Function at 0x10001f80
Capabilities:
Connect to http server
Contain obfuscated stackstrings
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x190
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push 0x7d000
mov dword [ebp - 0x174], eax
mov eax, edx
push ebx
push eax
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], 0x7d000
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x20], 0x65746973
mov dword [ebp - 0x1c], 0x67616e53
mov dword [ebp - 0x18], 0x726567
mov dword [ebp - 0xc], 0x54534f50
mov byte [ebp - 8], bl
mov dword [ebp - 0x30], 0x65636341
mov dword [ebp - 0x2c], 0x2a3a7470
mov dword [ebp - 0x28], 0xa0d2a2f
mov byte [ebp - 0x24], bl
mov dword [ebp - 0x14], 0x74736f48
mov word [ebp - 0x10], 0x3a
mov word [ebp - 0x170], 0xa0d
mov byte [ebp - 0x16e], bl
mov dword [ebp - 0x64], 0x746e6f43
mov dword [ebp - 0x60], 0x2d746e65
mov dword [ebp - 0x5c], 0x65707954
mov dword [ebp - 0x58], 0x2020203a
mov dword [ebp - 0x54], 0x6c707061
mov dword [ebp - 0x50], 0x74616369
mov dword [ebp - 0x4c], 0x2f6e6f69
mov dword [ebp - 0x48], 0x77772d78
mov dword [ebp - 0x44], 0x6f662d77
mov dword [ebp - 0x40], 0x752d6d72
mov dword [ebp - 0x3c], 0x6e656c72
mov dword [ebp - 0x38], 0x65646f63
mov word [ebp - 0x34], 0x64
call fcn.100057a0
add esp, 0xc
push ebx
push ebx
push ebx
push 1
lea ecx, [ebp - 0x20]
push ecx
call dword [sym.imp.WININET.dll_InternetOpenA]
push ebx
push ebx
push 3
push ebx
push ebx
push 0x50
push esi
push eax
mov dword [ebp - 0x188], eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ecx, dword [ebp - 0x174]
push ebx
push ebx
lea edx, [ebp - 0x18c]
push edx
push ebx
push ebx
push ecx
lea edx, [ebp - 0xc]
push edx
push eax
mov dword [ebp - 0x190], eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
push 0x104
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x16b]
push ebx
push eax
mov byte [ebp - 0x16c], bl
call fcn.100057a0
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x16c]
push 0x104
push edx
call fcn.10002a06
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x16c]
push 0x104
push ecx
call fcn.10002a06
push esi
lea edx, [ebp - 0x16c]
push 0x104
push edx
call fcn.10002a06
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x16c]
push 0x104
push ecx
call fcn.10002a06
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x16c]
push 0x104
push eax
call fcn.10002a06
mov edx, dword [ebp - 0x178]
mov eax, edx
add esp, 0x48
lea esi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10002160
sub eax, esi
lea ecx, [ebp - 0x16c]
mov esi, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x178], eax
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
cmp al, bl
jne 0x10002180
sub ecx, dword [ebp - 0x178]
push esi
push edx
mov edx, dword [ebp - 0x17c]
push ecx
lea ecx, [ebp - 0x16c]
push ecx
push edx
call dword [sym.imp.WININET.dll_HttpSendRequestA]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x174], ebx
mov dword [edi], ebx
mov ecx, dword [edi]
mov esi, dword [ebp - 0x180]
add ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x174]
push eax
push esi
push ecx
push edx
call dword [sym.imp.WININET.dll_InternetReadFile]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x174]
add dword [edi], eax
sub esi, eax
mov dword [ebp - 0x180], esi
cmp eax, ebx
jne 0x100021b2
mov eax, dword [ebp - 0x188]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x190]
push ecx
call esi
mov edx, dword [ebp - 0x17c]
push edx
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.10002227
mov esp, ebp
pop ebp
ret 8