Function at 0x418570
Capabilities:
Check http status code
Connect to http server
Create http request
Get http content length
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x640
mov eax, dword [0x5a4e60]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x22a]
push edx
mov dword [ebp - 0x638], eax
mov edi, 0x50
mov dword [ebp - 0x634], 0
mov word [ebp - 0x22c], cx
call fcn.00525e90
xor eax, eax
push 0x3fe
push eax
lea ecx, [ebp - 0x62a]
push ecx
mov word [ebp - 0x62c], ax
call fcn.00525e90
push str.5054399.com
push str.http:__client.5054399.com_notice_qs2657.txt
call fcn.00523c27
add esp, 0x20
test eax, eax
jne 0x418625
push str.4399.com
push str.http:__client.5054399.com_notice_qs2657.txt
call fcn.00523c27
add esp, 8
test eax, eax
jne 0x418625
push str.4399pk.com
push str.http:__client.5054399.com_notice_qs2657.txt
call fcn.00523c27
add esp, 8
test eax, eax
jne 0x418625
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00523022
mov esp, ebp
pop ebp
ret 4
push esi
push 0x2f
push 0x58088e
call fcn.00523e32
mov esi, eax
add esp, 8
test esi, esi
je 0x418666
mov edx, esi
sub edx, 0x58088e
sar edx, 1
inc edx
push edx
push 0x58088e
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
add esi, 2
push esi
lea ecx, [ebp - 0x62c]
push ecx
jmp 0x418672
push 0x58088e
lea edx, [ebp - 0x22c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x22c]
push 0x3a
push eax
call fcn.00523e32
add esp, 8
test eax, eax
je 0x4186a1
xor ecx, ecx
mov word [eax], cx
add eax, 2
push eax
call fcn.00523a62
add esp, 4
movzx edi, ax
push 0
push 0
push 0
push 0
push 0x57cfd0
call dword [sym.imp.WININET.dll_InternetOpenW]
mov esi, eax
mov dword [ebp - 0x63c], esi
test esi, esi
je 0x41884b
push ebx
push 0
push 0
push 3
push 0
push 0
push edi
lea edx, [ebp - 0x22c]
push edx
push esi
call dword [sym.imp.WININET.dll_InternetConnectW]
mov ebx, eax
test ebx, ebx
je 0x418843
push 0
push SysReAllocStringLen
push 0
push 0
push str.HTTP_1.1
lea eax, [ebp - 0x62c]
push eax
push 0x57cfec
push ebx
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov edi, eax
test edi, edi
je 0x41883c
push 0
push 0
push 0x4a
push str.Accept_Language:_zh_cn__r_nContent_Type:_application_x_www_form_urlencoded_r_n
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
je 0x41882f
mov esi, dword [sym.imp.WININET.dll_HttpQueryInfoW]
xor eax, eax
push eax
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x24]
push edx
push 0x13
push edi
mov byte [ebp - 0x24], 0
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
mov dword [ebp - 0x630], 0x20
call esi
test eax, eax
je 0x41882f
lea eax, [ebp - 0x24]
push eax
call fcn.00523a62
add esp, 4
cmp eax, 0x194
je 0x41882f
push 0
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x24]
push edx
push 0x20000005
push edi
call esi
test eax, eax
je 0x41882f
cmp dword [ebp - 0x630], 4
jne 0x41882f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x630], eax
cmp eax, 0x400
jae 0x41882f
push eax
call fcn.0041ac27
mov ecx, dword [ebp - 0x630]
add esp, 4
mov esi, eax
lea eax, [ebp - 0x640]
push eax
push ecx
push esi
push edi
mov dword [ebp - 0x640], 0
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x4187fe
push esi
call fcn.0041ac1c
jmp 0x41882c
mov edx, dword [ebp - 0x638]
mov eax, dword [ebp - 0x630]
push 0x400
push edx
push eax
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push esi
call fcn.0041ac1c
mov dword [ebp - 0x634], 1
add esp, 4
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov esi, dword [ebp - 0x63c]
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop ebx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x634]
pop esi
xor ecx, ebp
pop edi
call fcn.00523022
mov esp, ebp
pop ebp
ret 4