Function at 0x11cfc650
Capabilities:
Move file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fa435c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x830
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0xffffffffffffffdd
lea ecx, [esp + 0x58]
call fcn.11e15fa0
mov eax, dword [ebp + 0xb4]
xor ebx, ebx
push ebx
cmp eax, ebx
push ebx
mov dword [esp + 0x850], ebx
push ebx
mov ecx, 0x1212b5c0
je 0x11cfc8d7
call fcn.11d60760
mov edi, dword [esp + 0x858]
test eax, eax
je 0x11cfc7fb
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cfc7fb
push edi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, 0x1212b5c0
push eax
mov byte [esp + 0x84c], 1
call fcn.11d6b710
test eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
sete byte [esp + 0x2b]
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
je 0x11cfc7fb
lea ecx, [esp + 0x30]
call fcn.11e16080
lea ecx, [esp + 0x54]
mov byte [esp + 0x848], 2
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push ebp
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebx
je 0x11cfc79f
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x85c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x854]
push edx
push edi
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
jmp 0x11cfc7e2
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cfc7e2
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x85c]
mov edx, dword [esp + 0x854]
push ecx
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfc7e2
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0
call fcn.11e16090
jmp 0x11cff75c
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push ebp
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebx
je 0x11cfc88c
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x85c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x854]
push edx
push edi
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
mov esi, dword [esi + 0x14]
jmp 0x11cff75c
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cfc8cf
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x85c]
mov edx, dword [esp + 0x854]
push ecx
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfc8cf
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
jmp 0x11cff75c
call fcn.11d60760
test eax, eax
jne 0x11cfc8f2
push ebx
push 0x12118e98
call fcn.11c92320
add esp, 8
test eax, eax
je 0x11cfc900
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cfc936
mov ecx, dword [esp + 0x85c]
mov edx, dword [esp + 0x858]
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x858]
push ecx
mov ecx, dword [esp + 0x858]
push edx
push eax
push ecx
mov ecx, 0x1212ae38
call fcn.11d261e0
mov esi, eax
jmp 0x11cff75c
push 2
lea ecx, [esp + 0x6c]
call fcn.11e15fa0
mov ebx, dword [esp + 0x858]
mov eax, dword [esp + 0x854]
test ebx, ebx
mov byte [esp + 0x848], 3
je 0x11cff678
cmp byte [ebx], 0
je 0x11cff678
test eax, eax
je 0x11cff678
cmp byte [eax], 0
je 0x11cff678
push eax
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x848], 4
push edx
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11cfc9d7
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfc9c4
mov ecx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SafeDoc
push 8
call fcn.11ca5810
add esp, 0x14
mov edx, dword [esp + 0x850]
mov dword [edx + 0x10], 5
jmp 0x11cfe8a5
mov ecx, 0x1212b5c0
call fcn.11d86270
test eax, eax
je 0x11cfd1a4
xor esi, esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1ae]
mov word [esp + 0x1ac], si
mov word [esp + 0x3b4], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [esp + 0x854]
lea ecx, [esp + 0x10]
push edi
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x1ac]
push 0x104
push ecx
push eax
mov byte [esp + 0x854], 5
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x3b4]
push 0x104
push edx
push eax
mov byte [esp + 0x854], 6
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0x1ac]
push eax
push ecx
mov ecx, ebp
call fcn.11d13f30
lea edx, [esp + 0x1ac]
push esi
push edx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11cfcb11
lea eax, [esp + 0x3b4]
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11cfcb11
lea ecx, [esp + 0x3b4]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7e8b0
test eax, eax
jne 0x11cfcb11
lea edx, [esp + 0x3b4]
mov ecx, 0x1212b028
push edx
call fcn.11d139a0
test eax, eax
je 0x11cfd3ee
lea eax, [esp + 0x1ac]
push eax
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cff5fc
lea ecx, [esp + 0x3b4]
push ecx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11cff5fc
lea edx, [esp + 0x1ac]
push edx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cff5cc
lea eax, [esp + 0x3b4]
push eax
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11cff5cc
lea ecx, [esp + 0x30]
lea edx, [esp + 0x3b4]
push ecx
lea eax, [esp + 0x1b0]
push edx
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x3c], esi
call fcn.11d7ae10
test eax, eax
je 0x11cfcbb1
lea ecx, [esp + 0x1ac]
push ecx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
jne 0x11cfd482
lea edx, [esp + 0x2c]
lea eax, [esp + 0x3b4]
push edx
lea ecx, [esp + 0x1b0]
push eax
push ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0x38], esi
call fcn.11d7a880
test eax, eax
je 0x11cfd5f5
mov edi, dword [esp + 0x854]
lea ecx, [esp + 0x10]
push edi
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0xd
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x38], eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0xe
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [esp + 0x85c]
xor edx, edx
cmp esi, 0xffffffff
setne dl
and eax, 1
mov esi, edx
mov dword [esp + 0x20], eax
jne 0x11cfcc63
test esi, esi
jne 0x11cfcc78
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x11cfccc0
test byte [esp + 0x38], 0x10
jne 0x11cfd677
jmp 0x11cfccc0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfccc0
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0xf
push eax
push 0x3903
push str._CSafeDoc::OnMoveFileExA__Line:_d_DstFile__s__exist__not_replace_existing.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11cfccdc
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11cfccf4
lea ecx, [esp + 0x1ac]
push ecx
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11cfd766
push edi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x14
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
push edi
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, ebp
push eax
mov byte [esp + 0x84c], 0x15
call fcn.11d139a0
test eax, eax
jne 0x11cfcd79
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, ebp
push eax
mov byte [esp + 0x84c], 0x16
call fcn.11d139a0
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0x15
call fcn.11e7f280
test esi, esi
je 0x11cfcd8c
mov edx, dword [esp + 0x18]
mov byte [esp + 0x2b], 1
cmp edx, 0xffffffff
setne al
test al, al
jne 0x11cfcd91
mov byte [esp + 0x2b], 0
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
je 0x11cfcfa8
test byte [esp + 0x18], 0x10
je 0x11cfcdf4
push 0
lea edx, [esp + 0x1b0]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfcfa8
push eax
push eax
lea eax, [esp + 0x3bc]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11cfceac
jmp 0x11cfcfa8
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x1d
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
cmp esi, 0xffffffff
je 0x11cfce35
mov eax, dword [esp + 0x20]
test eax, eax
je 0x11cfcf60
push 0
lea ecx, [esp + 0x1b0]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfce6b
push eax
lea edx, [esp + 0x3b8]
push eax
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cfd884
push 0
lea eax, [esp + 0x1b0]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cfcfa8
push 0
lea ecx, [esp + 0x3b8]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cfd91e
jmp 0x11cfcfa8
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfcede
lea edx, [esp + 0x3b4]
lea eax, [esp + 0x1ac]
push edx
push eax
push 0x3933
push str._CSafeDoc::OnMoveFileExA__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x17
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 4
call fcn.11e7f280
cmp esi, 0xffffffff
je 0x11cfd7a1
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfcfa8
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov ecx, dword [eax]
mov byte [esp + 0x848], 0x18
push ecx
push 0x3938
push str._CSafeDoc::OnMoveFileExA__Line:_d_Dst__s__exist.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov byte [esp + 0x848], 4
lea ecx, [esp + 0x10]
jmp 0x11cfcfa3
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfcfa8
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov edx, dword [eax]
mov byte [esp + 0x848], 0x1e
push edx
push 0x394d
push str._CSafeDoc::OnMoveFileExA__Line:_d__Dst_File__s__exist
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov byte [esp + 0x848], 4
lea ecx, [esp + 0x10]
call fcn.11e7f280
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x11cfd1a4
test al, 0x10
je 0x11cfd1a4
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0x1ac]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cfd1a4
lea edx, [esp + 0x1ac]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
jne 0x11cfd00d
lea eax, [esp + 0x3b4]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7bec0
test eax, eax
je 0x11cfd1a4
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd03f
lea ecx, [esp + 0x3b4]
lea edx, [esp + 0x1ac]
push ecx
push edx
push 0x3980
push str._CSafeDoc::OnMoveFileExA__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
lea ecx, [esp + 0x28]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x28]
mov byte [esp + 0x84c], 0x1f
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cfd094
inc eax
lea ecx, [esp + 0x24]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.11e819c0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x84c], 0x20
call fcn.11e7f410
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x1f
call fcn.11e7f280
push edi
lea ecx, [esp + 0x38]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x38]
mov byte [esp + 0x84c], 0x21
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cfd0f2
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x10]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x84c], 0x22
call fcn.11e7f410
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd12e
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
push eax
lea edx, [esp + 0x3b8]
push ecx
lea eax, [esp + 0x1b4]
push edx
push eax
push 0x398e
push str._CSafeDoc::OnMoveFileExA__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x24]
push 1
lea edx, [esp + 0x1b0]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11cfd2af
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd182
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x24]
push eax
lea edx, [esp + 0x1b0]
push ecx
push edx
push 0x3993
push str._CSafeDoc::OnMoveFileExA__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x34]
mov byte [esp + 0x848], 0x1f
call fcn.11e7f280
lea ecx, [esp + 0x24]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cff4e3
mov ecx, 0x1212b5c0
call fcn.11d713d0
test eax, eax
je 0x11cff4e3
mov ecx, 0x1212b5c0
call fcn.11d915c0
test eax, eax
je 0x11cfdae7
mov ecx, 0x1212b5c0
call fcn.11d916d0
mov edi, dword [esp + 0x854]
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, edx
jae 0x11cfd21b
mov ecx, 0x1212b5c0
call fcn.11d916d0
mov edx, eax
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, edx
jb 0x11cfdae7
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x18]
push edx
xor ebp, ebp
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x24]
push eax
push ecx
push edi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x28], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, ebp
je 0x11cfda8b
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x85c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x854]
push edx
push ebx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11cfdace
push 0x5c
lea ecx, [esp + 0x28]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x28]
call fcn.11e7fed0
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov esi, dword [eax]
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov byte [esp + 0x854], 0x23
call fcn.11e7f820
mov eax, dword [eax]
push esi
push eax
mov byte [esp + 0x850], 0x24
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x23
sete byte [esp + 0x2b]
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
mov al, byte [esp + 0x2b]
test al, al
mov eax, dword [0x12133f80]
je 0x11cfd9b8
test eax, eax
je 0x11cfd3b1
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov esi, eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov byte [esp + 0x854], 0x25
call fcn.11e7f820
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push edx
push 0x399f
push str._CSafeDoc::OnMoveFileExA__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0x860], 0x26
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x25
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
lea eax, [esp + 0x34]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0x848], 0x27
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
jmp 0x11cfd182
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ebp, eax
mov bl, 7
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
push ebp
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0x854], 8
call fcn.11df73b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
cmp dword [0x12133f80], esi
je 0x11cfd475
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0x1ac]
push eax
push ecx
push 0x389f
push str._CSafeDoc::OnMoveFileExA__Line:_d__MoveFileExA__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cfe8a5
xor esi, esi
test al, 0x10
mov eax, dword [esp + 0x30]
je 0x11cfd533
cmp eax, 1
jne 0x11cfd4de
push eax
push eax
lea edx, [esp + 0x3bc]
push esi
lea eax, [esp + 0x1b8]
push edx
push eax
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd5d3
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0x1b0]
push ecx
push edx
push 0x38ca
push str._CSafeDoc::OnMoveFileExA__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cfd5c4
cmp eax, 2
jne 0x11cfd5d7
push 1
push 0
lea eax, [esp + 0x3bc]
push 0
lea ecx, [esp + 0x1b8]
push eax
push ecx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd5d3
lea edx, [esp + 0x3b4]
push esi
lea eax, [esp + 0x1b0]
push edx
push eax
push 0x38d1
push str._CSafeDoc::OnMoveFileExA__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11cfd5c4
cmp eax, 1
jne 0x11cfd57c
push 0
push eax
lea ecx, [esp + 0x3bc]
push 0
lea edx, [esp + 0x1b8]
push ecx
push edx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd5d3
lea eax, [esp + 0x3b4]
push esi
lea ecx, [esp + 0x1b0]
push eax
push ecx
push 0x38db
push str._CSafeDoc::OnMoveFileExA__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11cfd5c4
cmp eax, 2
jne 0x11cfd5d7
push 0
push 1
lea edx, [esp + 0x3bc]
push 1
lea eax, [esp + 0x1b8]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd5d3
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0x1b0]
push ecx
push edx
push 0x38e2
push str._CSafeDoc::OnMoveFileExA__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test esi, esi
jne 0x11cfd5df
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
cmp dword [0x12133f80], esi
je 0x11cfd664
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov esi, eax
mov bl, 0xb
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push edx
push 0x38f2
push str._CSafeDoc::OnMoveFileExA__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
mov byte [esp + 0x860], 0xc
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [esp + 0x850]
mov dword [eax + 0x10], 5
jmp 0x11cfe8a5
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ecx, dword [esp + 0x854]
mov edi, dword [eax]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], 0x10
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 1
push esi
push edi
push eax
mov ecx, ebp
mov byte [esp + 0x85c], 0x11
call fcn.11d129d0
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0x10
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd750
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov edi, eax
mov edx, dword [esp + 0x854]
mov bl, 0x12
push edx
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [edi]
mov edx, dword [eax]
push esi
push ecx
push edx
push 0x390d
push str._CSafeDoc::OnMoveFileExA__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x864], 0x13
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd475
lea eax, [esp + 0x1ac]
push eax
push 0x391c
push str._CSafeDoc::OnMoveFileExA__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cfe8a5
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov esi, dword [eax]
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], 0x19
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 0
push 0
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x85c], 0x1a
call fcn.11d129d0
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x848], 0x19
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd86e
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov ebp, eax
mov bl, 0x1b
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [ebp]
mov edx, dword [eax]
push esi
push ecx
push edx
push 0x3940
push str._CSafeDoc::OnMoveFileExA__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x864], 0x1c
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd8b6
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0x1ac]
push eax
push ecx
push 0x3958
push str._CSafeDoc::OnMoveFileExA__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x3bc]
push 1
lea eax, [esp + 0x1b8]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd908
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0x1b0]
push ecx
push edx
push 0x395d
push str._CSafeDoc::OnMoveFileExA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd950
lea eax, [esp + 0x3b4]
lea ecx, [esp + 0x1ac]
push eax
push ecx
push 0x3967
push str._CSafeDoc::OnMoveFileExA__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x3bc]
push 0
lea eax, [esp + 0x1b8]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfd9a2
lea ecx, [esp + 0x3b4]
push esi
lea edx, [esp + 0x1b0]
push ecx
push edx
push 0x396c
push str._CSafeDoc::OnMoveFileExA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
test eax, eax
je 0x11cfd9fb
push edi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x28
push eax
push 0x39a6
push str._CSafeDoc::OnMoveFileExA__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
push edi
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x29
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x21
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov byte [esp + 0x848], 0x1f
call fcn.11e7f280
lea ecx, [esp + 0x24]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11cff772
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cfdace
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x85c]
mov edx, dword [esp + 0x854]
push ecx
push ebx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfdace
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
xor esi, esi
push ebx
lea ecx, [esp + 0x18]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x88], esi
call fcn.11e7e980
mov byte [esp + 0x848], 0x2a
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xa9]
mov byte [esp + 0xa8], 0
mov byte [esp + 0x73c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x73d]
mov dword [esp + 0x64], esi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x50]
mov dword [esp + 0x34], esi
stosb byte es:[edi], al
mov dword [esp + 0x94], esi
mov dword [esp + 0x2c], esi
call fcn.11e923e0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x2b
call fcn.11e923e0
push 0xffffffffffffffdd
lea ecx, [esp + 0x7c]
mov byte [esp + 0x84c], 0x2c
call fcn.11e15fa0
mov ecx, 0x1212b5c0
mov byte [esp + 0x848], 0x2d
call fcn.11d811f0
test eax, eax
je 0x11cfdbc3
cmp dword [0x12133f80], esi
je 0x11cfdbc3
mov eax, dword [0x12126854]
push eax
push str.__s__CSafeDoc::OnMoveFileExA___n
push str.OutlineProtect
push 4
call fcn.11ca5810
add esp, 0x10
push ebx
lea ecx, [esp + 0x34]
call fcn.11e7e980
mov edi, dword [esp + 0x854]
mov esi, dword [eax]
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x84c], 0x2e
call fcn.11e7e980
mov eax, dword [eax]
push 0
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x854], 0x2f
call fcn.11d0f0d0
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2e
call fcn.11e7f280
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
lea eax, [esp + 0xa8]
push 0x104
push eax
push ebx
call fcn.11dbcd00
add esp, 0xc
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x84c], 0x30
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
mov esi, dword [esp + 0x14]
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x1212b5c0
call fcn.11d68760
push eax
push esi
mov ecx, ebp
call fcn.11ce4490
lea edx, [esp + 0x73c]
push 0x104
push edx
push edi
call fcn.11dbcd00
add esp, 0xc
lea eax, [esp + 0x73c]
lea ecx, [esp + 0x18]
push eax
call fcn.11e7e980
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x84c], 0x31
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
mov esi, dword [esp + 0x1c]
xor eax, eax
lea ecx, [esp + 0x94]
push eax
push ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], eax
push eax
lea edx, [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
mov ecx, 0x1212b5c0
call fcn.11d68760
push eax
push esi
mov ecx, ebp
call fcn.11ce4490
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x90]
push ecx
push edx
mov ecx, ebp
call fcn.11d0ec10
mov esi, eax
mov eax, dword [esp + 0x14]
push 0xffffffffffffffff
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x2c], esi
call fcn.11d6a6d0
test eax, eax
jne 0x11cfe679
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cfddb1
test esi, esi
jne 0x11cfddb1
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cfdfe5
mov ecx, dword [esp + 0x1c]
push esi
push esi
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cfdfe5
mov edx, dword [esp + 0x1c]
push esi
push edx
mov ecx, ebp
mov dword [esp + 0x28], 1
call fcn.11d0c690
test eax, eax
je 0x11cfddb1
lea eax, [esp + 0x73c]
mov esi, 1
push 0x104
push eax
mov dword [esp + 0x2c], esi
call fcn.11d70c40
add esp, 8
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
jne 0x11cfe012
mov ecx, 0x1212b458
call fcn.11df4380
test eax, eax
je 0x11cfdec0
push 0x12119948
lea ecx, [esp + 0x34]
call fcn.11e7eae0
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x32
call fcn.11e84ba0
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x33
push ecx
push str._UserAppData_Excel11.xlb
call fcn.11d6d940
mov eax, dword [esp + 0xa4]
add esp, 8
test eax, eax
jle 0x11cfde30
mov edx, dword [esp + 0x98]
lea ecx, [esp + 0x30]
push edx
call fcn.11e7f410
lea eax, [esp + 0x30]
lea ecx, [esp + 0x18]
push eax
call fcn.11e7e880
lea ecx, [esp + 0xa8]
mov byte [esp + 0x848], 0x34
push ecx
lea ecx, [esp + 0x4c]
call fcn.11e7e980
mov edx, dword [esp + 0x18]
mov eax, dword [eax]
push edx
push eax
mov byte [esp + 0x850], 0x35
call fcn.11e9bad0
add esp, 8
lea ecx, [esp + 0x48]
mov edi, eax
mov byte [esp + 0x848], 0x34
call fcn.11e7f280
test edi, edi
jne 0x11cfe6f7
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x33
call fcn.11e7f280
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x32
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.11cf9840
add esp, 8
test eax, eax
jne 0x11cfe805
mov eax, dword [esp + 0x38]
test eax, eax
je 0x11cfdffa
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11cfdffa
mov edx, dword [esp + 0x14]
mov ecx, ebp
push edx
call fcn.11d0f080
test eax, eax
je 0x11cfdf19
mov eax, dword [esp + 0x14]
push 0
push eax
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cfdffa
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfdf46
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_____s__is_forbidden__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
xor edi, edi
call fcn.11df4380
test eax, eax
je 0x11cfdf98
mov eax, dword [esp + 0x14]
push str.vb.tmp
push eax
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cfdf98
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfdf93
mov ecx, dword [esp + 0x14]
push ecx
push 0x3a59
push str.OnMoveFileExA_Excel_vb_temp_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov edi, 1
mov ecx, 0x1212b458
call fcn.11df4470
test eax, eax
je 0x11cfdff2
mov edx, dword [esp + 0x14]
push str._normal.dotm
push edx
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11cfdff2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfdffa
mov eax, dword [esp + 0x14]
push eax
push 0x3a67
push str.OnMoveFileExA_Winword_normal.dotm_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
jmp 0x11cfdffa
mov dword [esp + 0x20], 0
jmp 0x11cfddb1
test edi, edi
je 0x11cfe847
mov ecx, dword [esp + 0x1c]
push 0
push 0
push 0
push 0
push 0
push 1
push ecx
mov ecx, ebp
call fcn.11ce4490
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe061
lea edx, [esp + 0x73c]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x37
push eax
push 0x3a7b
push str.CSafeDoc::OnMoveFileExA_Line:_d_File:_s_AddPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
lea ecx, [esp + 0x44]
call fcn.11e923e0
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x38
call fcn.11e923e0
lea ecx, [esp + 0x73c]
mov byte [esp + 0x848], 0x39
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x48]
lea edi, [ebp + 0x8c]
push ecx
push edx
push esi
push eax
mov ecx, edi
mov byte [esp + 0x85c], 0x3a
call fcn.11cab790
lea ecx, [esp + 0x18]
mov esi, eax
mov byte [esp + 0x848], 0x39
call fcn.11e7f280
test esi, esi
je 0x11cfe111
lea eax, [esp + 0x73c]
lea ecx, [esp + 0x20]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x40]
lea edx, [esp + 0x44]
push ecx
push edx
push eax
mov ecx, edi
mov byte [esp + 0x854], 0x3b
call fcn.11caa980
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x39
call fcn.11e7f280
mov eax, dword [esp + 0x14]
push 0
push eax
mov ecx, ebp
call fcn.11d0ec10
mov ecx, dword [esp + 0x1c]
push 0
push 0
push 3
push 0
push 7
push bind
push ecx
mov dword [esp + 0x64], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edx, dword [esp + 0x48]
mov esi, eax
push 0
lea eax, [esp + 0x68]
cmp esi, 0xffffffff
push edx
push eax
je 0x11cfe18c
mov ecx, dword [esp + 0x20]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
jne 0x11cfe183
push esi
mov ecx, 0x1212b5c0
call fcn.11d72070
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x11cfe1a8
mov ecx, dword [esp + 0x20]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x64]
mov esi, dword [esp + 0x48]
test eax, eax
je 0x11cfe370
xor edi, edi
mov dword [esp + 0x34], edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x38
call fcn.11e92540
lea ecx, [esp + 0x44]
mov byte [esp + 0x848], 0x2d
call fcn.11e92540
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x2c
call fcn.11e15fd0
lea ecx, [esp + 0x74]
call fcn.11e923e0
lea ecx, [esp + 0x88]
mov byte [esp + 0x848], 0x41
call fcn.11e923e0
xor esi, esi
mov byte [esp + 0x848], 0x42
push 0xffffffffffffffdd
lea ecx, [esp + 0x7c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x90], esi
call fcn.11e15fa0
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x848], 0x43
push ecx
call fcn.11dbb4d0
add esp, 4
test al, 0x10
jne 0x11cfe9c3
mov al, byte [esp + 0x85c]
test al, 2
je 0x11cfe9c3
test al, 1
jne 0x11cfe274
mov edx, dword [esp + 0x14]
push esi
push edx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11cfe9c3
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x11cfe288
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cfe9c3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11cfe9c3
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cfe2c1
mov edx, dword [esp + 0x1c]
push 0
push edx
call fcn.11ee5500
add esp, 8
test eax, eax
je 0x11cfe8e2
test byte [esp + 0x85c], 4
jne 0x11cfe9c3
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x11cfe313
mov eax, dword [esp + 0x48]
test eax, eax
je 0x11cfe313
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x11cfe313
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x11cfe313
mov edx, dword [esp + 0x48]
lea eax, [esp + 0x88]
lea ecx, [esp + 0x74]
push eax
mov eax, dword [esp + 0x18]
push ecx
push 0
push edx
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab790
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov esi, 1
lea ecx, [esp + 0x8c]
push esi
push ecx
push edx
push eax
mov ecx, ebp
call fcn.11d11890
mov ecx, dword [0x12133f80]
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x11cfe9c3
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x14]
push ecx
push eax
mov eax, dword [esp + 0x24]
push edx
push eax
push str._CSafeDoc::OnCopyFileExExA__src:__s__dst:__s__bRet__d__bMoveFail__d_
push str.SafeDoc3
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11cfe9c3
test edi, edi
je 0x11cfe3b0
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cfe1be
mov edx, dword [esp + 0x1c]
push 0
push eax
push 0
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
test eax, eax
je 0x11cfe1be
mov eax, dword [esp + 0x14]
push eax
call fcn.11dd8200
add esp, 4
jmp 0x11cfe1be
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cfe417
test esi, esi
jne 0x11cfe491
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cfe641
mov ecx, dword [esp + 0x14]
push esi
push esi
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cfe641
mov eax, dword [esp + 0x24]
mov dword [esp + 0x60], 1
test eax, eax
je 0x11cfe417
lea edx, [esp + 0xa8]
push 0x104
push edx
call fcn.11d70c40
add esp, 8
test esi, esi
jne 0x11cfe489
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cfe489
call fcn.11dd8bc0
test eax, eax
je 0x11cfe489
mov eax, dword [esp + 0x14]
mov ecx, 0x1212ae60
push eax
call fcn.11d598c0
test eax, eax
je 0x11cfe489
mov ecx, dword [esp + 0x14]
push esi
push 3
lea edx, [esp + 0x28]
push ecx
push edx
mov ecx, ebp
call fcn.11d0f1e0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x848], 0x3c
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11cfe478
push 1
push eax
mov eax, dword [esp + 0x1c]
mov ecx, 0x1212ae60
push eax
call fcn.11d592e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x39
call fcn.11e7f280
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x11cfe4af
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
push esi
push ecx
push edx
push eax
mov ecx, ebp
call fcn.11d0c300
mov dword [esp + 0x84], eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe4fe
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x24]
call fcn.11e7e980
mov edx, dword [eax]
mov byte [esp + 0x848], 0x3d
push edx
push 0x3acb
push str.CSafeDoc::OnMoveFileExA_Line:_d_File:_s_AddPolicy2_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x39
call fcn.11e7f280
lea eax, [esp + 0xa8]
lea ecx, [esp + 0x20]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x54]
mov byte [esp + 0x84c], 0x3e
push edx
push ecx
push esi
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab790
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x39
call fcn.11e7f280
test esi, esi
jne 0x11cfe1be
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
ja 0x11cfe56c
lea ecx, [esp + 0x40]
call fcn.11e925e0
test eax, eax
jbe 0x11cfe1be
lea ecx, [esp + 0x18]
call fcn.11e923e0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x3f
call fcn.11e923e0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x30]
lea eax, [esp + 0x18]
push edx
push eax
push ecx
mov ecx, 0x1212b5c0
mov byte [esp + 0x854], 0x40
call fcn.11d70140
test eax, eax
je 0x11cfe652
lea ecx, [esp + 0x18]
call fcn.11e925e0
lea ecx, [esp + 0x44]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cfe637
lea ecx, [esp + 0x44]
call fcn.11e925e0
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x44]
mov edi, eax
call fcn.11e92ce0
mov edx, esi
mov esi, eax
mov ecx, edx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x11cfe633
lea ecx, [esp + 0x30]
call fcn.11e925e0
lea ecx, [esp + 0x40]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11cfe633
lea ecx, [esp + 0x40]
call fcn.11e925e0
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x40]
mov edi, eax
call fcn.11e92ce0
mov ecx, esi
mov esi, eax
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x11cfe64e
mov edi, dword [esp + 0x34]
mov dword [esp + 0x2c], 1
jmp 0x11cfe652
mov dword [esp + 0x60], 0
jmp 0x11cfe417
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x3f
call fcn.11e92540
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x39
call fcn.11e92540
jmp 0x11cfe1be
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe69b
mov eax, dword [esp + 0x14]
push eax
push str.CSafeDoc::OnMoveFileExA___IsMatchRealFilterFileExceptSaveAs_wstrNewFileName__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x10
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
jne 0x11cfe6d5
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe6c7
push str.OnMoveFileExA___Not_HandleDoc__
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
mov edi, 1
mov dword [esp + 0x34], edi
jmp 0x11cfe1e0
mov dword [esp + 0x64], 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x2c
call fcn.11e15fd0
mov edi, dword [esp + 0x34]
jmp 0x11cfe1f1
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe74b
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x30]
call fcn.11e7e980
mov edx, dword [esp + 0x18]
mov eax, dword [eax]
push edx
push eax
push 0x3a36
push str._CSafeDoc::OnMoveFileExA__Line:_d__Filter_File__s__Patern__s_
push str.SafeDoc
push 4
mov byte [esp + 0x860], 0x36
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x2c]
mov byte [esp + 0x848], 0x34
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x33
call fcn.11e7f280
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x32
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x848], 0x2d
call fcn.11e7f280
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x2c
call fcn.11e15fd0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x2b
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x2a
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11cff772
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe832
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_____s__is_forbidden_MSOfficeModify__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x850]
mov ecx, dword [esp + 0x1c]
push ecx
mov dword [eax + 0x10], 5
jmp 0x11cfe85a
mov edx, dword [esp + 0x850]
mov eax, dword [esp + 0x1c]
push eax
mov dword [edx + 0x10], 5
mov ecx, ebp
call fcn.11d18ce0
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x2c
call fcn.11e15fd0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x2b
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x2a
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cff772
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfe90f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_____s__is_forbidden__SrcFile_Is_Broken__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x850]
lea ecx, [esp + 0x78]
mov dword [eax + 0x10], 5
mov byte [esp + 0x848], 0x42
call fcn.11e15fd0
lea ecx, [esp + 0x88]
mov byte [esp + 0x848], 0x41
call fcn.11e92540
lea ecx, [esp + 0x74]
mov byte [esp + 0x848], 0x2c
call fcn.11e92540
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x2b
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x2a
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cff772
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x42
call fcn.11e15fd0
mov ecx, dword [esp + 0x854]
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov edx, dword [esp + 0x18]
mov byte [esp + 0x848], 0x44
push edx
call fcn.11dbbe80
add esp, 4
test al, 0x10
je 0x11cfea2c
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
call fcn.11d1feb0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfea2c
mov ecx, dword [esp + 0x18]
push ecx
push str._CSafeDoc::MoveFileExA__1001___s_
push str.IPG_5008
push 4
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x42
call fcn.11e7f280
test esi, esi
je 0x11cfea50
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x11cfeb54
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x30], edx
xor ecx, ecx
lea edx, [esp + 0x20]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], ecx
push edx
lea ecx, [esp + 0x14]
lea edx, [esp + 0x3c]
push ecx
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
test eax, eax
je 0x11cfeaf4
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x85c]
mov dword [esi + 0x24], ecx
push edx
lea ecx, [esp + 0xac]
lea edx, [esp + 0x740]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x40]
mov dword [esi + 0x20], ecx
mov dword [esi + 0x24], edx
mov dword [esi + 0xc], eax
jmp 0x11cfeb44
mov eax, dword [esi + 0x18]
test eax, eax
mov dword [esp + 0x18], eax
je 0x11cfeb44
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x85c]
lea edx, [esp + 0xa8]
push ecx
lea eax, [esp + 0x740]
push edx
push eax
call dword [esp + 0x24]
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cfeb44
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x54]
call fcn.11e16040
mov ecx, 0x1212b5c0
call fcn.11d92e10
test eax, eax
je 0x11cfeb74
test edi, edi
je 0x11cfeb74
xor edi, edi
mov dword [esp + 0x64], 1
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x30]
test eax, eax
je 0x11cff438
mov ecx, 0x1212b5c0
call fcn.11d811f0
test eax, eax
je 0x11cfebac
mov edx, dword [esp + 0x1c]
push edx
call fcn.11df0b60
add esp, 4
test eax, eax
je 0x11cfebac
mov eax, dword [esp + 0x14]
push eax
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x94]
test eax, eax
je 0x11cfec69
lea ecx, [ebp + 4]
push 1
push ecx
lea ecx, [esp + 0x80]
call fcn.11e8c590
mov eax, dword [ebp + 0x18]
xor esi, esi
test eax, eax
mov byte [esp + 0x848], 0x45
jle 0x11cfec58
xor edi, edi
lea edx, [esp + 0x73c]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov ecx, dword [ebp + 0x14]
mov eax, dword [eax]
push eax
mov byte [esp + 0x84c], 0x46
mov ecx, dword [edi + ecx + 0x40]
push ecx
call fcn.11e67d22
add esp, 8
lea ecx, [esp + 0x10]
test eax, eax
sete bl
mov byte [esp + 0x848], 0x45
call fcn.11e7f280
test bl, bl
jne 0x11cfec33
mov eax, dword [ebp + 0x18]
inc esi
add edi, 0x6c
cmp esi, eax
jl 0x11cfebe0
jmp 0x11cfec4d
mov ecx, dword [ebp + 0x14]
lea eax, [esi + esi*2]
lea edx, [esp + 0xa8]
lea eax, [eax + eax*8]
push edx
lea ecx, [ecx + eax*4 + 0x40]
call fcn.11e7f5e0
mov ebx, dword [esp + 0x858]
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x78]
mov byte [esp + 0x848], 0x42
call fcn.11e8c5f0
push 0xffffffffffffffdd
lea ecx, [esp + 0x9c]
call fcn.11e15fa0
mov eax, dword [esp + 0x64]
mov byte [esp + 0x848], 0x47
test eax, eax
mov eax, dword [esp + 0x24]
je 0x11cfee12
test eax, eax
je 0x11cff424
mov eax, dword [esp + 0x14]
push 1
push 0
push 0
push 0
lea edx, [esp + 0x28]
push 0
push edx
push eax
mov ecx, ebp
mov dword [esp + 0x34], 0
call fcn.11d0a950
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x11cfed72
test ecx, ecx
jne 0x11cfed72
mov ecx, dword [esp + 0x14]
xor ebp, ebp
push ecx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cfecfb
test al, 1
je 0x11cfecfb
mov edx, dword [esp + 0x14]
mov ebp, 1
push ebp
push 0
push edx
call fcn.11dbb440
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfed1f
mov eax, dword [0x12126854]
push ebx
push eax
push str.__s__OnMoveFileExa__s__DecryptFileEx
push str.office
push 1
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
mov word [esp + 0x3b4], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
push 1
stosw word es:[edi], ax
lea eax, [esp + 0x3b8]
push 0xffffffffffffffff
push eax
push ecx
call fcn.11ee4b50
add esp, 0x10
test ebp, ebp
je 0x11cff424
mov edx, dword [esp + 0x14]
push 0
push 1
push edx
call fcn.11dbb440
add esp, 0xc
jmp 0x11cff424
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfed9e
mov ecx, dword [esp + 0x14]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_:_CheckAccessRight_failed__n
push str.SafeDoc
push 8
call fcn.11ca5810
mov ecx, dword [esp + 0x2c]
add esp, 0x14
test ecx, ecx
je 0x11cff424
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfedcf
mov edx, dword [esp + 0x14]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExA__s_:_No_Access_right__Result:_lu_n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
call fcn.11df5090
test eax, eax
jne 0x11cfedf5
push eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, 0x1212b5c0
call fcn.11d69000
test eax, eax
jne 0x11cff424
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 2
push ecx
push edx
mov ecx, 0x1212b158
call fcn.11dbfe50
jmp 0x11cff424
test eax, eax
jne 0x11cfef97
test edi, edi
jne 0x11cff291
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11cff291
lea eax, [esp + 0x50]
lea ecx, [esp + 0x40]
push eax
call fcn.11e92500
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x48
push ecx
lea ecx, [esp + 0x48]
call fcn.11e92500
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x49
call fcn.11e925e0
test eax, eax
jne 0x11cfee91
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
jne 0x11cfee91
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x48]
lea eax, [esp + 0x44]
push edx
push eax
push ecx
mov ecx, ebp
call fcn.11d18db0
lea ecx, [esp + 0x40]
xor ebx, ebx
xor esi, esi
call fcn.11e925e0
test eax, eax
jbe 0x11cfeead
lea ecx, [esp + 0x40]
call fcn.11e92ce0
mov esi, eax
mov edx, dword [esp + 0x14]
mov dword [esp + 0x10], ebx
push edx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11cfeedf
test al, 1
je 0x11cfeedf
mov eax, dword [esp + 0x14]
push 1
push ebx
push eax
mov dword [esp + 0x1c], 1
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x44]
call fcn.11e925e0
test eax, eax
jbe 0x11cfeef7
lea ecx, [esp + 0x44]
call fcn.11e92ce0
mov ebx, eax
mov edx, dword [esp + 0x14]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3b6]
mov word [esp + 0x3b4], 0
push ebx
rep stosd dword es:[edi], eax
push 1
lea ecx, [esp + 0x3bc]
push 2
push ecx
push esi
push edx
stosw word es:[edi], ax
call fcn.11ee4760
mov edi, eax
add esp, 0x18
neg edi
sbb edi, edi
mov ecx, 0x1212b5c0
inc edi
mov dword [esp + 0x24], edi
call fcn.11d811f0
test eax, eax
je 0x11cfef54
mov eax, dword [esp + 0x14]
push eax
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11cfef6d
mov ecx, dword [esp + 0x14]
push 0
push 1
push ecx
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x44]
mov byte [esp + 0x848], 0x48
call fcn.11e92540
lea ecx, [esp + 0x40]
mov byte [esp + 0x848], 0x47
call fcn.11e92540
test edi, edi
je 0x11cff291
call fcn.11dd8bc0
test eax, eax
je 0x11cff039
mov edx, dword [esp + 0x14]
mov ecx, 0x1212b5c0
push edx
call fcn.11d72380
test eax, eax
jne 0x11cfefee
mov eax, dword [esp + 0x1c]
push 1
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.11ce4d50
mov eax, dword [esp + 0x20]
mov byte [esp + 0x848], 0x4a
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x11cff016
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.11ee3a60
add esp, 8
test eax, eax
je 0x11cff039
mov eax, dword [esp + 0x14]
push 0
push 0
push eax
mov ecx, 0x1212ae60
call fcn.11d592e0
jmp 0x11cff039
mov ecx, dword [esp + 0x14]
push 2
push eax
push ecx
mov ecx, 0x1212ae60
call fcn.11d592e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cff088
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x4b
push eax
push 0x3bdb
push str.CSafeDoc::OnMoveFileExA_Line:_d_File:_s_SetPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
mov eax, dword [esp + 0x24]
test eax, eax
je 0x11cff0e2
cmp dword [esp + 0x90], 6
jne 0x11cff0e2
cmp dword [0x12134db4], 2
jne 0x11cff0e2
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x848], 0x4c
push eax
call fcn.11ede350
add esp, 4
lea ecx, [esp + 0x10]
mov edi, eax
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
test edi, edi
jne 0x11cff291
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x11cff138
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax]
push esi
push ecx
lea edx, [esp + 0x54]
lea ecx, [esp + 0x58]
push edx
push ecx
push eax
lea ecx, [ebp + 0x8c]
mov byte [esp + 0x85c], 0x4d
call fcn.11cab040
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
jmp 0x11cff13c
mov esi, dword [esp + 0x2c]
lea ecx, [esp + 0x50]
call fcn.11e925e0
test eax, eax
je 0x11cff18c
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov edi, dword [eax]
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x84c], 0x4e
call fcn.11e92ce0
push eax
push edi
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0x47
call fcn.11e7f280
jmp 0x11cff200
test esi, esi
jne 0x11cff200
lea ecx, [esp + 0x2c]
call fcn.11e923e0
lea eax, [esp + 0x2c]
mov bl, 0x4f
push eax
mov byte [esp + 0x84c], bl
call fcn.11cabda0
add esp, 4
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov edi, dword [eax]
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x84c], 0x50
call fcn.11e92ce0
push eax
push edi
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0x848], 0x47
call fcn.11e92540
lea ecx, [esp + 0x4c]
call fcn.11e925e0
test eax, eax
je 0x11cff249
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov edi, dword [eax]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x51
call fcn.11e92ce0
push eax
push edi
call fcn.11ee75f0
add esp, 8
mov byte [esp + 0x848], 0x47
lea ecx, [esp + 0x10]
jmp 0x11cff28c
test esi, esi
jne 0x11cff291
xor eax, eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
lea eax, [esp + 0xa8]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x38]
push ecx
push eax
mov byte [esp + 0x850], 0x52
call fcn.11ee75f0
add esp, 8
mov byte [esp + 0x848], 0x47
lea ecx, [esp + 0x10]
call fcn.11e7f280
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x11cff424
mov eax, dword [esp + 0x24]
test eax, eax
mov eax, dword [esp + 0x48]
je 0x11cff3d3
test eax, eax
jne 0x11cff424
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x3b5]
mov byte [esp + 0x3b4], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x3b4]
push edx
push eax
xor esi, esi
call fcn.11ee09b0
add esp, 8
test eax, eax
je 0x11cff2f2
lea esi, [esp + 0x3b4]
mov ebx, dword [esp + 0x84]
test ebx, ebx
jne 0x11cff370
mov eax, dword [esp + 0x734]
test eax, eax
jbe 0x11cff370
push eax
call fcn.11e679bc
mov ebx, eax
add esp, 4
test ebx, ebx
mov dword [esp + 0x84], ebx
je 0x11cff370
mov ecx, dword [esp + 0x734]
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x10], 0
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x734]
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push ecx
push ebx
push edx
call fcn.11ee26e0
add esp, 0x10
test eax, eax
jne 0x11cff370
push ebx
call fcn.11e679b1
add esp, 4
xor ebx, ebx
mov dword [esp + 0x84], ebx
lea ecx, [esp + 0x18]
xor edi, edi
call fcn.11e923e0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push edi
push eax
push ecx
mov byte [esp + 0x854], 0x53
call fcn.11ee73d0
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.11e925e0
test eax, eax
jbe 0x11cff3ae
lea ecx, [esp + 0x18]
call fcn.11e92ce0
mov edi, eax
mov edx, dword [esp + 0x14]
push edi
push ebx
push esi
push edx
mov ecx, 0x1212b560
call fcn.11dee5b0
lea ecx, [esp + 0x18]
mov byte [esp + 0x848], 0x47
call fcn.11e92540
jmp 0x11cff424
test eax, eax
je 0x11cff424
lea ecx, [esp + 0x74]
xor esi, esi
call fcn.11e925e0
test eax, eax
jbe 0x11cff3f1
lea ecx, [esp + 0x74]
call fcn.11e92ce0
mov esi, eax
lea ecx, [esp + 0x88]
xor edi, edi
call fcn.11e925e0
test eax, eax
jbe 0x11cff411
lea ecx, [esp + 0x88]
call fcn.11e92ce0
mov edi, eax
mov eax, dword [esp + 0x14]
push edi
push esi
push 0
push eax
mov ecx, 0x1212b560
call fcn.11dee620
lea ecx, [esp + 0x98]
mov byte [esp + 0x848], 0x42
call fcn.11e15fd0
mov eax, dword [esp + 0x84]
test eax, eax
je 0x11cff44c
push eax
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x88]
mov byte [esp + 0x848], 0x41
call fcn.11e92540
lea ecx, [esp + 0x74]
mov byte [esp + 0x848], 0x2c
call fcn.11e92540
lea ecx, [esp + 0x4c]
mov byte [esp + 0x848], 0x2b
call fcn.11e92540
lea ecx, [esp + 0x50]
mov byte [esp + 0x848], 0x2a
call fcn.11e92540
lea ecx, [esp + 0x14]
mov byte [esp + 0x848], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, dword [esp + 0x30]
jmp 0x11cff772
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea eax, [esp + 0x2c]
push eax
xor ebp, ebp
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], edx
lea ecx, [esp + 0x14]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x3c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, ebp
je 0x11cff570
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x85c]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0x854]
push ecx
push ebx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], ebp
jmp 0x11cff5b3
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cff5b3
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x85c]
mov eax, dword [esp + 0x854]
push edx
push ebx
push eax
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cff5b3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], 3
call fcn.11e7f280
jmp 0x11cff74b
cmp dword [0x12133f80], esi
je 0x11cfd475
lea ecx, [esp + 0x3b4]
lea edx, [esp + 0x1ac]
push ecx
push edx
push 0x38b4
push str._CSafeDoc::OnMoveFileExA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_ShareFolder.
push str.NetWorkShareFolder
jmp 0x11cfd46b
cmp dword [0x12133f80], esi
je 0x11cff66b
push ebx
lea ecx, [esp + 0x3c]
call fcn.11e7e980
mov esi, eax
mov bl, 9
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x84c], bl
call fcn.11e7e980
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push edx
push 0x38a9
push str._CSafeDoc::OnMoveFileExA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
push str.SafeDisk
push 8
mov byte [esp + 0x860], 0xa
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], bl
call fcn.11e7f280
lea ecx, [esp + 0x38]
mov byte [esp + 0x848], 4
call fcn.11e7f280
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11cfe8a5
lea ecx, [esp + 0x54]
call fcn.11e16060
mov esi, dword [esp + 0x850]
lea edx, [esp + 0x2c]
push edx
xor ebp, ebp
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x3c]
push eax
push ecx
push edi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x3c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, ebp
je 0x11cff705
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x85c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x854]
push edx
push ebx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11cff748
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cff748
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x85c]
mov edx, dword [esp + 0x854]
push ecx
push ebx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cff748
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x68]
mov byte [esp + 0x848], 0
call fcn.11e15fd0
lea ecx, [esp + 0x54]
mov dword [esp + 0x848], 0xffffffff
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0x840]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x83c
ret 0x10