Function at 0x10013860
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
sub esp, 0x898
push ebx
push ebp
push esi
push edi
mov ecx, 0xc
mov esi, str.Mozilla_4.0__compatible__MSIE_9.0__Windows_NT_6.1_
lea edi, [esp + 0x74]
mov eax, dword [str.qun.qq.com]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x100fb934]
mov dx, word [0x100fb938]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], ecx
mov ecx, 9
mov esi, str._cgi_bin_qun_mgr_search_group_members
lea edi, [esp + 0x2c]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
mov dword [esp + 0x24], eax
mov al, byte [0x100fb93a]
push 0
lea ecx, [esp + 0x80]
push 0
push ecx
mov dword [esp + 0x28], 0x20
mov word [esp + 0x38], dx
mov byte [esp + 0x3a], al
movsw word es:[edi], word [esi]
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
je 0x100139dc
push 0
push 0
push 3
push 0
push 0
lea edx, [esp + 0x30]
push 0x50
push edx
push ebx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebp, eax
test ebp, ebp
jne 0x10013917
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
push 0
push 0x80084010
push 0
push 0
lea eax, [esp + 0x3c]
push str.HTTP_1.1
push eax
push 0x100fb8ec
push ebp
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x10013959
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
mov ecx, dword [esp + 0x8ac]
lea edx, [esp + 0x2c]
push ecx
push edx
lea eax, [esp + 0xb0]
push str.Accept:___r_nReferer:_http:__qun.qq.com_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edx, dword [esp + 0x8c0]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [esp + 0xa8]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
push ecx
lea ecx, [esp + 0xb4]
push ecx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x100139cd
lea edx, [esp + 0x14]
push 0
lea eax, [esp + 0x58]
push edx
push eax
push 5
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x100139eb
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
lea ecx, [esp + 0x54]
push ecx
call dword [sym.imp.MSVCRT.dll_atol]
mov edi, eax
inc edi
push edi
mov dword [esp + 0x20], edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
add esp, 8
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x28]
mov ecx, edx
push eax
push ecx
push ebx
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x10013a5b
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov eax, dword [esp + 0x10]
push eax
call esi
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebp, eax
lea edi, [ebp + ebp + 2]
push edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
push ebp
mov ecx, edx
push esi
push 0xffffffffffffffff
and ecx, 3
push ebx
push 0
push 0xfde9
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebp, eax
lea edi, [ebp + 1]
push edi
call sub.MFC42.DLL_operatornew
mov ecx, edi
mov ebx, eax
mov edx, ecx
add esp, 4
xor eax, eax
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
push 0
push 0
push ebp
mov ecx, edx
push ebx
push 0xffffffffffffffff
and ecx, 3
push esi
push 0
push 0
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
call sub.MFC42.DLL_operatordelete
push ebx
call fcn.10003000
push ebx
mov esi, eax
call sub.MFC42.DLL_operatordelete
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x898
ret 8