Function at 0x4011b0
Capabilities:
Receive data
Receive data on socket
Reference http user-agent string
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push 0xffffffffffffffff
push 0x41366f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebp
xor ebp, ebp
push esi
push edi
mov dword [esp + 0x18], ebp
lea eax, [esp + 0x70]
lea ecx, [esp + 0x14]
push eax
push str.GET
push ecx
mov dword [esp + 0x70], 2
call fcn.0040dd39
push str._HTTP_1.1_r_n
lea edx, [esp + 0x14]
push eax
push edx
mov byte [esp + 0x70], 3
call fcn.0040dcc5
mov esi, dword [eax]
mov al, byte [esp + 0x70]
push ebp
lea ecx, [esp + 0x30]
mov byte [esp + 0x68], 4
mov byte [esp + 0x30], al
call fcn.00401d40
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.00401f30
lea ecx, [esp + 0x10]
mov byte [esp + 0x64], 7
call fcn.0040dae2
lea ecx, [esp + 0x14]
mov byte [esp + 0x64], 6
call fcn.0040dae2
mov edi, str.Connection:Keep_Alive_r_n
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Connection:Keep_Alive_r_n
lea ecx, [esp + 0x34]
call fcn.00401e70
mov edi, str.Content_Type:application_x_www_form_urlencoded_r_n
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Content_Type:application_x_www_form_urlencoded_r_n
lea ecx, [esp + 0x34]
call fcn.00401e70
lea ecx, [esp + 0x74]
lea edx, [esp + 0x4c]
push ecx
push str.Host:
push edx
call fcn.00402100
push 0x419190
push eax
lea eax, [esp + 0x50]
mov byte [esp + 0x78], 8
push eax
call fcn.00402650
add esp, 0x18
mov ecx, dword [0x4143d4]
mov byte [esp + 0x64], 9
push ecx
push ebp
push eax
lea ecx, [esp + 0x38]
call fcn.00401d90
push 1
lea ecx, [esp + 0x40]
mov byte [esp + 0x68], 8
call fcn.00401d40
push 1
lea ecx, [esp + 0x50]
mov byte [esp + 0x68], 6
call fcn.00401d40
mov edi, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_64.0.3282.140_Safari_537.36_Edge_17.17134_r_n
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_64.0.3282.140_Safari_537.36_Edge_17.17134_r_n
lea ecx, [esp + 0x34]
call fcn.00401e70
mov edi, 0x419190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x419190
lea ecx, [esp + 0x34]
call fcn.00401e70
mov eax, dword [esp + 0x30]
cmp eax, ebp
jne 0x401336
mov eax, 0x4143d0
mov edx, dword [esp + 0x34]
push ebp
push edx
push eax
mov eax, dword [0x4190c4]
push eax
call dword [sym.imp.WS2_32.dll_send]
mov cl, byte [esp + 0x70]
push ebp
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.00401d40
mov eax, dword [esp + 0x24]
mov byte [esp + 0x64], 0xa
cmp eax, ebp
jne 0x401377
push ebp
push 0x1388
lea ecx, [esp + 0x24]
call fcn.00401bf0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
cmp eax, ebp
je 0x401392
lea ecx, [esp + 0x1c]
call fcn.00401cc0
mov eax, dword [esp + 0x20]
jmp 0x401397
mov eax, 0x4143d0
mov edx, dword [0x4190c4]
push ebp
push esi
push eax
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [0x41c7e8], eax
mov eax, dword [0x419308]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x20]
mov byte [esp + 0x64], 0xb
cmp eax, ebp
je 0x4013d1
lea ecx, [esp + 0x1c]
call fcn.00401cc0
mov eax, dword [esp + 0x20]
jmp 0x4013d6
mov eax, 0x4143d0
mov cl, byte [eax]
push ecx
lea ecx, [esp + 0x10]
call fcn.0040ce80
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x4013ef
mov eax, 0x4143d0
push eax
lea edx, [esp + 0x10]
push 0x4190fc
push edx
call fcn.0040d2b1
mov esi, dword [esp + 0x78]
add esp, 0xc
lea eax, [esp + 0xc]
mov ecx, esi
push eax
call fcn.0040d857
mov dword [esp + 0x18], 1
lea ecx, [esp + 0xc]
mov byte [esp + 0x64], 0xa
call fcn.0040dae2
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x40144d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x401444
cmp al, 0xff
je 0x401444
dec al
mov byte [ecx], al
jmp 0x40144d
push ecx
call fcn.0040d84c
add esp, 4
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], ebp
cmp eax, ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
je 0x40147e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x401475
cmp al, 0xff
je 0x401475
dec al
mov byte [ecx], al
jmp 0x40147e
push ecx
call fcn.0040d84c
add esp, 4
lea ecx, [esp + 0x70]
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov byte [esp + 0x64], 1
call fcn.0040dae2
mov ecx, dword [esp + 0x78]
cmp ecx, ebp
je 0x4014ce
mov al, byte [ecx - 1]
test al, al
je 0x4014c4
cmp al, 0xff
je 0x4014c4
dec al
pop edi
mov byte [ecx - 1], al
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
add esp, 0x5c
ret
dec ecx
push ecx
call fcn.0040d84c
add esp, 4
mov ecx, dword [esp + 0x5c]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x5c
ret