Function at 0x10015830
Capabilities:
Connect to http server
Create http request
Hash data using djb2
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
sub esp, 0x8d4
push ebx
push ebp
push esi
push edi
mov ecx, 0xc
mov esi, str.Mozilla_4.0__compatible__MSIE_9.0__Windows_NT_6.1_
lea edi, [esp + 0xb0]
mov eax, dword [str.qun.qq.com]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x10100b14]
mov dx, word [0x10100b18]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], ecx
mov ecx, 8
mov esi, str._cgi_bin_qun_mgr_get_friend_list
lea edi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x8e8]
mov esi, dword [sym.imp.MSVCRT.dll_strstr]
mov dword [esp + 0x1c], eax
mov al, byte [0x10100b1a]
push str.p_skey
push edi
mov dword [esp + 0x1c], 0x20
mov word [esp + 0x2c], dx
mov byte [esp + 0x2e], al
call esi
add esp, 8
test eax, eax
je 0x10015a88
push str.skey
push edi
call esi
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x10015a88
push 0x1010007c
push ebp
call esi
mov edx, eax
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x34]
rep stosd dword es:[edi], eax
mov edi, str.bkn
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea ebx, [esp + 0x34]
mov esi, edi
mov edi, ebx
mov ebx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
sub edx, ebp
and ecx, 3
sub edx, 5
rep movsb byte es:[edi], byte [esi]
add ebp, 5
push edx
lea ecx, [esp + 0x3c]
push ebp
push ecx
call dword [sym.imp.MSVCRT.dll_strncpy]
lea edi, [esp + 0x40]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffb
xor edx, edx
test ecx, ecx
mov eax, 0x1505
jle 0x10015951
movsx esi, byte [esp + edx + 0x30]
mov edi, eax
shl edi, 5
add edi, eax
add esi, edi
inc edx
cmp edx, ecx
mov eax, esi
jl 0x1001593c
lea edx, [esp + 0x30]
push 0xa
and eax, 0x7fffffff
push edx
push eax
call dword [sym.imp.MSVCRT.dll__itoa]
add esp, 0xc
lea eax, [esp + 0xb0]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
je 0x10015a88
push 0
push 0
push 3
push 0
push 0
lea ecx, [esp + 0x30]
push 0x50
push ecx
push ebx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebp, eax
test ebp, ebp
jne 0x100159bf
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x8d4
ret 4
push 0
push 0x80084010
push 0
push 0
lea edx, [esp + 0x7c]
push str.HTTP_1.1
push edx
push 0x10100acc
push ebp
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x10015a01
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x8d4
ret 4
mov eax, dword [esp + 0x8e8]
lea ecx, [esp + 0x6c]
push eax
push ecx
lea edx, [esp + 0xec]
push str.Accept:___r_nReferer:_http:__qun.qq.com_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
lea edi, [esp + 0x3c]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x2c]
push ecx
push eax
lea edi, [esp + 0xec]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xf0]
push ecx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x10015a79
lea edx, [esp + 0x14]
push 0
lea eax, [esp + 0x94]
push edx
push eax
push 5
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x10015a97
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x8d4
ret 4
lea ecx, [esp + 0x90]
push ecx
call dword [sym.imp.MSVCRT.dll_atol]
mov edi, eax
inc edi
push edi
mov dword [esp + 0x20], edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
add esp, 8
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x28]
mov ecx, edx
push eax
push ecx
push ebx
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x10015b0a
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x8d4
ret 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov eax, dword [esp + 0x10]
push eax
call esi
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebp, eax
lea edi, [ebp + ebp + 2]
push edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
push ebp
mov ecx, edx
push esi
push 0xffffffffffffffff
and ecx, 3
push ebx
push 0
push 0xfde9
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebp, eax
lea edi, [ebp + 1]
push edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov ebx, eax
mov edx, ecx
add esp, 4
xor eax, eax
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
push 0
push 0
push ebp
mov ecx, edx
push ebx
push 0xffffffffffffffff
and ecx, 3
push esi
push 0
push 0
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
call sub.MFC42.DLL_operatordelete
push ebx
call fcn.10002e10
push ebx
mov esi, eax
call sub.MFC42.DLL_operatordelete
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8d4
ret 4