Function at 0x4da070
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56f356
mov eax, dword fs:[0]
push eax
mov eax, 0x2718
call fcn.005382c0
mov eax, dword [0x676300]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
push 0x3ff
lea eax, [ebp - 0x128f]
push ebx
push eax
mov dword [ebp - 0x2724], ecx
mov byte [ebp - 0x1290], bl
call fcn.00534b40
push 0x3ff
lea ecx, [ebp - 0x168f]
push ebx
push ecx
mov byte [ebp - 0x1690], bl
call fcn.00534b40
push 0x3ff
lea edx, [ebp - 0x1a8f]
push ebx
push edx
mov byte [ebp - 0x1a90], bl
call fcn.00534b40
push 0x7f
lea eax, [ebp - 0x8f]
push ebx
push eax
mov byte [ebp - 0x90], bl
call fcn.00534b40
push 0x7f
lea ecx, [ebp - 0x10f]
push ebx
push ecx
mov byte [ebp - 0x110], bl
call fcn.00534b40
push 0x7f
lea edx, [ebp - 0x28f]
push ebx
push edx
mov byte [ebp - 0x290], bl
call fcn.00534b40
add esp, 0x48
push 0x7f
lea eax, [ebp - 0x20f]
push ebx
push eax
mov byte [ebp - 0x210], bl
call fcn.00534b40
push 0x3ff
lea ecx, [ebp - 0x68f]
push ebx
push ecx
mov byte [ebp - 0x690], bl
call fcn.00534b40
push 0x7c
lea edx, [ebp - 0x18c]
push ebx
push edx
mov dword [ebp - 0x190], 0x657865
call fcn.00534b40
push 0x3ff
lea eax, [ebp - 0xa8f]
push ebx
push eax
mov byte [ebp - 0xa90], bl
call fcn.00534b40
push 0x3ff
lea ecx, [ebp - 0xe8f]
push ebx
push ecx
mov byte [ebp - 0xe90], bl
call fcn.00534b40
push 0x2e
push esi
call fcn.005383a0
add esp, 0x44
sub eax, esi
push eax
lea edx, [ebp - 0x90]
push esi
push edx
call fcn.00537970
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x110]
push 0x58352c
push edx
call fcn.00535bfb
add esp, 0x1c
call fcn.004e8a80
add eax, 0x148
mov edi, 0x10
cmp dword [eax + 0x14], edi
jb 0x4da200
mov eax, dword [eax]
lea edx, [ebp - 0x1290]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4da208
lea eax, [ebp - 0x1290]
push 0x5c
push eax
call fcn.005383a0
add esp, 8
mov byte [eax], bl
call fcn.004e8a80
add eax, 0x148
cmp dword [eax + 0x14], edi
jb 0x4da236
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x2690]
push 0x57a838
push ecx
call fcn.00535bfb
add esp, 0x10
call fcn.004e8a80
add eax, 0x148
cmp dword [eax + 0x14], edi
jb 0x4da25d
mov eax, dword [eax]
lea edx, [ebp - 0x90]
push edx
push eax
lea eax, [ebp - 0x1690]
push str._s_s.ini
push eax
call fcn.00535bfb
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x1290]
push edx
lea eax, [ebp - 0x690]
push 0x57a838
push eax
call fcn.00535bfb
add esp, 0x20
xor eax, eax
lea ebx, [ebx]
mov cl, byte [ebp + eax - 0x90]
mov byte [ebp + eax - 0x290], cl
inc eax
cmp cl, bl
jne 0x4da2a0
xor eax, eax
jmp 0x4da2c0
mov cl, byte [ebp + eax - 0x110]
mov byte [ebp + eax - 0x210], cl
inc eax
cmp cl, bl
jne 0x4da2c0
mov esi, dword [ebp - 0x2724]
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x4da2e7
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x4da2fb
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
push str.PARTYCLIENT
lea ecx, [ebp - 0x1690]
push ecx
lea ecx, [ebp - 0x26d8]
call fcn.004f1577
push 0x65c915
push 1
lea edx, [ebp - 0xa90]
push edx
push str.exename
lea ecx, [ebp - 0x26d8]
mov dword [ebp - 4], ebx
call fcn.004f10ba
lea eax, [ebp - 0xa90]
push 0x5c
push eax
call fcn.005383a0
add esp, 8
cmp eax, ebx
je 0x4da36c
mov byte [eax], bl
inc eax
push eax
call fcn.004efbe9
lea ecx, [ebp - 0xa90]
push ecx
call fcn.004ee71c
add esp, 8
test eax, eax
je 0x4da39c
lea edx, [ebp - 0xa90]
jmp 0x4da391
lea eax, [ebp - 0x110]
push eax
call fcn.004efbe9
lea ecx, [ebp - 0x690]
push ecx
call fcn.004ee71c
add esp, 8
test eax, eax
je 0x4da39c
lea edx, [ebp - 0x690]
push 1
push edx
call fcn.004ee6df
add esp, 8
cmp dword [ebp + 0xc], ebx
je 0x4da3b5
lea eax, [ebp - 0x1690]
push eax
call fcn.004ee73a
add esp, 4
jmp 0x4da7b9
push ebx
call fcn.005377d5
push eax
call fcn.005397ef
add esp, 8
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
lea eax, [ebp - 0xe90]
push edx
lea edx, [ebp - 0x1290]
push edx
push str._s_04d_04d_04d_04d
push eax
call fcn.00535bfb
lea ecx, [ebp - 0x2690]
push ecx
call fcn.004ee6fe
add esp, 0x20
test eax, eax
je 0x4da45f
lea edx, [ebp - 0xe90]
push edx
lea eax, [ebp - 0x2690]
push eax
call fcn.004f1bb8
add esp, 8
test eax, eax
je 0x4da45f
lea ecx, [ebp - 0x690]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or eax, 2
push eax
lea edx, [ebp - 0xe90]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x90]
push eax
mov ecx, eax
push ecx
lea edx, [ebp - 0xe90]
push edx
lea eax, [ebp - 0x1a90]
push str._s_s_s.config
push eax
call fcn.00535bfb
lea ecx, [ebp - 0x1a90]
push ecx
call fcn.004ee6fe
add esp, 0x18
test eax, eax
je 0x4da631
push str.PARTY
lea edx, [ebp - 0x1a90]
push edx
lea ecx, [ebp - 0x2720]
call fcn.004f1577
push ebx
push str.dirRand
lea ecx, [ebp - 0x2720]
mov byte [ebp - 4], 1
call fcn.004f0f3d
push 0x586bb0
mov esi, eax
push 0x80
lea eax, [ebp - 0x190]
push eax
push str.exedll
lea ecx, [ebp - 0x2720]
call fcn.004f10ba
push ebx
push str.nameRand
lea ecx, [ebp - 0x2720]
call fcn.004f0f3d
lea ecx, [ebp - 0x190]
push ecx
lea edx, [ebp - 0x90]
push edx
mov edi, eax
lea eax, [ebp - 0x110]
push 0x58352c
push eax
call fcn.00535bfb
add esp, 0x10
cmp esi, ebx
jne 0x4da524
cmp edi, ebx
je 0x4da590
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
call fcn.005377d5
push eax
call fcn.005397ef
add esp, 8
cmp esi, ebx
je 0x4da590
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
lea edx, [ebp - 0x290]
push str._04d_04d_04d_04d
push edx
call fcn.00535bfb
add esp, 0x18
jmp 0x4da5b3
xor eax, eax
jmp 0x4da5a0
mov cl, byte [ebp + eax - 0x90]
mov byte [ebp + eax - 0x290], cl
inc eax
cmp cl, bl
jne 0x4da5a0
cmp edi, ebx
je 0x4da60c
lea eax, [ebp - 0x190]
push eax
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
call fcn.00539801
cdq
mov ecx, 0x2710
idiv ecx
push edx
lea edx, [ebp - 0x210]
push 0x586b88
push edx
call fcn.00535bfb
add esp, 0x1c
jmp 0x4da623
xor eax, eax
mov edi, edi
mov cl, byte [ebp + eax - 0x110]
mov byte [ebp + eax - 0x210], cl
inc eax
cmp cl, bl
jne 0x4da610
lea ecx, [ebp - 0x2720]
mov byte [ebp - 4], bl
call fcn.004f12d2
push 0x3ff
lea eax, [ebp - 0x228f]
push ebx
push eax
mov byte [ebp - 0x2290], bl
call fcn.00534b40
push 0x3ff
lea ecx, [ebp - 0x1e8f]
push ebx
push ecx
mov byte [ebp - 0x1e90], bl
call fcn.00534b40
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0x1e90]
push 0x57a838
push ecx
call fcn.00535bfb
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x1290]
push eax
lea ecx, [ebp - 0x690]
push 0x57a838
push ecx
call fcn.00535bfb
lea edx, [ebp - 0x690]
push edx
call fcn.004ee71c
add esp, 0x3c
test eax, eax
je 0x4da6c3
lea eax, [ebp - 0x690]
push 1
push eax
call fcn.004ee6df
add esp, 8
lea ecx, [ebp - 0x1e90]
push ecx
call fcn.004ee71c
add esp, 4
test eax, eax
je 0x4da732
lea edx, [ebp - 0x690]
push edx
call fcn.004ee6c0
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x1e90]
push ecx
call fcn.004ef683
add esp, 0xc
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x690]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or eax, 2
push eax
lea eax, [ebp - 0x690]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0xe90]
push 1
push ecx
call fcn.004ee6df
add esp, 8
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x2290]
push 0x57a838
push ecx
call fcn.00535bfb
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0xa90]
push 0x57a838
push ecx
call fcn.00535bfb
lea edx, [ebp - 0x2290]
push edx
call fcn.004ee6fe
add esp, 0x24
test eax, eax
je 0x4da79c
push ebx
lea eax, [ebp - 0xa90]
push eax
lea ecx, [ebp - 0x2290]
push ecx
call fcn.004ee7e8
add esp, 0xc
jmp 0x4da7a2
mov byte [ebp - 0xa90], bl
lea edx, [ebp - 0xa90]
push edx
push str.exename
lea ecx, [ebp - 0x26d8]
call fcn.004f0ec1
lea ecx, [ebp - 0x26d8]
mov dword [ebp - 4], 0xffffffff
call fcn.004f12d2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00534bba
mov esp, ebp
pop ebp
ret 8