Function at 0x642db4
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffd84
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x127c], ebx
mov dword [ebp - 0x1278], ebx
mov dword [ebp - 0x1274], ebx
mov dword [ebp - 0x1270], ebx
mov dword [ebp - 0x1268], ebx
mov dword [ebp - 0x126c], ebx
mov byte [ebp - 5], cl
mov dword [ebp - 4], edx
mov esi, eax
lea ebx, [ebp - 0x14]
xor eax, eax
push ebp
push 0x643186
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 6], 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x126c]
xor eax, eax
call fcn.00407540
mov eax, dword [ebp - 0x126c]
lea edx, [ebp - 0x1268]
call fcn.00429368
mov eax, dword [ebp - 0x1268]
call fcn.0040bff0
push eax
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x643166
xor eax, eax
push ebp
push 0x642e85
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x84000100
push 0
push 0
mov eax, esi
call fcn.0040bff0
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x642ea2
cmp dword [ebp - 0x10], 0
jne 0x642eb6
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643166
lea edx, [ebp - 0x1270]
mov eax, dword [ebp - 4]
call fcn.00642150
mov edx, dword [ebp - 0x1270]
lea eax, [ebp - 0x1264]
call fcn.00407fd8
call fcn.00407178
xor eax, eax
push ebp
push 0x642f07
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
lea eax, [ebp - 0x1264]
call fcn.00408f2c
call fcn.00407178
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x642f2d
cmp byte [0x68a223], 0
jne 0x642fdb
cmp byte [ebp - 5], 0
je 0x642fdb
mov eax, 0x6431a4
call fcn.00641db8
test al, al
jne 0x642fdb
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551cfc
push 0x6431d0
lea eax, [ebp - 0x1274]
push eax
mov ecx, 0x643200
mov edx, 0x643214
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x1274]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551748
cmp dword [0x68a210], 9
jne 0x642fdb
push 0x6431d0
lea eax, [ebp - 0x1278]
push eax
mov ecx, 0x643200
mov edx, 0x643214
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x1278]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov dx, 0xfff5
mov eax, dword [0x68a1e0]
call fcn.00551960
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
xor eax, eax
push ebp
push 0x643060
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp - 5], 0
je 0x643021
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
cmp byte [eax + 0x69], 0
je 0x643021
xor eax, eax
call fcn.0064237c
push ebx
push 0x1000
lea eax, [ebp - 0x1014]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetReadFile
push 0
lea edx, [ebp - 0x1014]
mov ecx, dword [ebx]
lea eax, [ebp - 0x1264]
call fcn.004081c8
call fcn.00407178
cmp dword [ebx], 0
jne 0x643003
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6430d1
lea eax, [ebp - 0x1264]
call fcn.004081e8
call fcn.00407178
mov byte [ebp - 6], 1
cmp byte [ebp - 5], 0
je 0x64310c
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
cmp byte [eax + 0x69], 0
je 0x64310c
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551cf4
xor edx, edx
mov eax, dword [0x68a1e0]
call fcn.00551960
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 5], 0
je 0x643166
push 0x643234
lea eax, [ebp - 0x127c]
push eax
mov ecx, 0x643258
mov edx, 0x643214
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x127c]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551748
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x64318d
lea eax, [ebp - 0x127c]
mov edx, 6
call fcn.0040b4b8
pop eax
jmp eax