Function at 0x100044740
Capabilities:
Parse url

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x4a0
mov qword [rsp + 0x98], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x1000da5c8]
xor rax, rsp
mov qword [rsp + 0x490], rax
mov r12d, edx
mov rbx, rcx
xor r13d, r13d
cmp byte [rcx + 0x134], r13b
jne 0x100044ff0
lea r14d, [r13 + 1]
mov byte [rcx + 0x134], r14b
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x40], r13
mov qword [r11 - 0x438], r13
mov rcx, qword [rcx + 0x168]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
lea rdx, str._D_3
call qword [rax]
cmp eax, r13d
jl 0x100044f2f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + 0x48]
cmp eax, r13d
jl 0x100044f2f
mov rdi, qword [rsp + 0x48]
cmp rdi, r13
je 0x100044f2f
mov rcx, qword [rsp + 0x30]
cmp rcx, r13
je 0x10004481f
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rdi]
lea r8, [rsp + 0x30]
lea rdx, [0x1000ba4a8]
mov rcx, rdi
call qword [rax]
cmp eax, r13d
jl 0x100044f2f
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x140]
cmp eax, r13d
jl 0x100044f2f
test r12b, 4
je 0x100044c51
mov qword [rsp + 0x20], r13
mov word [rsp + 0x58], r13w
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov esi, 8
lea r8d, [rsi + 0x18]
mov edx, esi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
cmp rax, r13
je 0x1000448a7
mov dword [rax + 8], r13d
lea rax, [0x1000a9ef0]
mov qword [rdi], rax
lock add dword [0x1000da218], r14d
jmp 0x1000448aa
mov rdi, r13
cmp rdi, r13
je 0x100044c2c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov qword [rbx + 0x170], rdi
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x1000448d3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x20], r13
mov rax, qword [rdi]
lea r8, [rsp + 0x20]
lea rdx, [0x1000afcb8]
mov rcx, rdi
call qword [rax]
cmp eax, r13d
jge 0x100044916
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
mov rax, qword [rbx + 0x170]
lea rcx, [0x100044468]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rbx
mov rdi, qword [rsp + 0x20]
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ebp, 9
mov word [rsp + 0x58], bp
mov qword [rsp + 0x60], rdi
cmp rdi, r13
je 0x100044959
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x58]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x120]
call qword [rax + 0x148]
cmp eax, r13d
jge 0x1000449bc
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
mov word [rsp + 0x70], r13w
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
call qword [rax + 0x340]
cmp eax, r13d
jge 0x100044a0b
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
cmp word [rsp + 0x70], r14w
jne 0x100044c02
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x88], r13
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8d, 0x10
mov edx, esi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
cmp rax, r13
je 0x100044a5b
mov dword [rax + 8], r13d
lea rax, [0x1000a9f40]
mov qword [rdi], rax
lock add dword [0x1000da218], r14d
jmp 0x100044a5e
mov rdi, r13
cmp rdi, r13
je 0x100044bc0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov qword [rsp + 0x88], rdi
mov rcx, qword [rsp + 0x28]
cmp rcx, r13
je 0x100044a88
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x28], r13
mov rax, qword [rdi]
lea r8, [rsp + 0x28]
lea rdx, [0x1000afcb8]
mov rcx, rdi
call qword [rax]
cmp eax, r13d
jge 0x100044af2
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x28]
cmp rcx, r13
je 0x100044ac1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
mov rsi, qword [rsp + 0x28]
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov word [rsp + 0x70], bp
mov qword [rsp + 0x78], rsi
cmp rsi, r13
je 0x100044b1a
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x70]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x140]
call qword [rax + 0x338]
cmp eax, r13d
jge 0x100044ba4
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x28]
cmp rcx, r13
je 0x100044b73
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x28]
cmp rcx, r13
je 0x100044c02
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044c02
mov rcx, qword [rsp + 0x28]
cmp rcx, r13
je 0x100044bd1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
lea rcx, [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044c51
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044c51
lea rcx, [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x20]
cmp rcx, r13
je 0x100044f2f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x100044f2f
test r12b, 2
je 0x100044dda
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
call qword [rax + 0x80]
cmp eax, r13d
jl 0x100044f2f
mov rdi, qword [rsp + 0x40]
cmp rdi, r13
je 0x100044dda
cmp word [rdi], r13w
je 0x100044dda
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov word [rsp + 0x488], r13w
lea rax, [rsp + 0x280]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0x100], 0x104
mov dword [rsp + 0xb0], 0x68
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, eax
lea r9, [rsp + 0xb0]
mov r8d, 0x80000000
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
cmp eax, r13d
je 0x100044dda
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], r13
mov edx, 0x29
mov rcx, qword [rsp + 0xf8]
call sub.msvcrt.dll_wcsrchr
cmp rax, r13
je 0x100044d27
mov word [rax], r13w
mov edx, 0x22
mov rcx, qword [rsp + 0xf8]
call sub.msvcrt.dll_wcsrchr
cmp rax, r13
je 0x100044d42
mov word [rax], r13w
mov rdi, qword [rsp + 0xf8]
mov eax, 0x105
cmp dword [rsp + 0x100], eax
cmovb eax, dword [rsp + 0x100]
cmp eax, r13d
je 0x100044d7f
dec eax
cmp rdi, r13
je 0x100044d7f
cmp word [rdi], r13w
je 0x100044d7f
cmp word [rdi], 0x2f
jne 0x100044d7f
add rdi, 2
cmp eax, r13d
jne 0x100044d63
mov ebp, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, r13d
jle 0x100044db5
mov rsi, rdi
cmp word [rsi], 0x2f
jne 0x100044da1
mov eax, 0x5c
mov word [rsi], ax
add ebp, r14d
add rsi, 2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp ebp, eax
jl 0x100044d93
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.100007e60
cmp eax, r13d
jge 0x100044dcc
jmp 0x100044f2f
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.100045c64
nop
test r14b, r12b
je 0x100044ea3
mov rcx, qword [rbx + 0x88]
cmp rcx, r13
je 0x100044dfc
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rbx + 0x88], r13
mov dword [rbx + 0xa0], r13d
mov dword [rbx + 0xa4], r13d
mov dword [rbx + 0x90], r13d
mov qword [rbx + 0x98], r13
mov dword [rsp + 0x160], 0x118
mov dword [rsp + 0x164], 0x8200
mov rax, qword [rbx + 8]
mov qword [rsp + 0x168], rax
mov edx, 0x80
lea rcx, [rsp + 0x178]
lea r8, [0x1000ba118]
lea rax, [rsp + 0x178]
sub r8, rax
lea rax, [rdx + 0x7fffff7e]
cmp rax, r13
je 0x100044e7c
movzx eax, word [r8 + rcx]
cmp ax, r13w
je 0x100044e7c
mov word [rcx], ax
add rcx, 2
sub rdx, r14
jne 0x100044e59
cmp rdx, r13
jne 0x100044e85
sub rcx, 2
mov word [rcx], r13w
mov rdx, qword [rsp + 0x168]
cmp rdx, r13
je 0x100044ea3
lea rcx, [rsp + 0x160]
call fcn.10000e8bc
test r12b, 3
je 0x100044ed9
mov rcx, qword [rbx + 8]
cmp rcx, r13
je 0x100044ebe
lea rdx, str.HTMLReadyToShow
call fcn.10003efe0
mov rcx, qword [rbx + 8]
cmp rcx, r13
je 0x100044ed9
mov r8d, 0xfa
lea rdx, str.HTMLReadyToShow
call fcn.10000e70c
test r12b, 0x18
je 0x100044f2f
mov rax, qword [rbx + 0x148]
cmp rax, r13
je 0x100044f2f
cmp word [rax], r13w
je 0x100044f2f
mov rax, qword [rbx + 0x150]
cmp rax, r13
je 0x100044f2f
cmp word [rax], r13w
je 0x100044f2f
mov rax, qword [rbx + 0x158]
cmp rax, r13
je 0x100044f2f
cmp word [rax], r13w
je 0x100044f2f
mov rax, qword [rbx + 0x160]
cmp rax, r13
je 0x100044f2f
cmp word [rax], r13w
je 0x100044f2f
mov rcx, rbx
call fcn.100045544
mov byte [rbx + 0x134], r13b
mov rdi, qword [rsp + 0x40]
cmp rdi, r13
je 0x100044f4f
mov qword [rsp + 0x40], r13
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
cmp rcx, r13
je 0x100044f65
mov qword [rsp + 0x50], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x50]
cmp rcx, r13
je 0x100044f76
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x30]
cmp rcx, r13
je 0x100044f8c
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x30]
cmp rcx, r13
je 0x100044f9d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rdi, qword [rsp + 0x48]
cmp rdi, r13
je 0x100044fb6
mov qword [rsp + 0x48], r13
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rdi, qword [rsp + 0x48]
cmp rdi, r13
je 0x100044fca
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x38]
cmp rcx, r13
je 0x100044fe0
mov qword [rsp + 0x38], r13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x38]
cmp rcx, r13
je 0x100044ff0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x490]
xor rcx, rsp
call fcn.1000031d0
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret