Function at 0x11cf04a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fa361d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xd0]
mov esi, ecx
lea edx, [esp + 0x10]
xor ebx, ebx
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
mov ebp, dword [edi + 0x1c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], ecx
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push ebp
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x2c]
add esp, 0x10
cmp eax, ebx
je 0x11cf054c
mov edx, dword [edi + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x10]
mov dword [edi + 0x1c], ecx
mov ecx, dword [esp + 0xd8]
mov dword [edi + 0x24], edx
mov edx, dword [esp + 0xd4]
push ecx
push edx
push edi
mov dword [edi + 0x20], eax
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [edi + 0x1c], ebp
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [edi + 0xc], edx
jmp 0x11cf058e
mov ebp, dword [edi + 0x18]
cmp ebp, ebx
je 0x11cf058e
mov eax, dword [edi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd4]
push eax
push ecx
call ebp
mov dword [edi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0x10], eax
mov eax, dword [edi + 8]
test eax, 0x800000
je 0x11cf058e
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [edi + 0x28], eax
mov edi, dword [edi + 0x14]
push 0xffffffffffffffdd
lea ecx, [esp + 0xb8]
mov dword [esp + 0xb4], edi
call fcn.11e15fa0
cmp edi, ebx
mov dword [esp + 0xc8], ebx
jne 0x11cf101c
push ebx
push ebx
push ebx
mov ecx, 0x1212b5c0
call fcn.11d60760
test eax, eax
je 0x11cf101c
push 0xffffffffffffffdf
lea ecx, [esp + 0xa8]
call fcn.11e15fa0
mov eax, dword [0x11fd6250]
mov byte [esp + 0xc8], 1
mov dword [esp + 0x78], eax
mov byte [esp + 0xc8], 2
mov dword [esp + 0x7c], eax
mov byte [esp + 0xc8], 3
mov dword [esp + 0x80], eax
mov byte [esp + 0xc8], 4
mov dword [esp + 0x84], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x88], ebx
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 5
call fcn.11d1b630
mov byte [esp + 0xc8], 6
push 0x12119948
lea ecx, [esp + 0x7c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], ebx
call fcn.11e7f500
push 0x12119948
lea ecx, [esp + 0x80]
call fcn.11e7f500
push 0x12119948
lea ecx, [esp + 0x84]
call fcn.11e7f500
lea eax, [esi + 4]
push 1
mov byte [esp + 0xcc], 7
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
call fcn.11e8c590
lea edx, [esp + 0x24]
lea eax, [esp + 0x1c]
push edx
mov edx, dword [esp + 0xd8]
lea ecx, [esp + 0x18]
push eax
push ecx
push edx
mov ecx, esi
mov byte [esp + 0xd8], 8
call fcn.11ce02f0
test eax, eax
je 0x11cf0cc1
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea eax, [eax + eax*8]
mov dword [ecx + eax*4 + 0x10], 1
mov eax, dword [0x12133f80]
cmp eax, ebx
je 0x11cf0756
mov eax, dword [esp + 0x14]
mov ecx, dword [0x12126854]
lea eax, [eax + eax*2]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x14]
lea eax, [eax + edx*4]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x40]
push edx
push eax
push ecx
push str.__s__CSafeDoc::OnNtFlushBuffersFile__s_:_FlushMarkup__lu__n
push str.IPG_6147
push 1
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
call fcn.11df54d0
test eax, eax
jne 0x11cf07a0
mov ecx, 0x1212b458
call fcn.11df4360
test eax, eax
jne 0x11cf07a0
mov ecx, 0x1212b458
call fcn.11df4380
test eax, eax
jne 0x11cf07a0
mov ecx, 0x1212b458
call fcn.11df43c0
test eax, eax
jne 0x11cf07a0
mov ecx, 0x1212b458
call fcn.11df5a90
test eax, eax
je 0x11cf0d1b
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*8]
mov eax, dword [edx + ecx*4 + 0x40]
push eax
call fcn.11e94640
add esp, 4
lea ecx, [esp + 0x10]
push eax
call fcn.11e7eae0
mov ecx, 0x1212b458
mov byte [esp + 0xc8], 0x13
call fcn.11df4380
test eax, eax
je 0x11cf080a
mov eax, dword [esp + 0x10]
push str._.xls
push eax
call fcn.11e89110
add esp, 8
test eax, eax
jne 0x11cf080a
mov ecx, dword [esp + 0x10]
push str._.xlsx
push ecx
call fcn.11e89110
add esp, 8
test eax, eax
je 0x11cf0d75
mov ecx, 0x1212b458
call fcn.11df43c0
test eax, eax
je 0x11cf0848
mov edx, dword [esp + 0x10]
push str._.ppt
push edx
call fcn.11e89110
add esp, 8
test eax, eax
jne 0x11cf0848
mov eax, dword [esp + 0x10]
push str._.pptx
push eax
call fcn.11e89110
add esp, 8
test eax, eax
je 0x11cf0d75
mov ecx, 0x1212b458
call fcn.11df5a90
test eax, eax
je 0x11cf0870
mov ecx, dword [esp + 0x10]
push str..cos
push ecx
call fcn.11e89110
add esp, 8
test eax, eax
je 0x11cf0de0
cmp dword [esp + 0x24], 2
jne 0x11cf0e4b
mov eax, dword [esp + 0x14]
lea eax, [eax + eax*2]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x14]
mov ecx, dword [eax + edx*4 + 0xc]
lea eax, [eax + edx*4]
cmp ecx, ebx
je 0x11cf0eb6
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + 0x5c]
lea ecx, [ecx + ecx*2]
cmp dword [edx + ecx*4 + 8], ebx
je 0x11cf0f21
mov edx, dword [eax + 0x44]
lea ecx, [eax + 0x44]
cmp dword [edx - 8], ebx
je 0x11cf0f89
mov edx, dword [eax]
push ecx
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x18]
mov dword [esp + 0x54], edx
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x58], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x48], edx
mov edx, dword [eax + 0x10]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x68], edx
mov edx, dword [eax + 0x30]
mov dword [esp + 0x6c], edx
mov edx, dword [eax + 0x38]
mov dword [esp + 0x74], edx
mov eax, dword [eax + 0x3c]
lea ecx, [esp + 0x80]
mov dword [esp + 0x78], eax
call fcn.11e7f410
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*8]
lea eax, [edx + ecx*4 + 0x40]
lea ecx, [esp + 0x78]
push eax
call fcn.11e7f410
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*8]
lea eax, [edx + ecx*4 + 0x48]
lea ecx, [esp + 0x80]
push eax
call fcn.11e7f410
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x14]
push 0xffffffffffffffff
lea eax, [eax + eax*2]
lea ecx, [eax + eax*8]
mov eax, dword [edx + ecx*4 + 0x60]
push eax
lea ebp, [edx + ecx*4 + 0x5c]
lea ecx, [esp + 0x9c]
call fcn.11d1c240
mov eax, dword [ebp + 4]
mov ebp, dword [ebp]
mov ecx, dword [esp + 0x94]
mov edx, eax
dec eax
test edx, edx
je 0x11cf09a7
inc eax
mov dword [esp + 0x18], eax
mov eax, ebp
mov edx, ecx
add ecx, 0xc
add ebp, 0xc
mov edi, dword [eax]
mov dword [edx], edi
mov edi, dword [eax + 4]
mov dword [edx + 4], edi
mov eax, dword [eax + 8]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x18]
dec eax
mov dword [esp + 0x18], eax
jne 0x11cf0982
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x14]
push 0xffffffffffffffff
lea eax, [eax + eax*2]
lea ecx, [eax + eax*8]
mov eax, dword [edx + ecx*4 + 0x50]
push eax
lea ebp, [edx + ecx*4 + 0x4c]
lea ecx, [esp + 0x8c]
call fcn.11d1c0a0
mov edx, dword [ebp + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x84]
mov edi, edx
dec edx
test edi, edi
je 0x11cf0a48
inc edx
mov dword [esp + 0x18], edx
jmp 0x11cf09ee
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov edi, ecx
mov ebp, eax
add ecx, 0x220
add eax, 0x220
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp]
lea edx, [ebp + 0x210]
mov dword [edi], ecx
push edx
lea ecx, [edi + 0x210]
mov dword [esp + 0x2c], eax
call fcn.11d1b450
lea eax, [ebp + 4]
push 0x103
lea ecx, [edi + 4]
push eax
push ecx
call fcn.11e674bf
mov eax, dword [esp + 0x24]
mov edx, dword [ebp + 0x20c]
add esp, 0xc
dec eax
mov dword [edi + 0x20c], edx
mov dword [esp + 0x18], eax
jne 0x11cf09e6
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea eax, [eax + eax*8]
mov dword [ecx + eax*4 + 0xc], ebx
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
lea eax, [eax + eax*2]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x14]
mov dword [eax + edx*4 + 0x10], ebx
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.11ce2f70
mov ecx, dword [0x12133f80]
mov dword [esp + 0x20], eax
cmp ecx, ebx
je 0x11cf0acc
mov ecx, dword [0x12126854]
push eax
mov eax, dword [esp + 0x7c]
push eax
push ecx
push str.__s__CSafeDoc::OnNtFlushBuffersFile__s_:_Merge_Decrypt_To_Encrypt_Returns__d__n
push str.SafeDoc
push 1
call fcn.11ca5810
add esp, 0x18
lea eax, [esi + 4]
push 1
push eax
lea ecx, [esp + 0x34]
call fcn.11e8c590
mov eax, dword [esi + 0x18]
xor ebp, ebp
cmp eax, ebx
mov byte [esp + 0xc8], 0x32
jle 0x11cf0bd9
xor edi, edi
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x78]
push edx
mov eax, dword [edi + ecx + 0x40]
push eax
call fcn.11e67d22
add esp, 8
test eax, eax
jne 0x11cf0b14
mov eax, dword [esi + 0x14]
cmp dword [edi + eax + 0x20], ebx
je 0x11cf0b24
mov eax, dword [esi + 0x18]
inc ebp
add edi, 0x6c
cmp ebp, eax
jl 0x11cf0af2
jmp 0x11cf0bd9
cmp dword [esp + 0x20], ebx
je 0x11cf0b89
mov ecx, dword [esi + 0x14]
lea ebp, [ebp + ebp*2]
lea eax, [ebp + ebp*8]
shl eax, 2
add ecx, eax
cmp dword [ecx + 0x50], ebx
jne 0x11cf0bd9
cmp dword [ecx + 0x60], ebx
jne 0x11cf0bd9
mov edx, dword [esp + 0x50]
mov dword [ecx + 0x18], edx
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x54]
mov dword [eax + ecx + 0x1c], edx
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x64]
mov dword [eax + ecx + 0x2c], edx
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x68]
mov dword [eax + ecx + 0x30], edx
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x70]
mov dword [eax + ecx + 0x38], edx
mov edx, dword [esp + 0x74]
mov dword [eax + ecx + 0x3c], edx
jmp 0x11cf0bd9
cmp dword [0x12133f80], ebx
je 0x11cf0bbb
mov edx, dword [esi + 0x14]
mov ecx, dword [0x12126854]
lea eax, [ebp + ebp*2]
lea eax, [eax + eax*8]
mov eax, dword [edx + eax*4 + 0x40]
push eax
push ecx
push str.__s__CSafeDoc::OnNtFlushBuffersFile__s_:_Merge_Failed__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov edx, dword [esi + 0x14]
lea ebp, [ebp + ebp*2]
mov ecx, 1
lea eax, [ebp + ebp*8]
shl eax, 2
mov dword [eax + edx + 0xc], ecx
mov edx, dword [esi + 0x14]
mov dword [eax + edx + 0x10], ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
mov eax, dword [esp + 0x94]
mov byte [esp + 0xc8], 0x36
cmp eax, ebx
je 0x11cf0c06
push eax
call fcn.11e679b1
add esp, 4
mov esi, dword [esp + 0x84]
mov byte [esp + 0xc8], 0x35
cmp esi, ebx
je 0x11cf0c6c
mov eax, dword [esp + 0x88]
mov dword [esp + 0x20], esi
cmp eax, ebx
je 0x11cf0c63
lea edi, [eax]
mov eax, dword [esi + 0x210]
mov byte [esp + 0xc8], 0x35
cmp eax, ebx
je 0x11cf0c4f
mov ecx, dword [esi + 0x214]
push eax
mov dword [esp + 0x24], ecx
call fcn.11e679b1
add esp, 4
add esi, 0x220
dec edi
mov dword [esp + 0x20], esi
jne 0x11cf0c2a
mov esi, dword [esp + 0x84]
push esi
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x34
call fcn.11e7f280
lea ecx, [esp + 0x7c]
mov byte [esp + 0xc8], 0x33
call fcn.11e7f280
lea ecx, [esp + 0x78]
mov byte [esp + 0xc8], 1
call fcn.11e7f280
lea ecx, [esp + 0xa4]
mov byte [esp + 0xc8], bl
call fcn.11e15fd0
mov edi, dword [esp + 0xb0]
jmp 0x11cf101c
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0xc
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0xb
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0xa
call fcn.11e7f280
mov byte [esp + 0xc8], 9
jmp 0x11cf0fef
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x11
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x10
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0xf
call fcn.11e7f280
mov byte [esp + 0xc8], 0xe
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x17
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x16
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x15
call fcn.11e7f280
mov byte [esp + 0xc8], 0x14
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x1c
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x1b
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x1a
call fcn.11e7f280
mov byte [esp + 0xc8], 0x19
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x21
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x20
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x1f
call fcn.11e7f280
mov byte [esp + 0xc8], 0x1e
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x26
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x25
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x24
call fcn.11e7f280
mov byte [esp + 0xc8], 0x23
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x2b
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x2a
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x29
call fcn.11e7f280
mov byte [esp + 0xc8], 0x28
jmp 0x11cf0fef
lea ecx, [esp + 0x10]
mov byte [esp + 0xc8], 8
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 7
call fcn.11e8c5f0
lea ecx, [esp + 0x94]
mov byte [esp + 0xc8], 0x30
call fcn.11d1b790
lea ecx, [esp + 0x84]
mov byte [esp + 0xc8], 0x2f
call fcn.11d1b5f0
lea ecx, [esp + 0x80]
mov byte [esp + 0xc8], 0x2e
call fcn.11e7f280
mov byte [esp + 0xc8], 0x2d
lea ecx, [esp + 0x7c]
call fcn.11e7f280
lea ecx, [esp + 0x78]
mov byte [esp + 0xc8], 1
call fcn.11e7f280
lea ecx, [esp + 0xa4]
mov byte [esp + 0xc8], bl
call fcn.11e15fd0
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc8], 0xffffffff
call fcn.11e15fd0
mov ecx, dword [esp + 0xc0]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xbc
ret 0xc