Function at 0x1000e3e0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Receive data
Receive data on socket
Resolve dns
Resolve function by parsing pe exports
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push 0xffffffffffffffff
push 0x1002f295
mov eax, dword fs:[0]
push eax
mov eax, 0x1138
call fcn.10021750
mov eax, dword [0x1003a1c0]
xor eax, esp
mov dword [esp + 0x1130], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1003a1c0]
xor eax, esp
push eax
lea eax, [esp + 0x114c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x115c]
mov ebx, ecx
mov dword [esp + 0x1c], ebx
mov esi, edx
mov dword [esp + 0x20], edi
call fcn.10006200
xor edi, edi
mov eax, 0xf
mov dword [ebx], edi
mov dword [esp + 0x18], 0x50
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb4], edi
mov byte [esp + 0xa4], 0
mov dword [esp + 0x1154], edi
mov dword [esp + 0x9c], eax
mov dword [esp + 0x98], edi
mov byte [esp + 0x88], 0
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
mov byte [esp + 0x1160], 1
call fcn.1000eab0
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
mov word [esp + 0xf8], 2
call dword [sym.imp.WS2_32.dll_htons]
mov ebp, 0x10
cmp dword [esp + 0xb8], ebp
mov word [esp + 0xf6], ax
mov eax, dword [esp + 0xa4]
jae 0x1000e4db
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
cmp eax, 0xffffffff
mov dword [esp + 0xf8], eax
jne 0x1000e57b
cmp dword [esp + 0xb8], ebp
mov eax, dword [esp + 0xa4]
jae 0x1000e509
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
cmp eax, edi
jne 0x1000e56d
mov dword [ebx], 2
cmp dword [esp + 0x9c], ebp
jb 0x1000e533
mov ecx, dword [esp + 0x88]
push ecx
call fcn.1001dad4
add esp, 4
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], edi
cmp dword [esp + 0xb8], ebp
mov byte [esp + 0x88], 0
jb 0x1000e566
mov edx, dword [esp + 0xa4]
push edx
call fcn.1001dad4
add esp, 4
xor al, al
jmp 0x1000ea84
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov dword [esp + 0xf8], edx
push 6
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [esp + 0x18], ebx
jne 0x1000e5a1
mov eax, dword [esp + 0x1c]
mov dword [eax], 1
jmp 0x1000e51a
push ebp
lea eax, [esp + 0xf8]
push eax
push ebx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1000e61e
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
cmp dword [esp + 0x9c], ebp
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 2
jb 0x1000e5e0
mov edx, dword [esp + 0x88]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xb8], ebp
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], edi
mov byte [esp + 0x88], 0
jb 0x1000e566
mov eax, dword [esp + 0xa4]
push eax
call fcn.1001dad4
add esp, 4
xor al, al
jmp 0x1000ea84
lea ecx, [esp + 0x84]
push ecx
mov ecx, str.GET
lea edi, [esp + 0x2c]
call fcn.10008e10
add esp, 4
push eax
mov edi, str._HTTP_1.1_r_nAccept:___r_nUser_Agent:_YZ_r_nAccept_Encoding:_gzip_r_nConnection:_Keep_Alive_r_nHost:
lea esi, [esp + 0x64]
mov byte [esp + 0x1158], 2
call fcn.10008ec0
add esp, 4
lea edx, [esp + 0xa0]
push edx
push eax
lea edi, [esp + 0x4c]
mov byte [esp + 0x115c], 3
call fcn.1000c720
push eax
mov edi, str._r_n_r_n
lea esi, [esp + 0xc8]
mov byte [esp + 0x1160], 4
call fcn.10008ec0
add esp, 0xc
cmp dword [esp + 0x5c], ebp
jb 0x1000e69b
mov eax, dword [esp + 0x48]
push eax
call fcn.1001dad4
add esp, 4
mov edi, 0xf
xor esi, esi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], esi
mov byte [esp + 0x48], 0
cmp dword [esp + 0x78], ebp
jb 0x1000e6c2
mov ecx, dword [esp + 0x64]
push ecx
call fcn.1001dad4
add esp, 4
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], esi
mov byte [esp + 0x64], 0
mov byte [esp + 0x1154], 8
cmp dword [esp + 0x40], ebp
jb 0x1000e6ea
mov edx, dword [esp + 0x2c]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xd4], ebp
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], esi
mov byte [esp + 0x2c], 0
jae 0x1000e70e
lea eax, [esp + 0xc0]
mov ecx, dword [esp + 0xd0]
push esi
push ecx
push eax
push ebx
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x1000e790
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
cmp dword [esp + 0xd4], ebp
mov edx, dword [esp + 0x1c]
mov dword [edx], 2
jb 0x1000e74e
mov eax, dword [esp + 0xc0]
push eax
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x9c], ebp
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd0], esi
mov byte [esp + 0xc0], 0
jb 0x1000e77d
mov ecx, dword [esp + 0x88]
push ecx
call fcn.1001dad4
add esp, 4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], esi
jmp 0x1000e545
push 0x10032fca
lea ecx, [esp + 0xdc]
call fcn.10006120
lea eax, [esp + 0x104]
push eax
mov byte [esp + 0x1158], 9
mov byte [esp + 0x1b], 1
call fcn.10012640
push 0xfff
xor ebp, ebp
lea ecx, [esp + 0x149]
push ebp
mov byte [esp + 0x115c], 0xa
push ecx
mov byte [esp + 0x150], 0
call fcn.10020580
add esp, 0xc
push ebp
push 0xfff
lea edx, [esp + 0x14c]
push edx
push ebx
call dword [sym.imp.WS2_32.dll_recv]
mov edi, eax
test edi, edi
jle 0x1000e995
add ebp, edi
cmp byte [esp + 0x17], 0
lea eax, [esp + 0x144]
mov byte [esp + edi + 0x144], 0
lea edx, [eax + 1]
je 0x1000e950
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x1000e821
sub eax, edx
push eax
lea eax, [esp + 0x148]
push eax
lea eax, [esp + 0xe0]
call fcn.10007020
cmp dword [esp + 0xf0], 0x10
mov eax, dword [esp + 0xdc]
jae 0x1000e859
lea eax, [esp + 0xdc]
mov ecx, dword [esp + 0xec]
push ecx
push eax
lea ebx, [esp + 0x10c]
call fcn.10012770
test al, al
je 0x1000e932
mov eax, dword [esp + 0x104]
cmp eax, 0x64
jne 0x1000e89e
push 0
push 0x10032fca
lea ecx, [esp + 0xe0]
call fcn.10007110
mov ebx, dword [esp + 0x18]
jmp 0x1000e975
cmp eax, 0xc8
jne 0x1000e9f2
mov edx, dword [esp + 0x124]
sub ebp, dword [esp + 0x12c]
push str.CONTENT_ENCODING
lea ecx, [esp + 0x2c]
mov dword [esp + 0x28], edx
mov byte [esp + 0x1b], 0
call fcn.10006120
lea eax, [esp + 0x7c]
push eax
lea ebx, [esp + 0x2c]
lea esi, [esp + 0x134]
mov byte [esp + 0x1158], 0xb
call fcn.1000fc60
mov byte [esp + 0x1154], 0xa
cmp dword [esp + 0x40], 0x10
jb 0x1000e907
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.1001dad4
add esp, 4
test ebp, ebp
jle 0x1000e91e
mov eax, dword [esp + 0x20]
sub edi, ebp
lea edx, [esp + edi + 0x144]
push eax
call fcn.100061e0
cmp ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x18]
jge 0x1000ea36
mov esi, dword [esp + 0x24]
jmp 0x1000e975
cmp dword [esp + 0xec], 0x1000
ja 0x1000ea14
mov ebx, dword [esp + 0x18]
jmp 0x1000e975
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x1000e950
sub eax, edx
push eax
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x148]
push ecx
call fcn.10007020
cmp ebp, esi
jge 0x1000ea36
push 0
push 0xfff
lea edx, [esp + 0x14c]
push edx
push ebx
call dword [sym.imp.WS2_32.dll_recv]
mov edi, eax
test edi, edi
jg 0x1000e802
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x104]
mov dword [eax], 2
push ecx
mov byte [esp + 0x1158], 9
call fcn.10012700
lea ecx, [esp + 0xd8]
call fcn.10006190
lea ecx, [esp + 0xbc]
call fcn.10006190
lea ecx, [esp + 0x84]
call fcn.10006190
lea ecx, [esp + 0xa0]
call fcn.10006190
xor al, al
jmp 0x1000ea84
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x104]
mov dword [ecx], eax
push edx
jmp 0x1000e9ae
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x104]
mov dword [ecx], 4
push edx
jmp 0x1000e9ae
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
lea eax, [esp + 0x104]
push eax
mov byte [esp + 0x1158], 9
call fcn.10012700
lea ecx, [esp + 0xd8]
call fcn.10006190
lea ecx, [esp + 0xbc]
call fcn.10006190
lea ecx, [esp + 0x84]
call fcn.10006190
lea ecx, [esp + 0xa0]
call fcn.10006190
mov al, 1
mov ecx, dword [esp + 0x114c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1130]
xor ecx, esp
call fcn.1001e327
add esp, 0x1144
ret 4