Function at 0x11169480
Capabilities:
Connect network resource
Delete file
Move file
Read file on windows
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x111e9047
mov eax, dword fs:[0]
push eax
mov eax, 0x1324
call fcn.111d92c0
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x10]
mov edi, ecx
mov ecx, dword [0x1127aa68]
mov esi, edx
mov dword [ebp - 0x128c], esi
test ecx, ecx
je 0x111694ec
test byte [ebp + 8], 4
jne 0x111694ec
cmp dword [ebp + 0xc], 0
push 0
push 0
je 0x1116950a
push str.Logging
push str.Client
call fcn.110bbc00
test eax, eax
jne 0x1116951d
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret
push str.LogToFile
push str.Client
call fcn.110bbc00
test eax, eax
je 0x111694ec
push ebx
push esi
push edi
call fcn.11151000
mov ecx, dword [0x1127aa68]
add esp, 0xc
xor ebx, ebx
push ebx
push 1
push str.LogAppend
push str.Client
mov dword [ebp - 0x1280], eax
call fcn.110bbc00
or dword [0x1127f0bc], eax
mov ecx, dword [0x1127aa68]
push ebx
push 0xc00
lea edx, [ebp - 0x1278]
push edx
mov dword [ebp - 0x1284], ebx
mov eax, dword [ecx]
mov eax, dword [eax + 4]
push str.LogfileUserU
push str.Client
call eax
cmp word [ebp - 0x1278], bx
jne 0x111695a5
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push ebx
push 0xc00
lea eax, [ebp - 0x1278]
push eax
push str.LogfileUser
push str.Client
call edx
push 0x20
lea eax, [ebp - 0x70]
push eax
push str.dd_MMM_yy
push ebx
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
push 0x10
lea ecx, [ebp - 0x30]
push ecx
push ebx
push ebx
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
mov eax, dword [0x1127b21c]
cmp byte [eax + 0x30], bl
je 0x111695fa
push ebx
push str..picdev.sys
mov byte [eax + 0x30], bl
call dword [sym.imp.MSVCR100.dll__waccess]
add esp, 8
test eax, eax
mov eax, dword [0x1127b21c]
sete dl
mov byte [eax + 0x31], dl
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push ebx
push 0x200
lea eax, [ebp - 0x270]
push eax
push str.Logfile
push str.Client
call edx
cmp word [ebp - 0x270], bx
jne 0x11169647
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.client32.log]
mov word [ebp + eax - 0x270], cx
add eax, 2
cmp cx, bx
jne 0x11169630
lea ecx, [ebp - 0x270]
call fcn.11151740
mov edi, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x11169657
sub eax, edx
sar eax, 1
cmp eax, 0x100
jb 0x11169684
push 0x58d
push str.PLATFORM.CPP
push str._tcslen_pFillText_____tsizeof_buf_
call fcn.11067750
add esp, 0xc
lea edx, [ebp - 0x270]
mov eax, edi
sub edx, edi
mov edi, edi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x11169690
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
lea eax, [ebp - 0x270]
push 1
push eax
call fcn.111bb700
add esp, 0xc
mov esi, eax
mov dword [ebp - 0x127c], esi
mov dword [ebp - 0x1288], ebx
cmp dword [ebp - 0x1284], ebx
jne 0x111697e3
cmp word [ebp - 0x1278], bx
je 0x11169811
cmp word [esi], 0x5c
jne 0x111697e3
cmp word [esi + 2], 0x5c
jne 0x111697e3
lea ecx, [ebp - 0x1278]
push 0x2f
push ecx
call dword [sym.imp.MSVCR100.dll_wcschr]
add esp, 8
cmp eax, ebx
je 0x1116972e
xor edx, edx
push 0x100
lea ecx, [ebp - 0x678]
mov word [eax], dx
push ecx
add eax, 2
push eax
push ebx
call fcn.11144ff0
add esp, 0x10
lea edi, [ebp - 0x678]
jmp 0x11169733
mov edi, 0x11247f3c
lea edx, [ebp - 0x478]
mov eax, esi
sub edx, esi
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x11169740
lea edx, [ebp - 0x478]
push 0x5c
push edx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
add esp, 8
cmp eax, ebx
je 0x1116976a
xor ecx, ecx
mov word [eax], cx
push ebx
lea eax, [ebp - 0x1278]
push eax
push edi
lea ecx, [ebp - 0x12c0]
lea edx, [ebp - 0x478]
mov esi, 1
push ecx
mov dword [ebp - 0x12c0], 2
mov dword [ebp - 0x12bc], esi
mov dword [ebp - 0x12b8], ebx
mov dword [ebp - 0x12b4], ebx
mov dword [ebp - 0x12b0], ebx
mov dword [ebp - 0x12ac], edx
mov dword [ebp - 0x12a8], ebx
mov dword [ebp - 0x12a4], ebx
call sub.MPR.dll_WNetAddConnection2W
cmp eax, ebx
jne 0x111697c8
mov dword [ebp - 0x1288], esi
mov ecx, 0x200
lea eax, [ebp - 0x678]
mov byte [eax], bl
add eax, esi
sub ecx, esi
jne 0x111697d3
cmp dword [ebp - 0x1288], ebx
jne 0x11169811
cmp word [ebp - 0x1278], bx
je 0x11169811
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov edx, dword [edx + 0xb0]
lea eax, [ebp - 0x1284]
push eax
lea eax, [ebp - 0x1278]
push eax
mov eax, dword [ebp + 8]
or eax, 4
push eax
call edx
mov eax, 0x11233a8c
cmp dword [0x1127f0bc], ebx
jne 0x11169823
mov eax, 0x111f88e8
mov esi, dword [sym.imp.MSVCR100.dll__wfopen]
push eax
mov eax, dword [ebp - 0x127c]
push eax
call esi
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x1116990a
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push eax
push 0x200
lea eax, [ebp - 0x270]
push eax
push str.Logfile2
push str.Client
call edx
lea ecx, [ebp - 0x270]
call fcn.11151740
mov edi, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x11169874
sub eax, edx
sar eax, 1
cmp eax, 0x100
jb 0x111698a1
push 0x5cd
push str.PLATFORM.CPP
push str._tcslen_pFillText_____tsizeof_buf_
call fcn.11067750
add esp, 0xc
lea edx, [ebp - 0x270]
mov eax, edi
sub edx, edi
jmp 0x111698b0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x111698b0
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebp - 0x127c]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
lea ecx, [ebp - 0x270]
push 1
push ecx
call fcn.111bb700
add esp, 0x10
cmp dword [0x1127f0bc], 0
mov dword [ebp - 0x127c], eax
mov eax, 0x11233a8c
jne 0x111698fb
mov eax, 0x111f88e8
mov edx, dword [ebp - 0x127c]
push eax
push edx
call esi
add esp, 8
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
mov dword [ebp - 0x1290], eax
test ebx, ebx
jne 0x111699bc
mov ecx, dword [0x1127aa68]
push ebx
push ebx
push str.DontconnectIfNoLogfile
push str.Client
call fcn.110bbc00
test eax, eax
je 0x11169944
mov dword [0x1127ac00], 1
push 0x11233a8c
push str..picdev.sys
call esi
mov edi, eax
add esp, 8
test edi, edi
je 0x11169c5d
push edi
call dword [sym.imp.MSVCR100.dll__fileno]
push eax
call dword [sym.imp.MSVCR100.dll__filelength]
add esp, 8
push edi
lea ecx, [ebp - 0x1308]
mov ebx, eax
call fcn.1102f660
mov eax, dword [ebp - 0x128c]
mov dword [ebp - 4], 5
test eax, eax
je 0x11169bff
mov ecx, dword [ebp - 0x1280]
push eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x70]
push eax
push 0
lea ecx, [ebp - 0x1308]
push str._s___s___s___d___r_n
push ecx
call fcn.1113b4a0
add esp, 0x1c
jmp 0x11169c24
push ebx
lea ecx, [ebp - 0x1330]
call fcn.1102f660
mov ecx, dword [0x1127b21c]
cmp byte [ecx + 0x31], 0
mov dword [ebp - 4], 0
je 0x11169a88
push 0x1120888c
push str..picdev.sys
call esi
mov edi, eax
add esp, 8
test edi, edi
je 0x11169a88
push 0x2000
call dword [sym.imp.MSVCR100.dll_malloc]
mov esi, eax
add esp, 4
test esi, esi
je 0x11169a69
push edi
call dword [sym.imp.MSVCR100.dll_feof]
add esp, 4
test eax, eax
jne 0x11169a5f
lea ebx, [ebx]
push 0x2000
push 0
push esi
call sub.MSVCR100.dll_memset
push edi
push 0x2000
push 1
push esi
call dword [sym.imp.MSVCR100.dll_fread]
add esp, 0x1c
test eax, eax
je 0x11169a51
push ebx
push eax
push 1
push esi
call dword [sym.imp.MSVCR100.dll_fwrite]
add esp, 0x10
push edi
call dword [sym.imp.MSVCR100.dll_feof]
add esp, 4
test eax, eax
je 0x11169a20
push esi
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
push edi
call dword [sym.imp.MSVCR100.dll_fclose]
push str..picdev.sys
call dword [sym.imp.MSVCR100.dll__wremove]
mov edx, dword [0x1127b21c]
add esp, 8
mov byte [edx + 0x31], 0
mov eax, dword [ebp - 0x128c]
test eax, eax
je 0x11169aba
push eax
mov eax, dword [ebp - 0x1280]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x70]
push edx
push 0
lea eax, [ebp - 0x1330]
push str._s___s___s___d___r_n
push eax
call fcn.1113b4a0
add esp, 0x1c
jmp 0x11169adf
mov ecx, dword [ebp - 0x1280]
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x70]
push eax
push 0
lea ecx, [ebp - 0x1330]
push str._s___s___s__r_n
push ecx
call fcn.1113b4a0
add esp, 0x18
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.LogDays
push str.Client
call fcn.110bbc00
mov edi, eax
test edi, edi
je 0x11169be8
lea ecx, [ebp - 0x12d0]
call fcn.1113dd30
mov esi, dword [ebp - 0x127c]
lea edx, [ebp - 0x12d0]
push edx
push edi
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.11168930
add esp, 8
test al, al
je 0x11169bd9
lea ecx, [ebp - 0x1330]
call fcn.1104daf0
push str..bak
lea ecx, [ebp - 0x12e0]
call fcn.1113ccd0
push eax
lea eax, [ebp - 0x12a0]
push esi
push eax
mov byte [ebp - 4], 2
call fcn.1113dfe0
add esp, 0xc
lea ecx, [ebp - 0x12e0]
mov byte [ebp - 4], 4
call fcn.1113cd80
lea ecx, [ebp - 0x12a0]
call fcn.1102f630
mov ebx, dword [sym.imp.MSVCR100.dll__wremove]
push eax
call ebx
add esp, 4
lea ecx, [ebp - 0x12a0]
call fcn.1102f630
mov edi, dword [sym.imp.MSVCR100.dll__wrename]
push eax
push esi
call edi
add esp, 8
test eax, eax
jne 0x11169bca
push esi
lea ecx, [ebp - 0x12d0]
call fcn.1102f630
push eax
call edi
add esp, 8
test eax, eax
jne 0x11169bca
lea ecx, [ebp - 0x12a0]
call fcn.1102f630
push eax
call ebx
add esp, 4
lea ecx, [ebp - 0x12a0]
mov byte [ebp - 4], 1
call fcn.1113cd80
lea ecx, [ebp - 0x12d0]
mov byte [ebp - 4], 0
call fcn.1113cd80
lea ecx, [ebp - 0x1330]
mov dword [ebp - 4], 0xffffffff
call fcn.1102f6a0
jmp 0x11169c9b
mov edx, dword [ebp - 0x1280]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x70]
push ecx
push 0
lea edx, [ebp - 0x1308]
push str._s___s___s__r_n
push edx
call fcn.1113b4a0
add esp, 0x18
lea ecx, [ebp - 0x1308]
call fcn.1104daf0
mov eax, dword [0x1127b21c]
mov byte [eax + 0x31], 1
test ebx, ebx
jne 0x11169c49
push 2
push str..picdev.sys
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x1308]
mov dword [ebp - 4], 0xffffffff
call fcn.1102f6a0
jmp 0x11169c9b
cmp dword [0x1127f478], 0
jne 0x11169c9b
cmp dword [0x1127aa70], 0
je 0x11169c9b
mov ecx, dword [ebp + 8]
mov edx, dword [0x1127b21c]
push str..picdev.sys
push 1
push 0xc00033f8
or ecx, 4
push ecx
push edx
mov dword [0x1127f478], 1
call fcn.1115a050
add esp, 0x14
cmp dword [ebp - 0x1288], 0
je 0x11169cb4
push 0
push 0
lea eax, [ebp - 0x478]
push eax
call sub.MPR.dll_WNetCancelConnection2W
cmp dword [ebp - 0x1284], 0
je 0x11169cda
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov edx, dword [edx + 0xb0]
lea eax, [ebp - 0x1284]
push eax
mov eax, dword [ebp + 8]
push 0
push eax
call edx
mov eax, dword [ebp - 0x127c]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
mov ecx, dword [ebp - 0x1280]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebp - 0x1290]
add esp, 8
mov dword [0x1127f0bc], 1
jmp 0x111694ee