Function at 0x525260
Capabilities:
Parse url

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff378
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x1c88], ebx
mov esi, ecx
mov ebx, edx
mov dword [ebp - 4], eax
mov edi, dword [ebp + 0x18]
xor eax, eax
push ebp
push 0x5254aa
push dword fs:[eax]
mov dword fs:[eax], esp
test ebx, ebx
je 0x5252a0
mov eax, ebx
xor edx, edx
call fcn.00406ddc
test esi, esi
je 0x5252ad
mov eax, esi
xor edx, edx
call fcn.00406ddc
test edi, edi
je 0x5252ba
mov eax, edi
xor edx, edx
call fcn.00406ddc
cmp dword [ebp + 0x14], 0
je 0x5252ca
mov eax, dword [ebp + 0x14]
xor edx, edx
call fcn.00406ddc
cmp dword [ebp + 0x10], 0
je 0x5252da
mov eax, dword [ebp + 0x10]
xor edx, edx
call fcn.00406ddc
cmp dword [ebp + 0xc], 0
je 0x5252ea
mov eax, dword [ebp + 0xc]
xor edx, edx
call fcn.00406ddc
cmp dword [ebp + 8], 0
je 0x5252f8
mov eax, dword [ebp + 8]
mov word [eax], 0
mov byte [ebp - 5], 0
lea edx, [ebp - 0x1c88]
mov eax, dword [ebp - 4]
call fcn.00470b84
cmp dword [ebp - 0x1c88], 0
je 0x525491
lea eax, [ebp - 0x44]
xor ecx, ecx
mov edx, 0x3c
call fcn.00403cd8
lea eax, [ebp - 0x84]
xor ecx, ecx
mov edx, 0x40
call fcn.00403cd8
lea eax, [ebp - 0x284]
xor ecx, ecx
mov edx, 0x200
call fcn.00403cd8
lea eax, [ebp - 0x384]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.00403cd8
lea eax, [ebp - 0x484]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.00403cd8
lea eax, [ebp - 0x1484]
xor ecx, ecx
mov edx, 0x1000
call fcn.00403cd8
lea eax, [ebp - 0x1c84]
xor ecx, ecx
mov edx, 0x800
call fcn.00403cd8
mov dword [ebp - 0x44], 0x3c
lea eax, [ebp - 0x84]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x40
lea eax, [ebp - 0x284]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0x200
lea eax, [ebp - 0x384]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], pe_nt_image_headers32
lea eax, [ebp - 0x484]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1484]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x1000
lea eax, [ebp - 0x1c84]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0x800
lea eax, [ebp - 0x44]
push eax
push 0
mov eax, dword [ebp - 4]
call fcn.00406e68
push eax
call sub.kernel32.dll_lstrlenW_1
push eax
mov eax, dword [ebp - 4]
call fcn.00406e68
push eax
call sub.wininet.dll_InternetCrackUrlW
test eax, eax
je 0x525491
test ebx, ebx
je 0x52542e
mov eax, ebx
mov edx, dword [ebp - 0x40]
call fcn.00406f88
test esi, esi
je 0x52543c
mov eax, esi
mov edx, dword [ebp - 0x34]
call fcn.00406f88
test edi, edi
je 0x52544a
mov eax, edi
mov edx, dword [ebp - 0x18]
call fcn.00406f88
cmp dword [ebp + 0x14], 0
je 0x52545b
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00406f88
cmp dword [ebp + 0x10], 0
je 0x52546c
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x28]
call fcn.00406f88
cmp dword [ebp + 0xc], 0
je 0x52547d
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
call fcn.00406f88
cmp dword [ebp + 8], 0
je 0x52548d
mov eax, dword [ebp + 8]
movzx edx, word [ebp - 0x2c]
mov word [eax], dx
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5254b1
lea eax, [ebp - 0x1c88]
call fcn.00406dcc
ret