Function at 0x4351a0
Capabilities:
Parse url

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x505da5
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x569080]
xor eax, ebp
mov dword [ebp + 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp + 0x28], edi
mov ebx, dword [ebp + 0x74]
lea ecx, [edi + 0x20]
mov eax, dword [ebp + 0x78]
push ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x20], eax
call fcn.00409a20
sub esp, 8
mov dword [edi + 0x78], 0
lea ecx, [ebp + 0x50]
call fcn.00406800
mov dword [ebp - 4], 0
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp + 0x50]
call fcn.00423c20
mov edx, eax
mov byte [ebp - 4], 1
cmp dword [edx + 0x14], 7
jbe 0x43521d
mov edx, dword [edx]
lea eax, [edi + 0x18]
test edx, edx
jne 0x435228
xor ecx, ecx
jmp 0x435242
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x435230
sub ecx, esi
lea eax, [edi + 0x18]
sar ecx, 1
push ecx
push edx
mov ecx, eax
call fcn.00403870
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x38]
call fcn.00404130
lea eax, [edi + 0x18]
push eax
lea ecx, [edi + 0x1c]
call fcn.00409df0
push 5
push str..part
lea ecx, [edi + 0x1c]
call fcn.00402660
lea eax, [ebp - 0x58]
mov dword [ebp + 0x24], 0
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0x3c
push 0
push 0
push dword [ebx]
movlpd qword [ebp - 0x54], xmm0
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
movlpd qword [ebp - 0x3c], xmm0
movlpd qword [ebp - 0x34], xmm0
movlpd qword [ebp - 0x2c], xmm0
movlpd qword [ebp - 0x24], xmm0
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
jne 0x4353dc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp + 0x2c], ebx
test ebx, ebx
je 0x4353d7
call fcn.0042b830
cmp byte [eax + 0x1c], 0
je 0x43586e
call fcn.0042b830
test byte [eax + 0x20], 8
je 0x43586e
call fcn.0042b830
mov ebx, eax
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov ecx, dword [edi]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x34], eax
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x34]
push 0x11
push str.CheckURL___failed
call fcn.00402660
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x30]
push 0
push 0x530654
call fcn.00402660
push ecx
lea eax, [ebp + 0x34]
push eax
push ecx
lea eax, [ebp + 0x30]
mov ecx, ebx
push eax
call fcn.0042bba0
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov ecx, dword [ebp + 0x30]
mov eax, ebx
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4353a6
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov byte [ebp - 4], 0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x43586e
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
jmp 0x43586e
mov eax, dword [ebp + 0x28]
jmp 0x4353df
mov eax, dword [ebp - 0x4c]
cmp eax, 3
je 0x4353f3
cmp eax, 4
je 0x4353f3
mov esi, 0x2ee6
jmp 0x435871
lea eax, [ebp + 0x24]
mov ecx, edi
push eax
call fcn.004375b0
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x4354ea
call fcn.0042b830
cmp byte [eax + 0x1c], 0
je 0x43586e
call fcn.0042b830
test byte [eax + 0x20], 8
je 0x43586e
call fcn.0042b830
mov ebx, eax
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov ecx, dword [edi]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp + 0x30]
push 0x1b
push str.InitInetConnection___failed
call fcn.00402660
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x34], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp + 0x34]
push 0
push 0x530654
call fcn.00402660
push ecx
lea eax, [ebp + 0x30]
push eax
push ecx
lea eax, [ebp + 0x34]
mov ecx, ebx
push eax
call fcn.0042bba0
mov byte [ebp - 4], 0xe
or ebx, 0xffffffff
mov ecx, dword [ebp + 0x34]
mov eax, ebx
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4354de
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov byte [ebp - 4], 0
mov ecx, dword [ebp + 0x30]
jmp 0x4353ad
mov ebx, dword [ebp + 0x24]
mov dword [ebp - 0x1c], 0x535bac
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x16
lea eax, [edi + 0x7c]
cmp dword [eax], 0
jbe 0x43550f
push 4
push eax
push 2
push ebx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
lea eax, [ebp + 4]
mov dword [ebp + 8], 0
mov dword [ebp + 0xc], 0
mov dword [ebp + 0x2c], eax
call fcn.004047f0
mov dword [ebp + 0x34], eax
test eax, eax
je 0x4358bc
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, dword [ebp + 0x34]
call esi
add eax, 0x10
mov dword [ebp + 4], eax
mov byte [ebp - 4], 0x19
lea eax, [ebp]
push eax
lea eax, [ebp + 8]
mov ecx, edi
push eax
lea eax, [ebp + 0xc]
push eax
push str.POST
push dword [ebp + 0x30]
push ebx
call fcn.00437cc0
mov esi, eax
mov dword [ebp + 0x2c], esi
test esi, esi
je 0x43569d
call fcn.0042b830
or ebx, 0xffffffff
cmp byte [eax + 0x1c], 0
je 0x43567c
call fcn.0042b830
test byte [eax + 0x20], 8
je 0x43567c
call fcn.0042b830
mov dword [ebp + 0x20], eax
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov ecx, dword [edi]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp + 0x30]
push 0x10
push str.Connect___failed
call fcn.00402660
call fcn.004047f0
mov edi, eax
test edi, edi
je 0x4358bc
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
add eax, 0x10
mov dword [ebp + 0x34], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp + 0x34]
push 0
push 0x530654
call fcn.00402660
push ecx
lea eax, [ebp + 0x30]
push eax
push ecx
mov ecx, dword [ebp + 0x20]
lea eax, [ebp + 0x34]
push eax
call fcn.0042bba0
mov byte [ebp - 4], 0x1c
mov eax, ebx
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x43564f
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov byte [ebp - 4], 0x19
mov eax, ebx
mov ecx, dword [ebp + 0x30]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x435679
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov esi, dword [ebp + 0x2c]
cmp esi, 0xe0000013
je 0x435817
mov ecx, dword [ebp + 0x28]
push 0
push esi
add ecx, 0xc
push 0
call fcn.0043aad0
jmp 0x435817
mov esi, dword [edi + 8]
mov dword [ebp + 0x30], esi
mov dword [ebp - 0x14], 0x535bac
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x26
mov eax, dword [edi + 4]
mov edx, dword [edi + 0x70]
mov ecx, dword [edi + 0x68]
mov dword [ebp + 0x10], 0x535ba4
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x27
mov dword [ebp + 0x10], 0x535c20
mov dword [ebp + 0x18], ecx
mov dword [ebp + 0x1c], edx
mov byte [ebp - 4], 0x28
lea eax, [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
push dword [ebp + 8]
push eax
push ebx
call fcn.004367a0
mov ecx, eax
or ebx, 0xffffffff
mov dword [ebp + 0x2c], ecx
test ecx, ecx
jne 0x43578c
cmp dword [edi + 0xa8], 0xc8
jne 0x4358b0
call fcn.004047f0
mov dword [ebp + 0x28], eax
test eax, eax
je 0x4358bc
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x525578]
mov ecx, dword [ebp + 0x28]
call esi
add eax, 0x10
mov dword [ebp + 0x34], eax
mov byte [ebp - 4], 0x2a
mov eax, dword [edi]
mov esi, dword [eax + 0x50]
lea eax, [ebp + 0x34]
push eax
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
push dword [ebp + 0x20]
lea eax, [ebp + 0x34]
push eax
lea eax, [edi + 0x18]
push eax
call fcn.00437220
mov dword [ebp + 0x2c], eax
mov byte [ebp - 4], 0x28
mov eax, ebx
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x435789
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov esi, dword [ebp + 0x30]
mov byte [ebp - 4], 0x26
mov dword [ebp + 0x10], 0x535c20
mov byte [ebp - 4], 0x2c
cmp dword [ebp + 0x14], 0
je 0x4357d5
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4357bf
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp + 0x14], 0
push 0xffffffffffffffff
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xffffffffffffffff
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0x26
mov eax, dword [ebp + 0x14]
mov dword [ebp + 0x10], 0x535ba4
test eax, eax
je 0x4357f5
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp + 0x14], 0
mov byte [ebp - 4], 0x19
push 0
push esi
mov dword [ebp - 0x14], 0x535bac
call dword [sym.imp.WININET.dll_InternetSetStatusCallbackW]
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp + 4]
mov dword [ebp + 0x28], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x435849
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x525578]
mov ecx, edi
call esi
mov byte [ebp - 4], 0
mov esi, dword [ebp + 0x24]
push 0
push esi
mov dword [ebp - 0x1c], 0x535bac
call dword [sym.imp.WININET.dll_InternetSetStatusCallbackW]
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x18], 0
mov esi, dword [ebp + 0x2c]
mov dword [ebp - 4], 0x2f
lea ecx, [ebp + 0x50]
call fcn.00406950
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x50]
call fcn.00404130
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x68]
xor ecx, ebp
call fcn.004d3ce9
lea esp, [ebp + 0x6c]
pop ebp
ret 8
mov dword [ebp + 0x2c], 0xe000002b
jmp 0x43578c
push 0x80004005
call fcn.004027d0
int3