Function at 0x1000520b
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff7c
push esi
push edi
jmp 0x10005220
push 0
push 0
push 0
push 1
push 0x10005218
call dword [sym.imp.wininet.dll_InternetOpenA]
or eax, eax
je 0x100055af
mov dword [ebp - 4], eax
jmp 0x10005251
push 1
push 0
push 3
push 0
push 0
push 0
push 0x10005240
push dword [ebp - 4]
call dword [sym.imp.wininet.dll_InternetConnectA]
or eax, eax
je 0x100055a6
mov dword [ebp - 8], eax
jmp 0x10005286
push dword [ebp + 8]
push 0x10005278
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
jmp 0x100052a3
jmp 0x100052ae
push 0
push 0x84000000
push 0
push 0
push 0x100052a5
lea eax, [ebp - 0x84]
push eax
push 0x1000529f
push dword [ebp - 8]
call dword [sym.imp.wininet.dll_HttpOpenRequestA]
or eax, eax
je 0x1000559d
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call fcn.100051b5
cmp eax, 0
jle 0x10005594
mov dword [ebp - 0x10], 0x7d0
push dword [ebp - 0x10]
push 8
call fcn.1000132a
or eax, eax
je 0x10005594
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetReadFile]
push 0
push 0
push 0xffffffffffffffff
push dword [ebp - 0x18]
push 0
push 0xfde9
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
lea eax, [eax + eax + 0xa]
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 8
call fcn.1000132a
or eax, eax
je 0x1000558b
mov dword [ebp - 0x20], eax
push dword [ebp - 0x10]
push dword [ebp - 0x20]
push 0xffffffffffffffff
push dword [ebp - 0x18]
push 0
push 0xfde9
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
push 0
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0xffffffffffffffff
push dword [ebp - 0x20]
push 0
push 0
call dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [ebp - 0x10], eax
jmp 0x10005393
push 0xc
push 0x10005386
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x100053ce
mov esi, eax
lea edi, [0x10058a0c]
lodsb al, byte [esi]
or al, al
je 0x100053be
cmp al, 0x22
je 0x100053be
cmp al, 0x7d
jne 0x100053c7
xor ax, ax
stosw word es:[edi], ax
jmp 0x100053ce
cmp al, 0x20
je 0x100053cc
stosb byte es:[edi], al
jmp 0x100053b1
jmp 0x100053da
push 9
push 0x100053d0
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x1000542e
mov esi, eax
jmp 0x100053fb
push 0x100053f4
push 0x10058a48
call dword [sym.imp.kernel32.dll_lstrcpy]
lea edi, [0x10058a4e]
lodsb al, byte [esi]
or al, al
je 0x1000541e
cmp al, 0x22
je 0x1000541e
cmp al, 0x7d
jne 0x10005427
xor ax, ax
stosw word es:[edi], ax
jmp 0x1000542e
cmp al, 0x20
je 0x1000542c
stosb byte es:[edi], al
jmp 0x10005411
jmp 0x1000543a
push 9
push 0x10005430
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x1000548e
mov esi, eax
jmp 0x1000545b
push 0x10005454
push 0x10058a70
call dword [sym.imp.kernel32.dll_lstrcpy]
lea edi, [0x10058a76]
lodsb al, byte [esi]
or al, al
je 0x1000547e
cmp al, 0x22
je 0x1000547e
cmp al, 0x7d
jne 0x10005487
xor ax, ax
stosw word es:[edi], ax
jmp 0x1000548e
cmp al, 0x20
je 0x1000548c
stosb byte es:[edi], al
jmp 0x10005471
jmp 0x1000549d
push 0xc
push 0x10005490
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x100054f1
mov esi, eax
jmp 0x100054be
push 0x100054b7
push 0x10058ac0
call dword [sym.imp.kernel32.dll_lstrcpy]
lea edi, [0x10058ac6]
lodsb al, byte [esi]
or al, al
je 0x100054e1
cmp al, 0x22
je 0x100054e1
cmp al, 0x7d
jne 0x100054ea
xor ax, ax
stosw word es:[edi], ax
jmp 0x100054f1
cmp al, 0x20
je 0x100054ef
stosb byte es:[edi], al
jmp 0x100054d4
jmp 0x10005500
push 0xc
push 0x100054f3
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x1000553b
mov esi, eax
lea edi, [0x10058afc]
lodsb al, byte [esi]
or al, al
je 0x1000552b
cmp al, 0x22
je 0x1000552b
cmp al, 0x7d
jne 0x10005534
xor ax, ax
stosw word es:[edi], ax
jmp 0x1000553b
cmp al, 0x20
je 0x10005539
stosb byte es:[edi], al
jmp 0x1000551e
jmp 0x10005547
push 9
push 0x1000553d
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10002121
or eax, eax
je 0x10005582
mov esi, eax
lea edi, [0x10058b38]
lodsb al, byte [esi]
or al, al
je 0x10005572
cmp al, 0x22
je 0x10005572
cmp al, 0x7d
jne 0x1000557b
xor ax, ax
stosw word es:[edi], ax
jmp 0x10005582
cmp al, 0x20
je 0x10005580
stosb byte es:[edi], al
jmp 0x10005565
lea eax, [ebp - 0x20]
push eax
call fcn.100012fb
lea eax, [ebp - 0x18]
push eax
call fcn.100012fb
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
push dword [ebp - 8]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
push dword [ebp - 4]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
pop edi
pop esi
leave
ret 4