Function at 0x11d261e0
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x11fa684d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x440
push ebx
push ebp
push esi
mov dword [esp + 0x20], ecx
push edi
push 2
lea ecx, [esp + 0x38]
call fcn.11e15fa0
mov ebp, dword [esp + 0x468]
mov ebx, dword [esp + 0x464]
test ebp, ebp
mov dword [esp + 0x458], 0
je 0x11d274ec
cmp byte [ebp], 0
je 0x11d274ec
test ebx, ebx
je 0x11d274ec
cmp byte [ebx], 0
je 0x11d274ec
push ebx
lea ecx, [esp + 0x24]
call fcn.11e7e980
mov eax, dword [esp + 0x20]
mov byte [esp + 0x458], 1
push eax
call fcn.11deed60
add esp, 4
test eax, eax
je 0x11d262a8
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26295
mov ecx, dword [esp + 0x20]
mov eax, dword [0x12126854]
push ecx
push eax
push str.__s__CSafeDocProtect::OnMoveFileExA__s_:_Copy_file_from_Decrypt_Directory___ACCESS_DENIED__n
push str.SDProtected
push 8
call fcn.11ca5810
add esp, 0x14
mov edx, dword [esp + 0x460]
mov dword [edx + 0x10], 5
jmp 0x11d26f2e
mov ecx, 0x1212b5c0
call fcn.11d86270
or esi, 0xffffffff
test eax, eax
je 0x11d269b1
xor edx, edx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x42]
mov word [esp + 0x40], dx
mov word [esp + 0x248], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x24a]
push ebx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x14]
stosw word es:[edi], ax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push 0x104
push ecx
push eax
mov byte [esp + 0x464], 2
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 1
call fcn.11e7f280
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x248]
push 0x104
push edx
push eax
mov byte [esp + 0x464], 3
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 1
call fcn.11e7f280
lea eax, [esp + 0x40]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11d263a7
lea ecx, [esp + 0x248]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
jne 0x11d263a7
lea edx, [esp + 0x248]
mov ecx, 0x1212b028
push edx
call fcn.11d139a0
test eax, eax
je 0x11d26b75
lea eax, [esp + 0x40]
push eax
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d27473
lea ecx, [esp + 0x248]
push ecx
call fcn.11df9a50
add esp, 4
test eax, eax
jne 0x11d27473
lea edx, [esp + 0x40]
push edx
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d2743b
lea eax, [esp + 0x248]
push eax
call fcn.11cbba30
add esp, 4
test eax, eax
jne 0x11d2743b
lea ecx, [esp + 0x28]
lea edx, [esp + 0x248]
push ecx
lea eax, [esp + 0x44]
xor edi, edi
push edx
push eax
mov ecx, 0x1212b5c0
mov dword [esp + 0x34], edi
call fcn.11d7ae10
test eax, eax
je 0x11d2643c
lea ecx, [esp + 0x40]
push ecx
call fcn.11dbbe80
add esp, 4
cmp eax, esi
jne 0x11d26c03
lea edx, [esp + 0x2c]
lea eax, [esp + 0x248]
push edx
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0x38], edi
call fcn.11d7a880
test eax, eax
je 0x11d26d7c
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11d2654e
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0xa
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov byte [esp + 0x458], 1
call fcn.11e7f280
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0xb
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov al, byte [esp + 0x46c]
xor edx, edx
cmp esi, 0xffffffff
setne dl
test al, 1
mov esi, edx
jne 0x11d264f1
test esi, esi
jne 0x11d26506
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x11d2654e
test byte [esp + 0x18], 0x10
jne 0x11d26e1b
jmp 0x11d2654e
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d2654e
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0xc
push eax
push 0x9a1
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_DstFile__s__exist__not_replace_existing.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov ecx, 0x1212b458
call fcn.11df4260
test eax, eax
jne 0x11d2656a
mov ecx, 0x1212b458
call fcn.11df5360
test eax, eax
jne 0x11d2657f
lea ecx, [esp + 0x40]
push ecx
call fcn.11dfae20
add esp, 4
test eax, eax
jne 0x11d26eff
push ebx
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0x11
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x10], eax
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11d267c7
mov eax, dword [esp + 0x10]
or esi, 0xffffffff
cmp eax, esi
je 0x11d269b1
push ebp
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0x12
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x18]
mov edi, eax
mov byte [esp + 0x458], 1
call fcn.11e7f280
test byte [esp + 0x10], 0x10
je 0x11d26645
push 0
lea edx, [esp + 0x44]
push 0
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d267ca
push eax
push eax
lea eax, [esp + 0x250]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7b5d0
test eax, eax
jne 0x11d266c8
jmp 0x11d267ca
cmp edi, esi
je 0x11d26657
test byte [esp + 0x46c], 1
je 0x11d2677d
push 0
lea ecx, [esp + 0x44]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d2668a
push eax
lea edx, [esp + 0x24c]
push eax
push edx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
jne 0x11d27052
push 0
lea eax, [esp + 0x44]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11d267ca
push 0
lea ecx, [esp + 0x24c]
push 0
push ecx
mov ecx, 0x1212b5c0
call fcn.11d7b5d0
test eax, eax
je 0x11d270f8
jmp 0x11d267ca
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d266f7
lea edx, [esp + 0x248]
lea eax, [esp + 0x40]
push edx
push eax
push 0x9d4
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_Move_Src_Dir__s__to_Dst_Dir__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebp
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0x13
push eax
call fcn.11dbbe80
add esp, 4
lea ecx, [esp + 0x18]
mov edi, eax
mov byte [esp + 0x458], 1
call fcn.11e7f280
cmp edi, esi
je 0x11d26f5a
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d267ca
push ebp
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov ecx, dword [eax]
mov byte [esp + 0x458], 0x14
push ecx
push 0x9d9
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_Dst__s__exist.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x18]
mov byte [esp + 0x458], 1
call fcn.11e7f280
jmp 0x11d267ca
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d267ca
push ebp
lea ecx, [esp + 0x1c]
call fcn.11e7e980
mov edx, dword [eax]
mov byte [esp + 0x458], 0x19
push edx
push 0x9e9
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Dst_File__s__exist
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x18]
mov byte [esp + 0x458], 1
call fcn.11e7f280
jmp 0x11d267ca
or esi, 0xffffffff
mov eax, dword [esp + 0x10]
cmp eax, esi
je 0x11d269b1
test al, 0x10
je 0x11d269b1
lea eax, [esp + 0x248]
lea ecx, [esp + 0x40]
push eax
push ecx
call fcn.11dbd5a0
add esp, 8
test eax, eax
jne 0x11d269b1
lea edx, [esp + 0x40]
mov ecx, 0x1212b5c0
push edx
call fcn.11d7bec0
test eax, eax
jne 0x11d26828
lea eax, [esp + 0x248]
mov ecx, 0x1212b5c0
push eax
call fcn.11d7bec0
test eax, eax
je 0x11d269b1
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26857
lea ecx, [esp + 0x248]
lea edx, [esp + 0x40]
push ecx
push edx
push 0xa18
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_______CopyDel._Src__s__Dst__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push ebp
lea ecx, [esp + 0x1c]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x45c], 0x1a
call fcn.11e80430
cmp eax, esi
je 0x11d268ab
inc eax
lea ecx, [esp + 0x18]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.11e819c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x45c], 0x1b
call fcn.11e7f410
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 0x1a
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x14]
call fcn.11e7e980
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x45c], 0x1c
call fcn.11e80430
cmp eax, esi
je 0x11d26908
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x1c]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.11e817c0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x45c], 0x1d
call fcn.11e7f410
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26941
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push eax
lea edx, [esp + 0x24c]
push ecx
lea eax, [esp + 0x48]
push edx
push eax
push 0xa26
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Src__s__Dst__s__wstrNewFileNameDir__s__wstrNewFileNameExt__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x20
mov ecx, dword [esp + 0x18]
push 1
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.11ea0a80
add esp, 0xc
test eax, eax
jne 0x11d26a36
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d2698f
mov eax, dword [0x121336c4]
mov ecx, dword [esp + 0x18]
push eax
lea edx, [esp + 0x44]
push ecx
push edx
push 0xa2b
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__CopyDir__s___s__Fail._Err__08x_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 0x1a
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov ecx, 0x1212b0f8
call fcn.11e148f0
test eax, eax
jne 0x11d27355
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.11d24110
test eax, eax
jne 0x11d2725c
test byte [esp + 0x46c], 1
je 0x11d27355
push ebp
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov edx, dword [esp + 0x10]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edx
mov byte [esp + 0x480], 0x26
call fcn.11ee1fb0
add esp, 0x28
test eax, eax
jne 0x11d272e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 1
call fcn.11e7f280
jmp 0x11d27355
push 0x5c
lea ecx, [esp + 0x1c]
call fcn.11e82ba0
push 0x12022ca0
lea ecx, [esp + 0x1c]
call fcn.11e7fed0
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7e980
mov edi, dword [eax]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
mov byte [esp + 0x464], 0x1e
call fcn.11e7f820
mov eax, dword [eax]
push edi
push eax
mov byte [esp + 0x460], 0x1f
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 0x1e
sete byte [esp + 0x33]
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
mov al, byte [esp + 0x33]
test al, al
mov eax, dword [0x12133f80]
je 0x11d2719e
test eax, eax
je 0x11d26b38
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0x464], 0x20
call fcn.11e7f820
mov ecx, dword [edi]
mov edx, dword [eax]
push ecx
push edx
push 0xa36
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Rename__s___s__Fail
push str.SafeDisk
push 4
mov byte [esp + 0x470], 0x21
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x20
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.11e7f820
mov eax, dword [eax]
mov byte [esp + 0x458], 0x22
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
jmp 0x11d2698f
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov esi, eax
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 4
call fcn.11e7e980
push esi
push eax
push 1
mov ecx, 0x1212b510
mov byte [esp + 0x464], 5
call fcn.11df73b0
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 4
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26f26
lea eax, [esp + 0x248]
lea ecx, [esp + 0x40]
push eax
push ecx
push 0x93d
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__MoveFileExA__s___s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x18
jmp 0x11d26f26
xor edi, edi
test al, 0x10
mov eax, dword [esp + 0x28]
je 0x11d26cae
cmp eax, 1
jne 0x11d26c5c
push eax
push eax
lea edx, [esp + 0x250]
push edi
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, 0x1212b028
call fcn.11d129d0
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26d48
lea ecx, [esp + 0x248]
push edi
lea edx, [esp + 0x44]
push ecx
push edx
push 0x967
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Encrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d26d39
cmp eax, 2
jne 0x11d26d4c
push 1
push 0
lea eax, [esp + 0x250]
push 0
lea ecx, [esp + 0x4c]
push eax
push ecx
mov ecx, 0x1212b028
call fcn.11d129d0
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26d48
lea edx, [esp + 0x248]
push edi
lea eax, [esp + 0x44]
push edx
push eax
push 0x96d
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Decrypt..._EncryptFolder__s___s___Suc__d_
jmp 0x11d26d39
cmp eax, 1
jne 0x11d26cf4
push 0
push eax
lea ecx, [esp + 0x250]
push 0
lea edx, [esp + 0x4c]
push ecx
push edx
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26d48
lea eax, [esp + 0x248]
push edi
lea ecx, [esp + 0x44]
push eax
push ecx
push 0x977
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Encrypt..._SafeDiskMoveFile__s___s___Suc__d_
jmp 0x11d26d39
cmp eax, 2
jne 0x11d26d4c
push 0
push 1
lea edx, [esp + 0x250]
push 1
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26d48
lea ecx, [esp + 0x248]
push edi
lea edx, [esp + 0x44]
push ecx
push edx
push 0x97d
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Decrypt..._SafeDiskMoveFile__s___s___Suc__d_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
test edi, edi
jne 0x11d26d54
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
mov eax, edi
jmp 0x11d275d2
cmp dword [0x12133f80], edi
je 0x11d26deb
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, eax
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 8
call fcn.11e7e980
mov ecx, dword [edi]
mov edx, dword [eax]
push ecx
push edx
push 0x98e
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_Forbid_to_rename_SDisk_Foler._Existing__s__New__s_
push str.SafeDisk
push 4
mov byte [esp + 0x470], 9
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 8
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
xor eax, eax
jmp 0x11d275d2
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, dword [eax]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 0xd
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 1
push esi
push edi
push eax
mov ecx, 0x1212b028
mov byte [esp + 0x46c], 0xe
call fcn.11d129d0
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0x458], 0xd
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26ee9
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, eax
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 0xf
call fcn.11e7e980
mov ecx, dword [edi]
mov edx, dword [eax]
push esi
push ecx
push edx
push 0x9a9
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x474], 0x10
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0xf
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
jmp 0x11d275bc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26f26
lea eax, [esp + 0x40]
push eax
push 0x9b8
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__Forbid_operating_on_RealFile__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11d275d2
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, dword [eax]
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 0x15
call fcn.11e7e980
mov eax, dword [eax]
push 1
push 0
push 0
push edi
push eax
mov ecx, 0x1212b028
mov byte [esp + 0x46c], 0x16
call fcn.11d129d0
lea ecx, [esp + 0x14]
mov edi, eax
mov byte [esp + 0x458], 0x15
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d2702a
push ebp
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov ebp, eax
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 0x17
call fcn.11e7e980
mov ecx, dword [ebp]
mov edx, dword [eax]
push edi
push ecx
push edx
push 0x9df
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_EncryptFolder__s___s___bSuc__d_
push str.SafeDisk
push 4
mov byte [esp + 0x474], 0x18
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x17
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x458], 1
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
mov eax, edi
jmp 0x11d275d2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d27081
lea eax, [esp + 0x248]
lea ecx, [esp + 0x40]
push eax
push ecx
push 0x9f3
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_Move_File__s__to_Dst__s___need_decrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x250]
push 1
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d270d0
lea ecx, [esp + 0x248]
push edi
lea edx, [esp + 0x44]
push ecx
push edx
push 0x9f7
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
mov eax, edi
jmp 0x11d275d2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d27127
lea eax, [esp + 0x248]
lea ecx, [esp + 0x40]
push eax
push ecx
push 0xa00
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_Move_File__s__out_to_Dst__s___need_encrypt.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x18
push 0
push 1
lea edx, [esp + 0x250]
push 0
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, 0x1212b028
call fcn.11d11950
mov edi, eax
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d27176
lea ecx, [esp + 0x248]
push edi
lea edx, [esp + 0x44]
push ecx
push edx
push 0xa04
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_SafeDiskMove__s___s___bSuc__d_.
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
mov eax, edi
jmp 0x11d275d2
test eax, eax
je 0x11d271e1
push ebx
lea ecx, [esp + 0x18]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0x23
push eax
push 0xa3d
push str._CSafeDocProtect::OnMoveFileExA__Line:_d__DelDir_Src__s_
push str.SafeDisk
push 4
call fcn.11ca5810
add esp, 0x14
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
push ebx
lea ecx, [esp + 0x18]
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x458], 0x24
push eax
call fcn.11ea07c0
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0x1c
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 0x1a
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x458], 1
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
mov eax, 1
jmp 0x11d275d2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d272ab
push ebp
lea ecx, [esp + 0x28]
call fcn.11e7e980
mov eax, dword [eax]
mov edx, dword [esp + 0x20]
mov ecx, dword [0x12126854]
push eax
push edx
push ecx
push str.__s__CSafeDocProtect::OnMoveFileExA__s_____s__is_forbidden_because_IsUnmovableSafeDoc__n
push str.SDProtected
push 4
mov byte [esp + 0x470], 0x25
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x24]
mov byte [esp + 0x458], 1
call fcn.11e7f280
mov eax, dword [esp + 0x460]
lea ecx, [esp + 0x20]
mov dword [eax + 0x10], 5
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
xor eax, eax
jmp 0x11d275d2
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d2730e
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov eax, dword [0x12126854]
push ecx
push edx
push eax
push str.__s__CSafeDocProtect::OnMoveFileExA__s_____s__is_forbidden__n
push str.SDProtected
push 4
call fcn.11ca5810
add esp, 0x18
mov eax, dword [esp + 0x460]
lea ecx, [esp + 0x10]
mov dword [eax + 0x10], 5
mov byte [esp + 0x458], 1
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], esi
call fcn.11e15fd0
xor eax, eax
jmp 0x11d275d2
mov ecx, dword [esp + 0x470]
call fcn.11e16060
mov esi, dword [esp + 0x460]
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], ecx
lea eax, [esp + 0x10]
mov dword [esp + 0x14], edx
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
je 0x11d273e6
mov edx, dword [esp + 0x28]
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x46c]
push edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
call eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edx
jmp 0x11d27422
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11d27422
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x46c]
push eax
push ebp
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d27422
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x20]
mov byte [esp + 0x458], 0
call fcn.11e7f280
jmp 0x11d275bc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26f26
lea ecx, [esp + 0x248]
lea edx, [esp + 0x40]
push ecx
push edx
push 0x952
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_ShareFolder.
push str.NetWorkShareFolder
push 8
call fcn.11ca5810
add esp, 0x18
jmp 0x11d26f26
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d26f26
push ebp
lea ecx, [esp + 0x18]
call fcn.11e7e980
mov esi, eax
push ebx
lea ecx, [esp + 0x28]
mov byte [esp + 0x45c], 6
call fcn.11e7e980
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push edx
push 0x947
push str._CSafeDocProtect::OnMoveFileExA__Line:_d_ExistFile__s__NewFile__s__Copy_file_from_to_safedisk.
push str.SafeDisk
push 8
mov byte [esp + 0x470], 7
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x24]
mov byte [esp + 0x458], 6
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 1
call fcn.11e7f280
jmp 0x11d26f26
mov ecx, dword [esp + 0x470]
call fcn.11e16060
mov esi, dword [esp + 0x460]
lea edx, [esp + 0x10]
push edx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x30]
lea ecx, [esp + 0x2c]
push eax
push ecx
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
je 0x11d2757d
mov ecx, dword [esp + 0x28]
mov edx, dword [esi + 0xc]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x46c]
push ecx
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x14]
push ebp
push ebx
push esi
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
call eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ecx
jmp 0x11d275b9
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11d275b9
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x46c]
push edx
push ebp
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11d275b9
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x34]
mov dword [esp + 0x458], 0xffffffff
call fcn.11e15fd0
mov eax, esi
mov ecx, dword [esp + 0x450]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x44c
ret 0x14