Function at 0x1000fe20
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10028d31
mov eax, dword fs:[0]
push eax
sub esp, 0x170
push esi
push edi
mov eax, dword [0x10040cf8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
push edi
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x1000ffe7
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x1004118c], 1
jne 0x1000feed
push 1
push 0x40
push 8
push 0x1002db9c
lea ecx, [ebp - 0xcc]
call fcn.100049c0
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 0
push str._nW_Close:
push eax
call fcn.10004550
lea eax, [ebp - 0xcc]
push edi
push eax
call fcn.10004550
add esp, 0x10
lea ecx, [ebp - 0xc8]
call fcn.100054a0
test eax, eax
jne 0x1000fedb
push eax
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.10004fb0
cmp dword [0x1004119c], 1
jne 0x1000ffcf
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ucrtbased.dll__time64]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ucrtbased.dll__localtime64]
add esp, 8
lea ecx, [ebp - 0xcc]
mov esi, eax
push 1
push 0x40
push 8
push 0x1002dbc0
call fcn.100049c0
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 1
push 0x1002dbc4
push eax
call fcn.10004550
push esi
call dword [sym.imp.ucrtbased.dll_asctime]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10004550
lea eax, [ebp - 0xcc]
push 0x1002dbd4
push eax
call fcn.10004550
lea eax, [ebp - 0xcc]
push edi
push eax
call fcn.10004550
lea eax, [ebp - 0xcc]
push 0x1002dbe4
push eax
call fcn.10004550
add esp, 0x2c
lea ecx, [ebp - 0xc8]
call fcn.100054a0
test eax, eax
jne 0x1000ffb0
push eax
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 2
push 0x1002dc0c
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.10004fb0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x1000fffa
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [0x1004118c], 1
jne 0x1001008b
push 1
push 0x40
push 8
push 0x1002dc10
lea ecx, [ebp - 0xcc]
call fcn.100049c0
push 0x1002dc24
push edi
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 2
push str._n_W_Close:
push eax
call fcn.10004550
add esp, 8
push eax
call fcn.10004550
add esp, 8
push eax
call fcn.10004550
add esp, 8
lea ecx, [ebp - 0xc8]
call fcn.100054a0
test eax, eax
jne 0x10010079
push eax
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.10004fb0
cmp dword [0x1004119c], 1
jne 0x10010149
lea eax, [ebp - 0x1c]
push eax
call sub.ucrtbased.dll__time64
lea eax, [ebp - 0x1c]
push eax
call sub.ucrtbased.dll__localtime64
add esp, 8
lea ecx, [ebp - 0x17c]
mov esi, eax
push 1
push 0x40
push 8
push 0x1002dc54
call fcn.100049c0
lea eax, [ebp - 0x17c]
mov dword [ebp - 4], 3
push 0x1002dc58
push eax
call fcn.10004550
push esi
call dword [sym.imp.ucrtbased.dll_asctime]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.10004550
add esp, 0x14
lea eax, [ebp - 0x17c]
push 0x1002dc68
push edi
push str.W_Close:
push eax
call fcn.10004550
add esp, 8
push eax
call fcn.10004550
add esp, 8
push eax
call fcn.10004550
lea eax, [ebp - 0x17c]
push 0x1002dc98
push eax
call fcn.10004550
add esp, 0x10
lea ecx, [ebp - 0x17c]
call fcn.1000eb70
push 2
push 0x1002dcc0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.10010240
int3