Function at 0x11cff790
Capabilities:
Move file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fa44e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa30
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0xffffffffffffffdd
lea ecx, [esp + 0x48]
mov dword [esp + 0x60], ebp
call fcn.11e15fa0
mov eax, dword [ebp + 0xb4]
xor ebx, ebx
push ebx
cmp eax, ebx
push ebx
mov dword [esp + 0xa50], ebx
push ebx
mov ecx, 0x1212b5c0
je 0x11cff9ec
call fcn.11d60760
mov edi, dword [esp + 0xa58]
test eax, eax
je 0x11cff910
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cff910
push edi
mov ecx, 0x1212b5c0
call fcn.11d6b710
test eax, eax
jne 0x11cff910
lea ecx, [esp + 0x30]
call fcn.11e16080
lea ecx, [esp + 0x44]
mov byte [esp + 0xa48], 1
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x10]
push edx
mov dword [esp + 0x18], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x20]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebp
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x2c]
add esp, 0x10
cmp eax, ebx
je 0x11cff8b4
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa5c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa54]
push edx
push edi
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
jmp 0x11cff8f7
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cff8f7
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0xa5c]
mov edx, dword [esp + 0xa54]
push ecx
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cff8f7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x30]
mov byte [esp + 0xa48], 0
call fcn.11e16090
jmp 0x11d020b7
lea ecx, [esp + 0x44]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x10]
push edx
mov dword [esp + 0x18], ebx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x20]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebp
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], ebx
call fcn.11e15b00
mov eax, dword [esp + 0x2c]
add esp, 0x10
cmp eax, ebx
je 0x11cff9a1
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa5c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa54]
push edx
push edi
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebx
mov esi, dword [esi + 0x14]
jmp 0x11d020b7
mov ebp, dword [esi + 0x18]
cmp ebp, ebx
je 0x11cff9e4
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0xa5c]
mov edx, dword [esp + 0xa54]
push ecx
push edi
push edx
call ebp
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cff9e4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
jmp 0x11d020b7
call fcn.11d60760
test eax, eax
jne 0x11cffa07
push ebx
push 0x12118e98
call fcn.11c92320
add esp, 8
test eax, eax
je 0x11cffa15
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cffa4b
mov ecx, dword [esp + 0xa5c]
mov edx, dword [esp + 0xa58]
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0xa58]
push ecx
mov ecx, dword [esp + 0xa58]
push edx
push eax
push ecx
mov ecx, 0x1212ae38
call fcn.11d275f0
mov esi, eax
jmp 0x11d020b7
push 2
lea ecx, [esp + 0x64]
call fcn.11e15fa0
mov ebx, dword [esp + 0xa58]
mov esi, dword [esp + 0xa54]
test ebx, ebx
mov byte [esp + 0xa48], 2
je 0x11d01fcd
cmp word [ebx], 0
je 0x11d01fcd
test esi, esi
je 0x11d01fcd
cmp word [esi], 0
je 0x11d01fcd
push esi
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11cffad4
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cffac1
mov eax, dword [0x12126854]
push esi
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SafeDoc
push 8
call fcn.11ca5810
add esp, 0x14
mov edx, dword [esp + 0xa50]
mov dword [edx + 0x10], 5
jmp 0x11d013dd
mov ecx, 0x1212b5c0
call fcn.11d86270
test eax, eax
je 0x11d000e0
xor edx, edx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x2aa]
mov word [esp + 0x2a8], dx
mov word [esp + 0x6b8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x2ac]
push eax
push esi
call fcn.11dbcbf0
lea ecx, [esp + 0x6c4]
push 0x104
push ecx
push ebx
call fcn.11dbcbf0
add esp, 0x18
lea edx, [esp + 0x6b8]
lea eax, [esp + 0x2a8]
mov ecx, ebp
push edx
push eax
call fcn.11d13f30
lea ecx, [esp + 0x2a8]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11cffbbc
lea edx, [esp + 0x6b8]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11cffbbc
lea eax, [esp + 0x6b8]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7e8b0
test eax, eax
jne 0x11cffbbc
lea ecx, [esp + 0x6b8]
push ecx
mov ecx, 0x1212b028
call fcn.11d139a0
test eax, eax
je 0x11d00303
lea edx, [esp + 0x2a8]
push edx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d01faf
lea eax, [esp + 0x6b8]
push eax
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d01faf
lea ecx, [esp + 0x2a8]
push ecx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d01f7e
lea edx, [esp + 0x6b8]
push edx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d01f7e
lea eax, [esp + 0x10]
lea ecx, [esp + 0x6b8]
push eax
lea edx, [esp + 0x2ac]
xor edi, edi
push ecx
push edx
mov ecx, 0x1212b5c0
mov dword [esp + 0x1c], edi
call fcn.11d7ae10
test eax, eax
je 0x11cffc5e
lea eax, [esp + 0x2a8]
push eax
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
jne 0x11d0039f
mov eax, dword [0x12133f80]
cmp eax, edi
je 0x11cffc90
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x3cef
push str._CSafeDoc::OnMoveFileExW__Line:_d__MoveFileExW__s___s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x6b8]
push eax
lea edx, [esp + 0x2ac]
push ecx
push edx
mov ecx, 0x1212b5c0
mov dword [esp + 0x28], edi
call fcn.11d7a880
test eax, eax
je 0x11d00505
mov edi, dword [esp + 0xa54]
push edi
call fcn.11dbbe80
push ebx
mov dword [esp + 0x2c], eax
call fcn.11dbbe80
mov esi, dword [esp + 0xa64]
add esp, 8
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
and esi, 1
mov eax, ecx
jne 0x11cffcef
test eax, eax
jne 0x11cffd04
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x11cffd27
test byte [esp + 0x24], 0x10
jne 0x11d00529
jmp 0x11cffd27
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cffd27
push ebx
push 0x3d07
push str._CSafeDoc::OnMoveFileExW__Line:_d_DstFile__s__exist__not_replace
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11cffd43
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11cffd5b
lea edx, [esp + 0x2a8]
push edx
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11d00567
push edi
call fcn.11dbbe80
add esp, 4
mov ecx, ebp
mov dword [esp + 0x14], eax
push edi
call fcn.11d139a0
test eax, eax
jne 0x11cffd84
push ebx
mov ecx, ebp
call fcn.11d139a0
test eax, eax
je 0x11cffedd
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x11d000e0
test al, 0x10
je 0x11cffdd4
push 0
lea eax, [esp + 0x2ac]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cffedd
push eax
lea ecx, [esp + 0x6bc]
push eax
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cffe60
jmp 0x11cffedd
push ebx
call fcn.11dbbe80
or edi, 0xffffffff
add esp, 4
cmp eax, edi
je 0x11cffdec
test esi, esi
je 0x11cffeba
push 0
lea edx, [esp + 0x2ac]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11cffe22
push eax
push eax
lea eax, [esp + 0x6c0]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11d005e8
push 0
lea ecx, [esp + 0x2ac]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11cffedd
push 0
lea edx, [esp + 0x6bc]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11d00689
jmp 0x11cffedd
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cffe92
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
push 0x3d37
push str._CSafeDoc::OnMoveFileExW__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
call fcn.11dbbe80
add esp, 4
cmp eax, 0xffffffff
je 0x11d005a2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cffedd
push ebx
push 0x3d3c
push str._CSafeDoc::OnMoveFileExW__Line:_d_Dst__s__exist.
jmp 0x11cffece
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cffedd
push ebx
push 0x3d51
push str._CSafeDoc::OnMoveFileExW__Line:_d__Dst_File__s__exist
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x11d000e0
test al, 0x10
je 0x11d000e0
lea edx, [esp + 0x6b8]
lea eax, [esp + 0x2a8]
push edx
push eax
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11d000e0
lea ecx, [esp + 0x2a8]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7bec0
test eax, eax
jne 0x11cfff42
lea edx, [esp + 0x6b8]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
je 0x11d000e0
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cfff74
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
push 0x3d84
push str._CSafeDoc::OnMoveFileExW__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebx
lea ecx, [esp + 0x1c]
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4c], 5
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11cfffc9
inc eax
lea edx, [esp + 0x24]
push eax
push edx
lea ecx, [esp + 0x20]
call fcn.11e819c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4c], 6
call fcn.11e7f410
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
mov edi, dword [esp + 0xa54]
lea ecx, [esp + 0x20]
push edi
call fcn.11e7eae0
push 0x5c
lea ecx, [esp + 0x24]
mov byte [esp + 0xa4c], 7
call fcn.11e80430
cmp eax, 0xffffffff
je 0x11d0002e
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x24]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xa4c], 8
call fcn.11e7f410
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d0006a
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push eax
lea edx, [esp + 0x6bc]
push ecx
lea eax, [esp + 0x2b0]
push edx
push eax
push 0x3d92
push str._CSafeDoc::OnMoveFileExW__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x18]
push 1
lea edx, [esp + 0x2ac]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11d001e6
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d000be
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x18]
push eax
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x3d97
push str._CSafeDoc::OnMoveFileExW__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11d01ea1
mov ecx, 0x1212b5c0
call fcn.11d713d0
test eax, eax
je 0x11d01ea1
mov ecx, 0x1212b5c0
call fcn.11d915c0
test eax, eax
je 0x11d007a2
mov eax, dword [esp + 0xa54]
push eax
call fcn.11e67d05
add esp, 4
mov ecx, 0x1212b5c0
mov esi, eax
call fcn.11d916d0
cmp esi, eax
jae 0x11d00153
push ebx
call fcn.11e67d05
add esp, 4
mov ecx, 0x1212b5c0
mov esi, eax
call fcn.11d916d0
cmp esi, eax
jb 0x11d007a2
lea ecx, [esp + 0x44]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x18]
push eax
xor ebp, ebp
push ecx
push edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x20], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x2c]
add esp, 0x10
cmp eax, ebp
je 0x11d01f30
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa5c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa58]
push edx
mov edx, dword [esp + 0xa58]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11d020a3
push 0x5c
lea ecx, [esp + 0x1c]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x1c]
call fcn.11e7fed0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.11e7f820
mov esi, dword [esp + 0xa58]
mov eax, dword [eax]
push esi
push eax
mov byte [esp + 0xa50], 9
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 7
sete bl
call fcn.11e7f280
mov eax, dword [0x12133f80]
test bl, bl
je 0x11d0072a
test eax, eax
je 0x11d0029d
lea eax, [esp + 0x20]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
push esi
push eax
push 0x3da3
push str._CSafeDoc::OnMoveFileExW__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0xa60], 0xa
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
lea ecx, [esp + 0x20]
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x28]
push edx
push eax
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0xa48], 0xb
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 7
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
mov ebx, dword [esp + 0xa58]
jmp 0x11d000e0
push ebx
lea ecx, [esp + 0x30]
call fcn.11e7eae0
mov esi, eax
mov ecx, dword [esp + 0xa54]
mov byte [esp + 0xa48], 3
push ecx
lea ecx, [esp + 0x28]
call fcn.11e7eae0
push esi
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0xa54], 4
call fcn.11df73b0
lea ecx, [esp + 0x24]
mov byte [esp + 0xa48], 3
call fcn.11e7f280
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00392
lea edx, [esp + 0x6b8]
lea eax, [esp + 0x2a8]
push edx
push eax
push 0x3c9f
push str._CSafeDoc::OnMoveFileExW__Line:_d__MoveFileExW__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d013dd
xor esi, esi
test al, 0x10
mov eax, dword [esp + 0x10]
je 0x11d00450
cmp eax, 1
jne 0x11d003fb
push eax
push eax
lea ecx, [esp + 0x6c0]
push esi
lea edx, [esp + 0x2b4]
push ecx
push edx
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d004f0
lea eax, [esp + 0x6b8]
push esi
lea ecx, [esp + 0x2ac]
push eax
push ecx
push 0x3cca
push str._CSafeDoc::OnMoveFileExW__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d004e1
cmp eax, 2
jne 0x11d004f8
push 1
push 0
lea edx, [esp + 0x6c0]
push 0
lea eax, [esp + 0x2b4]
push edx
push eax
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d004f0
lea ecx, [esp + 0x6b8]
push esi
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x3cd1
push str._CSafeDoc::OnMoveFileExW__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d004e1
cmp eax, 1
jne 0x11d00499
push 0
push eax
lea eax, [esp + 0x6c0]
push 0
lea ecx, [esp + 0x2b4]
push eax
push ecx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d004f0
lea edx, [esp + 0x6b8]
push esi
lea eax, [esp + 0x2ac]
push edx
push eax
push 0x3cdc
push str._CSafeDoc::OnMoveFileExW__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11d004e1
cmp eax, 2
jne 0x11d004f8
push 0
push 1
lea ecx, [esp + 0x6c0]
push 1
lea edx, [esp + 0x2b4]
push ecx
push edx
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d004f0
lea eax, [esp + 0x6b8]
push esi
lea ecx, [esp + 0x2ac]
push eax
push ecx
push 0x3ce3
push str._CSafeDoc::OnMoveFileExW__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test esi, esi
jne 0x11d020a6
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d020a6
cmp dword [0x12133f80], edi
je 0x11d00392
push ebx
push esi
push 0x3cf6
push str._CSafeDoc::OnMoveFileExW__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
jmp 0x11d0038a
push 1
push 1
push eax
push ebx
push edi
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d020a6
push esi
push ebx
push edi
push 0x3d11
push str._CSafeDoc::OnMoveFileExW__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11d020a6
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00392
lea edx, [esp + 0x2a8]
push edx
push 0x3d20
push str._CSafeDoc::OnMoveFileExW__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x11d013dd
mov edi, dword [esp + 0xa54]
push 1
push 0
push 0
push ebx
push edi
mov ecx, ebp
call fcn.11d129d0
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d020a6
push esi
push ebx
push edi
push 0x3d44
push str._CSafeDoc::OnMoveFileExW__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11d020a6
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d0061a
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
push 0x3d5c
push str._CSafeDoc::OnMoveFileExW__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x6c0]
push 1
lea eax, [esp + 0x2b4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d0066c
lea ecx, [esp + 0x6b8]
push esi
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x3d61
push str._CSafeDoc::OnMoveFileExW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], edi
jmp 0x11d020c2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d006bb
lea eax, [esp + 0x6b8]
lea ecx, [esp + 0x2a8]
push eax
push ecx
push 0x3d6b
push str._CSafeDoc::OnMoveFileExW__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x6c0]
push 0
lea eax, [esp + 0x2b4]
push edx
push eax
mov ecx, ebp
call fcn.11d11950
mov esi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d0070d
lea ecx, [esp + 0x6b8]
push esi
lea edx, [esp + 0x2ac]
push ecx
push edx
push 0x3d70
push str._CSafeDoc::OnMoveFileExW__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], edi
jmp 0x11d020c2
test eax, eax
je 0x11d00748
push edi
push 0x3daa
push str._CSafeDoc::OnMoveFileExW__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push edi
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 5
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0xa48], 2
call fcn.11e7f280
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11d020cd
xor esi, esi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xa2]
mov word [esp + 0xa0], si
mov word [esp + 0x4b0], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x4b2]
xor ebx, ebx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x58], esi
mov dword [esp + 0x88], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x7c], esi
stosw word es:[edi], ax
mov dword [esp + 0x54], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x8c], esi
mov dword [esp + 0x1c], esi
call fcn.11e923e0
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0xc
call fcn.11e923e0
push 0xffffffffffffffdd
lea ecx, [esp + 0x74]
mov byte [esp + 0xa4c], 0xd
call fcn.11e15fa0
mov ecx, 0x1212b5c0
mov byte [esp + 0xa48], 0xe
call fcn.11d811f0
test eax, eax
je 0x11d00869
cmp dword [0x12133f80], esi
je 0x11d00869
mov eax, dword [0x12126854]
push eax
push str.__s__CSafeDoc::OnMoveFileExW___n
push str.OutlineProtect
push 4
call fcn.11ca5810
add esp, 0x10
mov edi, dword [esp + 0xa58]
mov ecx, dword [esp + 0xa54]
mov ebp, dword [esp + 0x5c]
push esi
push edi
push ecx
mov ecx, ebp
call fcn.11d0f0d0
lea edx, [esp + 0xa0]
push 0x104
push edx
push edi
call fcn.11dbcbf0
add esp, 0xc
mov ecx, 0x1212b5c0
push esi
push esi
push esi
push esi
push esi
call fcn.11d68760
push eax
lea eax, [esp + 0xb8]
push eax
mov ecx, ebp
call fcn.11ce4490
mov edx, dword [esp + 0xa54]
lea ecx, [esp + 0x4b0]
push 0x104
push ecx
push edx
call fcn.11dbcbf0
add esp, 0xc
lea eax, [esp + 0x8c]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x2c]
push esi
push eax
push esi
push ecx
push edx
mov ecx, 0x1212b5c0
mov dword [esp + 0x40], esi
mov dword [esp + 0x38], esi
call fcn.11d68760
push eax
lea eax, [esp + 0x4c8]
push eax
mov ecx, ebp
call fcn.11ce4490
lea ecx, [esp + 0x88]
lea edx, [esp + 0x4b0]
push ecx
push edx
mov ecx, ebp
call fcn.11d0ec10
mov dword [esp + 0x18], eax
lea eax, [esp + 0xa0]
push 0xffffffffffffffff
push eax
mov ecx, 0x1212b5c0
call fcn.11d6a6d0
test eax, eax
jne 0x11d011f1
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11d009bd
cmp dword [esp + 0x18], esi
jne 0x11d009bd
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11d00be2
push esi
push esi
lea ecx, [esp + 0x4b8]
push esi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11d00be2
lea edx, [esp + 0x4b0]
mov edi, 1
push esi
push edx
mov ecx, ebp
mov dword [esp + 0x1c], edi
call fcn.11d0c690
test eax, eax
je 0x11d009bd
lea eax, [esp + 0x4b0]
push 0x104
push eax
mov dword [esp + 0x20], edi
call fcn.11d70c00
add esp, 8
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
jne 0x11d00c0b
mov ecx, 0x1212b458
call fcn.11df4380
test eax, eax
je 0x11d00aa5
push 0x12119948
lea ecx, [esp + 0x34]
call fcn.11e7eae0
mov bl, 0xf
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84ba0
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], 0x10
push ecx
push str._UserAppData_Excel11.xlb
call fcn.11d6d940
mov eax, dword [esp + 0x9c]
add esp, 8
cmp eax, esi
jle 0x11d00a3d
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x30]
push edx
call fcn.11e7f410
lea eax, [esp + 0x30]
lea ecx, [esp + 0x10]
push eax
call fcn.11e7e880
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xa0]
push ecx
push edx
mov byte [esp + 0xa50], 0x11
call fcn.11e9bad0
add esp, 8
test eax, eax
jne 0x11d0127e
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x10
call fcn.11e7f280
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0xa48], 0xe
call fcn.11e7f280
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x4b0]
push eax
push ecx
call fcn.11cf9840
add esp, 8
test eax, eax
jne 0x11d01343
cmp dword [esp + 0x2c], esi
je 0x11d00bf3
cmp dword [esp + 0x24], esi
je 0x11d00bf3
lea edx, [esp + 0xa0]
mov ecx, ebp
push edx
call fcn.11d0f080
test eax, eax
je 0x11d00b05
lea eax, [esp + 0xa0]
push esi
push eax
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11d00bf3
cmp dword [0x12133f80], esi
je 0x11d00b37
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_____s__is_forbidden__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
xor esi, esi
call fcn.11df4380
test eax, eax
je 0x11d00b8f
lea eax, [esp + 0xa0]
push str.vb.tmp
push eax
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11d00b8f
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00b8a
lea ecx, [esp + 0xa0]
push ecx
push 0x3e5b
push str.OnMoveFileExW_Excel_vb_temp_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
mov esi, 1
mov ecx, 0x1212b458
call fcn.11df4470
test eax, eax
je 0x11d00beb
lea edx, [esp + 0xa0]
push str._normal.dotm
push edx
call fcn.11e9bad0
add esp, 8
test eax, eax
je 0x11d00beb
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00bf3
lea eax, [esp + 0xa0]
push eax
push 0x3e69
push str.OnMoveFileExW_Winword_normal.dotm_Line:_d__File__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x14
jmp 0x11d00bf3
mov dword [esp + 0x14], esi
jmp 0x11d009bd
test esi, esi
je 0x11d0138d
xor esi, esi
lea ecx, [esp + 0x4b0]
push esi
push esi
push esi
push esi
push esi
push 1
push ecx
mov ecx, ebp
call fcn.11ce4490
cmp dword [0x12133f80], esi
je 0x11d00c34
lea edx, [esp + 0x4b0]
push edx
push 0x3e7b
push str.CSafeDoc::OnMoveFileExW_Line:_d_File:_s_AddPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x34]
call fcn.11e923e0
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 0x12
call fcn.11e923e0
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x20]
lea ecx, [esp + 0x34]
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x4bc]
lea esi, [ebp + 0x8c]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0xa5c], 0x13
call fcn.11cab790
test eax, eax
je 0x11d00c9c
lea edx, [esp + 0x20]
lea eax, [esp + 0x34]
push edx
lea ecx, [esp + 0x4b4]
push eax
push ecx
mov ecx, esi
call fcn.11caa980
lea edx, [esp + 0xa0]
push 0
push edx
mov ecx, ebp
call fcn.11d0ec10
push 0
push 0
push 3
mov edi, eax
push 0
push 7
lea eax, [esp + 0x4c4]
push bind
push eax
mov dword [esp + 0x74], edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
push 0
cmp esi, 0xffffffff
push edi
je 0x11d00d1e
lea ecx, [esp + 0x5c]
lea edx, [esp + 0xa8]
push ecx
push esi
push edx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x38], ebx
jne 0x11d00d15
push esi
mov ecx, 0x1212b5c0
call fcn.11d72070
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x38], ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x11d00d42
lea eax, [esp + 0x5c]
lea ecx, [esp + 0xa8]
push eax
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
mov ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
mov dword [esp + 0x38], ebx
mov eax, dword [esp + 0x54]
test eax, eax
je 0x11d00f16
xor ebx, ebx
mov dword [esp + 0x38], ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0xa48], 0x12
call fcn.11e92540
lea ecx, [esp + 0x34]
mov byte [esp + 0xa48], 0xe
call fcn.11e92540
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
xor esi, esi
lea ecx, [esp + 0x6c]
call fcn.11e923e0
lea ecx, [esp + 0x80]
mov byte [esp + 0xa48], 0x17
call fcn.11e923e0
mov byte [esp + 0xa48], 0x18
push 0xffffffffffffffdd
lea ecx, [esp + 0x74]
mov dword [esp + 0x34], esi
xor edi, edi
mov dword [esp + 0x88], esi
call fcn.11e15fa0
lea ecx, [esp + 0x4b0]
mov byte [esp + 0xa48], 0x19
push ecx
call fcn.11dbb4d0
add esp, 4
test al, 0x10
jne 0x11d014cd
mov al, byte [esp + 0xa5c]
test al, 2
je 0x11d014cd
test al, 1
jne 0x11d00e12
lea edx, [esp + 0xa0]
push esi
push edx
call fcn.11dbb630
add esp, 8
test eax, eax
jne 0x11d014cd
cmp dword [esp + 0x58], esi
jne 0x11d00e22
cmp dword [esp + 0x18], esi
je 0x11d014cd
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x4b0]
push eax
push ecx
call fcn.11cf9730
add esp, 8
test eax, eax
jne 0x11d014cd
cmp dword [esp + 0x18], esi
je 0x11d00e61
lea edx, [esp + 0x4b0]
push esi
push edx
call fcn.11ee5500
add esp, 8
test eax, eax
je 0x11d01409
test byte [esp + 0xa5c], 4
jne 0x11d014cd
cmp dword [esp + 0x18], esi
jne 0x11d00ead
cmp dword [esp + 0x58], esi
je 0x11d00ead
cmp dword [esp + 0x50], esi
jne 0x11d00ead
cmp dword [esp + 0x54], esi
jne 0x11d00ead
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x80]
lea ecx, [esp + 0x6c]
push eax
push ecx
push esi
lea eax, [esp + 0xac]
push edx
push eax
lea ecx, [ebp + 0x8c]
call fcn.11cab790
mov edi, 1
lea ecx, [esp + 0x84]
push edi
lea edx, [esp + 0xa4]
push ecx
lea eax, [esp + 0x4b8]
push edx
push eax
mov ecx, ebp
call fcn.11d11890
mov ecx, dword [0x12133f80]
mov dword [esp + 0x30], eax
cmp ecx, esi
je 0x11d014cd
mov ecx, dword [esp + 0x84]
lea edx, [esp + 0xa0]
push ecx
push eax
lea eax, [esp + 0x4b8]
push edx
push eax
push str._CSafeDoc::OnMoveFileExW__src:__s__dst:__s__bRet__d__bMoveFail__d_
push str.SafeDoc3
push 4
call fcn.11ca5810
add esp, 0x1c
jmp 0x11d014cd
test ebx, ebx
je 0x11d00f5c
mov eax, dword [esp + 0x18]
test eax, eax
je 0x11d00d54
push 0
push eax
push 0
lea edx, [esp + 0x4bc]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d6cfd0
test eax, eax
je 0x11d00d54
lea eax, [esp + 0xa0]
push eax
call fcn.11dd8200
add esp, 4
jmp 0x11d00d54
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11d00fc6
test edi, edi
jne 0x11d01049
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11d011e4
push edi
push edi
lea ecx, [esp + 0xa8]
push edi
push ecx
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11d011e4
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], 1
test eax, eax
je 0x11d00fc6
lea edx, [esp + 0xa0]
push 0x104
push edx
call fcn.11d70c00
add esp, 8
test edi, edi
jne 0x11d01041
mov eax, dword [esp + 0x18]
test eax, eax
je 0x11d01041
call fcn.11dd8bc0
test eax, eax
je 0x11d01041
lea eax, [esp + 0xa0]
mov ecx, 0x1212ae60
push eax
call fcn.11d598c0
test eax, eax
je 0x11d01041
push edi
lea ecx, [esp + 0xa4]
push 3
lea edx, [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.11d0f1e0
mov eax, dword [esp + 0x14]
mov byte [esp + 0xa48], 0x14
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11d01030
push 1
push eax
lea eax, [esp + 0xa8]
mov ecx, 0x1212ae60
push eax
call fcn.11d592e0
lea ecx, [esp + 0x14]
mov byte [esp + 0xa48], 0x13
call fcn.11e7f280
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x11d0106a
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0xa0]
push edi
push ecx
lea eax, [esp + 0x4b8]
push edx
push eax
mov ecx, ebp
call fcn.11d0c300
mov dword [esp + 0x7c], eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d01094
lea ecx, [esp + 0xa0]
push ecx
push 0x3ecc
push str.CSafeDoc::OnMoveFileExW_Line:_d_File:_s_AddPolicy2_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0x40]
lea eax, [esp + 0x3c]
push edx
push eax
push ecx
lea edx, [esp + 0xac]
push edi
push edx
lea ecx, [ebp + 0x8c]
call fcn.11cab790
test edi, edi
jne 0x11d00d54
lea ecx, [esp + 0x34]
call fcn.11e925e0
test eax, eax
ja 0x11d010dd
lea ecx, [esp + 0x20]
call fcn.11e925e0
test eax, eax
jbe 0x11d00d54
lea ecx, [esp + 0x10]
call fcn.11e923e0
lea ecx, [esp + 0x30]
mov byte [esp + 0xa48], 0x15
call fcn.11e923e0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x4b4]
push ecx
push edx
mov ecx, 0x1212b5c0
mov byte [esp + 0xa54], 0x16
call fcn.11d70140
test eax, eax
je 0x11d011bd
lea ecx, [esp + 0x10]
call fcn.11e925e0
lea ecx, [esp + 0x34]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11d011b5
lea ecx, [esp + 0x34]
call fcn.11e925e0
lea ecx, [esp + 0x10]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x34]
mov edi, eax
call fcn.11e92ce0
mov dword [esp + 0x14], esi
mov esi, eax
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x11d011b5
lea ecx, [esp + 0x30]
call fcn.11e925e0
lea ecx, [esp + 0x20]
mov esi, eax
call fcn.11e925e0
cmp eax, esi
jne 0x11d011b5
lea ecx, [esp + 0x20]
call fcn.11e925e0
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.11e92ce0
lea ecx, [esp + 0x20]
mov edi, eax
call fcn.11e92ce0
mov dword [esp + 0x14], esi
mov esi, eax
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x11d011bd
mov dword [esp + 0x1c], 1
lea ecx, [esp + 0x30]
mov byte [esp + 0xa48], 0x15
call fcn.11e92540
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x13
call fcn.11e92540
jmp 0x11d00d54
mov dword [esp + 0x50], 0
jmp 0x11d00fc6
mov eax, dword [0x12133f80]
cmp eax, esi
je 0x11d01216
lea eax, [esp + 0xa0]
push eax
push str.CSafeDoc::OnMoveFileExW___IsMatchRealFilterFileExceptSaveAs_szNewLongFileName__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x10
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
jne 0x11d01260
cmp dword [0x12133f80], esi
je 0x11d01241
push str.OnMoveFileExW___Not_HandleDoc__
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0xc
mov ebx, 1
lea ecx, [esp + 0x70]
mov dword [esp + 0x38], ebx
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
jmp 0x11d00d89
mov dword [esp + 0x54], 1
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
jmp 0x11d00d89
cmp dword [0x12133f80], esi
je 0x11d012ac
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xa0]
push ecx
push edx
push 0x3e38
push str._CSafeDoc::OnMoveFileExW__Line:_d__Filter_File__s__Patern__s_
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x10
call fcn.11e7f280
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], bl
call fcn.11e84bb0
lea ecx, [esp + 0x30]
mov byte [esp + 0xa48], 0xe
call fcn.11e7f280
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
mov eax, 1
jmp 0x11d020cd
cmp dword [0x12133f80], esi
je 0x11d01375
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_____s__is_forbidden_MSOfficeModify__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0xa50]
lea ecx, [esp + 0x4b0]
push ecx
mov dword [eax + 0x10], 5
jmp 0x11d013a3
mov edx, dword [esp + 0xa50]
mov eax, dword [esp + 0xa54]
push eax
mov dword [edx + 0x10], 5
mov ecx, ebp
call fcn.11d18ce0
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0xd
call fcn.11e15fd0
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11d020cd
cmp dword [0x12133f80], esi
je 0x11d0143b
mov eax, dword [0x12126854]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x4b0]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_____s__is_forbidden__SrcFile_Is_Broken__n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0xa50]
lea ecx, [esp + 0x70]
mov dword [eax + 0x10], 5
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
lea ecx, [esp + 0x80]
mov byte [esp + 0xa48], 0x17
call fcn.11e92540
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa48], 0xd
call fcn.11e92540
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11d020cd
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
mov ecx, dword [esp + 0xa54]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov edx, dword [esp + 0x10]
mov byte [esp + 0xa48], 0x1a
push edx
call fcn.11dbbe80
add esp, 4
test al, 0x10
je 0x11d01535
mov eax, dword [esp + 0x10]
mov ecx, ebp
push eax
call fcn.11d1feb0
cmp dword [0x12133f80], esi
je 0x11d01535
mov ecx, dword [esp + 0x10]
push ecx
push str._CSafeDoc::MoveFileExW__1001___s_
push str.IPG_5008
push 4
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x18
call fcn.11e7f280
cmp edi, esi
je 0x11d01557
cmp dword [esp + 0x84], esi
je 0x11d01647
lea ecx, [esp + 0x44]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x24]
push eax
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x30]
push ecx
xor ebp, ebp
push edx
push edi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x24], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x34]
add esp, 0x10
cmp eax, ebp
je 0x11d015e3
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0xa5c]
mov dword [esi + 0x24], edx
push ecx
lea edx, [esp + 0xa4]
lea ecx, [esp + 0x4b4]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x10]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], edx
mov dword [esi + 0xc], ebp
jmp 0x11d0162d
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11d0162d
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0xa5c]
lea ecx, [esp + 0xa0]
push eax
lea edx, [esp + 0x4b4]
push ecx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d0162d
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x14]
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], eax
call fcn.11e16040
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
xor esi, esi
mov ecx, 0x1212b5c0
call fcn.11d92e10
test eax, eax
je 0x11d01663
cmp ebx, esi
je 0x11d01663
xor ebx, ebx
mov dword [esp + 0x54], 1
cmp dword [esp + 0x30], esi
je 0x11d01e1b
mov ecx, 0x1212b5c0
call fcn.11d811f0
test eax, eax
je 0x11d0169f
lea ecx, [esp + 0x4b0]
push ecx
call fcn.11df0b60
add esp, 4
test eax, eax
je 0x11d0169f
lea edx, [esp + 0xa0]
push edx
call fcn.11df0940
add esp, 4
cmp dword [esp + 0x8c], esi
je 0x11d0172c
lea eax, [ebp + 4]
push 1
push eax
lea ecx, [esp + 0x78]
call fcn.11e8c590
mov eax, dword [ebp + 0x18]
xor edi, edi
cmp eax, esi
mov byte [esp + 0xa48], 0x1b
jle 0x11d0171b
mov esi, dword [esp + 0x5c]
xor ebp, ebp
mov ecx, dword [esi + 0x14]
lea edx, [esp + 0x4b0]
push edx
mov eax, dword [ecx + ebp + 0x40]
push eax
call fcn.11e67d22
add esp, 8
test eax, eax
je 0x11d016fb
mov eax, dword [esi + 0x18]
inc edi
add ebp, 0x6c
cmp edi, eax
jl 0x11d016d2
jmp 0x11d01715
mov edx, dword [esi + 0x14]
lea edi, [edi + edi*2]
lea eax, [esp + 0xa0]
lea ecx, [edi + edi*8]
push eax
lea ecx, [edx + ecx*4 + 0x40]
call fcn.11e7f500
mov ebp, dword [esp + 0x5c]
xor esi, esi
lea ecx, [esp + 0x70]
mov byte [esp + 0xa48], 0x18
call fcn.11e8c5f0
push 0xffffffffffffffdd
lea ecx, [esp + 0x94]
call fcn.11e15fa0
mov eax, dword [esp + 0x54]
mov byte [esp + 0xa48], 0x1c
cmp eax, esi
mov eax, dword [esp + 0x18]
je 0x11d018e2
cmp eax, esi
je 0x11d01e05
push 1
push 0
push 0
push 0
lea eax, [esp + 0x20]
push 0
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x2c], 0
call fcn.11d0a950
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x11d01836
test ecx, ecx
jne 0x11d01836
mov ebx, dword [esp + 0xa58]
xor esi, esi
push ebx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11d017c0
test al, 1
je 0x11d017c0
mov esi, 1
push esi
push 0
push ebx
call fcn.11dbb440
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d017e4
mov eax, dword [0x12126854]
push ebx
push eax
push str.__s__OnMoveFileExW__s__DecryptFileEx
push str.office
push 1
call fcn.11ca5810
add esp, 0x14
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
mov word [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
push 1
lea edx, [esp + 0x6bc]
push 0xffffffffffffffff
push edx
push ebx
stosw word es:[edi], ax
call fcn.11ee4b50
add esp, 0x10
test esi, esi
je 0x11d01e05
mov eax, dword [esp + 0xa58]
push 0
push 1
push eax
call fcn.11dbb440
add esp, 0xc
jmp 0x11d01e05
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d01865
mov ecx, dword [esp + 0xa58]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_:_CheckAccessRight_failed__n
push str.SafeDoc
push 8
call fcn.11ca5810
mov ecx, dword [esp + 0x24]
add esp, 0x14
test ecx, ecx
je 0x11d01e05
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d01899
mov edx, dword [esp + 0xa58]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnMoveFileExW__s_:_No_Access_right__Result:_lu_n
push str.SafeDoc
push 4
call fcn.11ca5810
add esp, 0x18
mov ecx, 0x1212b458
call fcn.11df5090
test eax, eax
jne 0x11d018c2
push eax
mov eax, dword [esp + 0xa5c]
push eax
mov ecx, 0x1212b5c0
call fcn.11d69000
test eax, eax
jne 0x11d01e05
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xa58]
push 0
push 2
push ecx
push edx
mov ecx, 0x1212b158
call fcn.11dbfe50
jmp 0x11d01e05
cmp eax, esi
jne 0x11d01a76
cmp ebx, esi
jne 0x11d01c71
mov ecx, 0x1212b5c0
call fcn.11d68760
test eax, eax
je 0x11d01c71
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x34]
push eax
call fcn.11e92500
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0x1d
push ecx
lea ecx, [esp + 0x3c]
call fcn.11e92500
lea ecx, [esp + 0x34]
mov byte [esp + 0xa48], 0x1e
call fcn.11e925e0
test eax, eax
jne 0x11d01964
lea ecx, [esp + 0x38]
call fcn.11e925e0
test eax, eax
jne 0x11d01964
push eax
lea edx, [esp + 0x3c]
lea eax, [esp + 0x38]
push edx
lea ecx, [esp + 0xa8]
push eax
push ecx
mov ecx, ebp
call fcn.11d18db0
lea ecx, [esp + 0x34]
xor ebx, ebx
call fcn.11e925e0
test eax, eax
jbe 0x11d0197e
lea ecx, [esp + 0x34]
call fcn.11e92ce0
mov ebx, eax
lea edx, [esp + 0xa0]
xor ebp, ebp
push edx
call fcn.11dbb4d0
add esp, 4
cmp eax, 0xffffffff
je 0x11d019b1
test al, 1
je 0x11d019b1
mov ebp, 1
lea eax, [esp + 0xa0]
push ebp
push 0
push eax
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x38]
xor esi, esi
call fcn.11e925e0
test eax, eax
jbe 0x11d019cb
lea ecx, [esp + 0x38]
call fcn.11e92ce0
mov esi, eax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x6ba]
mov word [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
push esi
push 1
lea ecx, [esp + 0x6c0]
push 2
push ecx
lea edx, [esp + 0xb0]
push ebx
push edx
stosw word es:[edi], ax
call fcn.11ee4760
add esp, 0x18
mov ecx, 0x1212b5c0
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
call fcn.11d811f0
test eax, eax
je 0x11d01a2c
lea eax, [esp + 0xa0]
push eax
call fcn.11df0940
add esp, 4
test ebp, ebp
je 0x11d01a44
push 0
lea ecx, [esp + 0xa4]
push 1
push ecx
call fcn.11dbb440
add esp, 0xc
lea ecx, [esp + 0x38]
mov byte [esp + 0xa48], 0x1d
call fcn.11e92540
lea ecx, [esp + 0x34]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
mov eax, dword [esp + 0x18]
test eax, eax
je 0x11d01c71
mov ebp, dword [esp + 0x5c]
call fcn.11dd8bc0
test eax, eax
je 0x11d01b27
lea edx, [esp + 0xa0]
mov ecx, 0x1212b5c0
push edx
call fcn.11d72380
test eax, eax
jne 0x11d01ad3
lea eax, [esp + 0x4b0]
push 1
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, ebp
call fcn.11ce4d50
mov eax, dword [esp + 0x14]
mov byte [esp + 0xa48], 0x1f
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x11d01b01
lea ecx, [esp + 0x14]
mov byte [esp + 0xa48], 0x1c
call fcn.11e7f280
lea edx, [esp + 0xa0]
push 0
push edx
call fcn.11ee3a60
add esp, 8
test eax, eax
je 0x11d01b27
push 0
lea eax, [esp + 0xa4]
push 0
push eax
mov ecx, 0x1212ae60
call fcn.11d592e0
jmp 0x11d01b27
push 2
lea ecx, [esp + 0xa4]
push eax
push ecx
mov ecx, 0x1212ae60
call fcn.11d592e0
lea ecx, [esp + 0x14]
mov byte [esp + 0xa48], 0x1c
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d01b51
lea edx, [esp + 0xa0]
push edx
push 0x3fda
push str.CSafeDoc::OnMoveFileExW_Line:_d_File:_s_SetPolicy_r_n
push 0x12028ea0
push 4
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x18]
test eax, eax
je 0x11d01b84
cmp dword [esp + 0x88], 6
jne 0x11d01b84
cmp dword [0x12134db4], 2
jne 0x11d01b84
lea eax, [esp + 0xa0]
push eax
call fcn.11ede350
add esp, 4
test eax, eax
jne 0x11d01c71
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x1c]
test eax, eax
jne 0x11d01bb3
mov ecx, dword [esp + 0x50]
push esi
lea edx, [esp + 0x44]
push ecx
lea eax, [esp + 0x44]
push edx
lea ecx, [esp + 0xac]
push eax
push ecx
lea ecx, [ebp + 0x8c]
call fcn.11cab040
lea ecx, [esp + 0x3c]
call fcn.11e925e0
test eax, eax
je 0x11d01bde
push 1
lea ecx, [esp + 0x40]
call fcn.11e92ce0
lea edx, [esp + 0xa4]
push eax
push edx
call fcn.11ee2b10
add esp, 0xc
jmp 0x11d01c2d
test esi, esi
jne 0x11d01c2d
lea ecx, [esp + 0x1c]
call fcn.11e923e0
lea eax, [esp + 0x1c]
mov byte [esp + 0xa48], 0x20
push eax
call fcn.11cabda0
add esp, 4
lea ecx, [esp + 0x1c]
push 1
call fcn.11e92ce0
lea ecx, [esp + 0xa4]
push eax
push ecx
call fcn.11ee2b10
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
lea ecx, [esp + 0x40]
call fcn.11e925e0
test eax, eax
je 0x11d01c4e
lea ecx, [esp + 0x40]
call fcn.11e92ce0
lea edx, [esp + 0xa0]
push eax
push edx
jmp 0x11d01c69
test esi, esi
jne 0x11d01c71
xor eax, eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
push eax
push ecx
call fcn.11ee75f0
add esp, 8
mov eax, dword [esp + 0x50]
xor esi, esi
cmp eax, esi
jne 0x11d01e05
mov eax, dword [esp + 0x18]
cmp eax, esi
mov eax, dword [esp + 0x58]
je 0x11d01db3
cmp eax, esi
jne 0x11d01e05
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x6b9]
mov byte [esp + 0x6b8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [esp + 0x6b8]
lea eax, [esp + 0xa0]
push edx
push eax
xor ebp, ebp
call fcn.11ee09b0
add esp, 8
test eax, eax
je 0x11d01cd7
lea ebp, [esp + 0x6b8]
mov ebx, dword [esp + 0x7c]
cmp ebx, esi
jne 0x11d01d4b
mov eax, dword [esp + 0xa38]
cmp eax, esi
jbe 0x11d01d4b
push eax
call fcn.11e679bc
mov ebx, eax
add esp, 4
cmp ebx, esi
mov dword [esp + 0x7c], ebx
je 0x11d01d4b
mov ecx, dword [esp + 0xa38]
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
lea edx, [esp + 0xa0]
and ecx, 3
mov dword [esp + 0x24], esi
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0xa38]
lea eax, [esp + 0x24]
push eax
push ecx
push ebx
push edx
call fcn.11ee26e0
add esp, 0x10
test eax, eax
jne 0x11d01d4b
push ebx
call fcn.11e679b1
add esp, 4
xor ebx, ebx
mov dword [esp + 0x7c], ebx
lea ecx, [esp + 0x10]
call fcn.11e923e0
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0xa4]
push eax
push ecx
mov byte [esp + 0xa54], 0x21
call fcn.11ee73d0
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.11e925e0
test eax, eax
jbe 0x11d01d8b
lea ecx, [esp + 0x10]
call fcn.11e92ce0
mov esi, eax
push esi
push ebx
lea edx, [esp + 0xa8]
push ebp
push edx
mov ecx, 0x1212b560
call fcn.11dee5b0
lea ecx, [esp + 0x10]
mov byte [esp + 0xa48], 0x1c
call fcn.11e92540
jmp 0x11d01e05
cmp eax, esi
je 0x11d01e05
lea ecx, [esp + 0x6c]
xor edi, edi
call fcn.11e925e0
test eax, eax
jbe 0x11d01dd1
lea ecx, [esp + 0x6c]
call fcn.11e92ce0
mov edi, eax
lea ecx, [esp + 0x80]
call fcn.11e925e0
test eax, eax
jbe 0x11d01def
lea ecx, [esp + 0x80]
call fcn.11e92ce0
mov esi, eax
push esi
push edi
lea eax, [esp + 0xa8]
push 0
push eax
mov ecx, 0x1212b560
call fcn.11dee620
lea ecx, [esp + 0x90]
mov byte [esp + 0xa48], 0x18
call fcn.11e15fd0
xor esi, esi
mov eax, dword [esp + 0x7c]
cmp eax, esi
je 0x11d01e2c
push eax
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x80]
mov byte [esp + 0xa48], 0x17
call fcn.11e92540
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa48], 0xd
call fcn.11e92540
lea ecx, [esp + 0x40]
mov byte [esp + 0xa48], 0xc
call fcn.11e92540
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa48], 2
call fcn.11e92540
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0xa48], 0xffffffff
call fcn.11e15fd0
mov eax, dword [esp + 0x30]
jmp 0x11d020cd
lea ecx, [esp + 0x44]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea edx, [esp + 0x1c]
lea eax, [esp + 0x24]
push edx
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x30]
push eax
xor ebp, ebp
push ecx
push edi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x34]
add esp, 0x10
cmp eax, ebp
je 0x11d01f30
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0xa5c]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0xa58]
push edx
mov edx, dword [esp + 0xa58]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11d020a3
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11d020a3
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0xa5c]
mov edx, dword [esp + 0xa58]
mov eax, dword [esp + 0xa54]
push ecx
push edx
push eax
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d020a3
jmp 0x11d0209a
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00392
lea ecx, [esp + 0x6b8]
lea edx, [esp + 0x2a8]
push ecx
push edx
push 0x3cb4
push str._CSafeDoc::OnMoveFileExW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_ShareFolder.
push str.NetWorkShareFolder
jmp 0x11d00388
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d00392
push ebx
push esi
push 0x3ca9
push str._CSafeDoc::OnMoveFileExW__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
jmp 0x11d00383
lea ecx, [esp + 0x44]
call fcn.11e16060
mov esi, dword [esp + 0xa50]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x24]
push ecx
mov eax, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x30]
push edx
xor ebp, ebp
push eax
push edi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x34]
add esp, 0x10
cmp eax, ebp
je 0x11d02059
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0xa5c]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0xa58]
push ecx
mov ecx, dword [esp + 0xa58]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], edx
mov dword [esi + 0xc], ebp
jmp 0x11d020a3
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11d020a3
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0xa5c]
mov ecx, dword [esp + 0xa58]
mov edx, dword [esp + 0xa54]
push eax
push ecx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d020a3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x60]
mov byte [esp + 0xa48], 0
call fcn.11e15fd0
mov dword [esp + 0xa48], 0xffffffff
lea ecx, [esp + 0x44]
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0xa40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa3c
ret 0x10