Function at 0x4076f0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1050
call fcn.00423ae0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1050], eax
mov eax, dword [0x43a080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x104c], 0xe651beb8
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1058], eax
sub eax, 0x8345c90e
je 0x407df8
jmp 0x407742
mov eax, dword [ebp - 0x1058]
sub eax, 0x890d6e71
je 0x407fae
jmp 0x407758
mov eax, dword [ebp - 0x1058]
sub eax, 0x95a7a534
je 0x407dab
jmp 0x40776e
mov eax, dword [ebp - 0x1058]
sub eax, 0x9fb241de
je 0x407e77
jmp 0x407784
mov eax, dword [ebp - 0x1058]
sub eax, 0xaaa5fef6
je 0x4083ef
jmp 0x40779a
mov eax, dword [ebp - 0x1058]
sub eax, 0xacaac0f4
je 0x4085a4
jmp 0x4077b0
mov eax, dword [ebp - 0x1058]
sub eax, 0xacbb585c
je 0x407f59
jmp 0x4077c6
mov eax, dword [ebp - 0x1058]
sub eax, 0xad4a7302
je 0x408554
jmp 0x4077dc
mov eax, dword [ebp - 0x1058]
sub eax, 0xb3cfc738
je 0x408007
jmp 0x4077f2
mov eax, dword [ebp - 0x1058]
sub eax, 0xbda56681
je 0x40841b
jmp 0x407808
mov eax, dword [ebp - 0x1058]
sub eax, 0xbdc99b7f
je 0x408251
jmp 0x40781e
mov eax, dword [ebp - 0x1058]
sub eax, 0xc7dcb3de
je 0x408536
jmp 0x407834
mov eax, dword [ebp - 0x1058]
sub eax, 0xc86e217e
je 0x4081e2
jmp 0x40784a
mov eax, dword [ebp - 0x1058]
sub eax, 0xc87e4199
je 0x408491
jmp 0x407860
mov eax, dword [ebp - 0x1058]
sub eax, 0xcd83278e
je 0x407f9f
jmp 0x407876
mov eax, dword [ebp - 0x1058]
sub eax, 0xd734c79f
je 0x408123
jmp 0x40788c
mov eax, dword [ebp - 0x1058]
sub eax, 0xd8348dc1
je 0x407d86
jmp 0x4078a2
mov eax, dword [ebp - 0x1058]
sub eax, 0xde3b4529
je 0x40829a
jmp 0x4078b8
mov eax, dword [ebp - 0x1058]
sub eax, 0xdf7f4f22
je 0x408114
jmp 0x4078ce
mov eax, dword [ebp - 0x1058]
sub eax, 0xe25bb97b
je 0x407bf7
jmp 0x4078e4
mov eax, dword [ebp - 0x1058]
sub eax, 0xe3667949
je 0x407de2
jmp 0x4078fa
mov eax, dword [ebp - 0x1058]
sub eax, 0xe5501f39
je 0x407c8e
jmp 0x407910
mov eax, dword [ebp - 0x1058]
sub eax, 0xe5e82045
je 0x408521
jmp 0x407926
mov eax, dword [ebp - 0x1058]
sub eax, 0xe651beb8
je 0x407b67
jmp 0x40793c
mov eax, dword [ebp - 0x1058]
sub eax, 0xeb1f9b61
je 0x408028
jmp 0x407952
mov eax, dword [ebp - 0x1058]
sub eax, 0xeb8d2d20
je 0x408233
jmp 0x407968
mov eax, dword [ebp - 0x1058]
sub eax, 0xf07a373c
je 0x4083fe
jmp 0x40797e
mov eax, dword [ebp - 0x1058]
sub eax, 0xfcfc5eb4
je 0x407dd3
jmp 0x407994
mov eax, dword [ebp - 0x1058]
sub eax, 0xfd2de570
je 0x408310
jmp 0x4079aa
mov eax, dword [ebp - 0x1058]
sub eax, 0xffe07b51
je 0x408575
jmp 0x4079c0
mov eax, dword [ebp - 0x1058]
sub eax, 0x9793235
je 0x407e86
jmp 0x4079d6
mov eax, dword [ebp - 0x1058]
sub eax, 0x154ad3d2
je 0x407e07
jmp 0x4079ec
mov eax, dword [ebp - 0x1058]
sub eax, 0x19a9776f
je 0x407c18
jmp 0x407a02
mov eax, dword [ebp - 0x1058]
sub eax, 0x1eeca8f7
je 0x408545
jmp 0x407a18
mov eax, dword [ebp - 0x1058]
sub eax, 0x21735a23
je 0x407f89
jmp 0x407a2e
mov eax, dword [ebp - 0x1058]
sub eax, 0x22a597e8
je 0x407f68
jmp 0x407a44
mov eax, dword [ebp - 0x1058]
sub eax, 0x3068c157
je 0x408359
jmp 0x407a5a
mov eax, dword [ebp - 0x1058]
sub eax, 0x311974e4
je 0x40850b
jmp 0x407a70
mov eax, dword [ebp - 0x1058]
sub eax, 0x32dc433d
je 0x407efc
jmp 0x407a86
mov eax, dword [ebp - 0x1058]
sub eax, 0x36e45ef7
je 0x40809e
jmp 0x407a9c
mov eax, dword [ebp - 0x1058]
sub eax, 0x49c4798b
je 0x4084e2
jmp 0x407ab2
mov eax, dword [ebp - 0x1058]
sub eax, 0x4beddfa7
je 0x40814b
jmp 0x407ac8
mov eax, dword [ebp - 0x1058]
sub eax, 0x4d2214b4
je 0x407d03
jmp 0x407ade
mov eax, dword [ebp - 0x1058]
sub eax, 0x5131b9ab
je 0x407d12
jmp 0x407af4
mov eax, dword [ebp - 0x1058]
sub eax, 0x5d308450
je 0x408301
jmp 0x407b0a
mov eax, dword [ebp - 0x1058]
sub eax, 0x6ba5a1e0
je 0x408242
jmp 0x407b20
mov eax, dword [ebp - 0x1058]
sub eax, 0x6f7cbd5c
je 0x407d21
jmp 0x407b36
mov eax, dword [ebp - 0x1058]
sub eax, 0x75e68518
je 0x40816c
jmp 0x407b4c
mov eax, dword [ebp - 0x1058]
sub eax, 0x766c0e47
je 0x407e22
jmp 0x407b62
jmp 0x4085ae
mov eax, dword [ebp - 0x1050]
mov ecx, dword [ebp - 0x1054]
push eax
mov edx, esp
mov dword [ebp - 0x1030], edx
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1040], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1040], eax
sete al
and al, 1
mov byte [ebp - 0x1029], al
mov dword [ebp - 0x104c], 0xe25bb97b
jmp 0x4085ae
mov dl, byte [ebp - 0x1029]
mov eax, 0x6f7cbd5c
mov ecx, 0x19a9776f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x5bf92f27
sub edx, 1
add edx, 0x5bf92f27
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x311974e4
mov ecx, 0xe5501f39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov byte [ebp - 0x1031], 0
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x311974e4
mov ecx, 0x4d2214b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0x5131b9ab
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xf07a373c
jmp 0x4085ae
mov eax, dword [ebp - 0x1038]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x104c], 0xd8348dc1
jmp 0x4085ae
mov edx, dword [ebp - 0x1028]
mov esi, 0xffffffff
mov eax, 0xe3667949
mov ecx, 0x95a7a534
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [ebp - 0x1040]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x104c], 0xfcfc5eb4
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xf07a373c
jmp 0x4085ae
mov byte [ebp - 0x1045], 0
mov dword [ebp - 0x104c], 0x8345c90e
jmp 0x4085ae
mov dword [ebp - 0x104c], 0x154ad3d2
jmp 0x4085ae
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1024], eax
mov dword [ebp - 0x104c], 0x766c0e47
jmp 0x4085ae
mov edx, dword [ebp - 0x1040]
mov eax, dword [ebp - 0x1030]
mov ecx, dword [ebp - 0x1024]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0x9fb241de
mov ecx, 0x9793235
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xbdc99b7f
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x2193213d
sub edx, 1
add edx, 0x2193213d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe5e82045
mov ecx, 0x32dc433d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [ebp - 0x1030]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x101f], al
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe5e82045
mov ecx, 0xacbb585c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0x22a597e8
jmp 0x4085ae
mov dl, byte [ebp - 0x101f]
mov eax, 0x890d6e71
mov ecx, 0x21735a23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov byte [ebp - 0x1045], 1
mov dword [ebp - 0x104c], 0xcd83278e
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xbdc99b7f
jmp 0x4085ae
mov eax, dword [ebp - 0x1030]
mov ecx, dword [eax]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x1044]
lea eax, [ebp - 0x1014]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101e], al
mov dword [ebp - 0x104c], 0xb3cfc738
jmp 0x4085ae
mov dl, byte [ebp - 0x101e]
mov eax, 0xeb1f9b61
mov ecx, 0xd734c79f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x2067845c
sub edx, 1
add edx, 0x2067845c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc7dcb3de
mov ecx, 0x36e45ef7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x7faf3eee
sub edx, 1
add edx, 0x7faf3eee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc7dcb3de
mov ecx, 0xdf7f4f22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xbdc99b7f
jmp 0x4085ae
mov eax, dword [ebp - 0x1014]
mov ecx, dword [ebp - 0x1030]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x101d], al
mov dword [ebp - 0x104c], 0x4beddfa7
jmp 0x4085ae
mov dl, byte [ebp - 0x101d]
mov eax, 0x6ba5a1e0
mov ecx, 0x75e68518
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
add edx, 0x9ee92046
sub edx, 1
sub edx, 0x9ee92046
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1eeca8f7
mov ecx, 0xc86e217e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
sub edx, 0x66abde8b
sub edx, 1
add edx, 0x66abde8b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1eeca8f7
mov ecx, 0xeb8d2d20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xbdc99b7f
jmp 0x4085ae
mov dword [ebp - 0x104c], 0x154ad3d2
jmp 0x4085ae
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad4a7302
mov ecx, 0xde3b4529
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [ebp - 0x1040]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x101c], eax
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad4a7302
mov ecx, 0x5d308450
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xfd2de570
jmp 0x4085ae
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xffe07b51
mov ecx, 0x3068c157
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [ebp - 0x101c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x1045]
and al, 1
mov byte [ebp - 0x1031], al
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
add edx, 0xcdd625bc
sub edx, 1
sub edx, 0xcdd625bc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xffe07b51
mov ecx, 0xaaa5fef6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xf07a373c
jmp 0x4085ae
mov al, byte [ebp - 0x1031]
and al, 1
mov byte [ebp - 0x1015], al
mov dword [ebp - 0x104c], 0xbda56681
jmp 0x4085ae
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0xcc90397a
sub edx, 1
add edx, 0xcc90397a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xacaac0f4
mov ecx, 0xc87e4199
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
sub edx, 0x6ba0c043
sub edx, 1
add edx, 0x6ba0c043
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xacaac0f4
mov ecx, 0x49c4798b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x4085ae
mov al, byte [ebp - 0x1015]
and al, 1
movzx eax, al
mov dword [ebp - 0x105c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00423ad0
mov eax, dword [ebp - 0x105c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x104c], 0xe5501f39
jmp 0x4085ae
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x104c], 0x32dc433d
jmp 0x4085ae
mov dword [ebp - 0x104c], 0x36e45ef7
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xc86e217e
jmp 0x4085ae
mov eax, dword [ebp - 0x1040]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x104c], 0xde3b4529
jmp 0x4085ae
mov eax, dword [ebp - 0x101c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x1045]
and al, 1
mov byte [ebp - 0x1031], al
mov dword [ebp - 0x104c], 0x3068c157
jmp 0x4085ae
mov dword [ebp - 0x104c], 0xc87e4199
jmp 0x407726