Function at 0x1000b7c0
Capabilities:
Parse url

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10012859
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x88
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ecx
push str.http:__
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x1000b804
mov dword [ebp + 8], str.http:__url
jmp 0x1000b83a
push str.ftp:__
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x1000b820
mov dword [ebp + 8], str.ftp:__url
jmp 0x1000b83a
push str.https:__
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x1000b83a
mov dword [ebp + 8], str.https:__url
mov eax, dword [ebp + 8]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
shl eax, 1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x20]
call fcn.1000abb0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
cmp ecx, 0x22
je 0x1000b877
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
cmp ecx, 0x27
jne 0x1000b8d5
mov eax, dword [ebp + 8]
add eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.10002598
lea ecx, [ebp - 0x20]
call fcn.1000aea0
movsx eax, byte [eax]
test eax, eax
jne 0x1000b8b3
mov dword [ebp - 0x28], 7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x28]
jmp 0x1000bd3a
lea ecx, [ebp - 0x20]
call fcn.1000aea0
mov esi, eax
lea ecx, [ebp - 0x20]
call fcn.1000aec0
mov byte [esi + eax - 1], 0
lea ecx, [ebp - 0x20]
call fcn.1000aea0
mov dword [ebp + 8], eax
mov eax, 1
test eax, eax
je 0x1000b920
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x18]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jne 0x1000b904
call fcn.100118c0
jmp 0x1000b90a
mov byte [ebp - 4], 0
jmp 0x1000b920
jmp 0x1000b917
mov dword [ebp - 4], 0
jmp 0x1000b8d5
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x1000b98d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 1]
cmp ecx, 0x5c
jne 0x1000b98d
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x10], 5
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x554
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.file
mov eax, dword [ebp - 0x14]
add eax, 0x40
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x4f0], 0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x48c], 0
mov eax, dword [ebp - 0x14]
mov word [eax + 0x1c], 0
jmp 0x1000bc50
push 7
push str.file:__
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__strnicmp]
add esp, 0xc
test eax, eax
je 0x1000baa6
push 0x2000000
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.WININET.dll_InternetCanonicalizeUrlA]
test eax, eax
jne 0x1000baa4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1000ba85
mov eax, 1
test eax, eax
je 0x1000ba37
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x18]
add eax, 1
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jne 0x1000ba1b
call fcn.100118c0
jmp 0x1000ba21
mov byte [ebp - 4], 0
jmp 0x1000ba37
jmp 0x1000ba2e
mov dword [ebp - 4], 0
jmp 0x1000b9e9
push 0x2000000
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.WININET.dll_InternetCanonicalizeUrlA]
test eax, eax
jne 0x1000ba83
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
call fcn.1000e210
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x3c]
jmp 0x1000bd3a
jmp 0x1000baa4
call fcn.1000e210
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x40]
jmp 0x1000bd3a
jmp 0x1000bab6
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x3c
push 0
mov eax, dword [ebp - 0x14]
add eax, 4
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], 0x3c
mov eax, dword [ebp - 0x14]
add eax, 0xa4
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0x4f0
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x28], eax
mov eax, dword [ebp - 0x14]
add eax, 0x40
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0x554
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0x14]
add eax, 0x48c
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x3e8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x2c], 0x64
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0x64
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x34], 0x2710
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x24], 0x64
mov eax, dword [ebp - 0x14]
add eax, 4
push eax
push 0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
jne 0x1000bb95
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
call fcn.1000e210
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x48]
jmp 0x1000bd3a
mov ecx, dword [ebp - 0x14]
call fcn.10011600
cmp eax, 1
jne 0x1000bbee
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x3e8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x2c], 0x64
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0x64
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x34], 0x2710
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x24], 0x64
mov eax, dword [ebp - 0x14]
add eax, 4
push eax
push 0x10000000
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
cmp dword [ebp + 0xc], 0
je 0x1000bc48
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 3
je 0x1000bc48
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 1
je 0x1000bc48
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 4
je 0x1000bc48
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 5
je 0x1000bc48
mov dword [ebp - 0x50], 7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x50]
jmp 0x1000bd3a
mov ecx, dword [ebp - 0x14]
call fcn.1000c0b0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 5
jne 0x1000bd21
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 0x554]
cmp ecx, 0x5c
jne 0x1000bd21
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 0x555]
cmp ecx, 0x5c
jne 0x1000bd21
push 0x10013310
mov eax, dword [ebp - 0x14]
add eax, 0x556
push eax
call dword [sym.imp.MSVCRT.dll_strcspn]
add esp, 8
add eax, 2
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, 0x554
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
cmp dword [ebp - 0x24], eax
jne 0x1000bcd1
mov dword [ebp - 0x54], 7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x54]
jmp 0x1000bd3a
mov eax, dword [ebp - 0x24]
sub eax, 2
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x556
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0xa4
push edx
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
mov byte [eax + 0xa2], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x554]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x554
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008b82
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8