Function at 0x11e5fad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fbf4e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x64
push ebx
push esi
push edi
lea ecx, [esp + 0x38]
call fcn.11e84ba0
lea ecx, [esp + 0x28]
mov dword [esp + 0x78], 0
call fcn.11e84ba0
mov al, byte [0x12132f98]
mov byte [esp + 0x78], 1
test al, 1
jne 0x11e5fb35
mov dl, al
mov ecx, 0x12132f78
or dl, 1
mov byte [0x12132f98], dl
call fcn.11e8c060
push 0x11e600e0
call fcn.11e67970
add esp, 4
mov al, byte [0x12132f98]
test al, 2
jne 0x11e5fb60
mov dl, al
mov ecx, 0x12132f68
or dl, 2
mov byte [0x12132f98], dl
call fcn.11e84ba0
push 0x11e600d0
call fcn.11e67970
add esp, 4
mov cl, byte [0x12132f98]
mov al, 4
test al, cl
jne 0x11e5fb8d
mov dl, cl
mov ecx, 0x12132f58
or dl, al
mov byte [0x12132f98], dl
call fcn.11e84ba0
push 0x11e600c0
call fcn.11e67970
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x12132fd0]
test ecx, ecx
je 0x11e5fc23
cmp eax, ecx
jb 0x11e5fc23
mov edx, eax
sub edx, ecx
cmp edx, 0xea60
jae 0x11e5fc23
push 1
push 0x12132f78
lea ecx, [esp + 0x24]
call fcn.11e8c590
push 0x12132f68
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7c], 0xf
call fcn.11e84f30
push 0x12132f58
lea ecx, [esp + 0x2c]
call fcn.11e84f30
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5fc0d
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
push str.CSDTransformClient::IsGsDesEncrypt_exc_count__d__inc_count__d_
or ebx, 0xffffffff
push str.SDTransform
push ebx
call fcn.11ca5810
add esp, 0x14
jmp 0x11e5fc10
or ebx, 0xffffffff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x78], 1
call fcn.11e8c5f0
jmp 0x11e5ff95
mov edx, dword [0x11fd6250]
mov dword [0x12132fd0], eax
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 2
call fcn.11dfcb20
push 1
push 0
push ecx
mov byte [esp + 0x84], 3
mov ecx, esp
mov dword [esp + 0x24], esp
push str.SDFile_Transform_Encrypt_Inc
call fcn.11e7eae0
lea ecx, [esp + 0x54]
mov byte [esp + 0x84], 3
call fcn.11dfcd30
mov eax, dword [esp + 0x6c]
mov esi, 0xf0000001
cmp eax, esi
jne 0x11e5fc89
lea eax, [esp + 0x10]
lea ecx, [esp + 0x48]
push eax
call fcn.11dfd270
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5fcab
mov ecx, dword [esp + 0x10]
push ecx
push str.CSDTransformClient::IsGsDesEncrypt_reg__inc:_r_n_s
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x10
mov edx, dword [0x11fd6250]
mov dword [esp + 0xc], edx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
mov bl, 5
push 0x120f699c
push ecx
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0
call fcn.11e83a20
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x7c], 6
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.11e7f280
mov edx, dword [esp + 0xc]
mov eax, dword [edx - 8]
test eax, eax
je 0x11e5fd74
lea ecx, [esp + 0xc]
call fcn.11e82c90
lea ecx, [esp + 0xc]
call fcn.11e82fb0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11e5fd35
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push edx
lea ecx, [esp + 0x40]
call fcn.11e851b0
lea eax, [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
push 0x120f699c
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e83a20
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x7c], 7
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.11e7f280
mov edx, dword [esp + 0xc]
mov eax, dword [edx - 8]
test eax, eax
jne 0x11e5fd05
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5fd96
mov eax, dword [esp + 0x3c]
push eax
push str.CSDTransformClient::IsGsDesEncrypt_reg__inc_count__d_
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0xc]
mov byte [esp + 0x78], 3
call fcn.11e7f280
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 2
call fcn.11dfcc90
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 1
call fcn.11e7f280
mov ecx, dword [0x11fd6250]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 8
call fcn.11dfcb20
push 1
push 0
push ecx
mov byte [esp + 0x84], 9
mov ecx, esp
mov dword [esp + 0x24], esp
push str.SDFile_Transform_Encrypt_Exc
call fcn.11e7eae0
lea ecx, [esp + 0x54]
mov byte [esp + 0x84], 9
call fcn.11dfcd30
cmp dword [esp + 0x6c], esi
jne 0x11e5fe1a
lea edx, [esp + 0x10]
lea ecx, [esp + 0x48]
push edx
call fcn.11dfd270
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5fe3c
mov eax, dword [esp + 0x10]
push eax
push str.CSDTransformClient::IsGsDesEncrypt_reg__exc:_r_n_s
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x10
mov ecx, dword [0x11fd6250]
mov dword [esp + 0xc], ecx
lea edx, [esp + 0x14]
mov bl, 0xb
push edx
lea eax, [esp + 0x1c]
push 0x120f699c
mov byte [esp + 0x80], bl
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], 0
call fcn.11e83a20
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x7c], 0xc
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.11e7f280
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx - 8]
test eax, eax
je 0x11e5ff05
lea ecx, [esp + 0xc]
call fcn.11e82c90
lea ecx, [esp + 0xc]
call fcn.11e82fb0
mov edx, dword [esp + 0xc]
mov eax, dword [edx - 8]
test eax, eax
je 0x11e5fec6
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0xc]
push eax
push ecx
lea ecx, [esp + 0x30]
call fcn.11e851b0
lea edx, [esp + 0x14]
lea eax, [esp + 0x18]
push edx
push 0x120f699c
push eax
lea ecx, [esp + 0x1c]
call fcn.11e83a20
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x7c], 0xd
call fcn.11e7f410
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.11e7f280
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x11e5fe96
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5ff27
mov edx, dword [esp + 0x2c]
push edx
push str.CSDTransformClient::IsGsDesEncrypt_reg__exc_count__d_
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0xc]
mov byte [esp + 0x78], 9
call fcn.11e7f280
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 8
call fcn.11dfcc90
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 1
call fcn.11e7f280
push 1
push 0x12132f78
lea ecx, [esp + 0x24]
call fcn.11e8c590
lea eax, [esp + 0x38]
mov ecx, 0x12132f68
push eax
mov byte [esp + 0x7c], 0xe
call fcn.11e84f30
lea ecx, [esp + 0x28]
push ecx
mov ecx, 0x12132f58
call fcn.11e84f30
lea ecx, [esp + 0x1c]
mov byte [esp + 0x78], 1
call fcn.11e8c5f0
or ebx, 0xffffffff
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x80]
xor edi, edi
test eax, eax
jle 0x11e5ffc4
mov edx, dword [esp + 0x28]
mov eax, dword [edx + edi*4]
push eax
push esi
call fcn.11e9bad0
add esp, 8
test eax, eax
jne 0x11e5ffe4
mov eax, dword [esp + 0x2c]
inc edi
cmp edi, eax
jl 0x11e5ffa6
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x11e5fff5
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e60082
push esi
push str.CSDTransformClient::IsGsDesEncrypt_eccrypt_All__lpFile__s_
jmp 0x11e60074
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e60036
push esi
push str.CSDTransformClient::IsGsDesEncrypt_no_eccrypt__lpFile__s_
jmp 0x11e60028
xor edi, edi
test eax, eax
jle 0x11e60019
mov eax, dword [esp + 0x38]
mov eax, dword [eax + edi*4]
push eax
push esi
call fcn.11e9bad0
add esp, 8
test eax, eax
jne 0x11e60065
mov eax, dword [esp + 0x3c]
inc edi
cmp edi, eax
jl 0x11e5fffb
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e60036
push esi
push str.CSDTransformClient::IsGsDesEncrypt_no_eccrypt__no_match_inc__lpFile__s_
push str.SDTransform
push ebx
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x28]
mov byte [esp + 0x78], 0
call fcn.11e84bb0
lea ecx, [esp + 0x38]
mov dword [esp + 0x78], ebx
call fcn.11e84bb0
xor eax, eax
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x70
ret
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e60082
push esi
push str.CSDTransformClient::IsGsDesEncrypt_eccrypt__lpFile__s_
push str.SDTransform
push ebx
call fcn.11ca5810
add esp, 0x10
lea ecx, [esp + 0x28]
mov byte [esp + 0x78], 0
call fcn.11e84bb0
lea ecx, [esp + 0x38]
mov dword [esp + 0x78], ebx
call fcn.11e84bb0
mov ecx, dword [esp + 0x70]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x70
ret