Function at 0x4ebb90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x651f5b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20b4
call fcn.0061ea30
mov eax, dword [0x755898]
xor eax, esp
mov dword [esp + 0x20b0], eax
push ebx
push esi
push edi
mov eax, dword [0x755898]
xor eax, esp
push eax
lea eax, [esp + 0x20c8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [0x75b648], esi
mov dword [esp + 0x24], ebx
cmp dword [ebx + 0x40], esi
je 0x4f0bfd
mov eax, dword [ebx + 0x18]
push 0x67ac18
push eax
call fcn.0061ffcd
add esp, 8
mov dword [esp + 0x20], eax
cmp eax, esi
je 0x4f0bfd
push eax
lea eax, [esp + 0xc0]
push 0x2000
push eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x54], esi
mov dword [esp + 0x34], esi
call fcn.00620b35
add esp, 0xc
test eax, eax
je 0x4f0bfd
cmp byte [esp + 0xbc], 0xef
mov edi, 0xfde9
jne 0x4ebc65
cmp byte [esp + 0xbd], 0xbb
jne 0x4ebc65
cmp byte [esp + 0xbe], 0xbf
jne 0x4ebc65
mov esi, 1
mov dword [ebx + 0x38], edi
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, edi
jne 0x4ebd0f
xor eax, eax
cmp esi, eax
je 0x4ebc8b
mov dword [ebx + 0x34], edi
mov dword [0x75b648], 1
jmp 0x4ebd87
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4ebcd6
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4ebd87
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x34], eax
mov eax, 1
mov dword [0x75b648], eax
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], edi
jmp 0x4ebd87
xor eax, eax
cmp esi, eax
je 0x4ebd1a
mov dword [ebx + 0x34], edi
jmp 0x4ebd87
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4ebd65
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4ebd87
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xc0]
push 0x2000
push edx
call fcn.00620b35
add esp, 0xc
test eax, eax
je 0x4f0bcb
or esi, 0xffffffff
lea ebx, [esi + 3]
nop
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
call fcn.00402500
mov dword [esp + 0x20d0], 1
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc0]
push 0x676424
push ecx
call fcn.0061ecee
add esp, 0xc
cmp eax, 1
je 0x4ebe70
cmp byte [esp + 0xbc], 0x6d
jne 0x4ebe30
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc1]
push 0x676424
push eax
call fcn.0061ecee
add esp, 0xc
cmp eax, 1
je 0x4ebe2b
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004e5fb0
jmp 0x4f0ba9
mov edi, 1
cmp byte [esp + 0xbc], 0x74
jne 0x4ebe9b
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc1]
push 0x676424
push edx
call fcn.0061ecee
add esp, 0xc
cmp eax, 1
je 0x4ebe6e
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004e5fb0
jmp 0x4f0ba9
mov edi, ebx
lea eax, [esp + 0xbc]
push 0x3d
push eax
call fcn.0061e8e0
add esp, 8
test eax, eax
jne 0x4ebeb4
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004e5fb0
jmp 0x4f0ba9
test edi, edi
jne 0x4ebe70
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004e5fb0
jmp 0x4f0ba9
inc eax
mov ecx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4ebec0
sub ecx, esi
cmp ecx, ebx
jle 0x4ebee2
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4ebed7
mov byte [ecx + eax], dl
dec ecx
cmp byte [ecx + eax], 0xd
jne 0x4ebee2
mov byte [ecx + eax], 0
push eax
lea ecx, [esp + 0x14]
call fcn.004030b0
mov byte [esp + 0x20d0], bl
push 0x67c064
push 0x69cba0
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x67c060
push 0x69cb9c
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x69cb98
push 0x69cb94
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x69cb90
push 0x69cb8c
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x679ed8
push 0x69cb88
lea ecx, [esp + 0x18]
call fcn.00402c10
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x24]
je 0x4ebf6e
mov edx, dword [esi + 0x34]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.004e6d60
add esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x4e20
jg 0x4ec077
je 0x4ec063
cmp eax, 0x4cc
jg 0x4ec007
cmp eax, 0x4cb
jge case.0x4ec000.1076
cmp eax, 0x424
jg 0x4ebfea
je case.0x4ec000.1076
lea ecx, [eax - 0x86]
cmp ecx, 0xc9
ja case.0x4ec000.1077
movzx ecx, byte [ecx + 0x4f0c38]
jmp dword [ecx*4 + 0x4f0c24]
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75c1a8
call fcn.0054e080
jmp case.0x4ebfbb.334
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x75c5c8
call fcn.0054e080
jmp case.0x4ebfbb.334
lea ecx, [eax - 0x434]
cmp ecx, 0x31
ja case.0x4ec000.1077
movzx ecx, byte [ecx + 0x4f0d0c]
jmp dword [ecx*4 + 0x4f0d04]
cmp eax, 0x54f
jg 0x4ec03e
cmp eax, 0x54d
jge case.0x4ec000.1076
mov ecx, eax
sub ecx, 0x4d3
je case.0x4ec000.1076
sub ecx, 0x24
je case.0x4ec000.1076
sub ecx, 0x2e
je case.0x4ec000.1076
jmp case.0x4ec000.1077
mov ecx, eax
sub ecx, 0x698
je case.0x4ec000.1076
sub ecx, 0x62
je case.0x4ec000.1076
sub ecx, 0x46
je case.0x4ec000.1076
jmp case.0x4ec000.1077
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75b944
call fcn.0054e080
jmp case.0x4ebfbb.334
cmp eax, 0x82e6
jg 0x4f05e7
je case.0x4ebfbb.334
lea ecx, [eax - 0x4e21]
cmp ecx, 0x4c6
ja case.0x4ec000.1077
jmp dword [ecx*4 + 0x4f0d40]
cmp eax, 0x84f1
jl case.0x4ec000.1077
cmp eax, 0x84f3
jg case.0x4ec000.1077
cmp eax, 0x437
jne 0x4f060e
mov ecx, 0x75c2b8
jmp 0x4f0b2f
cmp eax, 0x434
jne 0x4f062c
cmp edi, ebx
jne case.0x4ec000.1077
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x75c778
jmp 0x4f0b34
cmp eax, 0x14f
jne 0x4f0642
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75c408
jmp 0x4f0b34
cmp eax, 0x462
jne 0x4f0653
mov ecx, 0x75c6e4
jmp 0x4f0b2f
cmp eax, 0x6fa
jne 0x4f0669
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x75c6e0
jmp 0x4f0b34
cmp eax, 0x84f2
jne 0x4f067f
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75c42c
jmp 0x4f0b34
cmp eax, 0x84f3
jne 0x4f0690
mov ecx, 0x75c430
jmp 0x4f0b2f
cmp eax, 0x54d
jne 0x4f06e5
lea ecx, [esp + 0x7c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 3
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], 0x73a
call fcn.0054e080
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x7c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x740
jne 0x4f0734
lea ecx, [esp + 0x3c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 4
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x744
call fcn.0054e080
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x3c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x54e
jne 0x4f0792
lea ecx, [esp + 0x8c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 5
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x90]
mov dword [esp + 0x94], 0x73b
call fcn.0054e080
lea eax, [esp + 0x8c]
push eax
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x8c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x54f
jne 0x4f07e1
lea ecx, [esp + 0x4c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 6
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], 0x73c
call fcn.0054e080
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x4c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x4d3
jne 0x4f0830
lea ecx, [esp + 0x2c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 7
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x735
call fcn.0054e080
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x2c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x4cb
jne 0x4f087f
lea ecx, [esp + 0x5c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 8
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], 0x736
call fcn.0054e080
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x5c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x4f7
jne 0x4f08dd
lea ecx, [esp + 0xb4]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 9
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xbc], 0x737
call fcn.0054e080
lea edx, [esp + 0xb4]
push edx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0xb4]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x4cc
jne 0x4f092c
lea ecx, [esp + 0x6c]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xa
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x74], 0x738
call fcn.0054e080
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x6c]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x424
jne 0x4f097b
lea ecx, [esp + 0x34]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xb
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x739
call fcn.0054e080
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x34]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x463
jne 0x4f09ca
lea ecx, [esp + 0x44]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xc
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0x725
call fcn.0054e080
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x44]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x464
jne 0x4f0a19
lea ecx, [esp + 0x54]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xd
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x5c], 0x726
call fcn.0054e080
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x54]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x525
jne 0x4f0a68
lea ecx, [esp + 0x64]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xe
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x6c], 0x1ee
call fcn.0054e080
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x64]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x698
jne 0x4f0ab7
lea ecx, [esp + 0x74]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0xf
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x78]
mov dword [esp + 0x7c], 0x731
call fcn.0054e080
lea edx, [esp + 0x74]
push edx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x74]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x465
jne 0x4f0b12
lea ecx, [esp + 0x84]
call fcn.0054dcf0
mov byte [esp + 0x20d0], 0x10
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], 0x727
call fcn.0054e080
lea ecx, [esp + 0x84]
push ecx
mov ecx, esi
call fcn.004e7df0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x84]
call fcn.004e5fb0
jmp 0x4f0b39
cmp eax, 0x84f1
jne case.0x4ec000.1077
cmp edi, 1
jne 0x4f0b2a
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75c424
jmp 0x4f0b34
mov ecx, 0x75c428
mov eax, dword [esp + 0x10]
push eax
call fcn.0054e080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], eax
call fcn.0054e080
mov eax, edi
sub eax, 1
je 0x4f0b75
sub eax, 1
mov ecx, esi
je 0x4f0b69
lea edx, [esp + 0x18]
push edx
call fcn.004e7df0
jmp case.0x4ebfbb.334
lea eax, [esp + 0x18]
push eax
call fcn.004e7ef0
jmp case.0x4ebfbb.334
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004e7cf0
mov byte [esp + 0x20d0], 1
lea ecx, [esp + 0x10]
call fcn.00402570
mov dword [esp + 0x20d0], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.004e5fb0
or esi, 0xffffffff
mov edx, dword [esp + 0x20]
push edx
lea eax, [esp + 0xc0]
push 0x2000
push eax
call fcn.00620b35
add esp, 0xc
test eax, eax
jne 0x4ebdb0
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0061fca7
mov edx, dword [0x75bf74]
mov eax, dword [0x75bf70]
push edx
push eax
push str.mailto:_subject_sbody_s__20https:__www.internetdownloadmanager.com
push 0x75bf6c
call fcn.00402f70
mov ecx, dword [esp + 0x38]
add esp, 0x14
call fcn.004e5390
mov ecx, dword [esp + 0x20c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20b0]
xor ecx, esp
call fcn.0061d2ff
mov esp, ebp
pop ebp
ret