Function at 0x643834
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x10
add esp, 0xfffff004
push eax
dec eax
jne 0x64383d
mov eax, dword [ebp - 4]
add esp, 0xfffffd8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10278], ebx
mov dword [ebp - 0x10274], ebx
mov dword [ebp - 0x10270], ebx
mov dword [ebp - 0x1026c], ebx
mov dword [ebp - 0x10264], ebx
mov dword [ebp - 0x10268], ebx
mov byte [ebp - 1], cl
mov edi, edx
mov esi, eax
lea ebx, [ebp - 0x10]
xor eax, eax
push ebp
push 0x643c08
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 2], 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x10268]
xor eax, eax
call fcn.00407540
mov eax, dword [ebp - 0x10268]
lea edx, [ebp - 0x10264]
call fcn.004294a0
mov eax, dword [ebp - 0x10264]
call fcn.0040c128
push eax
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x643be8
xor eax, eax
push ebp
push 0x643910
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x84000100
push 0
push 0
mov eax, esi
call fcn.0040c128
push eax
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64392d
cmp dword [ebp - 0xc], 0
jne 0x643941
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x643be8
lea edx, [ebp - 0x1026c]
mov eax, edi
call fcn.006431f0
mov edx, dword [ebp - 0x1026c]
lea eax, [ebp - 0x10260]
call fcn.00407fd8
call fcn.00407178
xor eax, eax
push ebp
push 0x643991
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
lea eax, [ebp - 0x10260]
call fcn.00408f2c
call fcn.00407178
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6439b7
cmp byte [0x68a223], 0
jne 0x643a65
cmp byte [ebp - 1], 0
je 0x643a65
mov eax, 0x643c28
call fcn.00642e58
test al, al
jne 0x643a65
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
call fcn.00551e14
push 0x643c54
lea eax, [ebp - 0x10270]
push eax
mov ecx, 0x643c84
mov edx, 0x643c98
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10270]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
call fcn.00551860
cmp dword [0x68a210], 9
jne 0x643a65
push 0x643c54
lea eax, [ebp - 0x10274]
push eax
mov ecx, 0x643c84
mov edx, 0x643c98
mov eax, dword [0x68a218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10274]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov dx, 0xfff5
mov eax, dword [0x68a1e0]
call fcn.00551a78
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
xor eax, eax
push ebp
push 0x643aea
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp - 1], 0
je 0x643aab
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
cmp byte [eax + 0x69], 0
je 0x643aab
xor eax, eax
call fcn.0064341c
push ebx
push 0x10000
lea eax, [ebp - 0x10010]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetReadFile
push 0
lea edx, [ebp - 0x10010]
mov ecx, dword [ebx]
lea eax, [ebp - 0x10260]
call fcn.004081c8
call fcn.00407178
cmp dword [ebx], 0
jne 0x643a8d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643b53
lea eax, [ebp - 0x10260]
call fcn.004081e8
call fcn.00407178
mov byte [ebp - 2], 1
cmp byte [ebp - 1], 0
je 0x643b8e
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
cmp byte [eax + 0x69], 0
je 0x643b8e
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
call fcn.00551e0c
xor edx, edx
mov eax, dword [0x68a1e0]
call fcn.00551a78
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 1], 0
je 0x643be8
push 0x643cb8
lea eax, [ebp - 0x10278]
push eax
mov ecx, 0x643cdc
mov edx, 0x643c98
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x10278]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4fc]
call fcn.00551860
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x643c0f
lea eax, [ebp - 0x10278]
mov edx, 6
call fcn.0040b5f0
pop eax
jmp eax