Function at 0x412030
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
sub esp, 0x898
push ebx
push ebp
push esi
push edi
mov ecx, 0xc
mov esi, str.Mozilla_4.0__compatible__MSIE_9.0__Windows_NT_6.1_
lea edi, [esp + 0x74]
mov eax, dword [str.qun.qq.com]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x50d7cc]
mov dx, word [0x50d7d0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], ecx
mov ecx, 9
mov esi, str._cgi_bin_qun_mgr_search_group_members
lea edi, [esp + 0x2c]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
mov dword [esp + 0x24], eax
mov al, byte [0x50d7d2]
push 0
lea ecx, [esp + 0x80]
push 0
push ecx
mov dword [esp + 0x28], 0x20
mov word [esp + 0x38], dx
mov byte [esp + 0x3a], al
movsw word es:[edi], word [esi]
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
je 0x4121ab
push 0
push 0
push 3
push 0
push 0
lea edx, [esp + 0x30]
push 0x50
push edx
push ebx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebp, eax
test ebp, ebp
jne 0x4120e7
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
push 0
push 0x80084010
push 0
push 0
lea eax, [esp + 0x3c]
push str.HTTP_1.1
push eax
push 0x50d784
push ebp
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x412129
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
mov ecx, dword [esp + 0x8ac]
lea edx, [esp + 0x2c]
push ecx
push edx
lea eax, [esp + 0xb0]
push str.Accept:___r_nReferer:_http:__qun.qq.com_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push eax
call fcn.0042cdcc
mov edx, dword [esp + 0x8c0]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [esp + 0xa8]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
push ecx
lea ecx, [esp + 0xb4]
push ecx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x41219c
lea edx, [esp + 0x14]
push 0
lea eax, [esp + 0x58]
push edx
push eax
push 5
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x4121ba
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
lea ecx, [esp + 0x54]
push ecx
call fcn.0042dd5e
mov edi, eax
inc edi
push edi
mov dword [esp + 0x20], edi
call fcn.004a2adf
mov ecx, edi
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
add esp, 8
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x28]
mov ecx, edx
push eax
push ecx
push ebx
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x412229
push ebx
call fcn.004a2b08
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x898
ret 8
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov eax, dword [esp + 0x10]
push eax
call esi
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebp, eax
lea edi, [ebp + ebp + 2]
push edi
call fcn.004a2adf
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
push ebp
mov ecx, edx
push esi
push 0xffffffffffffffff
and ecx, 3
push ebx
push 0
push 0xfde9
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
call fcn.004a2b08
add esp, 4
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebp, eax
lea edi, [ebp + 1]
push edi
call fcn.004a2adf
mov ecx, edi
mov ebx, eax
mov edx, ecx
add esp, 4
xor eax, eax
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
push 0
push 0
push ebp
mov ecx, edx
push ebx
push 0xffffffffffffffff
and ecx, 3
push esi
push 0
push 0
rep stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
call fcn.004a2b08
push ebx
call fcn.00402840
push ebx
mov esi, eax
call fcn.004a2b08
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x898
ret 8