Function at 0x405401
Capabilities:
Parse url

Disassembly:
push 0x2dc
mov eax, 0x425b76
call fcn.00414d9d
mov dword [ebp - 0x294], ecx
mov esi, 0xff
lea eax, [ebp - 0x20f]
xor ebx, ebx
push esi
push ebx
push eax
mov byte [ebp - 0x210], bl
call fcn.00412ec0
add esp, 0xc
lea ecx, [ebp - 0x210]
push 0x10
pop edx
call fcn.004053b4
push esi
lea eax, [ebp - 0x10f]
mov byte [ebp - 0x110], bl
push ebx
push eax
call fcn.00412ec0
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
call fcn.0041138c
mov eax, dword [ebp - 0x29c]
xor edx, edx
pop ecx
push 0x1e
pop ecx
div ecx
add edx, ecx
lea ecx, [ebp - 0x110]
call fcn.004053b4
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, 0x400
push ebx
push 0x40
call esi
push ebx
push 0x40
mov edi, eax
call esi
push 0x400
push 0x40
mov ebx, eax
call esi
push 0x400
push 0x40
mov dword [ebp - 0x290], eax
call esi
push 0x400
push 0x40
mov dword [ebp - 0x28c], eax
call esi
mov ecx, eax
mov dword [ebp - 0x2d8], 0x3c
xor edx, edx
mov dword [ebp - 0x298], ecx
xor eax, eax
mov dword [ebp - 0x2d4], edx
mov word [ebp - 0x2c0], ax
mov esi, 0x400
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x2a4], eax
lea eax, [ebp - 0x2d8]
push eax
push edx
mov dword [ebp - 0x2c4], esi
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2a0], esi
mov esi, dword [ebp - 0x294]
push edx
mov dword [ebp - 0x2d0], edx
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x2c8], edi
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x2ac], ebx
push esi
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x4057e1
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x228]
call fcn.004020a7
and dword [ebp - 4], 0
push str.script
call fcn.0040208a
pop ecx
push eax
push str.script
lea ecx, [ebp - 0x228]
call fcn.00406993
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x270]
call fcn.004020a7
push 0x42f8e4
mov byte [ebp - 4], 1
call fcn.0040208a
pop ecx
push eax
push 0
push 0x42f8e4
lea ecx, [ebp - 0x270]
call fcn.004047ae
test eax, eax
jne 0x4055d1
push 1
push eax
lea ecx, [ebp - 0x270]
call fcn.00401d7a
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x228]
call fcn.00404c3c
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x258]
call fcn.004020a7
push 0x42f8e8
mov byte [ebp - 4], 2
call fcn.0040208a
pop ecx
push eax
push 0
push 0x42f8e8
lea ecx, [ebp - 0x258]
call fcn.004047ae
test eax, eax
jne 0x40562c
push 1
push eax
lea ecx, [ebp - 0x258]
call fcn.00401d7a
cmp dword [ebp - 0x248], 0
jbe 0x405667
push 0x42f8ec
call fcn.0040208a
pop ecx
push eax
push 0x42f8ec
lea ecx, [ebp - 0x228]
call fcn.00406993
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x228]
call fcn.00404c3c
push 0x42f8f0
call fcn.0040208a
pop ecx
push eax
push 0x42f8f0
lea ecx, [ebp - 0x228]
call fcn.00406993
lea eax, [ebp - 0x110]
push eax
call fcn.0040208a
pop ecx
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x228]
call fcn.00406993
sub esp, 0x18
mov dword [ebp - 0x2e8], 4
lea eax, [ebp - 0x228]
mov dword [ebp - 0x2e4], 8
mov ecx, esp
mov dword [ebp - 0x2e0], 0xe
mov dword [ebp - 0x2dc], 0x10
push eax
call fcn.00401cea
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.00401ab7
mov byte [ebp - 4], 3
mov ecx, str.http:__
cmp dword [ebp - 0x2cc], 4
mov eax, str.https:__
cmovne eax, ecx
lea ecx, [ebp - 0x240]
push eax
call fcn.004020a7
mov byte [ebp - 4], 4
push dword [ebp - 0x2c8]
call fcn.0040208a
pop ecx
push eax
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x240]
call fcn.00406993
push 0x42f90c
call fcn.0040208a
pop ecx
push eax
push 0x42f90c
lea ecx, [ebp - 0x240]
call fcn.00406993
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x240]
call fcn.00404c3c
push 0x400
push 0
push esi
call fcn.00412ec0
add esp, 0xc
lea eax, [ebp - 0x240]
cmp dword [ebp - 0x22c], 0x10
cmovae eax, dword [ebp - 0x240]
push eax
push 0x400
push esi
call fcn.00411de9
add esp, 0xc
lea ecx, [ebp - 0x240]
xor esi, esi
push esi
push 1
call fcn.00402143
push esi
push 1
lea ecx, [ebp - 0x288]
call fcn.00402143
push esi
push 1
lea ecx, [ebp - 0x258]
call fcn.00402143
push esi
push 1
lea ecx, [ebp - 0x270]
call fcn.00402143
push esi
push 1
lea ecx, [ebp - 0x228]
call fcn.00402143
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call esi
push ebx
call esi
push dword [ebp - 0x28c]
call esi
push dword [ebp - 0x298]
call esi
push dword [ebp - 0x290]
call esi
call fcn.00414d4c
ret