Function at 0x10012be0
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
mov eax, 0x48c0
call fcn.1002d080
push ebx
push ebp
push esi
push edi
mov ecx, 0xc
mov esi, str.Mozilla_4.0__compatible__MSIE_9.0__Windows_NT_6.1_
lea edi, [esp + 0x60]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 6
mov esi, str.localhost.ptlogin2.qq.com
lea edi, [esp + 0x94]
xor ebp, ebp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 5
mov esi, str.ssl.ptlogin2.qq.com
lea edi, [esp + 0x4c]
push ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, 5
mov esi, str.ptlogin2.qun.qq.com
lea edi, [esp + 0x3c]
push ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x48ec]
mov edi, dword [esp + 0x48e8]
mov edx, ecx
push ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
mov dword [esp + 0x38], ebp
rep stosb byte es:[edi], al
lea eax, [esp + 0x70]
mov dword [esp + 0x30], ebp
push eax
mov dword [esp + 0x38], ebp
mov dword [esp + 0x40], 0x20
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x10], ebx
je 0x100133a6
push ebp
push ebp
push 3
push ebp
push ebp
lea ecx, [esp + 0xa8]
push 0x10cd
push ecx
push ebx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebp, eax
test ebp, ebp
jne 0x10012cbd
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
mov edx, dword [esp + 0x48d8]
mov eax, dword [esp + 0x48d4]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
push edx
push 0x3fee5242
push 0xc47b99b5
push eax
lea ecx, [esp + 0xe0]
push str._pt_get_st_clientuin_scallbackptui_getst_CBr_.16f_s
push ecx
call edi
add esp, 0x18
lea edx, [esp + 0xd0]
push 0
push 0x80880010
push 0
push 0
push str.HTTP_1.1
push edx
push 0x100fb7a8
push ebp
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x10012d34
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
mov eax, dword [esp + 0x48dc]
lea ecx, [esp + 0xd0]
push eax
push ecx
lea edx, [esp + 0x38d8]
push str.Accept:___r_nReferer:_https:__localhost.ptlogin2.qq.com:4301_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push edx
call edi
lea edi, [esp + 0x38e0]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
push 0
dec ecx
push 0
lea eax, [esp + 0x38d8]
push ecx
push eax
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x10012d9d
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
lea ecx, [esp + 0x28]
push 0
push ecx
push 0
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov edx, dword [esp + 0x28]
inc edx
push edx
call sub.MFC42.DLL_operatornew
mov ebx, eax
mov eax, dword [esp + 0x2c]
mov edi, ebx
add esp, 4
lea ecx, [eax + 1]
xor eax, eax
mov edx, ecx
push 0
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x1c], ebx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x2c]
push eax
push ebx
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x10012e1c
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebp
call esi
mov ecx, dword [esp + 0x10]
push ecx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
push esi
call ebx
push ebp
call ebx
mov edx, dword [esp + 0x10]
push edx
call ebx
mov ebp, dword [sym.imp.MSVCRT.dll_strstr]
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x18d0]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x18]
push str.Set_Cookie:
push eax
call ebp
mov esi, eax
add esp, 8
test esi, esi
jne 0x10012e76
mov ecx, dword [esp + 0x18]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48c0
ret 0x14
push 0x100fae84
push esi
call ebp
mov edi, eax
lea eax, [esp + 0x18d8]
mov edx, edi
sub edx, esi
add esi, 0xc
sub edx, 0xb
push edx
push esi
push eax
call dword [sym.imp.MSVCRT.dll_strncat]
push str.Set_Cookie:
push edi
call ebp
mov esi, eax
add esp, 0x1c
test esi, esi
jne 0x10012e76
mov ecx, dword [esp + 0x18]
push ecx
call sub.MFC42.DLL_operatordelete
mov edi, dword [esp + 0x48e0]
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x18d0]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push eax
push eax
mov ecx, edx
push eax
push eax
and ecx, 3
lea eax, [esp + 0x70]
rep movsb byte es:[edi], byte [esi]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov esi, eax
test esi, esi
mov dword [esp + 0x10], esi
je 0x100133a6
push 0
push 0
push 3
push 0
push 0
lea ecx, [esp + 0x60]
push 0x1bb
push ecx
push esi
call dword [sym.imp.WININET.dll_InternetConnectA]
mov edi, eax
test edi, edi
mov dword [esp + 0x14], edi
jne 0x10012f3f
push esi
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
mov edx, dword [esp + 0x48d8]
mov eax, dword [esp + 0x48d4]
push edx
push eax
lea ecx, [esp + 0x8d8]
push str._jump_clientuin_skeyindex9pt_aid715030901daid73u1http__3A__2F__2Fqun.qq.com__2Fmember.html__23_spt_3rd_aid0ptopt1style40
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [esp + 0x8d0]
push 0
push 0x80880010
push 0
push 0
push str.HTTP_1.1
push edx
push 0x100fb7a8
push edi
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x10012fa8
push edi
call ebx
mov eax, dword [esp + 0x10]
push eax
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
lea ecx, [esp + 0x18d0]
lea edx, [esp + 0x8d0]
push ecx
push edx
lea eax, [esp + 0x10d8]
push str.Accept:___r_nReferer:_https:__ssl.ptlogin2.qq.com_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea edi, [esp + 0x10e0]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
push 0
dec ecx
push 0
push ecx
lea ecx, [esp + 0x10dc]
push ecx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x10013017
push esi
call ebx
mov edx, dword [esp + 0x14]
push edx
call ebx
mov eax, dword [esp + 0x10]
push eax
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
lea ecx, [esp + 0x20]
push 0
push ecx
push 0
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov edx, dword [esp + 0x20]
inc edx
push edx
call sub.MFC42.DLL_operatornew
mov edi, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], edi
add esp, 4
lea ecx, [eax + 1]
xor eax, eax
mov edx, ecx
push 0
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0x24]
push eax
push edi
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
je 0x1001338c
lea eax, [esp + 0x2c]
push 0
lea ecx, [esp + 0xb4]
push eax
push ecx
push 5
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x1001309b
push edi
call sub.MFC42.DLL_operatordelete
add esp, 4
jmp 0x10013316
lea ecx, [esp + 0xb0]
push ecx
call dword [sym.imp.MSVCRT.dll_atol]
mov edi, eax
inc edi
push edi
mov dword [esp + 0x38], edi
call sub.MFC42.DLL_operatornew
mov edx, eax
mov ecx, edi
mov dword [esp + 0x24], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 8
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0x34]
mov ecx, edx
push eax
push ecx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1001311e
push edi
call sub.MFC42.DLL_operatordelete
mov edx, dword [esp + 0x1c]
push edx
call sub.MFC42.DLL_operatordelete
add esp, 8
push esi
call ebx
mov eax, dword [esp + 0x14]
push eax
call ebx
mov ecx, dword [esp + 0x10]
push ecx
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
push esi
call ebx
mov edx, dword [esp + 0x14]
push edx
call ebx
mov eax, dword [esp + 0x10]
push eax
call ebx
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x20d0]
push str.Set_Cookie:
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x1c]
push edi
call ebp
mov esi, eax
add esp, 8
test esi, esi
jne 0x10013176
mov ecx, dword [esp + 0x1c]
push ecx
call sub.MFC42.DLL_operatordelete
push edi
call sub.MFC42.DLL_operatordelete
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48c0
ret 0x14
push 0x100fae84
push esi
call ebp
push 0x100faee0
push esi
mov edi, eax
call ebp
add esp, 0x10
inc eax
cmp eax, edi
je 0x100131ad
mov edx, edi
lea eax, [esp + 0x20d0]
sub edx, esi
add esi, 0xc
sub edx, 0xb
push edx
push esi
push eax
call dword [sym.imp.MSVCRT.dll_strncat]
add esp, 0xc
push str.Set_Cookie:
push edi
call ebp
mov esi, eax
add esp, 8
test esi, esi
jne 0x10013176
mov ecx, dword [esp + 0x18]
push ecx
call sub.MFC42.DLL_operatordelete
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x28d4]
push str._check_sig_
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x24]
push edi
call ebp
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x10013205
push edi
call sub.MFC42.DLL_operatordelete
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48c0
ret 0x14
push 0x100fb5dc
push esi
call ebp
sub eax, esi
lea edx, [esp + 0x28d8]
push eax
push esi
push edx
call dword [sym.imp.MSVCRT.dll_strncpy]
push edi
call sub.MFC42.DLL_operatordelete
add esp, 0x18
lea eax, [esp + 0x60]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
test edi, edi
mov dword [esp + 0x10], edi
jne 0x10013252
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48c0
ret 0x14
push 0
push 0
push 3
push 0
push 0
lea ecx, [esp + 0x4c]
push 0x50
push ecx
push edi
call dword [sym.imp.WININET.dll_InternetConnectA]
test eax, eax
mov dword [esp + 0x14], eax
jne 0x10013284
push edi
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
push 0
push 0x80284010
push 0
push 0
lea edx, [esp + 0x28e0]
push str.HTTP_1.1
push edx
push 0x100fb7a8
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
jne 0x100132c7
mov eax, dword [esp + 0x14]
push eax
call ebx
push edi
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
lea ecx, [esp + 0x20d0]
lea edx, [esp + 0x28d0]
push ecx
push edx
lea eax, [esp + 0x30d8]
push str.Accept:___r_nReferer:_http:__ptlogin2.qun.qq.com_s_r_nAccept_Language:_zh_cn_r_nContent_Type:_application_x_www_form_urlencoded_r_nCookie:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea edi, [esp + 0x30e0]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
push 0
dec ecx
push 0
push ecx
lea ecx, [esp + 0x30dc]
push ecx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x10013336
push esi
call ebx
mov edx, dword [esp + 0x14]
push edx
call ebx
mov eax, dword [esp + 0x10]
push eax
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
lea ecx, [esp + 0x24]
push 0
push ecx
push 0
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov edx, dword [esp + 0x24]
inc edx
push edx
call sub.MFC42.DLL_operatornew
mov edi, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x20], edi
add esp, 4
lea ecx, [eax + 1]
xor eax, eax
mov edx, ecx
push 0
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x20]
lea eax, [esp + 0x28]
push eax
push edi
push 0x16
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x100133b5
push edi
call sub.MFC42.DLL_operatordelete
add esp, 4
push esi
call ebx
mov ecx, dword [esp + 0x14]
push ecx
call ebx
mov edx, dword [esp + 0x10]
push edx
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x48c0
ret 0x14
push esi
call ebx
mov eax, dword [esp + 0x14]
push eax
call ebx
mov ecx, dword [esp + 0x10]
push ecx
call ebx
mov ebx, dword [esp + 0x1c]
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x40d0]
push str.Set_Cookie:
push ebx
rep stosd dword es:[edi], eax
call ebp
mov edi, eax
add esp, 8
test edi, edi
jne 0x10013403
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48c0
ret 0x14
push 0x100fae84
push edi
call ebp
push 0x100faee0
push edi
mov esi, eax
call ebp
add esp, 0x10
inc eax
cmp eax, esi
je 0x1001343a
mov edx, esi
lea eax, [esp + 0x40d0]
sub edx, edi
add edi, 0xc
sub edx, 0xb
push edx
push edi
push eax
call dword [sym.imp.MSVCRT.dll_strncat]
add esp, 0xc
push str.Set_Cookie:
push esi
call ebp
mov edi, eax
add esp, 8
test edi, edi
jne 0x10013403
push ebx
call sub.MFC42.DLL_operatordelete
lea edi, [esp + 0x40d4]
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0x48e0]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
pop edi
dec ecx
pop esi
pop ebp
mov eax, ecx
pop ebx
add esp, 0x48c0
ret 0x14