Function at 0x4d6a18
Capabilities:
Parse url

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff378
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x1c88], ebx
mov esi, ecx
mov ebx, edx
mov dword [ebp - 4], eax
mov edi, dword [ebp + 0x18]
xor eax, eax
push ebp
push 0x4d6c62
push dword fs:[eax]
mov dword fs:[eax], esp
test ebx, ebx
je 0x4d6a58
mov eax, ebx
xor edx, edx
call fcn.004062bc
test esi, esi
je 0x4d6a65
mov eax, esi
xor edx, edx
call fcn.004062bc
test edi, edi
je 0x4d6a72
mov eax, edi
xor edx, edx
call fcn.004062bc
cmp dword [ebp + 0x14], 0
je 0x4d6a82
mov eax, dword [ebp + 0x14]
xor edx, edx
call fcn.004062bc
cmp dword [ebp + 0x10], 0
je 0x4d6a92
mov eax, dword [ebp + 0x10]
xor edx, edx
call fcn.004062bc
cmp dword [ebp + 0xc], 0
je 0x4d6aa2
mov eax, dword [ebp + 0xc]
xor edx, edx
call fcn.004062bc
cmp dword [ebp + 8], 0
je 0x4d6ab0
mov eax, dword [ebp + 8]
mov word [eax], 0
mov byte [ebp - 5], 0
lea edx, [ebp - 0x1c88]
mov eax, dword [ebp - 4]
call fcn.0046e7a0
cmp dword [ebp - 0x1c88], 0
je 0x4d6c49
lea eax, [ebp - 0x44]
xor ecx, ecx
mov edx, 0x3c
call fcn.0040396c
lea eax, [ebp - 0x84]
xor ecx, ecx
mov edx, 0x40
call fcn.0040396c
lea eax, [ebp - 0x284]
xor ecx, ecx
mov edx, 0x200
call fcn.0040396c
lea eax, [ebp - 0x384]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.0040396c
lea eax, [ebp - 0x484]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.0040396c
lea eax, [ebp - 0x1484]
xor ecx, ecx
mov edx, 0x1000
call fcn.0040396c
lea eax, [ebp - 0x1c84]
xor ecx, ecx
mov edx, 0x800
call fcn.0040396c
mov dword [ebp - 0x44], 0x3c
lea eax, [ebp - 0x84]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x40
lea eax, [ebp - 0x284]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0x200
lea eax, [ebp - 0x384]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], pe_nt_image_headers32
lea eax, [ebp - 0x484]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1484]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x1000
lea eax, [ebp - 0x1c84]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0x800
lea eax, [ebp - 0x44]
push eax
push 0
mov eax, dword [ebp - 4]
call fcn.00406348
push eax
call sub.kernel32.dll_lstrlenW_1
push eax
mov eax, dword [ebp - 4]
call fcn.00406348
push eax
call sub.wininet.dll_InternetCrackUrlW
test eax, eax
je 0x4d6c49
test ebx, ebx
je 0x4d6be6
mov eax, ebx
mov edx, dword [ebp - 0x40]
call fcn.00406468
test esi, esi
je 0x4d6bf4
mov eax, esi
mov edx, dword [ebp - 0x34]
call fcn.00406468
test edi, edi
je 0x4d6c02
mov eax, edi
mov edx, dword [ebp - 0x18]
call fcn.00406468
cmp dword [ebp + 0x14], 0
je 0x4d6c13
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00406468
cmp dword [ebp + 0x10], 0
je 0x4d6c24
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x28]
call fcn.00406468
cmp dword [ebp + 0xc], 0
je 0x4d6c35
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
call fcn.00406468
cmp dword [ebp + 8], 0
je 0x4d6c45
mov eax, dword [ebp + 8]
movzx edx, word [ebp - 0x2c]
mov word [eax], dx
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d6c69
lea eax, [ebp - 0x1c88]
call fcn.004062ac
ret