Function at 0x643e0c
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x10
add esp, 0xfffff004
push eax
dec eax
jne 0x643e15
mov eax, dword [ebp - 4]
add esp, 0xfffffd8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10278], ebx
mov dword [ebp - 0x10274], ebx
mov dword [ebp - 0x10270], ebx
mov dword [ebp - 0x1026c], ebx
mov dword [ebp - 0x10264], ebx
mov dword [ebp - 0x10268], ebx
mov byte [ebp - 1], cl
mov edi, edx
mov esi, eax
lea ebx, [ebp - 0x10]
xor eax, eax
push ebp
push 0x6441cf
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 2], 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x10268]
mov eax, dword [0x680434]
mov eax, dword [eax]
call fcn.0061111c
mov eax, dword [ebp - 0x10268]
lea edx, [ebp - 0x10264]
call fcn.00429384
mov eax, dword [ebp - 0x10264]
call fcn.0040bffc
push eax
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x6441af
xor eax, eax
push ebp
push 0x643eed
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x84000100
push 0
push 0
mov eax, esi
call fcn.0040bffc
push eax
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643f0a
cmp dword [ebp - 0xc], 0
jne 0x643f1e
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
jmp 0x6441af
lea edx, [ebp - 0x1026c]
mov eax, edi
call fcn.00643798
mov edx, dword [ebp - 0x1026c]
lea eax, [ebp - 0x10260]
call fcn.00407eac
call fcn.00407168
xor eax, eax
push ebp
push 0x643f6e
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
lea eax, [ebp - 0x10260]
call fcn.00408e00
call fcn.00407168
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x643f94
cmp byte [ebp - 1], 0
je 0x644042
cmp byte [0x688222], 0
jne 0x644042
mov eax, 0x6441f0
call fcn.00643690
test al, al
jne 0x644042
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x500]
call fcn.00551b20
push 0x64421c
lea eax, [ebp - 0x10270]
push eax
mov ecx, 0x64424c
mov edx, 0x644260
mov eax, dword [0x688218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10270]
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x500]
call fcn.0055156c
cmp dword [0x688210], 9
jne 0x644042
push 0x64421c
lea eax, [ebp - 0x10274]
push eax
mov ecx, 0x64424c
mov edx, 0x644260
mov eax, dword [0x688218]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x10274]
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x460]
call fcn.0055156c
mov dx, 0xfff5
mov eax, dword [0x6881e0]
call fcn.00551784
mov eax, dword [0x680434]
mov eax, dword [eax]
call fcn.00610390
xor edx, edx
push ebp
push 0x6440c7
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 1], 0
je 0x644088
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x500]
cmp byte [eax + 0x69], 0
je 0x644088
xor eax, eax
call fcn.006439f4
push ebx
push 0x10000
lea eax, [ebp - 0x10010]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetReadFile
push 0
lea edx, [ebp - 0x10010]
mov ecx, dword [ebx]
lea eax, [ebp - 0x10260]
call fcn.0040809c
call fcn.00407168
cmp dword [ebx], 0
jne 0x64406a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x644125
lea eax, [ebp - 0x10260]
call fcn.004080bc
call fcn.00407168
mov byte [ebp - 2], 1
cmp byte [ebp - 1], 0
je 0x644155
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x500]
cmp byte [eax + 0x69], 0
je 0x644155
call fcn.00551b18
xor edx, edx
mov eax, dword [0x6881e0]
call fcn.00551784
mov eax, dword [ebp - 0xc]
push eax
call sub.wininet.dll_InternetCloseHandle
mov eax, dword [ebp - 8]
push eax
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 1], 0
je 0x6441af
push 0x644280
lea eax, [ebp - 0x10278]
push eax
mov ecx, 0x6442a4
mov edx, 0x644260
mov eax, dword [0x688218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x10278]
mov eax, dword [0x6881e0]
mov eax, dword [eax + 0x500]
call fcn.0055156c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6441d6
lea eax, [ebp - 0x10278]
mov edx, 6
call fcn.0040b4c4
pop eax
jmp eax