax, eax
je 0x11cf70be
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf6f59
lea ecx, [esp + 0x3b4]
lea edx, [esp + 0xa8]
push ecx
push edx
push 0x3169
push str._CSafeDoc::OnMoveFileA__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
lea ecx, [esp + 0x28]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x28]
mov byte [esp + 0x84c], 0x1c
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cf6fae
inc eax
lea ecx, [esp + 0x24]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.11e819c0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x84c], 0x1d
call fcn.11e7f410
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1c
call fcn.11e7f280
push esi
lea ecx, [esp + 0x38]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x38]
mov byte [esp + 0x84c], 0x1e
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cf700c
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x10]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x84c], 0x1f
call fcn.11e7f410
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7048
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
push eax
lea edx, [esp + 0x3b8]
push ecx
lea eax, [esp + 0xb0]
push edx
push eax
push 0x3177
push str._CSafeDoc::OnMoveFileA__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x24]
push 1
lea edx, [esp + 0xac]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11cf71bc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf709c
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x24]
push eax
lea edx, [esp + 0xac]
push ecx
push edx
push 0x317c
push str._CSafeDoc::OnMoveFileA__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x34]
mov byte [esp + 0x848], 0x1c
call fcn.11e7f280
lea ecx, [esp + 0x24]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cf9496
mov ecx, 0x1212b5c0
call fcn.11d713d0
test eax, eax
je 0x11cf9496
mov ecx, 0x1212b5c0
call fcn.11d915c0
test eax, eax
je 0x11cf7a20
mov ecx, 0x1212b5c0
call fcn.11d916d0
mov edx, eax
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, edx
jae 0x11cf7130
mov ecx, 0x1212b5c0
call fcn.11d916d0
mov edx, eax
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, edx
jb 0x11cf7a20
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
xor ebp, ebp
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push edi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x28], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebp
je 0x11cf79cc
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x854]
push ebx
push edx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebp
jmp 0x11cf7a07
push 0x5c
lea ecx, [esp + 0x28]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x28]
call fcn.11e7fed0
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, dword [eax]
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov byte [esp + 0x854], 0x20
call fcn.11e7f820
mov eax, dword [eax]
push edi
push eax
mov byte [esp + 0x850], 0x21
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x20
sete byte [esp + 0x2b]
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
mov eax, dword [0x12133f80]
je 0x11cf78f9
test eax, eax
je 0x11cf72be
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov byte [esp + 0x854], 0x22
call fcn.11e7f820
mov ecx, dword [edi]
mov edx, dword [eax]
push ecx
push edx
push 0x3188
push str._CSafeDoc::OnMoveFileA__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0x860], 0x23
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x22
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0x848], 0x24
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
jmp 0x11cf709c
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, eax
mov bl, 7
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
push edi
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0x854], 8
call fcn.11df73b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7383
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
push 0x3094
push str._CSafeDoc::OnMoveFileA__Line:_d__MoveFileA__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cf87e8
xor esi, esi
test al, 0x10
mov eax, dword [esp + 0x30]
je 0x11cf7441
cmp eax, 1
jne 0x11cf73ec
push eax
push eax
lea edx, [esp + 0x3bc]
push esi
lea eax, [esp + 0xb4]
push edx
push eax
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf74e1
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0xac]
push ecx
push edx
push 0x30bf
push str._CSafeDoc::OnMoveFileA__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cf74d2
cmp eax, 2
jne 0x11cf74e5
push 1
push 0
lea eax, [esp + 0x3bc]
push 0
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf74e1
lea edx, [esp + 0x3b4]
push esi
lea eax, [esp + 0xac]
push edx
push eax
push 0x30c6
push str._CSafeDoc::OnMoveFileA__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cf74d2
cmp eax, 1
jne 0x11cf748a
push 0
push eax
lea ecx, [esp + 0x3bc]
push 0
lea edx, [esp + 0xb4]
push ecx
push edx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf74e1
lea eax, [esp + 0x3b4]
push esi
lea ecx, [esp + 0xac]
push eax
push ecx
push 0x30d0
push str._CSafeDoc::OnMoveFileA__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11cf74d2
cmp eax, 2
jne 0x11cf74e5
push 0
push 1
lea edx, [esp + 0x3bc]
push 1
lea eax, [esp + 0xb4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf74e1
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0xac]
push ecx
push edx
push 0x30d7
push str._CSafeDoc::OnMoveFileA__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test esi, esi
jne 0x11cf74ed
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
cmp dword [0x12133f80], edi
je 0x11cf7383
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ebp, eax
mov bl, 0xb
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [ebp]
mov edx, dword [eax]
push ecx
push edx
push 0x30e7
push str._CSafeDoc::OnMoveFileA__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
mov byte [esp + 0x860], 0xc
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cf87e8
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, dword [esp + 0x854]
mov esi, dword [eax]
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], 0xf
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 1
push 0
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x85c], 0x10
call fcn.11d129d0
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0xf
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7658
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ebp, eax
mov bl, 0x11
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [ebp]
mov edx, dword [eax]
push esi
push ecx
push edx
push 0x30f8
push str._CSafeDoc::OnMoveFileA__Line:_d__EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x864], 0x12
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
test esi, esi
je 0x11cf7383
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11cf9707
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7383
lea eax, [esp + 0xa8]
push eax
push 0x310e
push str._CSafeDoc::OnMoveFileA__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cf87e8
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, dword [esp + 0x854]
mov esi, dword [eax]
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], 0x18
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 0
push 0
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x85c], 0x19
call fcn.11d129d0
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0x18
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf77af
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ebp, eax
mov bl, 0x1a
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [ebp]
mov edx, dword [eax]
push esi
push ecx
push edx
push 0x3133
push str._CSafeDoc::OnMoveFileA__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x864], 0x1b
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf77f7
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
push 0x3140
push str._CSafeDoc::OnMoveFileA__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x3bc]
push 1
lea eax, [esp + 0xb4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7849
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0xac]
push ecx
push edx
push 0x3145
push str._CSafeDoc::OnMoveFileA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7891
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0xa8]
push eax
push ecx
push 0x314f
push str._CSafeDoc::OnMoveFileA__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x3bc]
push 0
lea eax, [esp + 0xb4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf78e3
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0xac]
push ecx
push edx
push 0x3154
push str._CSafeDoc::OnMoveFileA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
test eax, eax
je 0x11cf793c
push esi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x25
push eax
push 0x318f
push str._CSafeDoc::OnMoveFileA__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
push esi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x26
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1e
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov byte [esp + 0x848], 0x1c
call fcn.11e7f280
lea ecx, [esp + 0x24]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11cf9707
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cf7a07
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x854]
push ebx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf7a07
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
xor esi, esi
push ebx
lea ecx, [esp + 0x18]
mov dword [esp + 0x50], esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x7c], esi
call fcn.11e7e980
mov byte [esp + 0x848], 0x27
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x2b1]
mov byte [esp + 0x2b0], 0
mov byte [esp + 0x73c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x73d]
mov dword [esp + 0x64], esi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], esi
stosb byte es:[edi], al
mov dword [esp + 0x90], esi
mov dword [esp + 0x2c], esi
call fcn.11e923e0
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x28
call fcn.11e923e0
push 0xffffffffffffffdd
lea ecx, [esp + 0x84]
mov byte [esp + 0x84c], 0x29
call fcn.11e15fa0
mov ecx, 0x1212b5c0
mov byte [esp + 0x848], 0x2a
call fcn.11d811f0
test eax, eax
je 0x11cf7afc
cmp dword [0x12133f80], esi
je 0x11cf7afc
mov eax, dword [0x12126854]
push eax
push str.__s__CSafeDoc::OnMoveFileA___n
push str.OutlineProtect
push 4
call fcn.11ca5810
add esp, 0x10
push ebx
lea ecx, [esp + 0x34]
call fcn.11e7e980
mov edi, dword [esp + 0x854]
mov esi, dword [eax]
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x84c], 0x2b
call fcn.11e7e980
mov eax, dword [eax]
push 0
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x854], 0x2c
call fcn.11d0f0d0
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2b
call fcn.11e7f280
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
lea eax, [esp + 0x2b0]
push 0x104
push eax
push ebx
call fcn.11dbcd00
add esp, 0xc
lea ecx, [esp + 0x2b0]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x84c], 0x2d
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
mov esi, dword [esp + 0x14]
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x1212b5c0
call fcn.11d68760
push eax
push esi
mov ecx, ebp
call fcn.11ce4490
lea edx, [esp + 0x73c]
push 0x104
push edx
push edi
call fcn.11dbcd00
add esp, 0xc
lea eax, [esp + 0x73c]
lea ecx, [esp + 0x18]
push eax
call fcn.11e7e980
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x84c], 0x2e
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
mov esi, dword [esp + 0x1c]
xor eax, eax
lea ecx, [esp + 0x90]
push eax
push ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], eax
push eax
lea edx, [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
mov ecx, 0x1212b5c0
call fcn.11d68760
push eax
push esi
mov ecx, ebp
call fcn.11ce4490
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x94]
push ecx
push edx
mov ecx, ebp
call fcn.11d0ec10
mov esi, eax
mov eax, dword [esp + 0x14]
push 0xffffffffffffffff
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x2c], esi
call fcn.11d6a6d0
test eax, eax
jne 0x11cf8573
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cf7cea
test esi, esi
jne 0x11cf7cea
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cf7f8e
mov ecx, dword [esp + 0x1c]
push esi
push esi
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cf7f8e
mov edx, dword [esp + 0x1c]
push esi
push edx
mov ecx, ebp
mov dword [esp + 0x28], 1
call fcn.11d0c690
test eax, eax
je 0x11cf7cea
lea eax, [esp + 0x73c]
mov esi, 1
push 0x104
push eax
mov dword [esp + 0x2c], esi
call fcn.11d70c40
add esp, 8
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
jne 0x11cf7fbb
mov ecx, 0x1212b458
call fcn.11df4300
test eax, eax
je 0x11cf7d6c
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7d27
push str.CSafeDoc::OnMoveFileW._It_is_CAD__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
call fcn.11def670
add esp, 8
test eax, eax
je 0x11cf7d6c
mov eax, dword [esp + 0x14]
push 0x12052ea0
push eax
call fcn.11def6e0
add esp, 8
test eax, eax
jne 0x11cf85f4
mov ecx, dword [esp + 0x14]
push ecx
call fcn.11def720
add esp, 4
test eax, eax
jne 0x11cf85f4
mov ecx, 0x1212b458
call fcn.11df4380
test eax, eax
je 0x11cf7e69
push 0x12119948
lea ecx, [esp + 0x34]
call fcn.11e7eae0
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x2f
call fcn.11e84ba0
lea edx, [esp + 0x98]
mov byte [esp + 0x848], 0x30
push edx
push str._UserAppData_Excel11.xlb
call fcn.11d6d940
mov eax, dword [esp + 0xa4]
add esp, 8
test eax, eax
jle 0x11cf7dd9
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x30]
push eax
call fcn.11e7f410
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e880
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x4c]
push edx
mov byte [esp + 0x84c], 0x31
call fcn.11e7e980
mov ecx, dword [esp + 0x18]
mov eax, dword [eax]
push ecx
push eax
mov byte [esp + 0x850], 0x32
call fcn.11e9bad0
add esp, 8
lea ecx, [esp + 0x4c]
mov edi, eax
mov byte [esp + 0x848], 0x31
call fcn.11e7f280
test edi, edi
jne 0x11cf8634
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x30
call fcn.11e7f280
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x2f
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.11cf9840
add esp, 8
test eax, eax
jne 0x11cf8745
mov eax, dword [esp + 0x38]
test eax, eax
je 0x11cf7fa3
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11cf7fa3
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.11d0f080
test eax, eax
je 0x11cf7ec2
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cf7fa3
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7eef
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_____s__is_forbidden__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
xor edi, edi
call fcn.11df4380
test eax, eax
je 0x11cf7f41
mov eax, dword [esp + 0x14]
push str.vb.tmp
push eax
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cf7f41
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7f3c
mov ecx, dword [esp + 0x14]
push ecx
push 0x325e
push str.OnMoveFileA_Excel_vb_temp_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov edi, 1
mov ecx, 0x1212b458
call fcn.11df4470
test eax, eax
je 0x11cf7f9b
mov edx, dword [esp + 0x14]
push str._normal.dotm
push edx
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cf7f9b
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7fa3
mov eax, dword [esp + 0x14]
push eax
push 0x326c
push str.OnMoveFileA_Winword_normal.dotm_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
jmp 0x11cf7fa3
mov dword [esp + 0x20], 0
jmp 0x11cf7cea
test edi, edi
je 0x11cf8787
mov ecx, dword [esp + 0x1c]
push 0
push 0
push 0
push 0
push 0
push 1
push ecx
mov ecx, ebp
call fcn.11ce4490
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf800a
lea edx, [esp + 0x73c]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x34
push eax
push 0x3280
push str.CSafeDoc::OnMoveFileA_Line:_d_File:_s_AddPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
lea ecx, [esp + 0x44]
call fcn.11e923e0
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x35
call fcn.11e923e0
lea ecx, [esp + 0x73c]
mov byte [esp + 0x848], 0x36
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x48]
lea edi, [ebp + 0x8c]
push ecx
push edx
push esi
push eax
mov ecx, edi
mov byte [esp + 0x85c], 0x37
call fcn.11cab790
lea ecx, [esp + 0x18]
mov esi, eax
mov byte [esp + 0x848], 0x36
call fcn.11e7f280
test esi, esi
je 0x11cf80ba
lea eax, [esp + 0x73c]
lea ecx, [esp + 0x20]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x40]
lea edx, [esp + 0x44]
push ecx
push edx
push eax
mov ecx, edi
mov byte [esp + 0x854], 0x38
call fcn.11caa980
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x36
call fcn.11e7f280
mov eax, dword [esp + 0x14]
push 0
push eax
mov ecx, ebp
call fcn.11d0ec10
mov ecx, dword [esp + 0x1c]
push 0
push 0
push 3
push 0
push 7
push bind
push ecx
mov dword [esp + 0x68], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
push 0
cmp esi, 0xffffffff
je 0x11cf8139
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x68]
push edx
push eax
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
jne 0x11cf812c
push esi
mov ecx, 0x1212b5c0
call fcn.11d72070
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x4c]
jmp 0x11cf815f
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x68]
push esi
push edx
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x64]
test eax, eax
je 0x11cf826d
xor edi, edi
mov dword [esp + 0x34], edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x35
call fcn.11e92540
lea ecx, [esp + 0x44]
mov byte [esp + 0x848], 0x2a
call fcn.11e92540
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x29
call fcn.11e15fd0
xor esi, esi
lea ecx, [esp + 0x74]
mov dword [esp + 0x30], esi
mov dword [esp + 0x8c], esi
call fcn.11e923e0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x848], 0x3e
call fcn.11e923e0
push 0xffffffffffffffdd
lea ecx, [esp + 0x84]
mov byte [esp + 0x84c], 0x3f
call fcn.11e15fa0
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x848], 0x40
push ecx
call fcn.11dbb4d0
add esp, 4
test al, 0x10
jne 0x11cf88ae
mov edx, dword [esp + 0x14]
push esi
push edx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cf88ae
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x11cf822b
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cf88ae
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cf88ae
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cf8825
mov edx, dword [esp + 0x1c]
push 0
push edx
call fcn.11ee5500
add esp, 8
test eax, eax
je 0x11cf89e1
jmp 0x11cf885a
test edi, edi
je 0x11cf82ad
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cf8171
mov ecx, dword [esp + 0x1c]
push 0
push eax
push 0
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
test eax, eax
je 0x11cf8171
mov edx, dword [esp + 0x14]
push edx
call fcn.11dd8200
add esp, 4
jmp 0x11cf8171
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cf8314
test esi, esi
jne 0x11cf838e
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cf853b
mov eax, dword [esp + 0x14]
push esi
push esi
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cf853b
mov eax, dword [esp + 0x24]
mov dword [esp + 0x60], 1
test eax, eax
je 0x11cf8314
lea ecx, [esp + 0x2b0]
push 0x104
push ecx
call fcn.11d70c40
add esp, 8
test esi, esi
jne 0x11cf8386
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cf8386
call fcn.11dd8bc0
test eax, eax
je 0x11cf8386
mov edx, dword [esp + 0x14]
mov ecx, 0x1212ae60
push edx
call fcn.11d598c0
test eax, eax
je 0x11cf8386
mov eax, dword [esp + 0x14]
push esi
push 3
lea ecx, [esp + 0x28]
push eax
push ecx
mov ecx, ebp
call fcn.11d0f1e0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x848], 0x39
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11cf8375
mov edx, dword [esp + 0x14]
push 1
push eax
push edx
mov ecx, 0x1212ae60
call fcn.11d592e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x36
call fcn.11e7f280
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x11cf83a9
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
push esi
push eax
push ecx
push edx
mov ecx, ebp
call fcn.11d0c300
mov dword [esp + 0x78], eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf83f8
lea eax, [esp + 0x2b0]
lea ecx, [esp + 0x20]
push eax
call fcn.11e7e980
mov ecx, dword [eax]
mov byte [esp + 0x848], 0x3a
push ecx
push 0x32d0
push str.CSafeDoc::OnMoveFileA_Line:_d_File:_s_AddPolicy2_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x36
call fcn.11e7f280
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x20]
push edx
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x4c]
mov byte [esp + 0x84c], 0x3b
push edx
push ecx
push esi
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab790
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x36
call fcn.11e7f280
test esi, esi
jne 0x11cf8171
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
ja 0x11cf8466
lea ecx, [esp + 0x40]
call fcn.11e925e0
test eax, eax
jbe 0x11cf8171
lea ecx, [esp + 0x18]
call fcn.11e923e0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x3c
call fcn.11e923e0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x30]
lea eax, [esp + 0x18]
push edx
push eax
push ecx
mov ecx, 0x1212b5c0
mov byte [esp + 0x854], 0x3d
call fcn.11d70140
test eax, eax
je 0x11cf854c
lea ecx, [esp + 0x18]
call fcn.11e925e0
lea ecx, [esp + 0x44]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cf8531
lea ecx, [esp + 0x44]
call fcn.11e925e0
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x44]
mov edi, eax
call fcn.11e92ce0
mov edx, esi
mov esi, eax
mov ecx, edx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x11cf852d
lea ecx, [esp + 0x30]
call fcn.11e925e0
lea ecx, [esp + 0x40]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cf852d
lea ecx, [esp + 0x40]
call fcn.11e925e0
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x40]
mov edi, eax
call fcn.11e92ce0
mov ecx, esi
mov esi, eax
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x11cf8548
mov edi, dword [esp + 0x34]
mov dword [esp + 0x2c], 1
jmp 0x11cf854c
mov dword [esp + 0x60], 0
jmp 0x11cf8314
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x3c
call fcn.11e92540
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x36
call fcn.11e92540
jmp 0x11cf8171
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8595
mov eax, dword [esp + 0x14]
push eax
push str.CSafeDoc::OnMoveFileA___IsMatchRealFilterFileExceptSaveAs_wstrNewFileName__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x10
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
jne 0x11cf85cf
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf85c1
push str.OnMoveFileA___Not_HandleDoc__
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
mov edi, 1
mov dword [esp + 0x34], edi
jmp 0x11cf8193
mov dword [esp + 0x64], 1
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x29
call fcn.11e15fd0
mov edi, dword [esp + 0x34]
jmp 0x11cf81a7
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8621
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_____s__is_forbidden_1__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x850]
mov dword [eax + 0x10], 5
jmp 0x11cf87a1
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8688
lea ecx, [esp + 0x2b0]
push ecx
lea ecx, [esp + 0x30]
call fcn.11e7e980
mov edx, dword [esp + 0x18]
mov eax, dword [eax]
push edx
push eax
push 0x323b
push str._CSafeDoc::OnMoveFileA__Line:_d__Filter_File__s__Patern__s_
push str.SafeDoc
push 4
mov byte [esp + 0x860], 0x33
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x2c]
mov byte [esp + 0x848], 0x31
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x30
call fcn.11e7f280
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x2f
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2a
call fcn.11e7f280
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x29
call fcn.11e15fd0
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x28
call fcn.11e92540
lea ecx, [esp + 0x48]
mov byte [esp + 0x848], 0x27
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11cf9707
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8772
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_____s__is_forbidden_MSOfficeModify__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x850]
mov ecx, dword [esp + 0x1c]
push ecx
mov dword [eax + 0x10], 5
jmp 0x11cf879a
mov edx, dword [esp + 0x850]
mov eax, dword [esp + 0x1c]
push eax
mov dword [edx + 0x10], 5
mov ecx, ebp
call fcn.11d18ce0
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x29
call fcn.11e15fd0
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x28
call fcn.11e92540
lea ecx, [esp + 0x48]
mov byte [esp + 0x848], 0x27
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cf9707
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x11cf885a
mov ecx, dword [esp + 0x60]
test ecx, ecx
jne 0x11cf885a
mov ecx, dword [esp + 0x64]
test ecx, ecx
jne 0x11cf885a
lea ecx, [esp + 0x7c]
lea edx, [esp + 0x74]
push ecx
push edx
push 0
push eax
mov eax, dword [esp + 0x24]
lea ecx, [ebp + 0x8c]
push eax
call fcn.11cab790
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov esi, 1
lea ecx, [esp + 0x8c]
push esi
push ecx
push edx
push eax
mov ecx, ebp
call fcn.11d11890
mov ecx, dword [0x12133f80]
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x11cf88ae
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x14]
push ecx
push eax
mov eax, dword [esp + 0x24]
push edx
push eax
push str._CSafeDoc::OnMoveFileA__src:__s__dst:__s__bRet__d__bMoveFail__d_
push str.SafeDoc3
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x3f
call fcn.11e15fd0
mov ecx, dword [esp + 0x854]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov edx, dword [esp + 0x18]
mov byte [esp + 0x848], 0x41
push edx
call fcn.11dbbe80
add esp, 4
test al, 0x10
je 0x11cf891a
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
call fcn.11d1feb0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf891a
mov ecx, dword [esp + 0x18]
push ecx
push str._CSafeDoc::MoveFileA__1001___s_
push str.IPG_5008
push 4
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x3f
call fcn.11e7f280
test esi, esi
je 0x11cf893e
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x11cf8b1a
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x30], edx
xor ecx, ecx
lea edx, [esp + 0x20]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], ecx
push edx
lea ecx, [esp + 0x14]
lea edx, [esp + 0x3c]
push ecx
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
test eax, eax
je 0x11cf8ac2
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x1c], edx
mov dword [esi + 0x24], ecx
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x73c]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edx
jmp 0x11cf8b0a
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8a0e
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_____s__is_forbidden__SrcFile_Is_Broken__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x850]
lea ecx, [esp + 0x80]
mov dword [eax + 0x10], 5
mov byte [esp + 0x848], 0x3f
call fcn.11e15fd0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x848], 0x3e
call fcn.11e92540
lea ecx, [esp + 0x74]
mov byte [esp + 0x848], 0x29
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x28
call fcn.11e92540
lea ecx, [esp + 0x48]
mov byte [esp + 0x848], 0x27
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cf9707
mov eax, dword [esi + 0x18]
test eax, eax
mov dword [esp + 0x18], eax
je 0x11cf8b0a
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x2b0]
lea ecx, [esp + 0x73c]
push eax
push ecx
call dword [esp + 0x20]
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf8b0a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov edx, dword [esi + 0x14]
lea ecx, [esp + 0x54]
mov dword [esp + 0x30], edx
call fcn.11e16040
mov ecx, 0x1212b5c0
call fcn.11d92e10
test eax, eax
je 0x11cf8b3a
test edi, edi
je 0x11cf8b3a
xor edi, edi
mov dword [esp + 0x64], 1
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x30]
test eax, eax
je 0x11cf93f1
mov ecx, 0x1212b5c0
call fcn.11d811f0
test eax, eax
je 0x11cf8b72
mov eax, dword [esp + 0x1c]
push eax
call fcn.11df0b60
add esp, 4
test eax, eax
je 0x11cf8b72
mov ecx, dword [esp + 0x14]
push ecx
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x90]
test eax, eax
je 0x11cf8c32
lea edx, [ebp + 4]
push 1
push edx
lea ecx, [esp + 0x88]
call fcn.11e8c590
mov eax, dword [ebp + 0x18]
xor esi, esi
test eax, eax
mov byte [esp + 0x848], 0x42
jle 0x11cf8c1e
xor edi, edi
lea eax, [esp + 0x73c]
lea ecx, [esp + 0x10]
push eax
call fcn.11e7e980
mov ecx, dword [ebp + 0x14]
mov eax, dword [eax]
push eax
mov byte [esp + 0x84c], 0x43
mov ecx, dword [edi + ecx + 0x40]
push ecx
call fcn.11e67d22
add esp, 8
lea ecx, [esp + 0x10]
test eax, eax
sete bl
mov byte [esp + 0x848], 0x42
call fcn.11e7f280
test bl, bl
jne 0x11cf8bf9
mov eax, dword [ebp + 0x18]
inc esi
add edi, 0x6c
cmp esi, eax
jl 0x11cf8ba6
jmp 0x11cf8c13
mov ecx, dword [ebp + 0x14]
lea esi, [esi + esi*2]
lea edx, [esp + 0x2b0]
lea eax, [esi + esi*8]
push edx
lea ecx, [ecx + eax*4 + 0x40]
call fcn.11e7f5e0
mov ebx, dword [esp + 0x858]
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x80]
mov byte [esp + 0x848], 0x3f
call fcn.11e8c5f0
push 0xffffffffffffffdd
lea ecx, [esp + 0x9c]
call fcn.11e15fa0
mov eax, dword [esp + 0x64]
mov byte [esp + 0x848], 0x44
test eax, eax
mov eax, dword [esp + 0x24]
je 0x11cf8ddb
test eax, eax
je 0x11cf93dd
mov eax, dword [esp + 0x14]
push 1
push 0
push 0
push 0
lea edx, [esp + 0x28]
push 0
push edx
push eax
mov ecx, ebp
mov dword [esp + 0x34], 0
call fcn.11d0a950
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x11cf8d3b
test ecx, ecx
jne 0x11cf8d3b
mov ecx, dword [esp + 0x14]
xor esi, esi
push ecx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cf8cc4
test al, 1
je 0x11cf8cc4
mov edx, dword [esp + 0x14]
mov esi, 1
push esi
push 0
push edx
call fcn.11dbb440
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8ce8
mov eax, dword [0x12126854]
push ebx
push eax
push str.__s__OnMoveFilea__s__DecryptFileEx
push str.office
push 1
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
mov word [esp + 0x3b4], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
push 1
stosw word es:[edi], ax
lea eax, [esp + 0x3b8]
push 0xffffffffffffffff
push eax
push ecx
call fcn.11ee4b50
add esp, 0x10
test esi, esi
je 0x11cf93dd
mov edx, dword [esp + 0x14]
push 0
push 1
push edx
call fcn.11dbb440
add esp, 0xc
jmp 0x11cf93dd
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8d67
mov ecx, dword [esp + 0x14]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_:_CheckAccessRight_failed__n
push str.SafeDoc
push 8
call fcn.11ca5810
mov ecx, dword [esp + 0x2c]
add esp, 0x14
test ecx, ecx
je 0x11cf93dd
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf8d98
mov edx, dword [esp + 0x14]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileA__s_:_No_Access_right__Result:_lu_n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
call fcn.11df5090
test eax, eax
jne 0x11cf8dbe
push eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, 0x1212b5c0
call fcn.11d69000
test eax, eax
jne 0x11cf93dd
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 2
push ecx
push edx
mov ecx, 0x1212b158
call fcn.11dbfe50
jmp 0x11cf93dd
test eax, eax
jne 0x11cf8f60
test edi, edi
jne 0x11cf925a
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11cf925a
lea eax, [esp + 0x48]
lea ecx, [esp + 0x40]
push eax
call fcn.11e92500
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x45
push ecx
lea ecx, [esp + 0x48]
call fcn.11e92500
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x46
call fcn.11e925e0
test eax, eax
jne 0x11cf8e5a
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
jne 0x11cf8e5a
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x48]
lea eax, [esp + 0x44]
push edx
push eax
push ecx
mov ecx, ebp
call fcn.11d18db0
lea ecx, [esp + 0x40]
xor esi, esi
xor ebx, ebx
call fcn.11e925e0
test eax, eax
jbe 0x11cf8e76
lea ecx, [esp + 0x40]
call fcn.11e92ce0
mov ebx, eax
mov edx, dword [esp + 0x14]
mov dword [esp + 0x10], esi
push edx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cf8ea8
test al, 1
je 0x11cf8ea8
mov eax, dword [esp + 0x14]
push 1
push esi
push eax
mov dword [esp + 0x1c], 1
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
jbe 0x11cf8ec0
lea ecx, [esp + 0x44]
call fcn.11e92ce0
mov esi, eax
mov edx, dword [esp + 0x14]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
mov word [esp + 0x3b4], 0
push esi
rep stosd dword es:[edi], eax
push 1
lea ecx, [esp + 0x3bc]
push 2
push ecx
push ebx
push edx
stosw word es:[edi], ax
call fcn.11ee4760
mov esi, eax
add esp, 0x18
neg esi
sbb esi, esi
mov ecx, 0x1212b5c0
inc esi
mov dword [esp + 0x24], esi
call fcn.11d811f0
test eax, eax
je 0x11cf8f1d
mov eax, dword [esp + 0x14]
push eax
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11cf8f36
mov ecx, dword [esp + 0x14]
push 0
push 1
push ecx
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x44]
mov byte [esp + 0x848], 0x45
call fcn.11e92540
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x44
call fcn.11e92540
test esi, esi
je 0x11cf925a
call fcn.11dd8bc0
test eax, eax
je 0x11cf9002
mov edx, dword [esp + 0x14]
mov ecx, 0x1212b5c0
push edx
call fcn.11d72380
test eax, eax
jne 0x11cf8fb7
mov eax, dword [esp + 0x1c]
push 1
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.11ce4d50
mov eax, dword [esp + 0x20]
mov byte [esp + 0x848], 0x47
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x11cf8fdf
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.11ee3a60
add esp, 8
test eax, eax
je 0x11cf9002
mov eax, dword [esp + 0x14]
push 0
push 0
push eax
mov ecx, 0x1212ae60
call fcn.11d592e0
jmp 0x11cf9002
mov ecx, dword [esp + 0x14]
push 2
push eax
push ecx
mov ecx, 0x1212ae60
call fcn.11d592e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf9051
lea edx, [esp + 0x73c]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x48
push eax
push 0x33db
push str.CSafeDoc::OnMoveFileA_Line:_d_File:_s_SetPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cf90ab
cmp dword [esp + 0x94], 6
jne 0x11cf90ab
cmp dword [0x12134db4], 2
jne 0x11cf90ab
lea ecx, [esp + 0x2b0]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x49
push eax
call fcn.11ede350
add esp, 4
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
test esi, esi
jne 0x11cf925a
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x11cf9101
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax]
push edi
push ecx
lea edx, [esp + 0x58]
lea ecx, [esp + 0x50]
push edx
push ecx
push eax
lea ecx, [ebp + 0x8c]
mov byte [esp + 0x85c], 0x4a
call fcn.11cab040
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
jmp 0x11cf9105
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x48]
call fcn.11e925e0
test eax, eax
je 0x11cf9155
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov esi, dword [eax]
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x84c], 0x4b
call fcn.11e92ce0
push eax
push esi
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x44
call fcn.11e7f280
jmp 0x11cf91c9
test edi, edi
jne 0x11cf91c9
lea ecx, [esp + 0x2c]
call fcn.11e923e0
lea eax, [esp + 0x2c]
mov bl, 0x4c
push eax
mov byte [esp + 0x84c], bl
call fcn.11cabda0
add esp, 4
lea ecx, [esp + 0x2b0]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov esi, dword [eax]
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x84c], 0x4d
call fcn.11e92ce0
push eax
push esi
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0x848], 0x44
call fcn.11e92540
lea ecx, [esp + 0x50]
call fcn.11e925e0
test eax, eax
je 0x11cf9212
lea edx, [esp + 0x2b0]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov esi, dword [eax]
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x4e
call fcn.11e92ce0
push eax
push esi
call fcn.11ee75f0
add esp, 8
mov byte [esp + 0x848], 0x44
lea ecx, [esp + 0x10]
jmp 0x11cf9255
test edi, edi
jne 0x11cf925a
xor eax, eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2b0]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x38]
push ecx
push eax
mov byte [esp + 0x850], 0x4f
call fcn.11ee75f0
add esp, 8
mov byte [esp + 0x848], 0x44
lea ecx, [esp + 0x10]
call fcn.11e7f280
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x11cf93dd
mov eax, dword [esp + 0x24]
test eax, eax
mov eax, dword [esp + 0x4c]
je 0x11cf9392
test eax, eax
jne 0x11cf93dd
xor ebx, ebx
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x3b5]
mov byte [esp + 0x3b4], bl
lea edx, [esp + 0x3b4]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.11ee09b0
add esp, 8
test eax, eax
je 0x11cf92ba
lea ebx, [esp + 0x3b4]
mov esi, dword [esp + 0x78]
test esi, esi
jne 0x11cf932f
mov eax, dword [esp + 0x734]
test eax, eax
jbe 0x11cf932f
push eax
call fcn.11e679bc
mov esi, eax
add esp, 4
test esi, esi
mov dword [esp + 0x78], esi
je 0x11cf932f
mov ecx, dword [esp + 0x734]
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x10], 0
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x734]
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push ecx
push esi
push edx
call fcn.11ee26e0
add esp, 0x10
test eax, eax
jne 0x11cf932f
push esi
call fcn.11e679b1
add esp, 4
xor esi, esi
mov dword [esp + 0x78], esi
lea ecx, [esp + 0x18]
xor edi, edi
call fcn.11e923e0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push edi
push eax
push ecx
mov byte [esp + 0x854], 0x50
call fcn.11ee73d0
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.11e925e0
test eax, eax
jbe 0x11cf936d
lea ecx, [esp + 0x18]
call fcn.11e92ce0
mov edi, eax
mov edx, dword [esp + 0x14]
push edi
push esi
push ebx
push edx
mov ecx, 0x1212b560
call fcn.11dee5b0
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x44
call fcn.11e92540
jmp 0x11cf93dd
test eax, eax
je 0x11cf93dd
lea ecx, [esp + 0x74]
xor edi, edi
call fcn.11e925e0
test eax, eax
jbe 0x11cf93b0
lea ecx, [esp + 0x74]
call fcn.11e92ce0
mov edi, eax
lea ecx, [esp + 0x7c]
xor esi, esi
call fcn.11e925e0
test eax, eax
jbe 0x11cf93ca
lea ecx, [esp + 0x7c]
call fcn.11e92ce0
mov esi, eax
mov eax, dword [esp + 0x14]
push esi
push edi
push 0
push eax
mov ecx, 0x1212b560
call fcn.11dee620
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x3f
call fcn.11e15fd0
mov eax, dword [esp + 0x78]
test eax, eax
je 0x11cf9402
push eax
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x848], 0x3e
call fcn.11e92540
lea ecx, [esp + 0x74]
mov byte [esp + 0x848], 0x29
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x28
call fcn.11e92540
lea ecx, [esp + 0x48]
mov byte [esp + 0x848], 0x27
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, dword [esp + 0x30]
jmp 0x11cf9707
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea eax, [esp + 0x2c]
push eax
xor ebp, ebp
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], edx
lea ecx, [esp + 0x14]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x3c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, ebp
je 0x11cf951b
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x854]
push ebx
push ecx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
call eax
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11cf9556
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cf9556
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x854]
push ebx
push ecx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf9556
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cf96e0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf7383
lea edx, [esp + 0x3b4]
lea eax, [esp + 0xa8]
push edx
push eax
push 0x30a9
push str._CSafeDoc::OnMoveFileA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_ShareFolder.
push str.NetWorkShareFolder
jmp 0x11cf7379
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf9610
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, eax
mov bl, 9
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [edi]
mov edx, dword [eax]
push ecx
push edx
push 0x309e
push str._CSafeDoc::OnMoveFileA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
push str.SafeDisk
push 8
mov byte [esp + 0x860], 0xa
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cf87e8
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x2c]
push edx
xor ebp, ebp
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x3c]
push eax
push ecx
push edi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x3c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, ebp
je 0x11cf96a2
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x854]
push ebx
push edx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebp
jmp 0x11cf96dd
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cf96dd
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x854]
push ebx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf96dd
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0x840]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x83c
ret 0xc