Function at 0x1314def0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa1c
mov eax, dword [0x131e90f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0xa10]
mov ebx, ecx
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov eax, 2
push 0x13bfd944
mov word [ebp - 0x880], ax
call fcn.131a85ab
add esp, 4
push eax
call dword [sym.imp.WS2_32.dll_htons]
push 6
push 1
push 2
mov word [ebp - 0x87e], ax
call dword [sym.imp.WS2_32.dll_socket]
mov ecx, dword [0x131fd62c]
mov dword [0x13c2628c], eax
mov dword [ebp - 0x87c], ecx
test ecx, ecx
je 0x1314e153
push 0x10
lea ecx, [ebp - 0x880]
push ecx
push eax
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1314df95
push 2
push dword [0x13c2628c]
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [0x13c2628c]
call dword [sym.imp.WS2_32.dll_closesocket]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
lea eax, [ebp - 0xa18]
push eax
push 0x13bfd748
push closesocket
mov dword [ebp - 0xa14], 0x200
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x1314dfc9
mov ecx, 0x131da42a
jmp 0x1314dff8
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0x270]
push eax
push 0
push 0
push 0x131daee4
push dword [ebp - 0xa18]
call edi
test eax, eax
lea ecx, [ebp - 0x270]
mov eax, 0x131da42a
cmovne ecx, eax
lea edx, [ebp - 0x870]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x1314e000
lea eax, [ebp - 0xa14]
mov dword [ebp - 0xa18], 0x200
push eax
push 0x13bfd748
push closesocket
call esi
test eax, eax
je 0x1314e035
mov ecx, 0x131da42a
jmp 0x1314e064
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x270]
push eax
push 0
push 0
push 0x131da708
push dword [ebp - 0xa14]
call edi
test eax, eax
lea ecx, [ebp - 0x270]
mov eax, 0x131da42a
cmovne ecx, eax
lea edx, [ebp - 0x670]
sub edx, ecx
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x1314e070
lea eax, [ebp - 0xa14]
mov dword [ebp - 0xa18], 0x200
push eax
push 0x13bfd748
push closesocket
call esi
test eax, eax
je 0x1314e0a5
mov ecx, 0x131da42a
jmp 0x1314e0d4
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x270]
push eax
push 0
push 0
push 0x131daea8
push dword [ebp - 0xa14]
call edi
test eax, eax
lea ecx, [ebp - 0x270]
mov eax, 0x131da42a
cmovne ecx, eax
lea edx, [ebp - 0x470]
sub edx, ecx
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x1314e0e0
push 0x13c24fa0
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x870]
push eax
push str._0021
push 0x13c24ed0
lea eax, [ebp - 0x70]
push str._s__s__s__s__s__s_
push eax
call fcn.13141a40
mov ecx, dword [0x13c2628c]
lea edx, [ebp - 0x70]
call fcn.13145790
push 0x64
lea eax, [ebp - 0x70]
push 0
push eax
call fcn.1319ba80
add esp, 0x2c
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push ecx
mov edx, ebx
call fcn.13145bd0
add esp, 4
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.13198da3
mov esp, ebp
pop ebp
ret