Function at 0x11ce2f70
Capabilities:
Get file size

Disassembly:
push 0xffffffffffffffff
push 0x11fa279c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa5c
push esi
mov esi, dword [esp + 0xa70]
push edi
xor edi, edi
cmp esi, edi
mov dword [esp + 8], ecx
jne 0x11ce2fa5
xor eax, eax
jmp 0x11ce362e
mov ecx, 0x1212b5c0
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], 3
call fcn.11d811f0
test eax, eax
je 0x11ce2fd7
mov eax, dword [esi + 0x40]
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push eax
call fcn.11ede9a0
add esp, 0x24
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x44]
push ebx
push edi
push 0x60
push 1
push 7
push 0x80
push 0x120089
push eax
call fcn.11dbafc0
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffff
mov dword [esp + 0x20], ebx
je 0x11ce35f4
mov ecx, dword [esi + 0x1c]
mov eax, dword [esi + 0x40]
push ebp
push edi
push ecx
push edi
push ebx
push eax
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov ebp, eax
neg ebp
sbb ebp, ebp
inc ebp
jne 0x11ce305e
push ebx
mov ecx, 0x1212b5c0
call fcn.11d72070
mov ebp, eax
neg ebp
sbb ebp, ebp
inc ebp
jne 0x11ce305e
mov eax, dword [esi + 0x40]
push ebx
push eax
mov ecx, 0x1212b5c0
call fcn.11d6a6d0
mov ebp, eax
cmp ebp, edi
jne 0x11ce305e
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11ce35ec
mov dword [esp + 0x40], edi
lea edx, [esp + 0x40]
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0x44]
push edx
rep stosd dword es:[edi], eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea ecx, [esp + 0x14]
call fcn.11e923e0
xor ebx, ebx
lea ecx, [esp + 0x18]
mov dword [esp + 0xa74], ebx
call fcn.11e923e0
mov byte [esp + 0xa74], 1
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xb6]
mov word [esp + 0xb4], bx
mov dword [esp + 0x34], ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0x38], ebx
stosw word es:[edi], ax
mov eax, dword [esp + 0xa80]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
lea ebx, [eax + eax*2]
lea eax, [esp + 0x2c]
shl ebx, 2
push eax
mov edx, dword [ebx + ecx]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
test eax, eax
jne 0x11ce30f7
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x11ce31ad
mov eax, dword [esi + 0x40]
lea ecx, [esp + 0xb4]
push ecx
push 0x1204f154
push eax
call fcn.11ce3650
add esp, 0xc
test eax, eax
je 0x11ce3186
push 0
push 0x60
push 2
push 1
push 0x80
lea edx, [esp + 0xc8]
push 0x12019f
push edx
call fcn.11dbafc0
mov edi, eax
add esp, 0x1c
cmp edi, 0xffffffff
je 0x11ce316a
mov eax, dword [esi + 0x5c]
push 0xffffffffffffffff
push edi
mov ecx, dword [ebx + eax]
push ecx
call fcn.11ee01e0
add esp, 0xc
test eax, eax
je 0x11ce315b
mov dword [esp + 0x20], 1
push edi
call dword [0x1213494c]
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x11ce31ad
lea edx, [esp + 0xb4]
push 1
push edx
call fcn.11dbb670
add esp, 8
mov dword [esp + 0x20], 0
jmp 0x11ce31ad
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ce31ad
mov ecx, dword [esi + 0x40]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDoc::MergeDecryptToEncryptForOpenning__s_:_T_NtGetTempInterFileName._Failed.__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x109
xor eax, eax
lea edi, [esp + 0x648]
mov dword [esp + 0x644], 0
rep stosd dword es:[edi], eax
xor edx, edx
mov ecx, 0xf
lea edi, [esp + 0x78]
mov dword [esp + 0x74], edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x48]
mov dword [esp + 0x1c], edx
cmp dword [eax - 8], edx
je 0x11ce3213
mov edx, dword [esi + 0x44]
mov ecx, dword [edx - 8]
test ecx, ecx
je 0x11ce3213
cmp dword [esi], 0
jne 0x11ce3213
mov ecx, dword [esi + 0x40]
push ecx
push edx
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x64c]
push edx
push ecx
push eax
call fcn.11def500
add esp, 0x14
mov dword [esp + 0x1c], eax
test ebp, ebp
je 0x11ce3269
mov edx, dword [esi + 0x5c]
mov ecx, dword [esp + 0x24]
push 0xffffffffffffffff
mov eax, dword [ebx + edx]
push eax
push ecx
call fcn.11ee01e0
mov edi, eax
mov eax, dword [0x12133f80]
add esp, 0xc
neg edi
sbb edi, edi
xor ebp, ebp
and edi, 2
cmp eax, ebp
je 0x11ce33a6
mov edx, dword [esi + 0x40]
mov eax, dword [0x12126854]
push edi
push edx
push eax
push str.__s__CSafeDoc::MergeDecryptToEncryptForOpenning____s_:_CopySafeDocByHandle._Result:_lu.__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
jmp 0x11ce33a6
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11ce339f
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x11ce32d4
mov ecx, dword [esi]
mov eax, dword [esi + 0x40]
push ecx
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
push edx
push ecx
mov ecx, dword [esp + 0x1c]
push eax
call fcn.11d18db0
test eax, eax
je 0x11ce32d4
lea ecx, [esp + 0x14]
call fcn.11e925e0
test eax, eax
jbe 0x11ce32ba
lea ecx, [esp + 0x14]
call fcn.11e92ce0
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x18]
call fcn.11e925e0
test eax, eax
jbe 0x11ce32d4
lea ecx, [esp + 0x18]
call fcn.11e92ce0
mov dword [esp + 0x38], eax
lea edi, [esi + 0x40]
lea ecx, [esp + 0x10]
push edi
call fcn.11e7e880
mov eax, dword [esi]
mov byte [esp + 0xa74], 2
test eax, eax
je 0x11ce3322
mov eax, dword [edi]
lea edx, [esp + 0x3c]
push eax
push edx
call fcn.11d70b60
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xa78], 3
call fcn.11e7f410
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa74], 2
call fcn.11e7f280
mov eax, dword [edi]
push eax
call fcn.11ede350
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push ecx
push eax
mov eax, dword [esi + 0x5c]
push 2
push edx
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + eax]
push 0
push ecx
push edx
call fcn.11edf420
add esp, 0x20
test eax, eax
jne 0x11ce3358
mov edi, 1
jmp 0x11ce3363
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
dec ecx
mov edi, ecx
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ce338c
mov edx, dword [esp + 0x10]
mov eax, dword [0x12126854]
push edi
push edx
push eax
push str.__s__CSafeDoc::MergeDecryptToEncryptForOpenning____s_:_EncryptFileByHandle._Result:_lu.__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0xa74], 1
call fcn.11e7f280
jmp 0x11ce33a4
mov edi, 3
xor ebp, ebp
cmp dword [esp + 0x1c], ebp
je 0x11ce33d8
cmp edi, 1
je 0x11ce33b6
cmp edi, 2
jne 0x11ce33d8
mov eax, dword [esi + 0x48]
xor ecx, ecx
cmp edi, 1
lea edx, [esp + 0x74]
sete cl
push ecx
lea ecx, [esp + 0x648]
push edx
push ecx
push eax
call fcn.11def5b0
add esp, 0x10
cmp edi, 1
je 0x11ce3476
cmp edi, 2
je 0x11ce3476
cmp edi, ebp
je 0x11ce33f7
cmp edi, 0xffffffff
jne 0x11ce35c3
lea edx, [esp + 0x1c]
lea eax, [esp + 0x10]
push edx
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], ebp
call fcn.11ee1ad0
mov ebx, eax
mov eax, dword [0x12133f80]
add esp, 8
cmp eax, ebp
je 0x11ce3452
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov eax, dword [0x12126854]
push ecx
push edx
mov edx, dword [esi + 0x40]
push ebx
lea ecx, [esp + 0xc0]
push edi
push ecx
mov ecx, dword [esi + 0x44]
push edx
push ecx
push eax
push str.__s__CSafeDoc::MergeDecryptToEncrypt:_Merge__s_To__s_failed__BackupFile__s__Ret:_lu_Error:__lu_LastError:_lu__ErrorLine:_lu__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x2c
cmp edi, 0xffffffff
jne 0x11ce35c3
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x40]
push edx
push 3
push ebx
push eax
mov ecx, 0x1212b158
call fcn.11dbfd60
jmp 0x11ce35c3
cmp dword [esi + 0x10], ebp
je 0x11ce34bb
mov eax, dword [esi + 0x5c]
mov eax, dword [ebx + eax]
cmp eax, ebp
je 0x11ce34bb
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp dword [0x12133f80], ebp
je 0x11ce34bb
mov edx, dword [esi + 0x5c]
mov ecx, dword [0x12126854]
push eax
mov eax, dword [ebx + edx]
mov edx, dword [esi + 0x40]
push eax
push edx
push ecx
push str.__s__CSafeDoc::MergeDecryptToEncryptForOpenning__s_:_FlushHandle__lu__bFlushSuc__lu__n
push str.IPG_6147
push 1
call fcn.11ca5810
add esp, 0x1c
cmp dword [esp + 0x20], ebp
je 0x11ce34d3
lea eax, [esp + 0xb4]
push 1
push eax
call fcn.11dbb670
add esp, 8
mov eax, dword [esi]
mov dword [esp + 0x28], 1
cmp eax, ebp
je 0x11ce34f9
cmp dword [esi + 0x18], ebp
je 0x11ce34f9
cmp dword [esi + 0x30], ebp
jne 0x11ce34f9
mov eax, dword [esi + 0x40]
push 1
push eax
call fcn.11dbb670
add esp, 8
mov eax, dword [esi]
mov dword [esi + 0xc], ebp
cmp eax, ebp
jne 0x11ce3505
mov dword [esi + 0x18], ebp
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x64]
mov dword [esi + 0x2c], ecx
mov ecx, dword [esp + 0x58]
mov dword [esi + 0x38], eax
cmp edi, 1
mov dword [esi + 0x30], edx
mov dword [esi + 0x3c], ecx
jne 0x11ce35b6
cmp dword [esi + 0x1c], ebp
jne 0x11ce35c3
mov dword [esi + 0x1c], edi
xor ebx, ebx
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x2bd]
mov byte [esp + 0x2bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esi + 0x40]
lea edx, [esp + 0x2bc]
push edx
push eax
call fcn.11ee09b0
add esp, 8
test eax, eax
je 0x11ce3571
lea ebx, [esp + 0x2bc]
lea ecx, [esp + 0x14]
call fcn.11e925e0
test eax, eax
jbe 0x11ce3589
lea ecx, [esp + 0x14]
call fcn.11e92ce0
mov ebp, eax
lea ecx, [esp + 0x18]
xor edi, edi
call fcn.11e925e0
test eax, eax
jbe 0x11ce35a3
lea ecx, [esp + 0x18]
call fcn.11e92ce0
mov edi, eax
mov eax, dword [esi + 0x40]
push edi
push ebp
push ebx
push eax
mov ecx, 0x1212b560
call fcn.11dee5b0
jmp 0x11ce35c3
cmp edi, 2
jne 0x11ce35c3
cmp dword [esi + 0x1c], ebp
je 0x11ce35c3
mov dword [esi + 0x1c], ebp
lea ecx, [esp + 0x18]
mov byte [esp + 0xa74], 0
call fcn.11e92540
lea ecx, [esp + 0x14]
mov dword [esp + 0xa74], 0xffffffff
call fcn.11e92540
mov ebx, dword [esp + 0x24]
push ebx
call dword [0x1213494c]
pop ebp
mov eax, dword [esp + 0x2c]
pop ebx
test eax, eax
jne 0x11ce362a
mov eax, dword [esi + 0x40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.11ede9a0
add esp, 0x24
cmp eax, 3
jne 0x11ce362a
mov eax, dword [esi + 0x40]
push eax
call fcn.11df0940
add esp, 4
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xa64]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0xa68
ret 8