Function at 0x11d275f0
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x11fa691b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x438
push ebx
push ebp
push esi
mov dword [esp + 0x24], ecx
push edi
push 2
lea ecx, [esp + 0x30]
call fcn.11e15fa0
mov ebp, dword [esp + 0x460]
mov ebx, dword [esp + 0x45c]
xor esi, esi
cmp ebp, esi
mov dword [esp + 0x450], esi
je 0x11d2847b
cmp word [ebp], si
je 0x11d2847b
cmp ebx, esi
je 0x11d2847b
cmp word [ebx], si
je 0x11d2847b
push ebx
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11d2769b
cmp dword [0x12133f80], esi
je 0x11d27688
mov eax, dword [0x12126854]
push ebx
push eax
push str.__s__CSafeDocProtect::OnMoveFileExW__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SDProtected
push 8
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x458]
mov dword [eax + 0x10], 5
jmp 0x11d28342
mov ecx, 0x1212b5c0
call fcn.11d86270
test eax, eax
je 0x11d27cbb
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3a]
mov word [esp + 0x38], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x242]
mov word [esp + 0x240], si
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x38]
push 0x104
push ecx
push ebx
stosw word es:[edi], ax
call fcn.11dbcbf0
lea edx, [esp + 0x24c]
push 0x104
push edx
push ebp
call fcn.11dbcbf0
mov eax, dword [0x12133f80]
add esp, 0x18
cmp eax, esi
je 0x11d27725
push ebp
push ebx
push 0xaaf
push str._CSafeDocProtect::OnMoveFileExW______Line:_d_Existing__s__New__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
lea eax, [esp + 0x38]
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11d2776a
lea ecx, [esp + 0x240]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11d2776a
lea edx, [esp + 0x240]
mov ecx, 0x1212b028
push edx
call fcn.11d139a0
test eax, eax
je 0x11d27dff
lea eax, [esp + 0x38]
push eax
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d2845e
lea ecx, [esp + 0x240]
push ecx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d2845e
lea edx, [esp + 0x38]
push edx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d28431
lea eax, [esp + 0x240]
push eax
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d28431
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x240]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x28], esi
call fcn.11d7ae10
test eax, eax
je 0x11d277fe
lea ecx, [esp + 0x38]
push ecx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
jne 0x11d27e90
cmp dword [0x12133f80], esi
je 0x11d27821
push ebp
push ebx
push 0xb06
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Existing__s__New__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
lea edx, [esp + 0x20]
lea eax, [esp + 0x240]
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0x2c], esi
call fcn.11d7a880
test eax, eax
je 0x11d27fe5
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11d278b9
push ebx
call fcn.11dbbe80
push ebp
mov dword [esp + 0x18], eax
call fcn.11dbbe80
mov cl, byte [esp + 0x46c]
add esp, 8
xor edx, edx
cmp eax, 0xffffffff
setne dl
test cl, 1
mov eax, edx
jne 0x11d27884
cmp eax, esi
jne 0x11d27897
cmp dword [esp + 0x20], esi
je 0x11d278b9
test byte [esp + 0x10], 0x10
jne 0x11d28009
jmp 0x11d278b9
cmp dword [0x12133f80], esi
je 0x11d278b9
push ebp
push 0xb20
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_DstFile__s__exist__not_replace
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11d278d5
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11d278ea
lea eax, [esp + 0x38]
push eax
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11d2803b
push ebx
call fcn.11dbbe80
add esp, 4
mov ecx, 0x1212b458
mov dword [esp + 0x10], eax
call fcn.11df40d0
test eax, eax
je 0x11d27ad4
cmp dword [esp + 0x10], 0xffffffff
je 0x11d27cbb
push ebp
call fcn.11dbbe80
mov cl, byte [esp + 0x14]
add esp, 4
test cl, 0x10
je 0x11d27960
push esi
lea ecx, [esp + 0x3c]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d27ad4
push esi
lea edx, [esp + 0x244]
push esi
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d279de
jmp 0x11d27ad4
cmp eax, 0xffffffff
je 0x11d27973
test byte [esp + 0x464], 1
je 0x11d27a8d
push esi
lea eax, [esp + 0x3c]
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d279a4
push esi
lea ecx, [esp + 0x244]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d28148
push esi
lea edx, [esp + 0x3c]
push esi
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11d27ad4
push esi
lea eax, [esp + 0x244]
push esi
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11d281df
jmp 0x11d27ad4
cmp dword [0x12133f80], esi
je 0x11d27a0c
lea ecx, [esp + 0x240]
lea edx, [esp + 0x38]
push ecx
push edx
push 0xb53
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7eae0
mov eax, dword [eax]
mov byte [esp + 0x450], 3
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x14]
mov edi, eax
mov byte [esp + 0x450], 0
call fcn.11e7f280
cmp edi, 0xffffffff
je 0x11d28072
cmp dword [0x12133f80], esi
je 0x11d27ad4
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7eae0
mov eax, dword [eax]
mov byte [esp + 0x450], 4
push eax
push 0xb58
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Dst__s__exist.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov byte [esp + 0x450], 0
lea ecx, [esp + 0x14]
jmp 0x11d27acf
cmp dword [0x12133f80], esi
je 0x11d27ad4
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7eae0
mov ecx, dword [eax]
mov byte [esp + 0x450], 9
push ecx
push 0xb68
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Dst_File__s__exist
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov byte [esp + 0x450], 0
lea ecx, [esp + 0x14]
call fcn.11e7f280
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x11d27cbb
test al, 0x10
je 0x11d27cbb
lea edx, [esp + 0x240]
lea eax, [esp + 0x38]
push edx
push eax
call fcn.11dbd5a0
add esp, 8
test eax, eax
jne 0x11d27cbb
lea ecx, [esp + 0x38]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7bec0
test eax, eax
jne 0x11d27b33
lea edx, [esp + 0x240]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
je 0x11d27cbb
cmp dword [0x12133f80], esi
je 0x11d27b61
lea eax, [esp + 0x240]
lea ecx, [esp + 0x38]
push eax
push ecx
push 0xb97
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x18]
mov byte [esp + 0x454], 0xa
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11d27bb6
inc eax
lea edx, [esp + 0x18]
push eax
push edx
lea ecx, [esp + 0x1c]
call fcn.11e819c0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x454], 0xb
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 0xa
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x454], 0xc
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11d27c14
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x454], 0xd
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 0xc
call fcn.11e7f280
cmp dword [0x12133f80], esi
je 0x11d27c4c
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x244]
push ecx
lea eax, [esp + 0x40]
push edx
push eax
push 0xba5
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x14]
push 1
lea edx, [esp + 0x3c]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11d27d0c
cmp dword [0x12133f80], esi
je 0x11d27c99
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x14]
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
push 0xbaa
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x450], 0xa
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x450], 0
call fcn.11e7f280
mov ecx, 0x1212b0f8
call fcn.11e148f0
test eax, eax
jne 0x11d2835d
mov ecx, dword [esp + 0x28]
push ebx
call fcn.11d24110
test eax, eax
jne 0x11d282dc
test byte [esp + 0x464], 1
je 0x11d2835d
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push ebp
call fcn.11ee1fb0
add esp, 0x28
cmp eax, esi
jne 0x11d28310
jmp 0x11d2835d
push 0x5c
lea ecx, [esp + 0x18]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x18]
call fcn.11e7fed0
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
push ebp
push eax
mov byte [esp + 0x458], 0xe
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 0xc
sete byte [esp + 0x27]
call fcn.11e7f280
mov al, byte [esp + 0x27]
test al, al
mov eax, dword [0x12133f80]
je 0x11d28275
cmp eax, esi
je 0x11d27dc2
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
push ebp
push eax
push 0xbb5
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0x468], 0xf
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 0xc
call fcn.11e7f280
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0x450], 0x10
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 0xc
call fcn.11e7f280
jmp 0x11d27c99
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov edi, eax
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x454], 1
call fcn.11e7eae0
push edi
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0x45c], 2
call fcn.11df73b0
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 1
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x450], 0
call fcn.11e7f280
cmp dword [0x12133f80], esi
je 0x11d27e83
lea ecx, [esp + 0x240]
lea edx, [esp + 0x38]
push ecx
push edx
push 0xaba
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__MoveFileExW__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d28342
xor edi, edi
test al, 0x10
mov eax, dword [esp + 0x1c]
je 0x11d27f39
cmp eax, 1
jne 0x11d27ee9
push eax
push eax
lea eax, [esp + 0x248]
push esi
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, 0x1212b028
call fcn.11d129d0
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d27fd0
lea edx, [esp + 0x240]
push edi
lea eax, [esp + 0x3c]
push edx
push eax
push 0xae4
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d27fc1
cmp eax, 2
jne 0x11d27fd8
push 1
push esi
lea ecx, [esp + 0x248]
push esi
lea edx, [esp + 0x44]
push ecx
push edx
mov ecx, 0x1212b028
call fcn.11d129d0
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d27fd0
lea eax, [esp + 0x240]
push edi
lea ecx, [esp + 0x3c]
push eax
push ecx
push 0xaea
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d27fc1
cmp eax, 1
jne 0x11d27f7d
push esi
push eax
lea edx, [esp + 0x248]
push esi
lea eax, [esp + 0x44]
push edx
push eax
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d27fd0
lea ecx, [esp + 0x240]
push edi
lea edx, [esp + 0x3c]
push ecx
push edx
push 0xaf4
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11d27fc1
cmp eax, 2
jne 0x11d27fd8
push esi
push 1
lea eax, [esp + 0x248]
push 1
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d27fd0
lea edx, [esp + 0x240]
push edi
lea eax, [esp + 0x3c]
push edx
push eax
push 0xafa
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
cmp edi, esi
jne 0x11d2825a
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d2825a
cmp dword [0x12133f80], esi
je 0x11d27e83
push ebp
push ebx
push 0xb0d
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
jmp 0x11d27e7b
push 1
push 1
push eax
push ebp
push ebx
mov ecx, 0x1212b028
call fcn.11d129d0
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d2825a
push edi
push ebp
push ebx
push 0xb28
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_EncryptFolder__s___s___bSuc__d_
jmp 0x11d2824b
cmp dword [0x12133f80], esi
je 0x11d27e83
lea ecx, [esp + 0x38]
push ecx
push 0xb37
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d28342
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov edi, dword [eax]
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x454], 5
call fcn.11e7eae0
mov eax, dword [eax]
push 1
push esi
push esi
push edi
push eax
mov ecx, 0x1212b028
mov byte [esp + 0x464], 6
call fcn.11d129d0
lea ecx, [esp + 0x18]
mov edi, eax
mov byte [esp + 0x450], 5
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x450], 0
call fcn.11e7f280
cmp dword [0x12133f80], esi
je 0x11d2825a
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov ebp, eax
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x454], 7
call fcn.11e7eae0
mov edx, dword [ebp]
mov eax, dword [eax]
push edi
push edx
push eax
push 0xb5e
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x46c], 8
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x18]
mov byte [esp + 0x450], 7
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x450], 0
call fcn.11e7f280
jmp 0x11d2825a
cmp dword [0x12133f80], esi
je 0x11d28176
lea ecx, [esp + 0x240]
lea edx, [esp + 0x38]
push ecx
push edx
push 0xb72
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push esi
push 1
lea eax, [esp + 0x248]
push 1
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d281c4
lea edx, [esp + 0x240]
push edi
lea eax, [esp + 0x3c]
push edx
push eax
push 0xb76
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x2c]
mov dword [esp + 0x450], 0xffffffff
call fcn.11e15fd0
mov eax, edi
jmp 0x11d28561
cmp dword [0x12133f80], esi
je 0x11d2820d
lea ecx, [esp + 0x240]
lea edx, [esp + 0x38]
push ecx
push edx
push 0xb7f
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push esi
push 1
lea eax, [esp + 0x248]
push esi
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d2825a
lea edx, [esp + 0x240]
push edi
lea eax, [esp + 0x3c]
push edx
push eax
push 0xb83
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x2c]
mov dword [esp + 0x450], 0xffffffff
call fcn.11e15fd0
mov eax, edi
jmp 0x11d28561
cmp eax, esi
je 0x11d28293
push ebx
push 0xbbc
push str._CSafeDocProtect::OnMoveFileExW__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push ebx
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x450], 0xa
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x450], 0
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov dword [esp + 0x450], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11d28561
cmp dword [0x12133f80], esi
je 0x11d28300
mov eax, dword [0x12126854]
push ebp
push ebx
push eax
push str.__s__CSafeDocProtect::OnMoveFileExW__s_____s__is_forbidden_because_IsUnmovableSafeDoc__n
push str.SDProtected
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, dword [esp + 0x458]
mov dword [ecx + 0x10], 5
jmp 0x11d28342
cmp dword [0x12133f80], esi
je 0x11d28334
mov eax, dword [0x12126854]
push ebp
push ebx
push eax
push str.__s__CSafeDocProtect::OnMoveFileExW__s_____s__is_forbidden__n
push str.SDProtected
push 4
call fcn.11ca5810
add esp, 0x18
mov edx, dword [esp + 0x458]
mov dword [edx + 0x10], 5
lea ecx, [esp + 0x2c]
mov dword [esp + 0x450], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11d28561
mov ecx, dword [esp + 0x468]
call fcn.11e16060
mov esi, dword [esp + 0x458]
lea edx, [esp + 0x10]
push edx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
push eax
push ecx
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
test eax, eax
je 0x11d283f1
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x464]
push ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x14]
push ebp
push ebx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
call eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ecx
jmp 0x11d28548
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11d28548
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x464]
push edx
push ebp
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d28548
jmp 0x11d2853f
cmp dword [0x12133f80], esi
je 0x11d27e83
lea eax, [esp + 0x240]
lea ecx, [esp + 0x38]
push eax
push ecx
push 0xacf
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_ShareFolder.
push str.NetWorkShareFolder
jmp 0x11d27e79
cmp dword [0x12133f80], esi
je 0x11d27e83
push ebp
push ebx
push 0xac4
push str._CSafeDocProtect::OnMoveFileExW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
jmp 0x11d27e74
mov ecx, dword [esp + 0x468]
call fcn.11e16060
mov esi, dword [esp + 0x458]
lea ecx, [esp + 0x10]
push ecx
mov eax, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], eax
lea edx, [esp + 0x24]
lea eax, [esp + 0x20]
push edx
push eax
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
test eax, eax
je 0x11d2850c
mov edx, dword [esp + 0x1c]
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x464]
push edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edx
jmp 0x11d28548
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11d28548
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x464]
push eax
push ebp
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d28548
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x450], 0xffffffff
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0x448]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x444
ret 0x14