Function at 0x52d0d0
Capabilities:
Create http request
Get hostname
Get number of processors
Query or enumerate registry value
Read data from internet
Receive data
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x54427e
mov eax, dword fs:[0]
push eax
sub esp, 0x59c
mov eax, dword [0x597c40]
xor eax, esp
mov dword [esp + 0x598], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x597c40]
xor eax, esp
push eax
lea eax, [esp + 0x5b0]
mov dword fs:[0], eax
lea eax, [esp + 0x34]
push eax
call fcn.0052fbd0
xor ebx, ebx
push 1
mov dword [esp + 0x5bc], ebx
call fcn.0040635a
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x5b8], 1
mov eax, 0x64
push 4
mov dword [esp + 0x18], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], eax
call fcn.0040635a
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 1
push ebx
push str.SOFTWAREDeathSoftVIPMemberData
push reloc.OLEAUT32.dll_SysReAllocString
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x52d17a
lea ecx, [esp + 0x34]
call fcn.00412ef6
mov ecx, dword [esp + 0x14]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x378]
push eax
push ebx
push ebx
push str.User
push ecx
call edi
test eax, eax
je 0x52d1c1
push ebx
push str.No_Vip_Data
push str.Your_VIP_Data_was_not_Detected_on_this_system._Please_Enter_it_before_using_this_program.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x34]
call fcn.00412ef6
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x310]
push eax
push ebx
push ebx
push str.Serial
push ecx
call edi
test eax, eax
je 0x52d202
push ebx
push str.No_Vip_Data
push str.Your_VIP_Data_was_not_Detected_on_this_system._Please_Enter_it_before_using_this_program.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x34]
call fcn.00412ef6
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x2a8]
push eax
push ebx
push ebx
push str.Auth
push ecx
call edi
test eax, eax
je 0x52d243
push ebx
push str.No_Vip_Data
push str.Your_VIP_Data_was_not_Detected_on_this_system._Please_Enter_it_before_using_this_program.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x34]
call fcn.00412ef6
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
lea eax, [esp + 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.0052cef0
push ebx
push ebx
push ebx
push 1
push 0x571c16
call dword [sym.imp.WININET.dll_InternetOpenA]
lea ecx, [esp + 0x2a4]
push ecx
push 0x5db5f8
lea edx, [esp + 0x248]
push edx
mov esi, eax
push str.WoWEmuHacker_v6.0.0.1_Final
lea eax, [esp + 0x31c]
push eax
lea ecx, [esp + 0x388]
push ecx
push str.http:__www.deathsoft.com_veri.php_uid_spass_sprog_scname_smac_sauth_s
lea edx, [esp + 0x4c0]
mov dword [esp + 0x38], esi
call fcn.004060b0
add esp, 0x1c
push ebx
push 0x40000000
push ebx
push ebx
lea edx, [esp + 0x4b4]
push edx
push esi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov ebp, dword [sym.imp.WININET.dll_InternetReadFile]
mov edi, eax
mov dword [esp + 0x18], ebx
xor esi, esi
jmp 0x52d2e0
lea eax, [esp + 0x18]
push eax
mov ecx, 0xc8
sub ecx, esi
push ecx
lea edx, [esp + esi + 0x3e4]
push edx
push edi
call ebp
mov eax, dword [esp + 0x18]
add esi, eax
cmp eax, ebx
jne 0x52d2e0
push 0x10
lea eax, [esp + 0x2ad]
push eax
lea ecx, [esp + 0x25c]
mov byte [esp + esi + 0x3e4], bl
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ecx
call esi
push 0x10
lea edx, [esp + 0x315]
push edx
lea eax, [esp + 0x284]
push eax
call esi
lea ecx, [esp + 0x27c]
push ecx
lea edx, [esp + 0x258]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
sub esp, 0x1c
mov ecx, esp
lea eax, [esp + 0x270]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov dword [esp + 0x4c], esp
mov byte [ecx], bl
lea esi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x52d370
sub eax, esi
push eax
lea eax, [esp + 0x274]
push eax
call fcn.00402580
lea ecx, [esp + 0x240]
call fcn.005312c0
cmp dword [esp + 0x238], 0x10
mov eax, dword [esp + 0x224]
jae 0x52d3ab
lea eax, [esp + 0x224]
lea ecx, [esp + 0x3dc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x52d3e7
push ebx
push str.Bad_VIP_Data
push str.Failed_to_Validate_your_VIP_Membership_Access_Data_nAre_you_sure_your_data_is_correct_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
mov edx, dword [esp + 0x1c]
push edx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
mov eax, dword [esp + 0x1c]
push eax
call esi
lea ecx, [esp + 0x224]
call fcn.00402460
mov byte [esp + 0x5b8], bl
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00406389
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x5b8], 0xffffffff
call fcn.0052fae0
xor al, al
mov ecx, dword [esp + 0x5b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x598]
xor ecx, esp
call fcn.00504076
add esp, 0x5a8
ret