Function at 0x643260
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffd30
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x12d0], ebx
mov dword [ebp - 0x12cc], ebx
mov dword [ebp - 0x12c8], ebx
mov dword [ebp - 0x12c4], ebx
mov dword [ebp - 0x12c0], ebx
mov dword [ebp - 0x12bc], ebx
mov dword [ebp - 0x12b4], ebx
mov dword [ebp - 0x12b8], ebx
mov dword [ebp - 4], ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x6437ba
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xa], 0
mov eax, 0x6437d8
call fcn.00641db8
test al, al
je 0x6432e6
movzx ecx, byte [ebp - 9]
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.00642db4
mov byte [ebp - 0xa], al
jmp 0x643792
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x12b8]
xor eax, eax
call fcn.00407540
mov eax, dword [ebp - 0x12b8]
lea edx, [ebp - 0x12b4]
call fcn.00429368
mov eax, dword [ebp - 0x12b4]
call fcn.0040bff0
push eax
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x643792
push 0
push 0
push 3
push 0
push 0
push 0x50
lea ecx, [ebp - 0x12bc]
mov edx, ebx
mov al, 1
call fcn.00642610
mov eax, dword [ebp - 0x12bc]
call fcn.0040bff0
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetConnectW
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x643371
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643792
push 0
push 0x84000100
push 0
push 0
push 0
lea ecx, [ebp - 0x12c0]
mov edx, ebx
xor eax, eax
call fcn.00642610
mov eax, dword [ebp - 0x12c0]
call fcn.0040bff0
push eax
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.wininet.dll_HttpOpenRequestW
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x6433c4
mov eax, dword [ebp - 0x14]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643792
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_HttpSendRequestW
test eax, eax
jne 0x6433f9
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x14]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643792
lea eax, [ebp - 4]
call fcn.0040b458
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x3e
xor eax, eax
push ebp
push 0x64344d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x12ae]
push eax
push 0x13
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_HttpQueryInfoW
lea eax, [ebp - 4]
lea edx, [ebp - 0x12ae]
call fcn.0040c050
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643457
mov eax, dword [ebp - 4]
mov edx, 0x643804
call fcn.0040c38c
je 0x6434a2
mov eax, dword [ebp - 4]
mov edx, 0x643818
call fcn.0040c38c
je 0x6434a2
mov eax, dword [ebp - 4]
mov edx, 0x64382c
call fcn.0040c38c
je 0x6434a2
mov eax, dword [ebp - 4]
mov edx, 0x643840
call fcn.0040c38c
je 0x6434a2
mov eax, dword [ebp - 4]
mov edx, 0x643854
call fcn.0040c38c
jne 0x6434c2
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x14]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643792
lea edx, [ebp - 0x12c4]
mov eax, dword [ebp - 8]
call fcn.00642150
mov edx, dword [ebp - 0x12c4]
lea eax, [ebp - 0x1270]
call fcn.00407fd8
call fcn.00407178
xor eax, eax
push ebp
push 0x643513
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
lea eax, [ebp - 0x1270]
call fcn.00408f2c
call fcn.00407178
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643542
cmp byte [0x68a223], 0
jne 0x6435f0
cmp byte [ebp - 9], 0
je 0x6435f0
mov eax, 0x643868
call fcn.00641db8
test al, al
jne 0x6435f0
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551cfc
push 0x643894
lea eax, [ebp - 0x12c8]
push eax
mov ecx, 0x6438c4
mov edx, 0x6438d8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x12c8]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551748
cmp dword [0x68a210], 9
jne 0x6435f0
push 0x643894
lea eax, [ebp - 0x12cc]
push eax
mov ecx, 0x6438c4
mov edx, 0x6438d8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x12cc]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov dx, 0xfff5
mov eax, dword [0x68a1e0]
call fcn.00551960
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
xor eax, eax
push ebp
push 0x64367a
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp - 9], 0
je 0x643636
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
cmp byte [eax + 0x69], 0
je 0x643636
xor eax, eax
call fcn.0064237c
lea eax, [ebp - 0x1c]
push eax
push 0x1000
lea eax, [ebp - 0x1020]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_InternetReadFile
push 0
lea edx, [ebp - 0x1020]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x1270]
call fcn.004081c8
call fcn.00407178
cmp dword [ebp - 0x1c], 0
jne 0x643618
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6436f4
lea eax, [ebp - 0x1270]
call fcn.004081e8
call fcn.00407178
mov byte [ebp - 0xa], 1
cmp byte [ebp - 9], 0
je 0x64372f
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
cmp byte [eax + 0x69], 0
je 0x64372f
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551cf4
xor edx, edx
mov eax, dword [0x68a1e0]
call fcn.00551960
mov eax, dword [ebp - 0x18]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x14]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 9], 0
je 0x643792
push 0x6438f8
lea eax, [ebp - 0x12d0]
push eax
mov ecx, 0x64391c
mov edx, 0x6438d8
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x12d0]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4f8]
call fcn.00551748
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6437c1
lea eax, [ebp - 0x12d0]
mov edx, 8
call fcn.0040b4b8
lea eax, [ebp - 4]
call fcn.0040b458
pop eax
jmp eax