Function at 0x10005817
Capabilities:
Connect to http server
Create http request
Query or enumerate registry value
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001aa83
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x13bc
call fcn.10009d60
mov eax, dword [0x10025014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x13c8], edx
mov ebx, ecx
push 0x104
lea eax, [ebp - 0x17c]
push 0
push eax
call fcn.1000a7f0
add esp, 0xc
lea eax, [ebp - 0x13a0]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor edi, edi
inc edi
test eax, eax
jne 0x100058da
lea eax, [ebp - 0x1394]
mov dword [ebp - 0x1394], 0x104
push eax
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x1390], edi
push eax
lea eax, [ebp - 0x1390]
push eax
push 0
push str.User_Agent
push dword [ebp - 0x13a0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x13a0]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x100058f5
push SysReAllocString
push str.Mozilla_4.0__compatible__MSIE_8.0__Win32_
push ecx
mov edx, 0x104
lea ecx, [ebp - 0x17c]
call fcn.100011d3
and dword [ebp - 0x1180], 0
lea eax, [ebp - 0x117c]
push 0x1000
push 0
push eax
mov dword [ebp - 0x1188], str.text_html
mov dword [ebp - 0x1184], 0x10021a44
call fcn.1000a7f0
add esp, 0xc
mov dword [ebp - 0x138c], edi
xor eax, eax
mov dword [ebp - 4], eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x17c]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x139c], eax
test eax, eax
je 0x10005bc2
xor ecx, ecx
push ecx
push ecx
push 3
pop esi
push esi
push ecx
push ecx
push 0x50
push ebx
push eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x1398], eax
test eax, eax
jne 0x10005984
mov dword [ebp - 0x13ac], edi
lea eax, [ebp - 0x13ac]
push 0x10023064
jmp 0x10005bd4
push 0
push 0x4000000
lea ecx, [ebp - 0x1188]
push ecx
push 0
push str.HTTP_1.1
push 0x10020d4c
push 0x10021a54
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov ebx, eax
mov dword [ebp - 0x1394], ebx
test ebx, ebx
jne 0x100059d0
mov dword [ebp - 0x13b0], 2
lea eax, [ebp - 0x13b0]
push 0x10023064
jmp 0x10005bd4
xor eax, eax
push eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x10005a37
mov dword [ebp - 0x13b4], esi
lea eax, [ebp - 0x13b4]
push 0x10023064
jmp 0x10005bd4
lea eax, [ebp - 0x138c]
push eax
push 0x63
lea eax, [ebp - 0x78]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x138c]
cmp eax, 0x64
jae 0x10005bda
mov byte [ebp + eax - 0x78], 0
lea ecx, [ebp - 0x117c]
lea eax, [ebp - 0x78]
mov edx, 0x1000
push eax
call fcn.10001112
test eax, eax
jne 0x10005a40
cmp dword [ebp - 0x138c], 0
jne 0x100059f7
lea eax, [ebp - 0x117c]
push str._title_
push eax
call fcn.1000a370
mov dword [ebp - 0x13bc], eax
pop ecx
pop ecx
test eax, eax
jne 0x10005a77
mov dword [ebp - 0x13b8], 4
lea eax, [ebp - 0x13b8]
push 0x10023064
jmp 0x10005bd4
push 0x200
lea eax, [ebp - 0x1388]
push 0
push eax
call fcn.1000a7f0
and dword [ebp - 0x13a4], 0
lea eax, [ebp - 0x13a4]
push eax
lea eax, [ebp - 0x1390]
mov dword [ebp - 0x1390], 0x2f3e3c
push eax
push dword [ebp - 0x13bc]
xor esi, esi
call fcn.1000c51c
add esp, 0x18
jmp 0x10005adb
mov dword [ebp + esi*4 - 0x1388], eax
lea eax, [ebp - 0x13a4]
push eax
lea eax, [ebp - 0x1390]
push eax
push 0
call fcn.1000c51c
add esp, 0xc
inc esi
test eax, eax
jne 0x10005abb
and dword [ebp + esi*4 - 0x1388], eax
cmp esi, 3
jge 0x10005b05
mov dword [ebp - 0x13c0], 5
lea eax, [ebp - 0x13c0]
push 0x10023064
jmp 0x10005bd4
push str.title
push dword [ebp - 0x1380]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10005b77
mov dword [ebp - 0x13c4], 6
lea eax, [ebp - 0x13c4]
push 0x10023064
jmp 0x10005bd4
push dword [ebp - 0x1384]
mov ecx, dword [ebp - 0x13c8]
mov edx, 0x104
call fcn.100010e3
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebx
call esi
push dword [ebp - 0x1398]
call esi
push dword [ebp - 0x139c]
call esi
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10008f85
leave
ret
and dword [ebp - 0x13a8], 0
lea eax, [ebp - 0x13a8]
push 0x10023064
push eax
call fcn.1000a77e
call fcn.100090ba
int3