Function at 0x492c78
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push 0x1c
call fcn.004b7848
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
add ebx, 8
push ebx
push 0x109
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x8aa278
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x101
rep stosb byte es:[edi], al
add ebx, 4
push ebx
push 0x89
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x8aa280
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x81
rep stosb byte es:[edi], al
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x4bd300
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
mov eax, dword [ebp - 4]
push eax
push 0x18e
call fcn.004b7848
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x101
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x81
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebp - 0x2c]
cwde
push eax
call sub.WS2_32.dll_WSAStartup
cmp dword [ebp - 0x30], esp
je 0x492e00
push 0x36
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x492e4d
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x492e4b
imul eax, dword [edi]
jmp 0x492e40
mov ecx, eax
cmp ecx, 0x101
jle 0x492e5a
mov ecx, 0x101
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x101
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x492e98
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x492e96
imul eax, dword [edi]
jmp 0x492e8b
mov ecx, eax
cmp ecx, 0x81
jle 0x492ea5
mov ecx, 0x81
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x81
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x49326c
mov dword [ebp - 0x2c], esp
push str.ns1.dnspod.net
call sub.WS2_32.dll_gethostbyname
cmp dword [ebp - 0x2c], esp
je 0x492f13
push 0x83
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x493248
mov dword [ebp - 0x2c], esp
push 6
push 1
push 2
call sub.WS2_32.dll_socket
cmp dword [ebp - 0x2c], esp
je 0x492f53
push 0xf6
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0x10
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x10]
push 0x40
call sub.KERNEL32.DLL_LocalAlloc
cmp dword [ebp - 0x2c], esp
je 0x492f89
push 0x169
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x14], eax
push 2
push 0
push dword [ebp - 0x14]
call fcn.0040acc8
mov dword [ebp - 0x2c], esp
push 0x1a0a
call sub.WS2_32.dll_htons
cmp dword [ebp - 0x2c], esp
je 0x492fc7
push 0x1e7
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
push eax
push 2
push dword [ebp - 0x14]
call fcn.0040acc8
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x5d4ccc]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.004020b4
push eax
call fcn.004932e0
push eax
call fcn.004932e0
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
call fcn.004932e0
push eax
push 4
push dword [ebp - 0x14]
call fcn.00413338
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push dword [ebp - 0xc]
call sub.WS2_32.dll_connect
cmp dword [ebp - 0x2c], esp
je 0x493041
push 0x2ed
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x4931fa
mov eax, str.GET___HTTP_1.1_r_nAccept_Language:_zh_CN_zh_q0.9_r_nHost:ns1.dnspod.net_r_n_r_n
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x493064
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00474d70
mov dword [ebp - 0x2c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x493087
mov eax, 0x5d3b7c
push eax
push 1
mov ebx, 0x4b7f20
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push dword [ebp - 0xc]
call sub.WS2_32.dll_send
cmp dword [ebp - 0x34], esp
je 0x4930cf
push 0x3e6
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x20], 0x200
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x20]
push 0x40
call sub.KERNEL32.DLL_LocalAlloc
cmp dword [ebp - 0x2c], esp
je 0x493102
push 0x446
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], esp
push 0
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0xc]
call sub.WS2_32.dll_recv
cmp dword [ebp - 0x2c], esp
je 0x493137
push 0x47f
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x4931d3
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x4bc1a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x493177
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x5d3f44
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0041c230
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4931bb
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4931cf
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x24]
call sub.KERNEL32.DLL_LocalFree
cmp dword [ebp - 0x2c], esp
je 0x4931fa
push 0x558
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LocalFree
cmp dword [ebp - 0x2c], esp
je 0x493221
push 0x574
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call sub.WS2_32.dll_closesocket
cmp dword [ebp - 0x2c], esp
je 0x493248
push 0x58e
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x2c], esp
call sub.WS2_32.dll_WSACleanup
cmp dword [ebp - 0x2c], esp
je 0x49326c
push 0x5aa
push 0x416a4da
push 6
call fcn.004b785a
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x493288
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x49328d
push eax
mov ebx, dword [ebp - 4]
push ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4932ca
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4932da
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret