Function at 0x643ea4
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x10
add esp, 0xfffff004
push eax
dec eax
jne 0x643ead
mov eax, dword [ebp - 4]
add esp, 0xfffffd8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10278], ebx
mov dword [ebp - 0x10274], ebx
mov dword [ebp - 0x10270], ebx
mov dword [ebp - 0x1026c], ebx
mov dword [ebp - 0x10264], ebx
mov dword [ebp - 0x10268], ebx
mov byte [ebp - 1], cl
mov edi, edx
mov esi, eax
lea ebx, [ebp - 0x10]
xor eax, eax
push ebp
push 0x644267
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 2], 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x10268]
mov eax, dword [0x682434]
mov eax, dword [eax]
call fcn.0061111c
mov eax, dword [ebp - 0x10268]
lea edx, [ebp - 0x10264]
call fcn.00429384
mov eax, dword [ebp - 0x10264]
call fcn.0040bffc
push eax
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x644247
xor eax, eax
push ebp
push 0x643f85
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x84000100
push 0
push 0
mov eax, esi
call fcn.0040bffc
push eax
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643fa2
cmp dword [ebp - 0xc], 0
jne 0x643fb6
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x644247
lea edx, [ebp - 0x1026c]
mov eax, edi
call fcn.00643830
mov edx, dword [ebp - 0x1026c]
lea eax, [ebp - 0x10260]
call fcn.00407eac
call fcn.00407168
xor eax, eax
push ebp
push 0x644006
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
lea eax, [ebp - 0x10260]
call fcn.00408e00
call fcn.00407168
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64402c
cmp byte [ebp - 1], 0
je 0x6440da
cmp byte [0x68a222], 0
jne 0x6440da
mov eax, 0x644288
call fcn.00643738
test al, al
jne 0x6440da
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x500]
call fcn.00551b20
push 0x6442b4
lea eax, [ebp - 0x10270]
push eax
mov ecx, 0x6442e4
mov edx, 0x6442f8
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10270]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x500]
call fcn.0055156c
cmp dword [0x68a210], 9
jne 0x6440da
push 0x6442b4
lea eax, [ebp - 0x10274]
push eax
mov ecx, 0x6442e4
mov edx, 0x6442f8
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10274]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x460]
call fcn.0055156c
mov dx, 0xfff5
mov eax, dword [0x68a1e0]
call fcn.00551784
mov eax, dword [0x682434]
mov eax, dword [eax]
call fcn.00610390
xor edx, edx
push ebp
push 0x64415f
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 1], 0
je 0x644120
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x500]
cmp byte [eax + 0x69], 0
je 0x644120
xor eax, eax
call fcn.00643a8c
push ebx
push 0x10000
lea eax, [ebp - 0x10010]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetReadFile
push 0
lea edx, [ebp - 0x10010]
mov ecx, dword [ebx]
lea eax, [ebp - 0x10260]
call fcn.0040809c
call fcn.00407168
cmp dword [ebx], 0
jne 0x644102
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6441bd
lea eax, [ebp - 0x10260]
call fcn.004080bc
call fcn.00407168
mov byte [ebp - 2], 1
cmp byte [ebp - 1], 0
je 0x6441ed
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x500]
cmp byte [eax + 0x69], 0
je 0x6441ed
call fcn.00551b18
xor edx, edx
mov eax, dword [0x68a1e0]
call fcn.00551784
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 1], 0
je 0x644247
push 0x644318
lea eax, [ebp - 0x10278]
push eax
mov ecx, 0x64433c
mov edx, 0x6442f8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x10278]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x500]
call fcn.0055156c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x64426e
lea eax, [ebp - 0x10278]
mov edx, 6
call fcn.0040b4c4
pop eax
jmp eax