Function at 0x1001ac50
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003f601
mov eax, dword fs:[0]
push eax
sub esp, 0x170
push esi
mov eax, dword [0x10057050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push str.PROCEXPL
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
test eax, eax
je 0x1001ae3a
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x1005ca14], 1
jne 0x1001ad32
sub esp, 0xc
lea ecx, [ebp - 0xcc]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nCN_Close:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.10005630
mov edx, str.PROCEXPL
lea ecx, [ebp - 0xcc]
call fcn.10005630
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001ad20
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005ca24], 1
jne 0x1001ae1a
lea eax, [ebp - 0x14]
push eax
call fcn.10021a7f
lea eax, [ebp - 0x14]
push eax
call fcn.10021d6c
push ecx
push 0x1004d0d0
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xcc]
call fcn.10005630
push esi
call fcn.10022798
add esp, 4
lea ecx, [ebp - 0xcc]
mov edx, eax
call fcn.10005630
mov edx, str.CN_Close:
lea ecx, [ebp - 0xcc]
call fcn.10005630
mov edx, str.PROCEXPL
lea ecx, [ebp - 0xcc]
call fcn.10005630
mov edx, str._n__________________
lea ecx, [ebp - 0xcc]
call fcn.10005630
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001adfb
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004d0d0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push str.PROCEXPL
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
test eax, eax
jne 0x1001ae4a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [0x1005ca14], 1
jne 0x1001aee5
sub esp, 0xc
lea ecx, [ebp - 0xcc]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nCN_Close:
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.10005630
mov edx, str.PROCEXPL
mov ecx, eax
call fcn.10005630
mov edx, str._cant_be_closed__exiting_game_
mov ecx, eax
call fcn.10005630
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001aed3
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005ca24], 1
jne 0x1001af94
lea ecx, [ebp - 0x1c]
call fcn.10007550
lea ecx, [ebp - 0x1c]
call fcn.10007540
sub esp, 0xc
lea ecx, [ebp - 0x17c]
mov esi, eax
push 0x1004d0d0
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x17c]
call fcn.10005630
push esi
call fcn.10022798
add esp, 4
lea ecx, [ebp - 0x17c]
mov edx, eax
call fcn.10005630
mov edx, str.CN_Close:
lea ecx, [ebp - 0x17c]
call fcn.10005630
mov edx, str.PROCEXPL
mov ecx, eax
call fcn.10005630
mov edx, str._cant_be_closed__exiting_game_
mov ecx, eax
call fcn.10005630
mov edx, str._n__________________
lea ecx, [ebp - 0x17c]
call fcn.10005630
lea ecx, [ebp - 0x17c]
call fcn.10004130
push 2
push 0x1004d0d0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.1001abf0
int3