Function at 0x110ffde0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
mov eax, dword [0x111eb774]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov ecx, dword [0x111ed100]
mov ebx, edx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44c], ebx
test ecx, ecx
je 0x110ffe30
test byte [ebp + 8], 4
jne 0x110ffe30
cmp dword [ebp + 0xc], 0
push 0
push 0
je 0x110ffe43
push str.Logging
push str.Client
call fcn.1105dd10
test eax, eax
jne 0x110ffe56
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11161d01
mov esp, ebp
pop ebp
ret
push str.LogToFile
push str.Client
call fcn.1105dd10
test eax, eax
je 0x110ffe30
push edi
push ebx
push esi
call fcn.110f8c80
mov ecx, dword [0x111ed100]
add esp, 0xc
xor ebx, ebx
push ebx
push 1
push str.LogAppend
push str.Client
mov dword [ebp - 0x43c], eax
call fcn.1105dd10
or dword [0x111f06bc], eax
mov ecx, dword [0x111ed100]
push ebx
push 0x100
lea edx, [ebp - 0x234]
push edx
mov dword [ebp - 0x440], ebx
mov eax, dword [ecx]
mov eax, dword [eax + 4]
push str.LogfileUser
push str.Client
call eax
push 0x20
lea ecx, [ebp - 0x34]
push ecx
push str.dd_MMM_yy
push ebx
push ebx
push 0x400
call dword [0x11193458]
push 0x10
lea edx, [ebp - 0x14]
push edx
push ebx
push ebx
push ebx
push 0x400
call dword [0x1119345c]
mov eax, dword [0x111ed308]
cmp byte [eax + 0x30], bl
je 0x110fff06
push ebx
push str..picdev.sys
mov byte [eax + 0x30], bl
call fcn.111672e3
mov ecx, dword [0x111ed308]
add esp, 8
test eax, eax
sete al
mov byte [ecx + 0x31], al
mov ecx, dword [0x111ed100]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push ebx
push 0x100
lea eax, [ebp - 0x134]
push eax
push str.Logfile
push str.Client
call edx
cmp byte [ebp - 0x134], bl
jne 0x110fff60
mov eax, dword [str.client32.log]
mov ecx, dword [0x1119b340]
mov edx, dword [0x1119b344]
mov dword [ebp - 0x134], eax
mov al, byte [0x1119b348]
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], edx
mov byte [ebp - 0x128], al
lea ecx, [ebp - 0x134]
call fcn.110f9220
mov esi, eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x110fff70
sub eax, edx
cmp eax, 0x100
jb 0x110fff97
push 0x4c3
push str.PLATFORM.CPP
push str._tcslen_pFillText_____tsizeof_buf_
call fcn.11029450
add esp, 0xc
lea edx, [ebp - 0x134]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x110fffa1
push esi
call fcn.111618c1
lea ecx, [ebp - 0x134]
push 1
push ecx
call fcn.11144dc0
add esp, 0xc
mov esi, eax
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x448], ebx
cmp dword [ebp - 0x440], ebx
jne 0x111000e0
cmp byte [ebp - 0x234], bl
je 0x11100115
cmp byte [esi], 0x5c
jne 0x111000e6
cmp byte [esi + 1], 0x5c
jne 0x111000e6
lea edx, [ebp - 0x234]
push 0x2f
push edx
call fcn.11081a70
add esp, 8
cmp eax, ebx
je 0x11100031
push 0x100
lea ecx, [ebp - 0x438]
mov byte [eax], bl
push ecx
inc eax
push eax
push ebx
call fcn.110ee620
add esp, 0x10
lea edi, [ebp - 0x438]
jmp 0x11100036
mov edi, 0x11194244
lea edx, [ebp - 0x338]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x11100040
lea edx, [ebp - 0x338]
push 0x5c
push edx
call fcn.11081b40
add esp, 8
cmp eax, ebx
je 0x11100061
mov byte [eax], bl
push ebx
lea ecx, [ebp - 0x234]
push ecx
push edi
lea edx, [ebp - 0x470]
lea eax, [ebp - 0x338]
mov esi, 1
push edx
mov dword [ebp - 0x470], 2
mov dword [ebp - 0x46c], esi
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x464], ebx
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x454], ebx
call fcn.11160020
test eax, eax
jne 0x111000bf
mov dword [ebp - 0x448], esi
mov ecx, 0x100
lea eax, [ebp - 0x438]
lea ebx, [ebx]
mov byte [eax], bl
add eax, esi
sub ecx, esi
jne 0x111000d0
cmp dword [ebp - 0x448], ebx
jne 0x11100115
mov esi, dword [ebp - 0x444]
cmp byte [ebp - 0x234], bl
je 0x11100115
mov ecx, dword [0x111ed308]
mov eax, dword [ecx]
mov eax, dword [eax + 0xb0]
lea edx, [ebp - 0x440]
push edx
lea edx, [ebp - 0x234]
push edx
mov edx, dword [ebp + 8]
or edx, 4
push edx
call eax
jmp 0x1110011b
mov esi, dword [ebp - 0x444]
mov eax, 0x111a1ee0
cmp dword [0x111f06bc], ebx
jne 0x1110012d
mov eax, 0x111983c0
push eax
push esi
call fcn.11163fed
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x111001f2
mov ecx, dword [0x111ed100]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push eax
push 0x100
lea eax, [ebp - 0x134]
push eax
push str.Logfile2
push str.Client
call edx
lea ecx, [ebp - 0x134]
call fcn.110f9220
mov edi, eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11100175
sub eax, edx
cmp eax, 0x100
jb 0x1110019c
push 0x503
push str.PLATFORM.CPP
push str._tcslen_pFillText_____tsizeof_buf_
call fcn.11029450
add esp, 0xc
lea edx, [ebp - 0x134]
mov eax, edi
sub edx, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x111001a6
push edi
call fcn.111618c1
push esi
call fcn.111618c1
lea eax, [ebp - 0x134]
push 1
push eax
call fcn.11144dc0
add esp, 0x10
cmp dword [0x111f06bc], 0
mov dword [ebp - 0x444], eax
mov ecx, 0x111a1ee0
jne 0x111001e6
mov ecx, 0x111983c0
push ecx
push eax
call fcn.11163fed
add esp, 8
mov ebx, eax
xor ecx, ecx
test ebx, ebx
setne cl
mov dword [ebp - 0x450], ecx
test ebx, ebx
jne 0x1110028a
mov ecx, dword [0x111ed100]
push ebx
push ebx
push str.DontconnectIfNoLogfile
push str.Client
call fcn.1105dd10
test eax, eax
je 0x1110022c
mov dword [0x111ed1b4], 1
push 0x111a1ee0
push str..picdev.sys
call fcn.11163fed
mov esi, eax
add esp, 8
test esi, esi
je 0x111003c6
push esi
call fcn.11169287
push eax
call fcn.11169191
mov ecx, dword [ebp - 0x43c]
mov edi, eax
mov eax, dword [ebp - 0x44c]
add esp, 8
lea edx, [ebp - 0x14]
test eax, eax
je 0x1110038c
push eax
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push str._s___s___s___d___n
push esi
call fcn.1116642b
add esp, 0x18
jmp 0x111003a0
mov edx, dword [0x111ed308]
cmp byte [edx + 0x31], 0
je 0x11100337
push 0x111a037c
push str..picdev.sys
call fcn.11163fed
mov edi, eax
add esp, 8
test edi, edi
je 0x11100337
push 0x2000
call fcn.11162b51
mov esi, eax
add esp, 4
test esi, esi
je 0x1110031b
push edi
call fcn.11167435
add esp, 4
test eax, eax
jne 0x11100312
push 0x2000
push 0
push esi
call fcn.11161d20
push edi
push 0x2000
push 1
push esi
call fcn.11165b72
add esp, 0x1c
test eax, eax
je 0x11100305
push ebx
push eax
push 1
push esi
call fcn.111648da
add esp, 0x10
push edi
call fcn.11167435
add esp, 4
test eax, eax
je 0x111002d6
push esi
call fcn.11162be5
add esp, 4
push edi
call fcn.11163db7
push str..picdev.sys
call fcn.11164720
mov eax, dword [0x111ed308]
add esp, 8
mov byte [eax + 0x31], 0
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x43c]
lea edx, [ebp - 0x14]
test eax, eax
je 0x1110036d
push eax
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push str._s___s___s___d___n
push ebx
call fcn.1116642b
add esp, 0x18
push ebx
call fcn.11163db7
add esp, 4
jmp 0x11100403
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push str._s___s___s__n
push ebx
call fcn.1116642b
add esp, 0x14
push ebx
call fcn.11163db7
add esp, 4
jmp 0x11100403
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push str._s___s___s__n
push esi
call fcn.1116642b
add esp, 0x14
push esi
call fcn.11163db7
mov ecx, dword [0x111ed308]
add esp, 4
mov byte [ecx + 0x31], 1
test edi, edi
jne 0x11100403
push 2
push str..picdev.sys
call dword [0x11193450]
jmp 0x11100403
cmp dword [0x111f079c], 0
jne 0x11100403
cmp dword [0x111ed108], 0
je 0x11100403
mov edx, dword [ebp + 8]
mov eax, dword [0x111ed308]
push str..picdev.sys
push 1
push 0xc00033f8
or edx, 4
push edx
push eax
mov dword [0x111f079c], 1
call fcn.110ff6c0
add esp, 0x14
cmp dword [ebp - 0x448], 0
je 0x1110041c
push 0
push 0
lea ecx, [ebp - 0x338]
push ecx
call fcn.1116001a
cmp dword [ebp - 0x440], 0
je 0x11100442
mov ecx, dword [0x111ed308]
mov edx, dword [ecx]
mov edx, dword [edx + 0xb0]
lea eax, [ebp - 0x440]
push eax
mov eax, dword [ebp + 8]
push 0
push eax
call edx
mov eax, dword [ebp - 0x444]
push eax
call fcn.111618c1
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.111618c1
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x450]
add esp, 8
pop edi
pop esi
xor ecx, ebp
mov dword [0x111f06bc], 1
pop ebx
call fcn.11161d01
mov esp, ebp
pop ebp
ret