Function at 0x1001c8b0
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100418b1
mov eax, dword fs:[0]
push eax
sub esp, 0x170
push esi
mov eax, dword [0x1005a050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push str.PROCEXPL
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
test eax, eax
je 0x1001ca9a
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x1005fa1c], 1
jne 0x1001c992
sub esp, 0xc
lea ecx, [ebp - 0xcc]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nCN_Close:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.10005910
mov edx, str.PROCEXPL
lea ecx, [ebp - 0xcc]
call fcn.10005910
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001c980
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005fa2c], 1
jne 0x1001ca7a
lea eax, [ebp - 0x14]
push eax
call fcn.1002399f
lea eax, [ebp - 0x14]
push eax
call fcn.10023c8c
push ecx
push 0x1004f4f0
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xcc]
call fcn.10005910
push esi
call fcn.100246b8
add esp, 4
lea ecx, [ebp - 0xcc]
mov edx, eax
call fcn.10005910
mov edx, str.CN_Close:
lea ecx, [ebp - 0xcc]
call fcn.10005910
mov edx, str.PROCEXPL
lea ecx, [ebp - 0xcc]
call fcn.10005910
mov edx, str._n__________________
lea ecx, [ebp - 0xcc]
call fcn.10005910
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001ca5b
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004f4f0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push str.PROCEXPL
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
test eax, eax
jne 0x1001caaa
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [0x1005fa1c], 1
jne 0x1001cb45
sub esp, 0xc
lea ecx, [ebp - 0xcc]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nCN_Close:
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.10005910
mov edx, str.PROCEXPL
mov ecx, eax
call fcn.10005910
mov edx, str._cant_be_closed__exiting_game_
mov ecx, eax
call fcn.10005910
lea ecx, [ebp - 0xc8]
call fcn.10004900
test eax, eax
jne 0x1001cb33
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005fa2c], 1
jne 0x1001cbf4
lea ecx, [ebp - 0x1c]
call fcn.10008060
lea ecx, [ebp - 0x1c]
call fcn.10008050
sub esp, 0xc
lea ecx, [ebp - 0x17c]
mov esi, eax
push 0x1004f4f0
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x17c]
call fcn.10005910
push esi
call fcn.100246b8
add esp, 4
lea ecx, [ebp - 0x17c]
mov edx, eax
call fcn.10005910
mov edx, str.CN_Close:
lea ecx, [ebp - 0x17c]
call fcn.10005910
mov edx, str.PROCEXPL
mov ecx, eax
call fcn.10005910
mov edx, str._cant_be_closed__exiting_game_
mov ecx, eax
call fcn.10005910
mov edx, str._n__________________
lea ecx, [ebp - 0x17c]
call fcn.10005910
lea ecx, [ebp - 0x17c]
call fcn.10004130
push 2
push 0x1004f4f0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.1001c850
int3