Function at 0x41ea50
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2218
call fcn.00427940
mov eax, dword [0x442730]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x11a8]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x41ea93
xor al, al
jmp 0x41ece6
mov edx, 2
mov word [ebp - 0x14], dx
push 0x50
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x12], ax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [ebp - 0x10], eax
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x11ac], eax
cmp dword [ebp - 0x11ac], 0xffffffff
jne 0x41ead7
xor al, al
jmp 0x41ece6
push 0x10
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x11ac]
push edx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x41eaf6
xor al, al
jmp 0x41ece6
mov byte [ebp - 0x1018], 0
push 0xfff
push 0
lea eax, [ebp - 0x1017]
push eax
call fcn.00425b80
add esp, 0xc
push str.POST
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x1018]
push eax
call fcn.00428240
add esp, 8
push str._HTTP_1.1_r_n
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
push str.Host:
lea edx, [ebp - 0x1018]
push edx
call fcn.00428240
add esp, 8
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
push 0x439f5c
lea edx, [ebp - 0x1018]
push edx
call fcn.00428240
add esp, 8
push str.Connection:_keep_alive_r_n
lea eax, [ebp - 0x1018]
push eax
call fcn.00428240
add esp, 8
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00427ea0
add esp, 4
push eax
push str.Content_Length:__d_r_n
lea edx, [ebp - 0x1218]
push edx
call fcn.004281b1
add esp, 0xc
lea eax, [ebp - 0x1218]
push eax
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
push str.Cache_Control:_max_age0_r_n
lea edx, [ebp - 0x1018]
push edx
call fcn.00428240
add esp, 8
push str.Content_Type:_application_x_www_form_urlencoded_r_n
lea eax, [ebp - 0x1018]
push eax
call fcn.00428240
add esp, 8
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_n
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
push str.Accept_Encoding:_gzip_deflate_sdch_r_n
lea edx, [ebp - 0x1018]
push edx
call fcn.00428240
add esp, 8
push str.Accept_Language:_zh_CN_zh_q0.8_r_n
lea eax, [ebp - 0x1018]
push eax
call fcn.00428240
add esp, 8
push 0x43a080
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00428240
add esp, 8
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x1018]
push eax
call fcn.00428240
add esp, 8
push 0
lea ecx, [ebp - 0x1018]
push ecx
call fcn.00427ea0
add esp, 4
push eax
lea edx, [ebp - 0x1018]
push edx
mov eax, dword [ebp - 0x11ac]
push eax
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x41ec8e
xor al, al
jmp 0x41ece6
mov byte [ebp - 0x2218], 0
push 0xfff
push 0
lea ecx, [ebp - 0x2217]
push ecx
call fcn.00425b80
add esp, 0xc
push 0
push 0x1000
lea edx, [ebp - 0x2218]
push edx
mov eax, dword [ebp - 0x11ac]
push eax
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
jne 0x41eccf
xor al, al
jmp 0x41ece6
call dword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [ebp - 0x2218]
push ecx
mov ecx, dword [ebp + 0x14]
call fcn.0041f5e0
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00425ae5
mov esp, ebp
pop ebp
ret