Function at 0x4e6ff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x64cd3b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20b4
call fcn.006197b0
mov eax, dword [0x74f8a0]
xor eax, esp
mov dword [esp + 0x20b0], eax
push ebx
push esi
push edi
mov eax, dword [0x74f8a0]
xor eax, esp
push eax
lea eax, [esp + 0x20c8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [0x755650], esi
mov dword [esp + 0x24], ebx
cmp dword [ebx + 0x40], esi
je 0x4ec071
mov eax, dword [ebx + 0x18]
push 0x674bb8
push eax
call fcn.0061ad4d
add esp, 8
mov dword [esp + 0x20], eax
cmp eax, esi
je 0x4ec071
push eax
lea eax, [esp + 0xc0]
push 0x2000
push eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x54], esi
mov dword [esp + 0x34], esi
call fcn.0061b8b5
add esp, 0xc
test eax, eax
je 0x4ec071
cmp byte [esp + 0xbc], 0xef
mov edi, 0xfde9
jne 0x4e70c5
cmp byte [esp + 0xbd], 0xbb
jne 0x4e70c5
cmp byte [esp + 0xbe], 0xbf
jne 0x4e70c5
mov esi, 1
mov dword [ebx + 0x38], edi
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, edi
jne 0x4e716f
xor eax, eax
cmp esi, eax
je 0x4e70eb
mov dword [ebx + 0x34], edi
mov dword [0x755650], 1
jmp 0x4e71e7
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e7136
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e71e7
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x34], eax
mov eax, 1
mov dword [0x755650], eax
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], edi
jmp 0x4e71e7
xor eax, eax
cmp esi, eax
je 0x4e717a
mov dword [ebx + 0x34], edi
jmp 0x4e71e7
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e71c5
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e71e7
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xc0]
push 0x2000
push edx
call fcn.0061b8b5
add esp, 0xc
test eax, eax
je 0x4ec03f
or esi, 0xffffffff
lea ebx, [esi + 3]
nop
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
call fcn.00402500
mov dword [esp + 0x20d0], 1
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc0]
push 0x67042c
push ecx
call fcn.00619a6e
add esp, 0xc
cmp eax, 1
je 0x4e72d0
cmp byte [esp + 0xbc], 0x6d
jne 0x4e7290
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc1]
push 0x67042c
push eax
call fcn.00619a6e
add esp, 0xc
cmp eax, 1
je 0x4e728b
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004eee20
jmp 0x4ec01d
mov edi, 1
cmp byte [esp + 0xbc], 0x74
jne 0x4e72fb
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc1]
push 0x67042c
push edx
call fcn.00619a6e
add esp, 0xc
cmp eax, 1
je 0x4e72ce
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004eee20
jmp 0x4ec01d
mov edi, ebx
lea eax, [esp + 0xbc]
push 0x3d
push eax
call fcn.00619660
add esp, 8
test eax, eax
jne 0x4e7314
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004eee20
jmp 0x4ec01d
test edi, edi
jne 0x4e72d0
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004eee20
jmp 0x4ec01d
inc eax
mov ecx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4e7320
sub ecx, esi
cmp ecx, ebx
jle 0x4e7342
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4e7337
mov byte [ecx + eax], dl
dec ecx
cmp byte [ecx + eax], 0xd
jne 0x4e7342
mov byte [ecx + eax], 0
push eax
lea ecx, [esp + 0x14]
call fcn.004030b0
mov byte [esp + 0x20d0], bl
push 0x676004
push 0x696af0
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x676000
push 0x696aec
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x696ae8
push 0x696ae4
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x696ae0
push 0x696adc
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x673e7c
push 0x696ad8
lea ecx, [esp + 0x18]
call fcn.00402c10
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x24]
je 0x4e73ce
mov edx, dword [esi + 0x34]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.004e21b0
add esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x4e20
jg 0x4e74d7
je 0x4e74c3
cmp eax, 0x4cc
jg 0x4e7467
cmp eax, 0x4cb
jge case.0x4e7460.1076
cmp eax, 0x424
jg 0x4e744a
je case.0x4e7460.1076
lea ecx, [eax - 0x86]
cmp ecx, 0xc9
ja case.0x4e7460.1077
movzx ecx, byte [ecx + 0x4ec0ac]
jmp dword [ecx*4 + 0x4ec098]
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x7561b0
call fcn.005494d0
jmp case.0x4e741b.334
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x7565d0
call fcn.005494d0
jmp case.0x4e741b.334
lea ecx, [eax - 0x434]
cmp ecx, 0x31
ja case.0x4e7460.1077
movzx ecx, byte [ecx + 0x4ec180]
jmp dword [ecx*4 + 0x4ec178]
cmp eax, 0x54f
jg 0x4e749e
cmp eax, 0x54d
jge case.0x4e7460.1076
mov ecx, eax
sub ecx, 0x4d3
je case.0x4e7460.1076
sub ecx, 0x24
je case.0x4e7460.1076
sub ecx, 0x2e
je case.0x4e7460.1076
jmp case.0x4e7460.1077
mov ecx, eax
sub ecx, 0x698
je case.0x4e7460.1076
sub ecx, 0x62
je case.0x4e7460.1076
sub ecx, 0x46
je case.0x4e7460.1076
jmp case.0x4e7460.1077
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75594c
call fcn.005494d0
jmp case.0x4e741b.334
cmp eax, 0x82e6
jg 0x4eba5b
je case.0x4e741b.334
lea ecx, [eax - 0x4e21]
cmp ecx, 0x4c6
ja case.0x4e7460.1077
jmp dword [ecx*4 + 0x4ec1b4]
cmp eax, 0x84f1
jl case.0x4e7460.1077
cmp eax, 0x84f3
jg case.0x4e7460.1077
cmp eax, 0x437
jne 0x4eba82
mov ecx, 0x7562c0
jmp 0x4ebfa3
cmp eax, 0x434
jne 0x4ebaa0
cmp edi, ebx
jne case.0x4e7460.1077
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x756780
jmp 0x4ebfa8
cmp eax, 0x14f
jne 0x4ebab6
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x756410
jmp 0x4ebfa8
cmp eax, 0x462
jne 0x4ebac7
mov ecx, 0x7566ec
jmp 0x4ebfa3
cmp eax, 0x6fa
jne 0x4ebadd
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x7566e8
jmp 0x4ebfa8
cmp eax, 0x84f2
jne 0x4ebaf3
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x756434
jmp 0x4ebfa8
cmp eax, 0x84f3
jne 0x4ebb04
mov ecx, 0x756438
jmp 0x4ebfa3
cmp eax, 0x54d
jne 0x4ebb59
lea ecx, [esp + 0x7c]
call fcn.004e1400
mov byte [esp + 0x20d0], 3
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], 0x73a
call fcn.005494d0
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x7c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x740
jne 0x4ebba8
lea ecx, [esp + 0x3c]
call fcn.004e1400
mov byte [esp + 0x20d0], 4
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x744
call fcn.005494d0
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x3c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x54e
jne 0x4ebc06
lea ecx, [esp + 0x8c]
call fcn.004e1400
mov byte [esp + 0x20d0], 5
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x90]
mov dword [esp + 0x94], 0x73b
call fcn.005494d0
lea eax, [esp + 0x8c]
push eax
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x8c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x54f
jne 0x4ebc55
lea ecx, [esp + 0x4c]
call fcn.004e1400
mov byte [esp + 0x20d0], 6
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], 0x73c
call fcn.005494d0
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x4c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x4d3
jne 0x4ebca4
lea ecx, [esp + 0x2c]
call fcn.004e1400
mov byte [esp + 0x20d0], 7
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x735
call fcn.005494d0
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x2c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x4cb
jne 0x4ebcf3
lea ecx, [esp + 0x5c]
call fcn.004e1400
mov byte [esp + 0x20d0], 8
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], 0x736
call fcn.005494d0
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x5c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x4f7
jne 0x4ebd51
lea ecx, [esp + 0xb4]
call fcn.004e1400
mov byte [esp + 0x20d0], 9
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xbc], 0x737
call fcn.005494d0
lea edx, [esp + 0xb4]
push edx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0xb4]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x4cc
jne 0x4ebda0
lea ecx, [esp + 0x6c]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xa
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x74], 0x738
call fcn.005494d0
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x6c]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x424
jne 0x4ebdef
lea ecx, [esp + 0x34]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xb
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x739
call fcn.005494d0
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x34]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x463
jne 0x4ebe3e
lea ecx, [esp + 0x44]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xc
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0x725
call fcn.005494d0
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x44]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x464
jne 0x4ebe8d
lea ecx, [esp + 0x54]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xd
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x5c], 0x726
call fcn.005494d0
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x54]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x525
jne 0x4ebedc
lea ecx, [esp + 0x64]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xe
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x6c], 0x1ee
call fcn.005494d0
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x64]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x698
jne 0x4ebf2b
lea ecx, [esp + 0x74]
call fcn.004e1400
mov byte [esp + 0x20d0], 0xf
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x78]
mov dword [esp + 0x7c], 0x731
call fcn.005494d0
lea edx, [esp + 0x74]
push edx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x74]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x465
jne 0x4ebf86
lea ecx, [esp + 0x84]
call fcn.004e1400
mov byte [esp + 0x20d0], 0x10
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], 0x727
call fcn.005494d0
lea ecx, [esp + 0x84]
push ecx
mov ecx, esi
call fcn.004e3240
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x84]
call fcn.004eee20
jmp 0x4ebfad
cmp eax, 0x84f1
jne case.0x4e7460.1077
cmp edi, 1
jne 0x4ebf9e
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75642c
jmp 0x4ebfa8
mov ecx, 0x756430
mov eax, dword [esp + 0x10]
push eax
call fcn.005494d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], eax
call fcn.005494d0
mov eax, edi
sub eax, 1
je 0x4ebfe9
sub eax, 1
mov ecx, esi
je 0x4ebfdd
lea edx, [esp + 0x18]
push edx
call fcn.004e3240
jmp case.0x4e741b.334
lea eax, [esp + 0x18]
push eax
call fcn.004e3340
jmp case.0x4e741b.334
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004e3140
mov byte [esp + 0x20d0], 1
lea ecx, [esp + 0x10]
call fcn.00402570
mov dword [esp + 0x20d0], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.004eee20
or esi, 0xffffffff
mov edx, dword [esp + 0x20]
push edx
lea eax, [esp + 0xc0]
push 0x2000
push eax
call fcn.0061b8b5
add esp, 0xc
test eax, eax
jne 0x4e7210
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0061aa27
mov edx, dword [0x755f7c]
mov eax, dword [0x755f78]
push edx
push eax
push str.mailto:_subject_sbody_s__20https:__www.internetdownloadmanager.com
push 0x755f74
call fcn.00402f70
mov ecx, dword [esp + 0x38]
add esp, 0x14
call fcn.004e07e0
mov ecx, dword [esp + 0x20c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20b0]
xor ecx, esp
call fcn.0061807e
mov esp, ebp
pop ebp
ret