Function at 0x1000f1c8
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push 0x1c
call fcn.10027369
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
add ebx, 8
push ebx
push 0x109
call fcn.10027369
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x100522aa
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x101
rep stosb byte es:[edi], al
add ebx, 4
push ebx
push 0x89
call fcn.10027369
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x100522b2
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x81
rep stosb byte es:[edi], al
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 1
push 2
mov ebx, 0xa04
call fcn.100296a0
add esp, 0x1c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
mov eax, dword [ebp - 4]
push eax
push 0x18e
call fcn.10027369
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x101
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x81
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebp - 0x2c]
cwde
push eax
xor eax, eax
call dword [sym.imp.WS2_32.dll_WSAStartup]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000f355
push 0x36
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.100278c0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x1000f3a2
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x1000f3a0
imul eax, dword [edi]
jmp 0x1000f395
mov ecx, eax
cmp ecx, 0x101
jle 0x1000f3af
mov ecx, 0x101
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x101
push ebx
push edi
push 1
mov eax, 2
call fcn.100278c0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x1000f3ed
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x1000f3eb
imul eax, dword [edi]
jmp 0x1000f3e0
mov ecx, eax
cmp ecx, 0x81
jle 0x1000f3fa
mov ecx, 0x81
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x81
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x1000f7fd
mov dword [ebp - 0x2c], esp
push str.ns1.dnspod.net
xor eax, eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f46d
push 0x83
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x1000f7d4
mov dword [ebp - 0x2c], esp
push 6
push 1
push 2
xor eax, eax
call dword [sym.imp.WS2_32.dll_socket]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f4b2
push 0xf6
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0x10
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x10]
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalAlloc]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f4ed
push 0x169
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x14], eax
push 2
push 0
push dword [ebp - 0x14]
call fcn.1000f870
mov dword [ebp - 0x2c], esp
push 0x1a0a
xor eax, eax
call dword [sym.imp.WS2_32.dll_htons]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f530
push 0x1e7
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
push eax
push 2
push dword [ebp - 0x14]
call fcn.1000f870
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x10052256]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.10001bb8
push eax
call fcn.1000f898
push eax
call fcn.1000f898
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
call fcn.1000f898
push eax
push 4
push dword [ebp - 0x14]
call fcn.1000f8b4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.WS2_32.dll_connect]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f5af
push 0x2ed
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x1000f77c
mov eax, 0x1005225e
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000f5d2
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1000f8da
mov dword [ebp - 0x2c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x1000f5f5
mov eax, 0x100512e0
push eax
push 1
mov ebx, 0x130
call fcn.10028a20
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.WS2_32.dll_send]
nop
nop
cmp dword [ebp - 0x34], esp
je 0x1000f642
push 0x3e6
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x20], 0x200
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x20]
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalAlloc]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f67a
push 0x446
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], esp
push 0
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.WS2_32.dll_recv]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f6b4
push 0x47f
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x1000f750
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x90c
call fcn.100296b0
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000f6f4
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x100522a7
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000f8f6
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000f738
push ebx
call fcn.1002736f
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000f74c
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x24]
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f77c
push 0x558
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f7a8
push 0x574
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.WS2_32.dll_closesocket]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f7d4
push 0x58e
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x2c], esp
xor eax, eax
call dword [sym.imp.WS2_32.dll_WSACleanup]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x1000f7fd
push 0x5aa
push 0x402ff7c
push 6
call fcn.1002737b
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x1000f819
push eax
mov ebx, eax
call fcn.10001121
inc eax
push eax
call fcn.10027369
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x1000f81e
push eax
mov ebx, dword [ebp - 4]
push ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.1002736f
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.1002736f
add esp, 4
pop ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000f85b
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000f86b
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret