Function at 0x10047a3
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x340
mov eax, dword [0x1009468]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
xor eax, eax
mov edi, 0x1145ac8
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x1145e90
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x33c]
xor esi, esi
push eax
mov dword [ebp - 0x33c], esi
call fcn.01001d71
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x33c], eax
jne 0x10047f5
xor eax, eax
jmp 0x1005501
push ebx
mov edi, 0x100
push edi
mov ebx, 0x10a7940
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push esi
push 0x80
push 3
push esi
push 1
push 0x80000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x338], eax
cmp eax, 0xffffffff
je 0x10054fe
push esi
push esi
push dword [ebp - 0x330]
mov dword [ebp - 0x334], esi
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push edi
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x338]
call fcn.01001c57
test eax, eax
je 0x100489d
push 0x10
mov edi, 0x10016c4
lea esi, [ebp - 0x124]
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x100488c
push 0x100
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x338]
call fcn.01001c57
test eax, eax
jne 0x100485b
jmp 0x1004896
mov dword [ebp - 0x334], 1
xor esi, esi
mov edi, 0x100
push 1
push esi
push esi
push dword [ebp - 0x338]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push eax
push dword [ebp - 0x330]
call fcn.01006080
push 0x40
push esi
push 0x10a7a60
push esi
push ebx
call fcn.01006c7f
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10016c0
push 0x10016ac
mov esi, 0x10016a4
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov byte [0x1145d2c], al
lea eax, [ebp - 0x124]
push eax
push 0x10016c0
push 0x1001688
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov byte [0x1145d00], al
lea eax, [ebp - 0x124]
push eax
push 0x1001684
push 0x100166c
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov byte [0x10a7a45], al
lea eax, [ebp - 0x124]
push eax
push 0x1001684
push 0x1001654
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push 0x40
push 0x1145d40
push 0x1001373
push 0x1001640
push esi
mov byte [0x1145e88], al
call fcn.01006278
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x1001630
push esi
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
movzx ax, al
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x100161c
push esi
mov word [0x10a7a40], ax
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
movzx ax, al
push ebx
push edi
mov word [0x1145d12], ax
lea eax, [ebp - 0x124]
push eax
push 0x1001684
push 0x1001610
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
mov byte [0x1145d10], al
cmp al, 2
jbe 0x1004a1e
and dword [ebp - 0x334], 0
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x10015fc
push esi
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push ebx
push edi
mov byte [0x1145ad4], al
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x10015e0
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov word [0x10a7aa8], ax
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x10015d0
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x10015bc
push esi
mov word [0x1145ad0], ax
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push ebx
push edi
mov byte [0x10a787a], al
lea eax, [ebp - 0x124]
push eax
push 0x1001373
push 0x10015a8
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x1001594
push esi
mov byte [0x1145ac0], al
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push ebx
push edi
mov byte [0x10a7924], al
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x1001580
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov word [0x1145ad2], ax
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x1001570
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
push 0x1145d80
push 0x1001373
push 0x100155c
push esi
mov word [0x1145d02], ax
call fcn.01006278
push 0x1145d80
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push ebx
push edi
mov byte [0x1145d20], al
lea eax, [ebp - 0x124]
push eax
push 0x1001373
push 0x1001548
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov byte [0x1145ae0], al
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x1001534
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov word [0x10a7a42], ax
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
push 0x1001524
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
push ebx
push edi
mov word [0x1145d2e], ax
lea eax, [ebp - 0x124]
push eax
push 0x1001373
push 0x1001510
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push ebx
push edi
mov byte [0x1145e89], al
lea eax, [ebp - 0x124]
push eax
push 0x1001373
push 0x10014fc
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
cmp byte [0x1145d10], 0
mov byte [0x10a7a44], al
mov byte [ebp - 0x325], 0
jbe 0x100506b
cmp dword [ebp - 0x334], 0
je 0x10054e5
movzx eax, byte [ebp - 0x325]
push eax
mov dword [ebp - 0x32c], eax
lea eax, [ebp - 0x224]
push 0x10014ec
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x1145af4], ax
lea eax, [ebp - 0x224]
push 0x10014dc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x1145ae4], ax
lea eax, [ebp - 0x224]
push 0x10014c8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x1145adc], ax
lea eax, [ebp - 0x224]
push 0x10014b4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x10a7880], ax
lea eax, [ebp - 0x224]
push 0x100149c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001490
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
mov eax, dword [ebp - 0x32c]
shl eax, 2
mov dword [ebp - 0x330], eax
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x330]
push dword [ebp - 0x32c]
mov dword [ecx + 0x10a7aa0], eax
lea eax, [ebp - 0x224]
push 0x100147c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x1145ad8], ax
lea eax, [ebp - 0x224]
push 0x1001468
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001490
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
mov ecx, dword [ebp - 0x330]
lea ecx, [ecx + 0x1145ac8]
mov dword [ecx], eax
test al, 0xf
je 0x1004ec5
and eax, 0xfffffff0
add eax, 0x10
mov dword [ecx], eax
push dword [ebp - 0x32c]
lea eax, [ebp - 0x224]
push 0x1001450
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001490
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x330]
push dword [ebp - 0x32c]
mov dword [ecx + 0x1145d08], eax
lea eax, [ebp - 0x224]
push 0x100143c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001438
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov byte [ecx + 0x10a7878], al
lea eax, [ebp - 0x224]
push 0x1001424
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x10015f4
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x32c]
push ecx
mov word [ecx*2 + 0x10a7920], ax
lea eax, [ebp - 0x224]
push 0x1001410
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001490
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
mov ecx, dword [ebp - 0x330]
lea ecx, [ecx + 0x1145e90]
mov dword [ecx], eax
test al, 0xf
je 0x1005005
and eax, 0xfffffff0
add eax, 0x10
mov dword [ecx], eax
push dword [ebp - 0x32c]
lea eax, [ebp - 0x224]
push 0x10013f8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push ebx
push edi
lea eax, [ebp - 0x124]
push eax
push 0x1001490
lea eax, [ebp - 0x224]
push eax
push esi
call fcn.01006278
lea eax, [ebp - 0x124]
push eax
call fcn.01001ba7
mov ecx, dword [ebp - 0x330]
inc byte [ebp - 0x325]
mov dword [ecx + 0x1145e80], eax
mov al, byte [ebp - 0x325]
cmp al, byte [0x1145d10]
jb 0x1004c7e
cmp dword [ebp - 0x334], 0
je 0x10054e5
push dword [ebp - 0x338]
call fcn.01006cd7
mov dword [0x100949c], eax
test eax, eax
je 0x10054de
mov cl, byte [0x1145d10]
mov byte [ebp - 0x325], 0
test cl, cl
jbe 0x10052b0
xor edx, edx
cmp dword [ebp - 0x334], edx
je 0x10052b0
movzx eax, byte [ebp - 0x325]
mov ebx, eax
shl ebx, 2
mov esi, dword [ebx + 0x1145e90]
mov dword [ebp - 0x33c], eax
cmp esi, edx
je 0x1005290
mov dword [ebp - 0x32c], esi
test byte [ebp - 0x32c], 0xf
je 0x10050ee
and esi, 0xfffffff0
add esi, 0x10
mov dword [ebp - 0x32c], esi
cmp dword [ebp - 0x32c], 0x4f000
jg 0x10052aa
imul eax, eax, 0x4f000
push edx
lea ecx, [ebp - 0x340]
push ecx
push dword [ebp - 0x32c]
lea eax, [eax + 0x10a7ac0]
push eax
push dword [ebp - 0x338]
mov dword [ebp - 0x330], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
mov dl, byte [ebx + 0x1145e91]
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov cl, byte [ebx + 0x1145e92]
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov al, byte [ebx + 0x1145e93]
mov byte [ebp - 0x14], al
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x12], dl
mov dl, byte [ebx + 0x1145e90]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x11], dl
mov byte [ebp - 0xd], dl
mov byte [ebp - 9], dl
mov byte [ebp - 5], dl
mov dl, byte [ebp - 0x12]
lea eax, [ebp - 0x324]
push eax
mov byte [ebp - 0x13], cl
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xa], dl
mov byte [ebp - 6], dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0xb], cl
mov byte [ebp - 7], cl
call fcn.01005a39
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x324]
push eax
call fcn.01005fde
lea esi, [ebp - 0x14]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x324]
push eax
movsd dword es:[edi], dword [esi]
call fcn.01005a52
push dword [ebp - 0x32c]
lea eax, [ebp - 0x324]
push dword [ebp - 0x330]
push eax
call fcn.01005ff9
xor ecx, ecx
xor edx, edx
cmp dword [ebx + 0x1145e90], ecx
jbe 0x1005213
mov eax, dword [ebp - 0x33c]
mov esi, dword [ebx + 0x1145e90]
imul eax, eax, 0x4f000
lea eax, [eax + 0x10a7ac0]
mov dword [ebp - 0x330], eax
movzx edi, byte [eax + ecx]
add edx, edi
inc ecx
cmp ecx, esi
jb 0x1005208
cmp edx, dword [ebx + 0x1145e80]
je 0x1005222
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0
je 0x1005290
cmp byte [0x1009497], 0
je 0x1005290
cmp byte [ebp - 0x325], 0
mov edx, 0x10013e0
je 0x1005247
mov edx, 0x10013c8
lea ecx, [ebp - 0x264]
mov al, byte [edx]
inc edx
mov byte [ecx], al
inc ecx
test al, al
jne 0x100524d
lea eax, [ebp - 0x264]
push 0x10013c4
push eax
call dword [sym.imp.msvcrt.dll_fopen]
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x1005290
push esi
push dword [ebx + 0x1145e90]
push 1
push dword [ebp - 0x330]
call dword [sym.imp.msvcrt.dll_fwrite]
push esi
call dword [sym.imp.msvcrt.dll_fclose]
add esp, 0x14
inc byte [ebp - 0x325]
mov cl, byte [0x1145d10]
cmp byte [ebp - 0x325], cl
jb 0x10050a5
jmp 0x10052b0
mov dword [ebp - 0x334], edx
mov byte [ebp - 0x325], 0
test cl, cl
jbe 0x10054e5
cmp dword [ebp - 0x334], 0
je 0x10054e5
movzx eax, byte [ebp - 0x325]
mov ebx, eax
shl ebx, 2
mov esi, dword [ebx + 0x1145ac8]
mov dword [ebp - 0x33c], eax
test esi, esi
je 0x10054c4
mov dword [ebp - 0x32c], esi
test byte [ebp - 0x32c], 0xf
je 0x1005309
mov ecx, esi
and ecx, 0xfffffff0
add ecx, 0x10
mov dword [ebp - 0x32c], ecx
cmp dword [ebp - 0x32c], 0x4f000
jg 0x10054de
imul eax, eax, 0x4f000
push 0
lea ecx, [ebp - 0x340]
push ecx
push dword [ebp - 0x32c]
lea eax, [eax + 0x1009860]
push eax
push dword [ebp - 0x338]
mov dword [ebp - 0x330], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
mov dl, byte [ebx + 0x1145ac9]
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov cl, byte [ebx + 0x1145aca]
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov al, byte [ebx + 0x1145acb]
mov byte [ebp - 0x14], al
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x12], dl
mov dl, byte [ebx + 0x1145ac8]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x11], dl
mov byte [ebp - 0xd], dl
mov byte [ebp - 9], dl
mov byte [ebp - 5], dl
mov dl, byte [ebp - 0x12]
lea eax, [ebp - 0x324]
push eax
mov byte [ebp - 0x13], cl
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xa], dl
mov byte [ebp - 6], dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0xb], cl
mov byte [ebp - 7], cl
call fcn.01005a39
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x324]
push eax
call fcn.01005fde
lea esi, [ebp - 0x14]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x324]
push eax
movsd dword es:[edi], dword [esi]
call fcn.01005a52
push dword [ebp - 0x32c]
lea eax, [ebp - 0x324]
push dword [ebp - 0x330]
push eax
call fcn.01005ff9
xor eax, eax
xor edx, edx
cmp dword [ebx + 0x1145ac8], eax
jbe 0x1005447
mov ecx, dword [ebp - 0x33c]
imul ecx, ecx, 0x4f000
lea ecx, [ecx + 0x1009862]
movzx esi, byte [ecx + eax + 1]
movzx edi, byte [ecx + eax]
shl esi, 8
or esi, edi
movzx edi, byte [ecx + eax - 1]
shl esi, 8
or esi, edi
movzx edi, byte [ecx + eax - 2]
shl esi, 8
or esi, edi
add eax, 4
add edx, esi
cmp eax, dword [ebx + 0x1145ac8]
jb 0x1005418
cmp edx, dword [ebx + 0x1145d08]
je 0x1005456
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0
je 0x10054c4
cmp byte [0x1009497], 0
je 0x10054c4
cmp byte [ebp - 0x325], 0
mov edx, 0x10013ac
je 0x100547b
mov edx, 0x1001394
lea ecx, [ebp - 0x264]
mov al, byte [edx]
inc edx
mov byte [ecx], al
inc ecx
test al, al
jne 0x1005481
lea eax, [ebp - 0x264]
push 0x10013c4
push eax
call dword [sym.imp.msvcrt.dll_fopen]
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x10054c4
push esi
push dword [ebx + 0x1145ac8]
push 1
push dword [ebp - 0x330]
call dword [sym.imp.msvcrt.dll_fwrite]
push esi
call dword [sym.imp.msvcrt.dll_fclose]
add esp, 0x14
inc byte [ebp - 0x325]
mov al, byte [ebp - 0x325]
cmp al, byte [0x1145d10]
jb 0x10052bf
jmp 0x10054e5
and dword [ebp - 0x334], 0
push dword [ebp - 0x338]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp dword [ebp - 0x334], eax
setne al
jmp 0x1005500
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0100733a
leave
ret