Function at 0x105613c
Capabilities:
Download url
Parse url
Receive data

Disassembly:
push 0x25c
mov eax, 0x108cbaf
call fcn.01038734
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x22c], eax
xor eax, eax
push 0x206
mov word [ebp - 0x21c], ax
xor edi, edi
lea eax, [ebp - 0x21a]
push edi
push eax
mov esi, ecx
call sub.msvcrt.dll_memset
mov dword [ebp - 0x228], edi
push 0x38
lea eax, [ebp - 0x264]
push edi
push eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x268], edi
call sub.msvcrt.dll_memset
add esp, 0x18
lea eax, [esi + 0xc8]
push edi
push eax
mov dword [ebp - 0x220], ebx
call dword [sym.imp.ATL.DLL_AtlComPtrAssign]
lea eax, [esi + 0xc]
push eax
call fcn.0100229b
cmp dword [esi], edi
jne 0x10561c3
mov dword [ebp - 0x224], edi
jmp 0x10563b8
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x10561b8
push 0x28
push ebx
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
lea ebx, [eax + 2]
cmp eax, edi
jne 0x10561e5
mov ebx, dword [ebp - 0x220]
cmp ebx, edi
je 0x10561fa
movzx eax, word [ebx]
cmp ax, 0x22
je 0x10561f8
cmp ax, 0x27
jne 0x10561fa
inc ebx
inc ebx
push 0x29
push ebx
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
cmp eax, edi
je 0x105620d
xor ecx, ecx
mov word [eax], cx
push 0x22
push ebx
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
cmp eax, edi
jne 0x1056229
push 0x27
push ebx
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
cmp eax, edi
je 0x105622e
xor ecx, ecx
mov word [eax], cx
push ebx
push 0x104
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x268], 0x3c
mov dword [ebp - 0x260], 1
call fcn.010022e3
lea eax, [ebp - 0x268]
push eax
push edi
push edi
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
push dword [ebp - 0x260]
push 0x10563c0
push dword [ebp - 0x260]
push dword [ebp - 0x264]
push 1
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
lea eax, [esi + 0xc]
jne 0x105629c
push ebx
push eax
call fcn.01003f76
jmp 0x10562bd
push dword [esi + 4]
push eax
call fcn.0101a5d1
cmp eax, edi
mov dword [ebp - 0x224], eax
jl 0x10563b8
push ebx
lea eax, [esi + 0xc]
push eax
call fcn.01043e8d
cmp eax, edi
mov dword [ebp - 0x224], eax
jl 0x10563b8
mov eax, dword [esi + 0xc]
push edi
push edi
lea ecx, [ebp - 0x228]
push ecx
push eax
push dword [ebp - 0x22c]
call sub.urlmon.dll_URLOpenBlockingStreamW
test eax, eax
jl 0x10563ae
push dword [ebp - 0x228]
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 1
call fcn.01053bc4
push dword [ebp - 0x220]
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 2
call fcn.01037380
push dword [eax]
lea eax, [esi + 0xc8]
push eax
call dword [sym.imp.ATL.DLL_AtlComPtrAssign]
mov eax, dword [ebp - 0x22c]
cmp eax, edi
je 0x1056334
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x220]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x220]
mov dword [esi + 0x88], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ecx, [esi + 0x90]
mov dword [esi + 0x8c], eax
cmp dword [ecx], edi
jne 0x1056368
mov edx, dword [esi + 0x88]
mov dword [ecx], edx
lea ecx, [esi + 0x94]
cmp dword [ecx], edi
jne 0x1056374
mov dword [ecx], eax
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], 1
cmp eax, edi
je 0x10563b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10563b8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.010050a1
mov eax, esi
call fcn.01038774
ret 8
mov dword [ebp - 0x224], 1
mov esi, dword [ebp - 0x224]
jmp 0x1056395