Function at 0x11cf9c80
Capabilities:
Move file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fa3fb6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa30
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0xffffffffffffffdd
lea ecx, [esp + 0x44]
mov dword [esp + 0x50], ebp
call fcn.11e15fa0
mov eax, dword [ebp + 0xb4]
push 0
test eax, eax
push 0
mov dword [esp + 0xa50], 0
push 0
mov ecx, 0x1212b5c0
je 0x11cf9edb
call fcn.11d60760
mov edi, dword [esp + 0xa58]
test eax, eax
je 0x11cf9e0d
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cf9e0d
push edi
mov ecx, 0x1212b5c0
call fcn.11d6b710
test eax, eax
jne 0x11cf9e0d
lea ecx, [esp + 0x28]
call fcn.11e16080
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 1
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x10]
push edx
xor ebx, ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
push eax
push ecx
push ebp
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
cmp eax, ebx
mov ebx, dword [esp + 0xa54]
je 0x11cf9dab
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x10]
push edi
push ebx
push esi
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
call eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x30]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edx
jmp 0x11cf9ddf
mov ebp, dword [esi + 0x18]
test ebp, ebp
je 0x11cf9ddf
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push edi
push ebx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf9ddf
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
lea ecx, [esp + 0x40]
call fcn.11e16040
push edi
push ebx
mov ecx, 0x1212b5c0
call fcn.11d88910
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x28]
mov byte [esp + 0xa48], 0
call fcn.11e16090
jmp 0x11cfc61e
lea ecx, [esp + 0x40]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x10]
push edx
xor ebp, ebp
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebx, dword [esi + 0x1c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
push eax
push ecx
push ebx
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x20], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
cmp eax, ebp
je 0x11cf9e98
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa54]
push edi
push edx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebp
mov esi, dword [esi + 0x14]
jmp 0x11cfc61e
mov ebx, dword [esi + 0x18]
cmp ebx, ebp
je 0x11cf9ed3
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0xa54]
push edi
push edx
call ebx
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf9ed3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
jmp 0x11cfc61e
call fcn.11d60760
test eax, eax
jne 0x11cf9ef6
push eax
push 0x12118e98
call fcn.11c92320
add esp, 8
test eax, eax
je 0x11cf9f04
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cf9f32
mov ecx, dword [esp + 0xa58]
mov edx, dword [esp + 0xa54]
lea eax, [esp + 0x40]
push eax
mov eax, dword [esp + 0xa54]
push ecx
push edx
push eax
mov ecx, 0x1212ae38
call fcn.11d25430
mov esi, eax
jmp 0x11cfc61e
push 2
lea ecx, [esp + 0x60]
call fcn.11e15fa0
mov esi, dword [esp + 0xa58]
mov edi, dword [esp + 0xa54]
test esi, esi
mov byte [esp + 0xa48], 2
je 0x11cfc544
cmp word [esi], 0
je 0x11cfc544
test edi, edi
je 0x11cfc544
cmp word [edi], 0
je 0x11cfc544
push edi
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11cf9fbb
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf9fa8
mov eax, dword [0x12126854]
push edi
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SafeDoc
push 8
call fcn.11ca5810
add esp, 0x14
mov ecx, dword [esp + 0xa50]
mov dword [ecx + 0x10], 5
jmp 0x11cfa9cc
mov ecx, 0x1212b5c0
call fcn.11d86270
test eax, eax
je 0x11cfa515
xor ebx, ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x2aa]
mov word [esp + 0x2a8], bx
mov word [esp + 0x6b8], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
lea edx, [esp + 0x2a8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [esp + 0xa54]
push 0x104
push edx
push edi
call fcn.11dbcbf0
lea eax, [esp + 0x6c4]
push 0x104
push eax
push esi
call fcn.11dbcbf0
add esp, 0x18
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
mov ecx, ebp
call fcn.11d13f30
lea eax, [esp + 0x2a8]
push ebx
push eax
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11cfa0a8
lea ecx, [esp + 0x6b8]
push ebx
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11cfa0a8
lea edx, [esp + 0x6b8]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7e8b0
test eax, eax
jne 0x11cfa0a8
lea eax, [esp + 0x6b8]
mov ecx, 0x1212b028
push eax
call fcn.11d139a0
test eax, eax
je 0x11cfa700
lea ecx, [esp + 0x2a8]
push ecx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cfc518
lea edx, [esp + 0x6b8]
push edx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cfc518
lea eax, [esp + 0x2a8]
push eax
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cfc4de
lea ecx, [esp + 0x6b8]
push ecx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cfc4de
lea edx, [esp + 0x10]
lea eax, [esp + 0x6b8]
push edx
lea ecx, [esp + 0x2ac]
push eax
push ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0x1c], ebx
call fcn.11d7ae10
test eax, eax
je 0x11cfa148
lea edx, [esp + 0x2a8]
push edx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
jne 0x11cfa79f
lea eax, [esp + 0x20]
lea ecx, [esp + 0x6b8]
push eax
lea edx, [esp + 0x2ac]
push ecx
push edx
mov ecx, 0x1212b5c0
mov dword [esp + 0x2c], ebx
call fcn.11d7a880
test eax, eax
je 0x11cfa905
mov edi, dword [esp + 0xa54]
push edi
call fcn.11dbbe80
push esi
mov ebx, eax
call fcn.11dbbe80
mov ecx, dword [esp + 0x28]
add esp, 8
test ecx, ecx
je 0x11cfa1a1
cmp eax, 0xffffffff
jne 0x11cfa1a1
test bl, 0x10
jne 0x11cfa931
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11cfa1bd
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11cfa1d5
lea eax, [esp + 0x2a8]
push eax
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11cfa99a
push edi
call fcn.11dbbe80
add esp, 4
mov ecx, ebp
mov ebx, eax
push edi
call fcn.11d139a0
test eax, eax
jne 0x11cfa1fc
push esi
mov ecx, ebp
call fcn.11d139a0
test eax, eax
je 0x11cfa31c
cmp ebx, 0xffffffff
je 0x11cfa515
test bl, 0x10
push 0
push 0
je 0x11cfa245
lea ecx, [esp + 0x2b0]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfa31c
push eax
lea edx, [esp + 0x6bc]
push eax
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfa2b5
jmp 0x11cfa31c
lea eax, [esp + 0x2b0]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11cfa277
push eax
lea ecx, [esp + 0x6bc]
push eax
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfaa45
push 0
lea edx, [esp + 0x2ac]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cfa31c
push 0
lea eax, [esp + 0x6bc]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cfaad2
jmp 0x11cfa31c
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa2e7
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x3532
push str._CSafeDoc::OnMoveFileW__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push esi
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
je 0x11cfa9f8
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa31c
push esi
push 0x3537
push str._CSafeDoc::OnMoveFileW__Line:_d_Dst__s__exist.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
cmp ebx, 0xffffffff
je 0x11cfa515
test bl, 0x10
je 0x11cfa515
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cfa515
lea edx, [esp + 0x2a8]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
jne 0x11cfa37e
lea eax, [esp + 0x6b8]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7bec0
test eax, eax
je 0x11cfa515
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa3b0
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x3574
push str._CSafeDoc::OnMoveFileW__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push esi
lea ecx, [esp + 0x18]
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x18]
mov byte [esp + 0xa4c], 5
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cfa405
inc eax
lea ecx, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.11e819c0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xa4c], 6
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
push edi
lea ecx, [esp + 0x28]
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x28]
mov byte [esp + 0xa4c], 7
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cfa463
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x18]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x2c]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xa4c], 8
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa49f
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x6bc]
push ecx
lea eax, [esp + 0x2b0]
push edx
push eax
push 0x3582
push str._CSafeDoc::OnMoveFileW__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x14]
push 1
lea edx, [esp + 0x2ac]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11cfa613
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa4f3
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x3587
push str._CSafeDoc::OnMoveFileW__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cfc411
mov ecx, 0x1212b5c0
call fcn.11d713d0
test eax, eax
je 0x11cfc411
mov ecx, 0x1212b5c0
call fcn.11d915c0
test eax, eax
je 0x11cfabf3
mov ecx, dword [esp + 0xa54]
push ecx
call fcn.11e67d05
add esp, 4
mov ecx, 0x1212b5c0
mov edi, eax
call fcn.11d916d0
cmp edi, eax
jae 0x11cfa588
push esi
call fcn.11e67d05
add esp, 4
mov ecx, 0x1212b5c0
mov edi, eax
call fcn.11d916d0
cmp edi, eax
jb 0x11cfabf3
lea ecx, [esp + 0x40]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x20]
push eax
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x20]
push ecx
xor ebx, ebx
push edx
push edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
cmp eax, ebx
je 0x11cfabc9
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0xa58]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0xa54]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x4c]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
jmp 0x11cfc60a
push 0x5c
lea ecx, [esp + 0x18]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x18]
call fcn.11e7fed0
lea eax, [esp + 0x24]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
push esi
push eax
mov byte [esp + 0xa50], 9
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 7
sete bl
call fcn.11e7f280
mov eax, dword [0x12133f80]
test bl, bl
je 0x11cfab5f
test eax, eax
je 0x11cfa6c3
lea eax, [esp + 0x24]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
push esi
push eax
push 0x3593
push str._CSafeDoc::OnMoveFileW__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0xa60], 0xa
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
lea ecx, [esp + 0x24]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0xa48], 0xb
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
jmp 0x11cfa4f3
mov ecx, dword [esp + 0xa58]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7eae0
mov esi, eax
mov edx, dword [esp + 0xa54]
lea ecx, [esp + 0x4c]
push edx
mov byte [esp + 0xa4c], 3
call fcn.11e7eae0
push esi
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0xa54], 4
call fcn.11df73b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xa48], 3
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa9c4
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
push 0x34a2
push str._CSafeDoc::OnMoveFileW__Line:_d__MoveFileW__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
jmp 0x11cfa9c4
xor esi, esi
test al, 0x10
mov eax, dword [esp + 0x10]
je 0x11cfa850
cmp eax, 1
jne 0x11cfa7fb
push eax
push eax
lea edx, [esp + 0x6c0]
push esi
lea eax, [esp + 0x2b4]
push edx
push eax
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa8f0
lea ecx, [esp + 0x6b8]
push esi
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x34cd
push str._CSafeDoc::OnMoveFileW__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cfa8e1
cmp eax, 2
jne 0x11cfa8f8
push 1
push 0
lea eax, [esp + 0x6c0]
push 0
lea ecx, [esp + 0x2b4]
push eax
push ecx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa8f0
lea edx, [esp + 0x6b8]
push esi
lea eax, [esp + 0x2ac]
push edx
push eax
push 0x34d4
push str._CSafeDoc::OnMoveFileW__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cfa8e1
cmp eax, 1
jne 0x11cfa899
push 0
push eax
lea ecx, [esp + 0x6c0]
push 0
lea edx, [esp + 0x2b4]
push ecx
push edx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa8f0
lea eax, [esp + 0x6b8]
push esi
lea ecx, [esp + 0x2ac]
push eax
push ecx
push 0x34df
push str._CSafeDoc::OnMoveFileW__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11cfa8e1
cmp eax, 2
jne 0x11cfa8f8
push 0
push 1
lea edx, [esp + 0x6c0]
push 1
lea eax, [esp + 0x2b4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa8f0
lea ecx, [esp + 0x6b8]
push esi
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x34e6
push str._CSafeDoc::OnMoveFileW__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test esi, esi
jne 0x11cfc60d
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cfc60d
cmp dword [0x12133f80], ebx
je 0x11cfa9c4
push esi
push edi
push 0x34f6
push str._CSafeDoc::OnMoveFileW__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
jmp 0x11cfa9c4
mov edi, dword [esp + 0xa58]
mov ebx, dword [esp + 0xa54]
push 1
push 1
push 0
push edi
push ebx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa975
push esi
push edi
push ebx
push 0x3506
push str._CSafeDoc::OnMoveFileW__Line:_d__EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test esi, esi
je 0x11cfa9c4
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], 0xffffffff
jmp 0x11cfb7b9
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfa9c4
lea eax, [esp + 0x2a8]
push eax
push 0x351b
push str._CSafeDoc::OnMoveFileW__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cfc634
mov edi, dword [esp + 0xa58]
mov ebx, dword [esp + 0xa54]
push 1
push 0
push 0
push edi
push ebx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfc60d
push esi
push edi
push ebx
push 0x353f
push str._CSafeDoc::OnMoveFileW__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11cfc60d
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfaa77
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x354c
push str._CSafeDoc::OnMoveFileW__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea eax, [esp + 0x6c0]
push 1
lea ecx, [esp + 0x2b4]
push eax
push ecx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfc60d
lea edx, [esp + 0x6b8]
push esi
lea eax, [esp + 0x2ac]
push edx
push eax
push 0x3551
push str._CSafeDoc::OnMoveFileW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11cfc60d
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfab04
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x355b
push str._CSafeDoc::OnMoveFileW__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea eax, [esp + 0x6c0]
push 0
lea ecx, [esp + 0x2b4]
push eax
push ecx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfc60d
lea edx, [esp + 0x6b8]
push esi
lea eax, [esp + 0x2ac]
push edx
push eax
push 0x3560
push str._CSafeDoc::OnMoveFileW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11cfc60d
test eax, eax
je 0x11cfab7d
push edi
push 0x359a
push str._CSafeDoc::OnMoveFileW__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push edi
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], 0xffffffff
jmp 0x11cfb7b9
mov edi, dword [esi + 0x18]
cmp edi, ebx
je 0x11cfc60a
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0xa58]
mov edx, dword [esp + 0xa54]
push ecx
push edx
jmp 0x11cfc4bd
xor ebx, ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa2]
mov word [esp + 0xa0], bx
mov word [esp + 0x4b0], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x4b2]
mov dword [esp + 0x68], ebx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x54], ebx
stosw word es:[edi], ax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x88], ebx
call fcn.11e923e0
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e923e0
push 0xffffffffffffffdd
lea ecx, [esp + 0x7c]
mov byte [esp + 0xa4c], 0xd
mov dword [esp + 0x24], ebx
call fcn.11e15fa0
mov ecx, 0x1212b5c0
mov byte [esp + 0xa48], 0xe
call fcn.11d811f0
test eax, eax
je 0x11cfacb9
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfacb9
mov eax, dword [0x12126854]
push eax
push str.__s__CSafeDoc::OnMoveFileW___n
push str.OutlineProtect
push 4
call fcn.11ca5810
add esp, 0x10
mov edi, dword [esp + 0xa54]
push 0
push esi
push edi
mov ecx, ebp
call fcn.11d0f0d0
lea eax, [esp + 0xa0]
push 0x104
push eax
push esi
call fcn.11dbcbf0
add esp, 0xc
xor esi, esi
mov ecx, 0x1212b5c0
push esi
push esi
push esi
push esi
push esi
call fcn.11d68760
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, ebp
call fcn.11ce4490
lea edx, [esp + 0x4b0]
push 0x104
push edx
push edi
call fcn.11dbcbf0
add esp, 0xc
lea eax, [esp + 0x88]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x30]
push esi
push eax
push esi
push ecx
push edx
mov ecx, 0x1212b5c0
mov dword [esp + 0x44], esi
mov dword [esp + 0x2c], esi
call fcn.11d68760
push eax
lea eax, [esp + 0x4c8]
push eax
mov ecx, ebp
call fcn.11ce4490
lea ecx, [esp + 0x8c]
lea edx, [esp + 0x4b0]
push ecx
push edx
mov ecx, ebp
call fcn.11d0ec10
mov esi, eax
or edi, 0xffffffff
lea eax, [esp + 0xa0]
push edi
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x1c], esi
call fcn.11d6a6d0
test eax, eax
jne 0x11cfb602
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cfae04
test esi, esi
jne 0x11cfae04
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cfb0ab
push esi
push esi
lea ecx, [esp + 0x4b8]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cfb0ab
lea edx, [esp + 0x4b0]
push esi
push edx
mov ecx, ebp
mov dword [esp + 0x24], 1
call fcn.11d0c690
test eax, eax
je 0x11cfae04
lea eax, [esp + 0x4b0]
mov esi, 1
push 0x104
push eax
mov dword [esp + 0x1c], esi
call fcn.11d70c00
add esp, 8
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
jne 0x11cfb0df
mov ecx, 0x1212b458
call fcn.11df4300
test eax, eax
je 0x11cfae92
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfae41
push str.CSafeDoc::OnMoveFileW._It_is_CAD__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
call fcn.11def670
add esp, 8
test eax, eax
je 0x11cfae92
lea eax, [esp + 0xa0]
push 0x12052ea0
push eax
call fcn.11def6e0
add esp, 8
test eax, eax
jne 0x11cfb66e
lea ecx, [esp + 0xa0]
push ecx
call fcn.11def720
add esp, 4
test eax, eax
jne 0x11cfb66e
mov ecx, 0x1212b458
call fcn.11df4380
test eax, eax
je 0x11cfaf68
push 0x12119948
lea ecx, [esp + 0x2c]
call fcn.11e7eae0
mov bl, 0xf
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84ba0
lea edx, [esp + 0x90]
mov byte [esp + 0xa48], 0x10
push edx
push str._UserAppData_Excel11.xlb
call fcn.11d6d940
mov eax, dword [esp + 0x9c]
add esp, 8
test eax, eax
jle 0x11cfaf00
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x28]
push eax
call fcn.11e7f410
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7e880
mov edx, dword [esp + 0x10]
lea eax, [esp + 0xa0]
push edx
push eax
mov byte [esp + 0xa50], 0x11
call fcn.11e9bad0
add esp, 8
test eax, eax
jne 0x11cfb70a
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x10
call fcn.11e7f280
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84bb0
lea ecx, [esp + 0x28]
mov byte [esp + 0xa48], 0xe
call fcn.11e7f280
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
call fcn.11cf9840
add esp, 8
test eax, eax
jne 0x11cfb7cc
mov eax, dword [esp + 0x30]
test eax, eax
je 0x11cfb0c0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x11cfb0c0
lea eax, [esp + 0xa0]
mov ecx, ebp
push eax
call fcn.11d0f080
test eax, eax
je 0x11cfafcd
lea ecx, [esp + 0xa0]
push 0
push ecx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cfb0c0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb000
mov eax, dword [0x12126854]
lea edx, [esp + 0xa0]
lea ecx, [esp + 0x4b0]
push edx
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_____s__is_forbidden__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
xor esi, esi
call fcn.11df4380
test eax, eax
je 0x11cfb058
lea edx, [esp + 0xa0]
push str.vb.tmp
push edx
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cfb058
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb053
lea eax, [esp + 0xa0]
push eax
push 0x3664
push str.OnMoveFileW_Excel_vb_temp_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov esi, 1
mov ecx, 0x1212b458
call fcn.11df4470
test eax, eax
je 0x11cfb0b8
lea ecx, [esp + 0xa0]
push str._normal.dotm
push ecx
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cfb0b8
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb0c0
lea edx, [esp + 0xa0]
push edx
push 0x3672
push str.OnMoveFileW_Winword_normal.dotm_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
jmp 0x11cfb0c0
mov dword [esp + 0x1c], 0
jmp 0x11cfae04
test esi, esi
je 0x11cfb877
push 0
push 0
push 0
push 0
push 0
lea eax, [esp + 0x4c4]
push 1
push eax
mov ecx, ebp
call fcn.11ce4490
mov esi, dword [esp + 0x14]
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb109
lea ecx, [esp + 0x4b0]
push ecx
push 0x3684
push str.CSafeDoc::OnMoveFileW_Line:_d_File:_s_AddPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x2c]
call fcn.11e923e0
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 0x12
call fcn.11e923e0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x24]
lea eax, [esp + 0x2c]
push edx
push eax
lea edi, [ebp + 0x8c]
push ecx
lea edx, [esp + 0x4bc]
push esi
push edx
mov ecx, edi
mov byte [esp + 0xa5c], 0x13
call fcn.11cab790
test eax, eax
je 0x11cfb16d
lea eax, [esp + 0x24]
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x4b4]
push ecx
push edx
mov ecx, edi
call fcn.11caa980
lea eax, [esp + 0xa0]
push 0
push eax
mov ecx, ebp
call fcn.11d0ec10
push 0
push 0
push 3
push 0
push 7
lea ecx, [esp + 0x4c4]
mov edi, eax
push bind
push ecx
mov dword [esp + 0x84], edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
push 0
cmp esi, 0xffffffff
push edi
je 0x11cfb1f2
lea edx, [esp + 0x5c]
lea eax, [esp + 0xa8]
push edx
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x34], ebx
jne 0x11cfb1e9
push esi
mov ecx, 0x1212b5c0
call fcn.11d72070
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x34], ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x11cfb216
lea ecx, [esp + 0x5c]
lea edx, [esp + 0xa8]
push ecx
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x54]
test eax, eax
je 0x11cfb32f
xor ebx, ebx
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 0x12
call fcn.11e92540
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa48], 0xe
call fcn.11e92540
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x6c]
call fcn.11e923e0
lea ecx, [esp + 0x74]
mov byte [esp + 0xa48], 0x17
call fcn.11e923e0
xor edi, edi
xor esi, esi
mov byte [esp + 0xa48], 0x18
push 0xffffffffffffffdd
lea ecx, [esp + 0x7c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x88], esi
call fcn.11e15fa0
lea ecx, [esp + 0x4b0]
mov byte [esp + 0xa48], 0x19
push ecx
call fcn.11dbb4d0
add esp, 4
test al, 0x10
jne 0x11cfb98c
lea edx, [esp + 0xa0]
push esi
push edx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cfb98c
mov eax, dword [esp + 0x68]
test eax, eax
jne 0x11cfb2e4
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfb98c
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x4b0]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cfb98c
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfb8f3
lea edx, [esp + 0x4b0]
push 0
push edx
call fcn.11ee5500
add esp, 8
test eax, eax
je 0x11cfbaa4
jmp 0x11cfb92b
test ebx, ebx
je 0x11cfb375
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfb228
push 0
push eax
push 0
lea eax, [esp + 0x4bc]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
test eax, eax
je 0x11cfb228
lea ecx, [esp + 0xa0]
push ecx
call fcn.11dd8200
add esp, 4
jmp 0x11cfb228
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cfb3df
test edi, edi
jne 0x11cfb462
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cfb5f5
push edi
push edi
lea edx, [esp + 0xa8]
push edi
push edx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cfb5f5
mov eax, dword [esp + 0x14]
mov dword [esp + 0x58], 1
test eax, eax
je 0x11cfb3df
lea eax, [esp + 0xa0]
push 0x104
push eax
call fcn.11d70c00
add esp, 8
test edi, edi
jne 0x11cfb45a
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfb45a
call fcn.11dd8bc0
test eax, eax
je 0x11cfb45a
lea ecx, [esp + 0xa0]
push ecx
mov ecx, 0x1212ae60
call fcn.11d598c0
test eax, eax
je 0x11cfb45a
push edi
lea edx, [esp + 0xa4]
push 3
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebp
call fcn.11d0f1e0
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xa48], 0x14
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11cfb449
push 1
lea ecx, [esp + 0xa4]
push eax
push ecx
mov ecx, 0x1212ae60
call fcn.11d592e0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa48], 0x13
call fcn.11e7f280
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x11cfb483
mov eax, dword [esp + 0x14]
lea edx, [esp + 0xa0]
push edi
push edx
lea ecx, [esp + 0x4b8]
push eax
push ecx
mov ecx, ebp
call fcn.11d0c300
mov dword [esp + 0x70], eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb4ad
lea edx, [esp + 0xa0]
push edx
push 0x36d5
push str.CSafeDoc::OnMoveFileW_Line:_d_File:_s_AddPolicy2_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x3c]
push eax
push ecx
push edx
lea eax, [esp + 0xac]
push edi
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab790
test edi, edi
jne 0x11cfb228
lea ecx, [esp + 0x2c]
call fcn.11e925e0
test eax, eax
ja 0x11cfb4f6
lea ecx, [esp + 0x24]
call fcn.11e925e0
test eax, eax
jbe 0x11cfb228
lea ecx, [esp + 0x10]
call fcn.11e923e0
lea ecx, [esp + 0x28]
mov byte [esp + 0xa48], 0x15
call fcn.11e923e0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x4b4]
push edx
push eax
mov ecx, 0x1212b5c0
mov byte [esp + 0xa54], 0x16
call fcn.11d70140
test eax, eax
je 0x11cfb5ce
lea ecx, [esp + 0x10]
call fcn.11e925e0
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cfb5c6
lea ecx, [esp + 0x2c]
call fcn.11e925e0
lea ecx, [esp + 0x10]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.11e92ce0
mov ecx, esi
mov esi, eax
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x11cfb5c6
lea ecx, [esp + 0x28]
call fcn.11e925e0
lea ecx, [esp + 0x24]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cfb5c6
lea ecx, [esp + 0x24]
call fcn.11e925e0
lea ecx, [esp + 0x28]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x24]
mov edi, eax
call fcn.11e92ce0
mov dword [esp + 0x1c], esi
mov esi, eax
mov eax, dword [esp + 0x1c]
xor edx, edx
mov ecx, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x11cfb5ce
mov dword [esp + 0x20], 1
lea ecx, [esp + 0x28]
mov byte [esp + 0xa48], 0x15
call fcn.11e92540
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x13
call fcn.11e92540
jmp 0x11cfb228
mov dword [esp + 0x58], 0
jmp 0x11cfb3df
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb627
lea eax, [esp + 0xa0]
push eax
push str.CSafeDoc::OnMoveFileW___IsMatchRealFilterFileExceptSaveAs_szNewLongFileName__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x10
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
jne 0x11cfb661
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb653
push str.OnMoveFileW___Not_HandleDoc__
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
mov ebx, 1
mov dword [esp + 0x34], ebx
jmp 0x11cfb24a
mov dword [esp + 0x54], 1
jmp 0x11cfb24a
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb6a1
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_____s__is_forbidden_1__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0xa50]
lea ecx, [esp + 0x78]
mov dword [eax + 0x10], 5
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], edi
call fcn.11e15fd0
xor eax, eax
jmp 0x11cfc634
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb739
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xa0]
push ecx
push edx
push 0x3641
push str._CSafeDoc::OnMoveFileW__Line:_d__Filter_File__s__Patern__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x10
call fcn.11e7f280
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84bb0
lea ecx, [esp + 0x28]
mov byte [esp + 0xa48], 0xe
call fcn.11e7f280
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], edi
lea ecx, [esp + 0x40]
call fcn.11e15fd0
mov eax, 1
jmp 0x11cfc634
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb7ff
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_____s__is_forbidden_MSOfficeModify__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0xa50]
lea ecx, [esp + 0x4b0]
push ecx
mov ecx, ebp
mov dword [eax + 0x10], 5
call fcn.11d18ce0
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], edi
call fcn.11e15fd0
xor eax, eax
jmp 0x11cfc634
mov edx, dword [esp + 0xa50]
mov eax, dword [esp + 0xa54]
push eax
mov ecx, ebp
mov dword [edx + 0x10], 5
call fcn.11d18ce0
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cfc634
mov eax, dword [esp + 0x68]
test eax, eax
je 0x11cfb92b
mov ecx, dword [esp + 0x58]
test ecx, ecx
jne 0x11cfb92b
mov ecx, dword [esp + 0x54]
test ecx, ecx
jne 0x11cfb92b
lea ecx, [esp + 0x74]
lea edx, [esp + 0x6c]
push ecx
push edx
push 0
push eax
lea eax, [esp + 0xb0]
lea ecx, [ebp + 0x8c]
push eax
call fcn.11cab790
mov esi, 1
lea ecx, [esp + 0x84]
push esi
lea edx, [esp + 0xa4]
push ecx
lea eax, [esp + 0x4b8]
push edx
push eax
mov ecx, ebp
call fcn.11d11890
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
mov dword [esp + 0x28], edi
je 0x11cfb98c
mov ecx, dword [esp + 0x84]
lea edx, [esp + 0xa0]
push ecx
push edi
lea eax, [esp + 0x4b8]
push edx
push eax
push str._CSafeDoc::OnMoveFileW__src:__s__dst:__s__bRet__d__bMoveFail__d_
push str.SafeDoc3
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
mov ecx, dword [esp + 0xa54]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov edx, dword [esp + 0x10]
mov byte [esp + 0xa48], 0x1a
push edx
call fcn.11dbbe80
add esp, 4
test al, 0x10
je 0x11cfb9f5
mov eax, dword [esp + 0x10]
mov ecx, ebp
push eax
call fcn.11d1feb0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfb9f5
mov ecx, dword [esp + 0x10]
push ecx
push str._CSafeDoc::MoveFileW__1001___s_
push str.IPG_5008
push 4
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x18
call fcn.11e7f280
test esi, esi
je 0x11cfba19
mov eax, dword [esp + 0x84]
test eax, eax
je 0x11cfbbc4
lea ecx, [esp + 0x40]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x34]
push ecx
xor ebx, ebx
push edx
push edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp eax, ebx
je 0x11cfbb66
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x24], edx
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
jmp 0x11cfbba8
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfbad7
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_____s__is_forbidden__SrcFile_Is_Broken__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0xa50]
lea ecx, [esp + 0x78]
mov dword [eax + 0x10], 5
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
lea ecx, [esp + 0x74]
mov byte [esp + 0xa48], 0x17
call fcn.11e92540
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa48], 0xd
call fcn.11e92540
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cfc634
mov edi, dword [esi + 0x18]
cmp edi, ebx
je 0x11cfbba8
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfbba8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x14]
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], eax
call fcn.11e16040
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x4c]
mov edi, dword [esp + 0x28]
mov ecx, 0x1212b5c0
call fcn.11d92e10
test eax, eax
je 0x11cfbbe0
test ebx, ebx
je 0x11cfbbe0
xor ebx, ebx
mov dword [esp + 0x54], 1
test edi, edi
je 0x11cfc390
mov ecx, 0x1212b5c0
call fcn.11d811f0
test eax, eax
je 0x11cfbc1a
lea ecx, [esp + 0x4b0]
push ecx
call fcn.11df0b60
add esp, 4
test eax, eax
je 0x11cfbc1a
lea edx, [esp + 0xa0]
push edx
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x88]
test eax, eax
je 0x11cfbc9e
lea eax, [ebp + 4]
push 1
push eax
lea ecx, [esp + 0x80]
call fcn.11e8c590
mov eax, dword [ebp + 0x18]
xor edi, edi
test eax, eax
mov byte [esp + 0xa48], 0x1b
jle 0x11cfbc8d
xor esi, esi
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x4b0]
push edx
mov eax, dword [ecx + esi + 0x40]
push eax
call fcn.11e67d22
add esp, 8
test eax, eax
je 0x11cfbc73
mov eax, dword [ebp + 0x18]
inc edi
add esi, 0x6c
cmp edi, eax
jl 0x11cfbc4a
jmp 0x11cfbc8d
mov edx, dword [ebp + 0x14]
lea edi, [edi + edi*2]
lea eax, [esp + 0xa0]
lea ecx, [edi + edi*8]
push eax
lea ecx, [edx + ecx*4 + 0x40]
call fcn.11e7f500
lea ecx, [esp + 0x78]
mov byte [esp + 0xa48], 0x18
call fcn.11e8c5f0
push 0xffffffffffffffdd
lea ecx, [esp + 0x94]
call fcn.11e15fa0
mov eax, dword [esp + 0x54]
mov byte [esp + 0xa48], 0x1c
test eax, eax
mov eax, dword [esp + 0x14]
je 0x11cfbe5b
test eax, eax
je 0x11cfc378
push 1
push 0
push 0
push 0
lea eax, [esp + 0x20]
push 0
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x2c], 0
call fcn.11d0a950
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x11cfbdaf
test ecx, ecx
jne 0x11cfbdaf
mov edi, dword [esp + 0xa58]
xor esi, esi
push edi
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cfbd32
test al, 1
je 0x11cfbd32
mov esi, 1
push esi
push 0
push edi
call fcn.11dbb440
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfbd56
mov eax, dword [0x12126854]
push edi
push eax
push str.__s__OnMoveFileW__s__DecryptFileEx
push str.office
push 1
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
mov word [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0xa58]
push 1
lea edx, [esp + 0x6bc]
push 0xffffffffffffffff
push edx
push eax
call fcn.11ee4b50
add esp, 0x10
test esi, esi
je 0x11cfc378
mov ecx, dword [esp + 0xa58]
push 0
push 1
push ecx
call fcn.11dbb440
add esp, 0xc
jmp 0x11cfc378
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfbdde
mov edx, dword [esp + 0xa58]
mov eax, dword [0x12126854]
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_:_CheckAccessRight_failed__n
push str.SafeDoc
push 8
call fcn.11ca5810
mov ecx, dword [esp + 0x24]
add esp, 0x14
test ecx, ecx
je 0x11cfc378
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfbe12
mov eax, dword [0x12126854]
push ecx
mov ecx, dword [esp + 0xa5c]
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileW__s_:_No_Access_right__Result:_lu_n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
call fcn.11df5090
test eax, eax
jne 0x11cfbe3b
mov edx, dword [esp + 0xa58]
push eax
push edx
mov ecx, 0x1212b5c0
call fcn.11d69000
test eax, eax
jne 0x11cfc378
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xa58]
push 0
push 2
push eax
push ecx
mov ecx, 0x1212b158
call fcn.11dbfe50
jmp 0x11cfc378
test eax, eax
jne 0x11cfbfef
test ebx, ebx
jne 0x11cfc1ea
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11cfc1ea
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x2c]
push edx
call fcn.11e92500
lea eax, [esp + 0x38]
lea ecx, [esp + 0x34]
push eax
mov byte [esp + 0xa4c], 0x1d
call fcn.11e92500
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa48], 0x1e
call fcn.11e925e0
test eax, eax
jne 0x11cfbedd
lea ecx, [esp + 0x34]
call fcn.11e925e0
test eax, eax
jne 0x11cfbedd
lea ecx, [esp + 0x34]
push eax
lea edx, [esp + 0x30]
push ecx
lea eax, [esp + 0xa8]
push edx
push eax
mov ecx, ebp
call fcn.11d18db0
lea ecx, [esp + 0x2c]
xor ebx, ebx
call fcn.11e925e0
test eax, eax
jbe 0x11cfbef7
lea ecx, [esp + 0x2c]
call fcn.11e92ce0
mov ebx, eax
lea ecx, [esp + 0xa0]
xor ebp, ebp
push ecx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cfbf2a
test al, 1
je 0x11cfbf2a
mov ebp, 1
lea edx, [esp + 0xa0]
push ebp
push 0
push edx
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x34]
xor esi, esi
call fcn.11e925e0
test eax, eax
jbe 0x11cfbf44
lea ecx, [esp + 0x34]
call fcn.11e92ce0
mov esi, eax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
mov word [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
push 1
lea eax, [esp + 0x6c0]
push 2
push eax
lea ecx, [esp + 0xb0]
push ebx
push ecx
call fcn.11ee4760
add esp, 0x18
mov ecx, 0x1212b5c0
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x14], eax
call fcn.11d811f0
test eax, eax
je 0x11cfbfa5
lea edx, [esp + 0xa0]
push edx
call fcn.11df0940
add esp, 4
test ebp, ebp
je 0x11cfbfbd
push 0
lea eax, [esp + 0xa4]
push 1
push eax
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x34]
mov byte [esp + 0xa48], 0x1d
call fcn.11e92540
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfc1ea
mov ebp, dword [esp + 0x4c]
call fcn.11dd8bc0
test eax, eax
je 0x11cfc0a0
lea ecx, [esp + 0xa0]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d72380
test eax, eax
jne 0x11cfc04c
lea edx, [esp + 0x4b0]
push 1
lea eax, [esp + 0x20]
push edx
push eax
mov ecx, ebp
call fcn.11ce4d50
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xa48], 0x1f
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x11cfc07a
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa48], 0x1c
call fcn.11e7f280
lea ecx, [esp + 0xa0]
push 0
push ecx
call fcn.11ee3a60
add esp, 8
test eax, eax
je 0x11cfc0a0
push 0
lea edx, [esp + 0xa4]
push 0
push edx
mov ecx, 0x1212ae60
call fcn.11d592e0
jmp 0x11cfc0a0
push 2
push eax
lea eax, [esp + 0xa8]
mov ecx, 0x1212ae60
push eax
call fcn.11d592e0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa48], 0x1c
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfc0ca
lea ecx, [esp + 0xa0]
push ecx
push 0x37dc
push str.CSafeDoc::OnMoveFileW_Line:_d_File:_s_SetPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11cfc0fd
cmp dword [esp + 0x8c], 6
jne 0x11cfc0fd
cmp dword [0x12134db4], 2
jne 0x11cfc0fd
lea edx, [esp + 0xa0]
push edx
call fcn.11ede350
add esp, 4
test eax, eax
jne 0x11cfc1ea
mov eax, dword [esp + 0x68]
mov esi, dword [esp + 0x20]
test eax, eax
jne 0x11cfc12c
mov eax, dword [esp + 0x58]
push esi
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x44]
push ecx
lea eax, [esp + 0xac]
push edx
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab040
lea ecx, [esp + 0x3c]
call fcn.11e925e0
test eax, eax
je 0x11cfc157
push 1
lea ecx, [esp + 0x40]
call fcn.11e92ce0
lea ecx, [esp + 0xa4]
push eax
push ecx
call fcn.11ee2b10
add esp, 0xc
jmp 0x11cfc1a6
test esi, esi
jne 0x11cfc1a6
lea ecx, [esp + 0x20]
call fcn.11e923e0
lea edx, [esp + 0x20]
mov byte [esp + 0xa48], 0x20
push edx
call fcn.11cabda0
add esp, 4
lea ecx, [esp + 0x20]
push 1
call fcn.11e92ce0
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
lea ecx, [esp + 0x38]
call fcn.11e925e0
test eax, eax
je 0x11cfc1c7
lea ecx, [esp + 0x38]
call fcn.11e92ce0
lea ecx, [esp + 0xa0]
push eax
push ecx
jmp 0x11cfc1e2
test esi, esi
jne 0x11cfc1ea
xor eax, eax
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0xa0]
push edx
push eax
call fcn.11ee75f0
add esp, 8
mov eax, dword [esp + 0x58]
xor esi, esi
cmp eax, esi
jne 0x11cfc378
mov eax, dword [esp + 0x14]
cmp eax, esi
mov eax, dword [esp + 0x68]
je 0x11cfc32c
cmp eax, esi
jne 0x11cfc378
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x6b9]
mov byte [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0xa0]
push ecx
push edx
xor ebp, ebp
stosb byte es:[edi], al
call fcn.11ee09b0
add esp, 8
test eax, eax
je 0x11cfc250
lea ebp, [esp + 0x6b8]
mov ebx, dword [esp + 0x70]
cmp ebx, esi
jne 0x11cfc2c4
mov eax, dword [esp + 0xa38]
cmp eax, esi
jbe 0x11cfc2c4
push eax
call fcn.11e679bc
mov ebx, eax
add esp, 4
cmp ebx, esi
mov dword [esp + 0x70], ebx
je 0x11cfc2c4
mov ecx, dword [esp + 0xa38]
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
lea edx, [esp + 0xa0]
and ecx, 3
mov dword [esp + 0x4c], esi
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0xa38]
lea eax, [esp + 0x4c]
push eax
push ecx
push ebx
push edx
call fcn.11ee26e0
add esp, 0x10
test eax, eax
jne 0x11cfc2c4
push ebx
call fcn.11e679b1
add esp, 4
xor ebx, ebx
mov dword [esp + 0x70], ebx
lea ecx, [esp + 0x10]
call fcn.11e923e0
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0xa4]
push eax
push ecx
mov byte [esp + 0xa54], 0x21
call fcn.11ee73d0
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.11e925e0
test eax, eax
jbe 0x11cfc304
lea ecx, [esp + 0x10]
call fcn.11e92ce0
mov esi, eax
push esi
push ebx
lea edx, [esp + 0xa8]
push ebp
push edx
mov ecx, 0x1212b560
call fcn.11dee5b0
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
jmp 0x11cfc378
cmp eax, esi
je 0x11cfc378
lea ecx, [esp + 0x6c]
xor edi, edi
call fcn.11e925e0
test eax, eax
jbe 0x11cfc34a
lea ecx, [esp + 0x6c]
call fcn.11e92ce0
mov edi, eax
lea ecx, [esp + 0x74]
call fcn.11e925e0
test eax, eax
jbe 0x11cfc362
lea ecx, [esp + 0x74]
call fcn.11e92ce0
mov esi, eax
push esi
push edi
lea eax, [esp + 0xa8]
push 0
push eax
mov ecx, 0x1212b560
call fcn.11dee620
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x11cfc3a1
push eax
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x74]
mov byte [esp + 0xa48], 0x17
call fcn.11e92540
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa48], 0xd
call fcn.11e92540
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
mov eax, edi
jmp 0x11cfc634
lea ecx, [esp + 0x40]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x30]
lea eax, [esp + 0x4c]
push edx
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x1c]
push eax
xor ebx, ebx
push ecx
push edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x40], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x5c]
add esp, 0x10
cmp eax, ebx
je 0x11cfc498
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x30]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa58]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa54]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], edx
mov dword [esi + 0xc], ebx
jmp 0x11cfc60a
mov edi, dword [esi + 0x18]
cmp edi, ebx
je 0x11cfc60a
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0xa58]
mov ecx, dword [esp + 0xa54]
push eax
push ecx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfc60a
jmp 0x11cfc601
cmp dword [0x12133f80], ebx
je 0x11cfa9c4
lea edx, [esp + 0x6b8]
lea eax, [esp + 0x2a8]
push edx
push eax
push 0x34b7
push str._CSafeDoc::OnMoveFileW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
push str.NetWorkShareFolder
push 8
call fcn.11ca5810
add esp, 0x18
jmp 0x11cfa9c4
cmp dword [0x12133f80], ebx
je 0x11cfa9c4
push esi
push edi
push 0x34ac
push str._CSafeDoc::OnMoveFileW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
jmp 0x11cfa9c4
lea ecx, [esp + 0x40]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x30]
lea eax, [esp + 0x4c]
push edx
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x1c]
push eax
xor ebx, ebx
push ecx
push edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x40], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x5c]
add esp, 0x10
cmp eax, ebx
je 0x11cfc5c8
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x30]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa58]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa54]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], edx
mov dword [esi + 0xc], ebx
jmp 0x11cfc60a
mov edi, dword [esi + 0x18]
cmp edi, ebx
je 0x11cfc60a
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0xa58]
mov ecx, dword [esp + 0xa54]
push eax
push ecx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfc60a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0xa40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa3c
ret 0xc