Function at 0x10011640
Capabilities:
Parse url

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10052626
mov eax, dword fs:[0]
push eax
mov eax, 0x16bc
call fcn.1004cae0
mov eax, dword [0x1006f184]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1680], eax
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10011680
sub eax, edx
lea ebx, [eax + 0x3c]
push ebx
mov dword [ebp - 0x167c], ebx
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new___unsigned_int_]
mov edi, eax
add esp, 4
test edi, edi
je 0x1001198f
mov ecx, 0x100742a8
call fcn.10050c00
mov esi, eax
test esi, esi
je 0x100116e5
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x100116c9
xor eax, eax
jmp 0x100116e5
lea ebx, [eax + eax]
mov eax, ebx
call fcn.1004cab0
mov eax, esp
push 3
push ebx
push esi
push eax
call fcn.10001d00
mov ebx, dword [ebp - 0x167c]
mov ecx, dword [ebp - 0x1680]
push ecx
push eax
push str.gid_sencode_s
push ebx
push edi
call dword [sym.imp.SHLWAPI.dll_wnsprintfA]
xor edx, edx
push 0x18e
push edx
lea eax, [ebp - 0x26e]
push eax
or esi, 0xffffffff
mov word [ebp - 0x270], dx
call sub.MSVCR100.dll_memset
xor ecx, ecx
push 0x7e
push ecx
lea edx, [ebp - 0xde]
push edx
mov word [ebp - 0xe0], cx
call sub.MSVCR100.dll_memset
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x476]
push ecx
mov word [ebp - 0x478], ax
call sub.MSVCR100.dll_memset
mov eax, dword [0x100743d8]
add esp, 0x38
push 0x104
lea edx, [ebp - 0x478]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x10011782
push 0x40
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x478]
push edx
call fcn.10041ef0
add esp, 0xc
lea eax, [ebp - 0xe0]
push eax
push str.TBH__s_
lea ecx, [ebp - 0x270]
push 0xc8
push ecx
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
xor edx, edx
push 0x1fe
push edx
lea eax, [ebp - 0x676]
push eax
mov word [ebp - 0x678], dx
call sub.MSVCR100.dll_memset
xor ecx, ecx
push 0xffe
push ecx
lea edx, [ebp - 0x1676]
push edx
mov word [ebp - 0x1678], cx
call sub.MSVCR100.dll_memset
push 0x38
lea eax, [ebp - 0x16c4]
push 0
push eax
mov dword [ebp - 0x16c8], 0x3c
call sub.MSVCR100.dll_memset
add esp, 0x34
lea eax, [ebp - 0x16c8]
push eax
push 0x10000000
lea ecx, [ebp - 0x678]
lea edx, [ebp - 0x1678]
push str.http:__toolbar.soso.com_T4_cin_recv.q
mov dword [ebp - 0x16b8], ecx
mov dword [ebp - 0x16b4], pe_nt_image_headers32
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0x1698], 0x800
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push str.http:__toolbar.soso.com_T4_cin_recv.q
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
mov ebx, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
test eax, eax
je 0x10011982
cmp dword [ebp - 0x16bc], 0xffffffff
je 0x10011982
lea ecx, [ebp - 0x168c]
call fcn.10050c40
push 0
push 0
lea ecx, [ebp - 0x168c]
mov dword [ebp - 4], 0
call fcn.10050ff0
mov esi, eax
test esi, esi
jne 0x10011970
push eax
push 0x50
lea ecx, [ebp - 0x678]
push ecx
lea ecx, [ebp - 0x168c]
call fcn.10051030
push esi
push esi
push esi
lea edx, [ebp - 0x1678]
push edx
push str.POST
lea ecx, [ebp - 0x168c]
call fcn.10050c50
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x167c]
mov dword [ebp - 0x167c], esi
call fcn.10010350
lea ecx, [ebp - 0x167c]
push ecx
lea ecx, [ebp - 0x168c]
mov byte [ebp - 4], 1
call fcn.10051090
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x167c]
push edx
call ebx
mov eax, edi
add esp, 4
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10011900
sub eax, edx
inc eax
push eax
push edi
lea ecx, [ebp - 0x168c]
call fcn.10050cd0
mov esi, eax
test esi, esi
jne 0x10011965
push 0x4f
push eax
mov byte [ebp - 0x60], al
lea eax, [ebp - 0x5f]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1680]
push ecx
lea edx, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x168c]
mov dword [ebp - 0x1680], 0x50
call fcn.10050da0
mov esi, eax
test esi, esi
jne 0x10011965
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
movsx esi, al
lea ecx, [ebp - 0x168c]
call fcn.10050e90
lea ecx, [ebp - 0x168c]
mov dword [ebp - 4], 0xffffffff
call fcn.10050fe0
push edi
call ebx
xor eax, eax
add esp, 4
test esi, esi
sete al
lea esp, [ebp - 0x16d8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004c4fe
mov esp, ebp
pop ebp
ret 4