Function at 0x4dcaa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x62c920
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20ac
call fcn.005f9ca0
mov eax, dword [0x70a308]
xor eax, esp
mov dword [esp + 0x20a8], eax
push ebx
push esi
push edi
mov eax, dword [0x70a308]
xor eax, esp
push eax
lea eax, [esp + 0x20c0]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [0x70ffd0], esi
mov dword [esp + 0x24], ebx
cmp dword [ebx + 0x40], esi
je 0x4e197d
mov eax, dword [ebx + 0x18]
push 0x653ab8
push eax
call fcn.005fb2bd
add esp, 8
mov dword [esp + 0x20], eax
cmp eax, esi
je 0x4e197d
push eax
lea eax, [esp + 0xb8]
push 0x2000
push eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x54], esi
mov dword [esp + 0x34], esi
call fcn.005fbce7
add esp, 0xc
test eax, eax
je 0x4e197d
cmp byte [esp + 0xb4], 0xef
mov edi, 0xfde9
jne 0x4dcb75
cmp byte [esp + 0xb5], 0xbb
jne 0x4dcb75
cmp byte [esp + 0xb6], 0xbf
jne 0x4dcb75
mov esi, 1
mov dword [ebx + 0x38], edi
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, edi
jne 0x4dcc1f
xor eax, eax
cmp esi, eax
je 0x4dcb9b
mov dword [ebx + 0x34], edi
mov dword [0x70ffd0], 1
jmp 0x4dcc97
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4dcbe6
add eax, ecx
push 0x1000
lea edx, [esp + 0x90]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4dcc97
mov eax, dword [esp + 0x90]
mov dword [ebx + 0x34], eax
mov eax, 1
mov dword [0x70ffd0], eax
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], edi
jmp 0x4dcc97
xor eax, eax
cmp esi, eax
je 0x4dcc2a
mov dword [ebx + 0x34], edi
jmp 0x4dcc97
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4dcc75
add eax, ecx
push 0x1000
lea edx, [esp + 0x90]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4dcc97
mov eax, dword [esp + 0x90]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xb8]
push 0x2000
push edx
call fcn.005fbce7
add esp, 0xc
test eax, eax
je 0x4e194a
or esi, 0xffffffff
lea ebx, [esi + 3]
nop
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
call fcn.004024e0
mov dword [esp + 0x20c8], 1
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xb8]
push 0x64f36c
push ecx
call fcn.005f9f5e
add esp, 0xc
cmp eax, 1
je 0x4dcd80
cmp byte [esp + 0xb4], 0x6d
jne 0x4dcd40
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xb9]
push 0x64f36c
push eax
call fcn.005f9f5e
add esp, 0xc
cmp eax, 1
je 0x4dcd3b
mov dword [esp + 0x20c8], esi
lea ecx, [esp + 0x18]
call fcn.0040df50
jmp 0x4e1928
mov edi, 1
cmp byte [esp + 0xb4], 0x74
jne 0x4dcdab
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xb9]
push 0x64f36c
push edx
call fcn.005f9f5e
add esp, 0xc
cmp eax, 1
je 0x4dcd7e
mov dword [esp + 0x20c8], esi
lea ecx, [esp + 0x18]
call fcn.0040df50
jmp 0x4e1928
mov edi, ebx
lea eax, [esp + 0xb4]
push 0x3d
push eax
call fcn.005f9b50
add esp, 8
test eax, eax
jne 0x4dcdc4
mov dword [esp + 0x20c8], esi
lea ecx, [esp + 0x18]
call fcn.0040df50
jmp 0x4e1928
test edi, edi
jne 0x4dcd80
mov dword [esp + 0x20c8], esi
lea ecx, [esp + 0x18]
call fcn.0040df50
jmp 0x4e1928
inc eax
mov ecx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4dcdd0
sub ecx, esi
cmp ecx, ebx
jle 0x4dcdf2
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4dcde7
mov byte [ecx + eax], dl
dec ecx
cmp byte [ecx + eax], 0xd
jne 0x4dcdf2
mov byte [ecx + eax], 0
push eax
lea ecx, [esp + 0x14]
call fcn.004030e0
mov byte [esp + 0x20c8], bl
push 0x654eac
push 0x675118
lea ecx, [esp + 0x18]
call fcn.00402bf0
push 0x654ea8
push 0x675114
lea ecx, [esp + 0x18]
call fcn.00402bf0
push 0x675110
push 0x67510c
lea ecx, [esp + 0x18]
call fcn.00402bf0
push 0x675108
push 0x675104
lea ecx, [esp + 0x18]
call fcn.00402bf0
push 0x652d88
push 0x675100
lea ecx, [esp + 0x18]
call fcn.00402bf0
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x24]
je 0x4dce7e
mov edx, dword [esi + 0x34]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.004d7dd0
add esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x4e20
jg 0x4dcf8b
je 0x4dcf77
cmp eax, 0x4cc
jg 0x4dcf24
cmp eax, 0x4cb
jge case.0x4dcecf.334
cmp eax, 0x424
jg 0x4dcefe
je case.0x4dcecf.334
lea ecx, [eax - 0x86]
cmp ecx, 0xc9
ja case.0x4dcecf.135
movzx ecx, byte [ecx + 0x4e19b4]
jmp dword [ecx*4 + 0x4e19a4]
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x710ae8
call fcn.00402fc0
jmp 0x4e1900
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x710f08
call fcn.00402fc0
jmp 0x4e1900
cmp eax, 0x437
je 0x4e13e5
cmp eax, 0x461
jle case.0x4dcecf.135
cmp eax, 0x465
jle case.0x4dcecf.334
jmp case.0x4dcecf.135
cmp eax, 0x54f
jg 0x4dcf5b
cmp eax, 0x54d
jge case.0x4dcecf.334
mov ecx, eax
sub ecx, 0x4d3
je case.0x4dcecf.334
sub ecx, 0x24
je case.0x4dcecf.334
sub ecx, 0x2e
je case.0x4dcecf.334
jmp case.0x4dcecf.135
mov ecx, eax
sub ecx, 0x698
je case.0x4dcecf.334
sub ecx, 0x62
je case.0x4dcecf.334
jmp case.0x4dcecf.135
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x710284
call fcn.00402fc0
jmp 0x4e1900
cmp eax, 0x82e6
jg 0x4e13c8
je 0x4e1900
lea ecx, [eax - 0x4e21]
cmp ecx, 0x4b6
ja case.0x4dcecf.135
jmp dword [ecx*4 + 0x4e1a80]
cmp eax, 0x84f1
jl case.0x4dcecf.135
cmp eax, 0x84f3
jg case.0x4dcecf.135
cmp eax, 0x437
jne 0x4e13f4
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x710bf8
jmp 0x4e18b1
cmp eax, 0x14e
jne 0x4e1405
mov ecx, 0x710d44
jmp 0x4e18ac
cmp eax, 0x14f
jne 0x4e141b
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x710d48
jmp 0x4e18b1
cmp eax, 0x462
jne 0x4e1431
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x711024
jmp 0x4e18b1
cmp eax, 0x6fa
jne 0x4e1442
mov ecx, 0x711020
jmp 0x4e18ac
cmp eax, 0x84f2
jne 0x4e1458
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x710d6c
jmp 0x4e18b1
cmp eax, 0x84f3
jne 0x4e146e
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x710d70
jmp 0x4e18b1
cmp eax, 0x54d
jne 0x4e14bd
lea ecx, [esp + 0x54]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 3
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x58]
mov dword [esp + 0x5c], 0x73a
call fcn.00402fc0
lea eax, [esp + 0x54]
push eax
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x54]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x54e
jne 0x4e151b
lea ecx, [esp + 0x84]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 4
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], 0x73b
call fcn.00402fc0
lea edx, [esp + 0x84]
push edx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x84]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x54f
jne 0x4e156a
lea ecx, [esp + 0x44]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 5
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0x73c
call fcn.00402fc0
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x44]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x4d3
jne 0x4e15b9
lea ecx, [esp + 0x74]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 6
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x78]
mov dword [esp + 0x7c], 0x735
call fcn.00402fc0
lea eax, [esp + 0x74]
push eax
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x74]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x4cb
jne 0x4e1608
lea ecx, [esp + 0x2c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 7
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x736
call fcn.00402fc0
lea edx, [esp + 0x2c]
push edx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x2c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x4f7
jne 0x4e1666
lea ecx, [esp + 0xac]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 8
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0xb0]
mov dword [esp + 0xb4], 0x737
call fcn.00402fc0
lea ecx, [esp + 0xac]
push ecx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0xac]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x4cc
jne 0x4e16b5
lea ecx, [esp + 0x64]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 9
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x6c], 0x738
call fcn.00402fc0
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x64]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x424
jne 0x4e1704
lea ecx, [esp + 0x34]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xa
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x739
call fcn.00402fc0
lea edx, [esp + 0x34]
push edx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x34]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x463
jne 0x4e1753
lea ecx, [esp + 0x3c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xb
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x725
call fcn.00402fc0
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x3c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x464
jne 0x4e17a2
lea ecx, [esp + 0x4c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xc
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], 0x726
call fcn.00402fc0
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x4c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x525
jne 0x4e17f1
lea ecx, [esp + 0x5c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xd
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], 0x1ee
call fcn.00402fc0
lea edx, [esp + 0x5c]
push edx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x5c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x698
jne 0x4e183d
lea ecx, [esp + 0x6c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xe
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x74], 0x731
call fcn.00402fc0
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x6c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x465
jne 0x4e188f
lea ecx, [esp + 0x7c]
call fcn.0053b4c0
mov byte [esp + 0x20c8], 0xf
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], 0x727
call fcn.00402fc0
lea eax, [esp + 0x7c]
push eax
mov ecx, esi
call fcn.004d8e60
mov byte [esp + 0x20c8], bl
lea ecx, [esp + 0x7c]
call fcn.0040df50
jmp 0x4e18b6
cmp eax, 0x84f1
jne case.0x4dcecf.135
cmp edi, 1
jne 0x4e18a7
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x710d64
jmp 0x4e18b1
mov ecx, 0x710d68
mov edx, dword [esp + 0x10]
push edx
call fcn.00402fc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402fc0
mov eax, edi
sub eax, 1
je 0x4e18f4
sub eax, 1
je 0x4e18e6
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004d8e60
jmp 0x4e1900
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.004d8f60
jmp 0x4e1900
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.004d8d60
mov byte [esp + 0x20c8], 1
lea ecx, [esp + 0x10]
call fcn.00402550
mov dword [esp + 0x20c8], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.0040df50
or esi, 0xffffffff
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xb8]
push 0x2000
push edx
call fcn.005fbce7
add esp, 0xc
test eax, eax
jne 0x4dccc0
mov eax, dword [esp + 0x20]
push eax
call fcn.005faf97
mov ecx, dword [0x7108b4]
mov edx, dword [0x7108b0]
push ecx
push edx
push str.mailto:_subject_sbody_s__20https:__www.internetdownloadmanager.com
push 0x7108ac
call fcn.00402f60
mov ecx, dword [esp + 0x38]
add esp, 0x14
call fcn.004d63d0
mov ecx, dword [esp + 0x20c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20a8]
xor ecx, esp
call fcn.005f85e7
mov esp, ebp
pop ebp
ret