Function at 0x648412f0
Capabilities:
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, 0xffffffff
sub esp, 0x8c
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x64841453
lea ebx, [esi + 8]
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
test eax, eax
mov dword [ebp - 0x10], eax
je 0x6484132c
cmp byte [eax + ebx - 1], 0x3f
je 0x648415a8
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0x20000000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], str.POST
mov eax, dword [esi + 4]
mov dword [esp], eax
call sub.WININET.DLL_HttpOpenRequestA
sub esp, 0x20
mov esi, eax
test esi, esi
mov ebx, 0xffffffff
je 0x64841440
lea eax, [ebp - 0x50]
mov ecx, 0xa
mov dword [ebp - 0x6c], eax
mov edi, dword [ebp - 0x6c]
xor eax, eax
cld
rep stosd dword es:[edi], eax
mov dword [ebp - 0x50], 0x28
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x648413dd
mov eax, dword [ebp + 0xc]
mov edi, dword [eax]
test edi, edi
je 0x648413dd
mov ebx, eax
lea esi, [esi]
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov dword [esp + 4], edi
mov dword [esp + 0xc], 0xa0000000
mov dword [esp], esi
mov dword [esp + 8], eax
call sub.WININET.DLL_HttpAddRequestHeadersA
mov edi, dword [ebx + 4]
add ebx, 4
sub esp, 0x10
test edi, edi
jne 0x648413b0
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x648413f9
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x648413f9
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov ebx, 0xfffffffe
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x50]
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.WININET.DLL_HttpSendRequestExA
mov dword [ebp - 0x10], 0
sub esp, 0x14
test eax, eax
jne 0x6484145d
lea esi, [esi]
call sub.KERNEL32.dll_GetLastError
mov dword [ebp - 0x10], eax
mov dword [esp], esi
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 0x14]
test eax, eax
jle 0x6484148a
lea eax, [ebp - 0x10]
mov bl, 0xfd
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x14]
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call sub.WININET.DLL_InternetWriteFile
sub esp, 0x10
test eax, eax
je 0x64841440
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.WININET.DLL_HttpEndRequestA
sub esp, 0x10
test eax, eax
jne 0x648414c6
call sub.KERNEL32.dll_GetLastError
mov ebx, 0xfffffffc
cmp eax, 0x2ef1
jne 0x64841440
lea eax, [ebp - 0x18]
lea edx, [ebp - 0x14]
lea ebx, [ebp - 0x28]
mov dword [ebp - 0x14], 0x10
mov dword [ebp - 0x18], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x13
mov dword [esp], esi
call sub.WININET.DLL_HttpQueryInfoA
sub esp, 0x14
test eax, eax
jne 0x64841714
mov dword [ebp - 0x64], 0
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x64841738
mov dword [ebp - 0x68], 0
mov edi, dword [ebp - 0x68]
xor ebx, ebx
mov dword [ebp - 0x60], 0
test edi, edi
je 0x64841595
lea esi, [esi]
mov dword [esp], 0x1008
call sub.msvcrt.dll_malloc
mov edi, eax
mov dword [ebx + 0x1004], eax
mov dword [edi + 0x1004], 0
lea eax, [edi + 0x1000]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1000
mov dword [esp + 4], edi
mov dword [esp], esi
call sub.WININET.DLL_InternetReadFile
sub esp, 0x10
test eax, eax
je 0x648416d8
mov ebx, dword [edi + 0x1000]
test ebx, ebx
jle 0x64841661
mov dword [ebp - 0x60], 0
mov ebx, edi
mov edi, dword [ebp - 0x68]
test edi, edi
jne 0x64841530
mov dword [esp], 0x1008
call sub.msvcrt.dll_malloc
mov edi, eax
mov dword [ebp - 0x68], eax
jmp 0x64841544
mov edx, dword [ebp + 0x10]
xor eax, eax
xor edi, edi
test edx, edx
je 0x648415c0
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edi, eax
mov dword [ebp - 0x14], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
lea eax, [edi + eax + 0x100]
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov dword [esp + 4], ebx
mov edi, eax
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x64841702
mov eax, dword [ebp + 0x10]
mov dword [esp], edi
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0x20000000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov eax, dword [esi + 4]
mov dword [esp], eax
call sub.WININET.DLL_HttpOpenRequestA
sub esp, 0x20
mov esi, eax
mov dword [esp], edi
call sub.msvcrt.dll_free
mov dword [ebp + 0x10], 0
mov dword [ebp + 0x14], 0
jmp 0x64841370
mov dword [esp], 0xd
call sub.KERNEL32.dll_Sleep
add dword [ebp - 0x60], 1
sub esp, 4
cmp dword [ebp - 0x60], 2
jg 0x648416d8
mov ecx, dword [edi + 0x1000]
test ecx, ecx
jne 0x6484158c
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x14], 0
mov eax, dword [ebx + 0x1004]
test eax, eax
je 0x648416aa
mov edx, dword [eax + 0x1004]
test edx, edx
je 0x6484178d
mov eax, dword [ebx + 0x1000]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebx + 0x1004]
test ebx, ebx
jne 0x64841692
test eax, eax
jne 0x648417a4
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x64841448
mov ebx, dword [ebp - 0x68]
nop
lea esi, [esi]
mov ebx, dword [ebx + 0x1004]
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
mov dword [ebp - 0x68], ebx
jne 0x648416e0
mov ebx, 0xfffffffa
jmp 0x64841440
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov byte [edi + eax - 1], 0
jmp 0x64841602
mov dword [esp], ebx
call sub.msvcrt.dll_atol
mov dword [ebp - 0x64], 0xfffffffb
sub eax, 0x190
cmp eax, 0xc7
jbe 0x6484150b
jmp 0x64841504
lea eax, [ebp - 0x10]
mov ebx, 0xfffffff9
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.WININET.DLL_InternetReadFile
sub esp, 0x10
test eax, eax
je 0x64841440
mov ebx, eax
mov eax, dword [ebp - 0x64]
test eax, eax
cmovne ebx, dword [ebp - 0x64]
test ebx, ebx
jns 0x64841448
jmp 0x64841440
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [ebx + 0x1004], 0
jmp 0x648416aa
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x10], 0
mov edi, eax
mov eax, dword [ebx + 0x1000]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, edi
add eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov eax, dword [ebx + 0x1000]
add dword [ebp - 0x10], eax
mov ebx, dword [ebx + 0x1004]
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
mov dword [ebp - 0x68], ebx
jne 0x648417b8
cmp dword [ebp + 0x1c], 0
mov ebx, dword [ebp - 0x14]
jle 0x6484182e
mov eax, dword [ebp + 0x1c]
cmp dword [ebp + 0x1c], ebx
mov dword [esp + 4], edi
cmovg eax, ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_memmove
test edi, edi
je 0x64841777
mov dword [esp], edi
call sub.msvcrt.dll_free
jmp 0x64841777
nop
je 0x6484183e
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov ebx, edi
jmp 0x64841777
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memmove
jmp 0x64841819