Function at 0x180011620
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
mov qword [rsp + 0x20], r9
mov word [rsp + 0x18], r8w
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x110
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov dword [rsp + 0xf0], 0
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xb8], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0xa0], 0
lea rdx, [0x180039257]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc90.dll_Ordinal_310]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
mov rcx, qword [rsp + reloc.mfc90.dll_Ordinal_320]
call fcn.1800115d0
mov qword [rsp + reloc.mfc90.dll_Ordinal_320], rax
mov rdx, qword [rsp + reloc.mfc90.dll_Ordinal_320]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc90.dll_Ordinal_310]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc90.dll_Ordinal_4179]
mov dword [rsp + 0xb0], 0x7a120
lea rdx, [0x18003925b]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_310]
nop
lea rdx, [0x18003925f]
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc90.dll_Ordinal_310]
nop
lea rdx, str.User_Agent:_Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__QQDownload_625__GTB6.5__InfoPath.2__.NET_CLR_2.0.50727__.NET_CLR_3.0.04506.648__.NET_CLR_3.5.21022__TheWorld_
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc90.dll_Ordinal_310]
nop
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [0x18003d718]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rsp + 0xc0], rax
cmp qword [rsp + 0xc0], 0
jne 0x180011792
jmp 0x180011b58
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
lea rax, [0x18003d728]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, word [rsp + 0x130]
mov rdx, qword [rsp + reloc.mfc90.dll_Ordinal_296]
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rsp + 0xb8], rax
cmp qword [rsp + 0xb8], 0
jne 0x1800117f1
jmp 0x180011b58
mov dword [rsp + 0x50], 0
cmp qword [rsp + 0x158], 0
je 0x180011825
lea rdx, str.Cookie:
mov rcx, qword [rsp + 0x158]
call fcn.1800115f0
test rax, rax
je 0x180011825
mov dword [rsp + 0x50], 0x80000
mov eax, dword [rsp + 0x50]
or eax, 0x80000000
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [0x18003d748]
mov r8, qword [rsp + 0x138]
mov rdx, qword [rsp + reloc.mfc90.dll_Ordinal_320]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x180011884
jmp 0x180011b58
mov r9d, 0xa0000000
mov r8d, 0x11
lea rdx, [0x18003d758]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [rsp + 0x90], eax
lea rdx, [0x18003d76c]
lea rcx, [rsp + 0x80]
call fcn.18000ba70
movzx eax, al
test eax, eax
je 0x1800118f8
mov r9d, 0xa0000000
mov r8d, 0x2f
lea rdx, [0x18003d778]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0
jne 0x1800118f8
jmp 0x180011b58
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc90.dll_Ordinal_2973]
mov edi, eax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc90.dll_Ordinal_888]
mov r9d, 0xa0000000
mov r8d, edi
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x158], 0
je 0x1800119f8
xor eax, eax
mov rcx, 0xffffffffffffffff
mov rdi, qword [rsp + 0x158]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
test rcx, rcx
jbe 0x1800119f8
lea rdx, str.Referer:
mov rcx, qword [rsp + 0x158]
call fcn.1800115f0
cmp rax, qword [rsp + 0x158]
jne 0x1800119a0
mov r8, qword [rsp + 0x158]
lea rdx, str.Referer:__s
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_2380]
jmp 0x1800119b3
mov rdx, qword [rsp + 0x158]
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_798]
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_2973]
mov edi, eax
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_888]
mov r9d, 0xa0000000
mov r8d, edi
mov rdx, rax
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0
jne 0x1800119f8
jmp 0x180011b58
xor edx, edx
mov eax, dword [rsp + 0xb0]
mov ecx, 0x3e8
div ecx
mov r8d, eax
lea rdx, [0x18003d7c8]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_2380]
mov edx, dword [rsp + 0x150]
mov dword [rsp + 0x20], edx
mov r9, qword [rsp + 0x148]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [rsp + 0x90], eax
mov dword [rsp + 0x78], 0x19000
movsxd rcx, dword [rsp + 0x78]
call sub.mfc90.dll_Ordinal_265
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xa0], rax
xor eax, eax
cmp eax, 1
je 0x180011b3b
movsxd rcx, dword [rsp + 0x78]
mov rdi, qword [rsp + 0xa0]
xor eax, eax
rep stosb byte [rdi], al
mov dword [rsp + 0xd0], 0
mov r8d, dword [rsp + 0x78]
sub r8d, 2
lea r9, [rsp + 0xd0]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetReadFile]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0
je 0x180011ada
cmp dword [rsp + 0xd0], 0
jne 0x180011adc
jmp 0x180011b3b
mov r8, qword [rsp + 0xa0]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xe0]
call fcn.180004170
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov rdx, qword [rsp + 0x108]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc90.dll_Ordinal_795]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
jmp 0x180011a74
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0xe8]
call sub.mfc90.dll_Ordinal_266
cmp qword [rsp + 0x70], 0
je 0x180011b6b
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp qword [rsp + 0xb8], 0
je 0x180011b84
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp qword [rsp + 0xc0], 0
je 0x180011b9d
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x120]
call qword [sym.imp.mfc90.dll_Ordinal_300]
mov eax, dword [rsp + 0xf0]
or eax, 1
mov dword [rsp + 0xf0], eax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc90.dll_Ordinal_589]
mov rax, qword [rsp + 0x120]
add rsp, 0x110
pop rdi
ret