Function at 0x406990
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Reference http user-agent string
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c4
mov eax, dword [0x42e6dc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, edx
push 0x200
mov dword [ebp - 0x6b8], edi
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x6ac], eax
call fcn.0040a3df
add esp, 4
cmp byte [ebp + 0x10], 0
mov dword [ebp - 0x6b4], eax
jne 0x4069f9
lea esi, [ebx + 0x200]
push esi
call fcn.0040a3df
push esi
push 0
push eax
mov dword [ebp - 0x6b0], eax
call fcn.0040fcd0
add esp, 0x10
jmp 0x406a05
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x6b0], eax
push 0x429cbc
push edi
call fcn.0040c9c0
add esp, 8
test eax, eax
jne 0x406a29
push 0x429cc0
push edi
call fcn.0040c9c0
add esp, 8
test eax, eax
je 0x406a62
mov ecx, edi
xor edx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a30
sub ecx, esi
je 0x406a62
jmp 0x406a40
mov al, byte [edi + edx]
cmp al, 0xa
je 0x406a4b
cmp al, 0xd
jne 0x406a4f
mov byte [edi + edx], 0
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406a55
sub eax, esi
cmp edx, eax
jb 0x406a40
push 0xc0
lea eax, [ebp - 0x4c8]
push 0
mov ecx, 0x10
mov esi, str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0_
lea edi, [ebp - 0x508]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0040fcd0
push 0xb8
lea eax, [ebp - 0x3c0]
push 0
mov ecx, 0x12
mov esi, str.Mozilla_5.0__compatible__Konqueror_4.3__Linux__KHTML_4.3.5__like_Gecko_
lea edi, [ebp - 0x408]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0040fcd0
movq xmm0, qword [str.Mozilla_4.8__en___Windows_NT_5.0__U_]
mov eax, dword [0x429d70]
movq qword [ebp - 0x308], xmm0
movq xmm0, qword [0x429d58]
mov dword [ebp - 0x2e8], eax
mov al, byte [0x429d74]
movq qword [ebp - 0x300], xmm0
movq xmm0, qword [0x429d60]
push 0xdb
mov byte [ebp - 0x2e4], al
movq qword [ebp - 0x2f8], xmm0
movq xmm0, qword [0x429d68]
lea eax, [ebp - 0x2e3]
push 0
push eax
movq qword [ebp - 0x2f0], xmm0
call fcn.0040fcd0
push 0xa8
lea eax, [ebp - 0x1b0]
push 0
mov ecx, 0x16
mov esi, str.Mozilla_4.0__compatible__MSIE_6.0__America_Online_Browser_1.1__rev1.5__Windows_NT_5.1__
lea edi, [ebp - 0x208]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0040fcd0
mov ecx, 0x15
mov esi, str.Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.7.5__Gecko_20060127_Netscape_8.1
lea edi, [ebp - 0x108]
rep movsd dword es:[edi], dword [esi]
push 0xaa
lea eax, [ebp - 0xb2]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.0040fcd0
push ebx
push 0
push dword [ebp - 0x6ac]
call fcn.0040fcd0
mov esi, dword [ebp - 0x6b4]
add esp, 0x48
push str.GET
push 0x200
push esi
call fcn.0040afe9
push dword [ebp - 0x6b8]
push 0x200
push esi
call fcn.0040b03e
push str._HTTP_1.0_r_nHost:
push 0x200
push esi
call fcn.0040b03e
push dword [ebp - 0x6bc]
push 0x200
push esi
call fcn.0040b03e
push 0x429e44
push 0x200
push esi
call fcn.0040b03e
push str.Cache_Control:_max_age0__no_store_r_n
push 0x200
push esi
call fcn.0040b03e
add esp, 0x48
push str.User_agent:
push 0x200
push esi
call fcn.0040b03e
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 5
div ecx
lea eax, [ebp - 0x508]
shl edx, 8
add eax, edx
push eax
push 0x200
push esi
call fcn.0040b03e
push str._r_n_r_n
push 0x200
push esi
call fcn.0040b03e
add esp, 0x18
lea eax, [ebp - 0x6a8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jns 0x406c50
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, dword [ebp - 0x6c0]
jmp 0x406e05
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov edi, eax
cmp edi, 0xffffffff
je 0x406dff
push dword [ebp - 0x6bc]
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x406e05
mov ecx, 2
mov word [ebp - 0x518], cx
mov eax, dword [eax + 0xc]
push 0x50
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x514], eax
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x516], ax
push 0x10
lea eax, [ebp - 0x518]
push eax
push edi
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x406cce
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x406e05
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406cd3
push 0
sub ecx, edx
push ecx
push esi
push edi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x406dff
mov ecx, dword [sym.imp.WS2_32.dll_recv]
xor esi, esi
mov eax, ebx
sub eax, esi
cmp byte [ebp + 0x10], 0
push 0
je 0x406d0e
dec eax
push eax
mov eax, dword [ebp - 0x6ac]
jmp 0x406d1a
add eax, 0x200
push eax
mov eax, dword [ebp - 0x6b0]
add eax, esi
push eax
push edi
call ecx
add esi, eax
cmp byte [ebp + 0x10], 0
lea ecx, [ebx + 0x200]
je 0x406d30
mov ecx, ebx
cmp esi, ecx
jge 0x406d3e
mov ecx, dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x406cf8
cmp eax, 0xffffffff
jne 0x406d4d
cmp byte [ebp + 0x14], 0
je 0x406dff
push dword [ebp - 0x6b4]
call fcn.0040b0a1
add esp, 4
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
cmp byte [ebp + 0x10], 0
jne 0x406dec
mov esi, dword [ebp - 0x6b0]
push str._r_n_r_n
push esi
call fcn.0040c9c0
add esp, 8
test eax, eax
je 0x406e11
cmp byte [ebp + 0x14], 0
je 0x406db3
push ebx
push str._r_n_r_n
push esi
call fcn.0040c9c0
add esp, 8
add eax, 4
push eax
push dword [ebp - 0x6ac]
call fcn.0040d470
add esp, 0xc
jmp 0x406dd8
lea eax, [ebx - 1]
push eax
push str._r_n_r_n
push esi
call fcn.0040c9c0
add esp, 8
add eax, 4
push eax
push ebx
push dword [ebp - 0x6ac]
call fcn.0040c6e7
add esp, 0x10
push esi
call fcn.0040b0a1
mov eax, dword [ebp - 0x6ac]
add esp, 4
cmp byte [eax], 0
je 0x406e35
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040af8f
mov esp, ebp
pop ebp
ret
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [ebp + 0x10], 0
jne 0x406e1a
mov esi, dword [ebp - 0x6b0]
push esi
call fcn.0040b0a1
add esp, 4
push dword [ebp - 0x6b4]
call fcn.0040b0a1
add esp, 4
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor al, al
pop ebx
call fcn.0040af8f
mov esp, ebp
pop ebp
ret