Function at 0x10020f10
Capabilities:
Create http request

Disassembly:
sub esp, 0x81c
mov al, byte [0x1004ce14]
push ebx
neg al
sbb eax, eax
push ebp
and eax, 2
push esi
inc eax
push edi
mov dword [esp + 0x10], eax
mov al, byte [0x1004d614]
test al, al
mov ebx, 1
mov dword [esp + 0x24], 0
je 0x10021117
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x2d]
mov byte [esp + 0x2c], 0
mov ebp, dword [esp + 0x834]
push 0x3ff
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x30]
push ebp
push ecx
stosb byte es:[edi], al
call dword [sym.imp.MSVCRT.dll_strncpy]
mov esi, dword [sym.imp.MSVCRT.dll_strstr]
lea edx, [esp + 0x38]
push 0x100487f0
push edx
call esi
add esp, 0x14
test eax, eax
je 0x10020fcc
push 0x2f
lea eax, [esp + 0x30]
push 0x100487f4
push eax
call esi
mov edi, dword [sym.imp.MSVCRT.dll_strchr]
add esp, 8
add eax, 3
push eax
call edi
add esp, 8
test eax, eax
je 0x10020fcc
push 0x2f
lea ecx, [esp + 0x30]
push 0x100487f8
push ecx
call esi
add esp, 8
add eax, 3
push eax
call edi
add esp, 8
mov byte [eax], 0
mov al, byte [0x1005283c]
test al, al
je 0x10020ff0
lea edx, [esp + 0x2c]
push edx
push 0x1005283c
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
je 0x10021117
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x42d]
mov byte [esp + 0x42c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x42c]
push 0x400
lea ecx, [esp + 0x24]
push eax
mov eax, dword [esp + 0x840]
lea edx, [esp + 0x30]
push ecx
push edx
push eax
push ebp
push 0x1004d614
call fcn.10035b20
add esp, 0x1c
test eax, eax
je 0x100210f3
mov eax, dword [esp + 0x28]
sub eax, 0
je 0x100210b6
dec eax
je 0x10021094
dec eax
jne 0x100210da
mov ecx, 0x100
xor eax, eax
mov edi, 0x1004d214
lea edx, [esp + 0x42c]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x20]
push ecx
push edx
push str.socks_s:_d
push 0x400
push 0x1004ce14
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
test eax, eax
jl 0x100210cc
mov dword [esp + 0x10], 3
jmp 0x100210da
mov ecx, 0x100
xor eax, eax
mov edi, 0x1004d214
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x42c]
push eax
push ecx
push str._s:_d
jmp 0x10021073
mov ecx, 0x100
xor eax, eax
mov edi, 0x1004d214
mov dword [esp + 0x10], 1
rep stosd dword es:[edi], eax
mov ecx, 0x100
xor eax, eax
mov edi, 0x1004ce14
rep stosd dword es:[edi], eax
mov eax, dword [0x1004c444]
test eax, eax
je 0x100210f3
mov al, byte [0x1005283c]
xor edx, edx
test al, al
setne dl
mov dword [esp + 0x24], edx
lea edi, [esp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x1005283c
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x1004c444]
xor esi, esi
cmp eax, esi
jne 0x1002118f
mov al, byte [0x1004ce14]
test al, al
je 0x10021151
mov al, byte [0x1004d214]
test al, al
mov eax, 0x1004d214
jne 0x1002113e
mov eax, 0x10048810
mov ecx, dword [esp + 0x10]
push esi
push eax
push 0x1004ce14
push ecx
push 0x10048818
jmp 0x1002115e
mov edx, dword [esp + 0x10]
push esi
push esi
push esi
push edx
push 0x1004882c
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp eax, esi
mov dword [0x1004c444], eax
jne 0x10021179
xor ebx, ebx
call fcn.10020e50
jmp 0x100211ff
mov ebx, 1
call fcn.10020e30
mov dword [0x100436bc], eax
call fcn.10020e50
jmp 0x100211ff
cmp dword [esp + 0x24], esi
je 0x100211ff
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ecx
mov cl, byte [0x1004ce14]
test cl, cl
je 0x100211d7
mov cl, byte [0x1004d214]
mov dword [esp + 0x14], 3
test cl, cl
mov dword [esp + 0x18], 0x1004ce14
je 0x100211cd
mov dword [esp + 0x1c], 0x1004d214
jmp 0x100211e7
mov dword [esp + 0x1c], str._local_
jmp 0x100211e7
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
lea edx, [esp + 0x14]
push 0xc
push edx
push 0x26
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov eax, dword [0x1004c444]
cmp eax, esi
je 0x10021211
mov ecx, dword [esp + 0x830]
mov dword [ecx], eax
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x81c
ret