Function at 0x4022d0
Capabilities:
Create http request
Create thread
Read data from internet
Receive data
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x524
mov dword [ebp - 8], 0
mov dword [ebp - 0x520], 0
push 6
mov eax, dword [0x50be40]
xor eax, 0x3e7
push eax
push 0xd
mov ecx, dword [0x50be40]
xor ecx, 0x378
push ecx
mov edx, dword [0x40b520]
push edx
mov eax, dword [0x50be40]
xor eax, 0x309
push eax
push str.Mozilla__d._d__compatible__MSIE__d._d__Windows_NT__d._d_
lea ecx, [ebp - 0x51c]
push ecx
call sub.MSVCRT.dll_sprintf
add esp, 0x20
call fcn.00401a30
mov dword [ebp - 0x118], 0
lea edx, [ebp - 8]
push edx
push str.ProxyEnable
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push reloc.WS2_32.dll_accept
call fcn.00401ab0
add esp, 0x10
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x402395
push 0
push 0
push str.ProxyServer
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push reloc.WS2_32.dll_accept
call fcn.00401b10
add esp, 0x14
push eax
push 0x4050d0
lea eax, [ebp - 0x114]
push eax
call sub.MSVCRT.dll_sprintf
add esp, 0xc
push str.127.0.0.1
mov ecx, dword [ebp + 8]
push ecx
call sub.MSVCRT.dll_strstr
add esp, 8
test eax, eax
jne 0x4023d5
cmp dword [ebp - 0x118], 0
je 0x4023d5
push 0
push str._local_
lea edx, [ebp - 0x114]
push edx
push 3
lea eax, [ebp - 0x51c]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x14], eax
jmp 0x4023ed
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x51c]
push ecx
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4023fa
xor eax, eax
jmp 0x4025be
mov dword [ebp - 0xc], 0x2710
push 4
lea edx, [ebp - 0xc]
push edx
push 2
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [ebp - 0xc], 0x2710
push 4
lea ecx, [ebp - 0xc]
push ecx
push 6
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [ebp - 0xc], 0x2710
push 4
lea eax, [ebp - 0xc]
push eax
push 5
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.WININET.dll_InternetSetOptionA]
lea edx, [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0x4025d0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [ebp - 4], eax
push 0
push 0x84000100
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 4], 0
je 0x40249c
push 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.DLL_TerminateThread]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [ebp - 0x11c], 0
jne 0x4024b6
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
jmp 0x4025be
mov dword [ebp - 0xc], 0x2710
push 4
lea eax, [ebp - 0xc]
push eax
push 6
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [ebp - 0xc], 0x2710
push 4
lea edx, [ebp - 0xc]
push edx
push 5
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
cmp dword [ebp + 0x14], 0
je 0x40252f
push 0
lea ecx, [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
push 0x16
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x40252f
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
jmp 0x4025be
cmp dword [ebp + 0xc], 0
je 0x4025a1
mov eax, 1
test eax, eax
je 0x402595
mov dword [ebp - 0x524], 0
lea ecx, [ebp - 0x524]
push ecx
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp - 0x520]
push edx
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x402576
jmp 0x402595
cmp dword [ebp - 0x524], 0
jne 0x402581
jmp 0x402595
mov edx, dword [ebp - 0x520]
add edx, dword [ebp - 0x524]
mov dword [ebp - 0x520], edx
jmp 0x402535
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x520]
mov byte [eax], 0
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x520]
mov esp, ebp
pop ebp
ret