Function at 0x401c1d
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Reference http user-agent string
Resolve dns

Disassembly:
push ebp
lea ebp, [esp - 0x428]
sub esp, 0x4a8
mov eax, dword [0x45e32c]
xor eax, ebp
mov dword [ebp + 0x424], eax
mov eax, dword [ebp + 0x434]
push ebx
mov ebx, dword [ebp + 0x430]
push esi
mov esi, dword [ebp + 0x448]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x438]
push edi
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x43c]
push ebx
mov dword [ebp - 0x74], eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
jne 0x401c76
xor eax, eax
jmp 0x401f31
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
test eax, eax
mov dword [ebp - 0x70], eax
jge 0x401c96
push str.Error_creating_socket._n
call fcn.0042766a
pop ecx
jmp 0x401c6f
push 0x10
lea eax, [ebp - 0x6c]
push 0
push eax
call fcn.00426c50
add esp, 0xc
cmp byte [0x45fa9c], 0
mov word [ebp - 0x6c], 2
je 0x401cf0
cmp dword [0x576768], 0
jne 0x401cf0
cmp dword [ebp + 0x444], 0
jne 0x401cf0
movzx eax, word [0x45fa98]
push eax
call dword [sym.imp.WS2_32.dll_htons]
push dword [0x45fa94]
mov word [ebp - 0x6a], ax
call dword [sym.imp.WS2_32.dll_htonl]
mov dword [ebp - 0x7c], eax
push 4
lea eax, [ebp - 0x7c]
push eax
jmp 0x401d0a
push dword [ebp + 0x440]
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x6a], ax
movsx eax, word [edi + 0xa]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
lea eax, [ebp - 0x68]
push eax
call fcn.00426fb0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x401d33
push str.Error_connecting_to_server._n
jmp 0x401c8e
call sub.SSLEAY32.dll_Ordinal_183
call sub.SSLEAY32.dll_Ordinal_183
call sub.SSLEAY32.dll_Ordinal_74
call sub.SSLEAY32.dll_Ordinal_341
push eax
call sub.SSLEAY32.dll_Ordinal_12
push eax
call sub.SSLEAY32.dll_Ordinal_75
test eax, eax
pop ecx
pop ecx
mov dword [0x461338], eax
jne 0x401d73
push str.Error_creating_SSL._n
call fcn.0042766a
pop ecx
call fcn.00401be1
jmp 0x401c6f
push eax
call sub.SSLEAY32.dll_Ordinal_59
push dword [ebp - 0x70]
mov dword [0x461268], eax
push dword [0x461338]
call sub.SSLEAY32.dll_Ordinal_87
push dword [0x461338]
call sub.SSLEAY32.dll_Ordinal_43
add esp, 0x10
test eax, eax
jg 0x401dc4
push eax
push str.Error_creating_SSL_connection.__err_x_n
call fcn.0042766a
call fcn.00401be1
call fcn.004274ef
add eax, 0x20
push eax
call fcn.00427493
add esp, 0xc
jmp 0x401c6f
push dword [0x461338]
call sub.SSLEAY32.dll_Ordinal_127
push eax
call sub.SSLEAY32.dll_Ordinal_130
push eax
push str.SSL_connection_using__s_n
call fcn.0042766a
add esp, 0x10
test esi, esi
je 0x401e0f
cmp byte [esi], 0
je 0x401e0f
push esi
call fcn.004268f0
push eax
push str.Mozilla_5.0__compatible__MSIE_8.0__Windows_NT_6.1__Trident_4.0__GTB7.4__InfoPath.2__SV1__.NET_CLR_3.3.69573__WOW64__en_US_
push ebx
push dword [ebp - 0x78]
lea eax, [ebp - 0x5c]
push str.POST__s_HTTP_1.0_r_nHost:__s_r_nX_Requested_With:_XMLHttpRequest_r_nAccept:_application_json__text_javascript_____r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:__s_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nContent_Length:__d_r_nConnection:_close_r_n
push eax
call fcn.0042772f
add esp, 0x1c
jmp 0x401e29
push str.Mozilla_5.0__compatible__MSIE_8.0__Windows_NT_6.1__Trident_4.0__GTB7.4__InfoPath.2__SV1__.NET_CLR_3.3.69573__WOW64__en_US_
push ebx
push dword [ebp - 0x78]
lea eax, [ebp - 0x5c]
push str.GET__s_HTTP_1.1_r_nHost:__s_r_nUser_Agent:__s_r_nAccept_Language:_cs_en_us_q0.7_en_q0.3_r_nAccept_Charset:_windows_1250_utf_8_q0.7__q0.7_r_nCache_Control:_max_age0_r_nConnection:_close_r_n
push eax
call fcn.0042772f
add esp, 0x14
cmp dword [ebp - 0x74], 0
je 0x401e4e
push dword [ebp - 0x74]
lea eax, [ebp - 0x5c]
push str._s_r_n
push eax
call fcn.004268f0
pop ecx
lea eax, [ebp + eax - 0x5c]
push eax
call fcn.0042772f
add esp, 0xc
lea eax, [ebp - 0x5c]
push 0x43ec40
push eax
call fcn.00426990
test esi, esi
pop ecx
pop ecx
je 0x401e73
cmp byte [esi], 0
je 0x401e73
lea eax, [ebp - 0x5c]
push esi
push eax
call fcn.00426990
pop ecx
pop ecx
lea eax, [ebp - 0x5c]
push eax
call fcn.00401ba5
mov esi, 0xfa000
push esi
call fcn.00426ac7
push esi
mov edi, eax
push 0
push edi
call fcn.00426c50
add esp, 0x14
xor esi, esi
push 0x64
lea eax, [esi + edi]
push eax
push dword [0x461338]
call sub.SSLEAY32.dll_Ordinal_78
add esp, 0xc
add esi, eax
test eax, eax
jle 0x401ebb
cmp esi, 0xf9c00
jl 0x401e97
test eax, eax
jge 0x401ef8
push eax
push dword [0x461338]
call sub.SSLEAY32.dll_Ordinal_58
cmp eax, 2
pop ecx
pop ecx
je 0x401c6f
cmp eax, 3
je 0x401c6f
cmp eax, 6
je 0x401c6f
cmp eax, 5
je 0x401c6f
cmp eax, 1
je 0x401c6f
mov ebx, dword [ebp - 0x80]
mov dword [ebx], esi
inc esi
push esi
call fcn.00426ac7
mov esi, eax
test esi, esi
pop ecx
je 0x401f1f
mov eax, dword [ebx]
inc eax
push eax
push edi
push esi
call fcn.00426fb0
mov eax, dword [ebx]
add esp, 0xc
mov byte [esi + eax], 0
push edi
call fcn.00426076
pop ecx
push dword [ebp - 0x70]
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, esi
mov ecx, dword [ebp + 0x424]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00426f93
add ebp, 0x428
leave
ret