Function at 0x4e4240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x6479ab
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20b4
call fcn.00614970
mov eax, dword [0x7496c8]
xor eax, esp
mov dword [esp + 0x20b0], eax
push ebx
push esi
push edi
mov eax, dword [0x7496c8]
xor eax, esp
push eax
lea eax, [esp + 0x20c8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [0x74f470], esi
mov dword [esp + 0x24], ebx
cmp dword [ebx + 0x40], esi
je 0x4e92c1
mov eax, dword [ebx + 0x18]
push 0x66fba8
push eax
call fcn.00615f0d
add esp, 8
mov dword [esp + 0x20], eax
cmp eax, esi
je 0x4e92c1
push eax
lea eax, [esp + 0xc0]
push 0x2000
push eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x54], esi
mov dword [esp + 0x34], esi
call fcn.00616a75
add esp, 0xc
test eax, eax
je 0x4e92c1
cmp byte [esp + 0xbc], 0xef
mov edi, 0xfde9
jne 0x4e4315
cmp byte [esp + 0xbd], 0xbb
jne 0x4e4315
cmp byte [esp + 0xbe], 0xbf
jne 0x4e4315
mov esi, 1
mov dword [ebx + 0x38], edi
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, edi
jne 0x4e43bf
xor eax, eax
cmp esi, eax
je 0x4e433b
mov dword [ebx + 0x34], edi
mov dword [0x74f470], 1
jmp 0x4e4437
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e4386
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e4437
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x34], eax
mov eax, 1
mov dword [0x74f470], eax
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], edi
jmp 0x4e4437
xor eax, eax
cmp esi, eax
je 0x4e43ca
mov dword [ebx + 0x34], edi
jmp 0x4e4437
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e4415
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e4437
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xc0]
push 0x2000
push edx
call fcn.00616a75
add esp, 0xc
test eax, eax
je 0x4e928f
or esi, 0xffffffff
lea ebx, [esi + 3]
nop
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
call fcn.00402500
mov dword [esp + 0x20d0], 1
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc0]
push 0x66b41c
push ecx
call fcn.00614c2e
add esp, 0xc
cmp eax, 1
je 0x4e4520
cmp byte [esp + 0xbc], 0x6d
jne 0x4e44e0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc1]
push 0x66b41c
push eax
call fcn.00614c2e
add esp, 0xc
cmp eax, 1
je 0x4e44db
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.0040e050
jmp 0x4e926d
mov edi, 1
cmp byte [esp + 0xbc], 0x74
jne 0x4e454b
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc1]
push 0x66b41c
push edx
call fcn.00614c2e
add esp, 0xc
cmp eax, 1
je 0x4e451e
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.0040e050
jmp 0x4e926d
mov edi, ebx
lea eax, [esp + 0xbc]
push 0x3d
push eax
call fcn.00614820
add esp, 8
test eax, eax
jne 0x4e4564
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.0040e050
jmp 0x4e926d
test edi, edi
jne 0x4e4520
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.0040e050
jmp 0x4e926d
inc eax
mov ecx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4e4570
sub ecx, esi
cmp ecx, ebx
jle 0x4e4592
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4e4587
mov byte [ecx + eax], dl
dec ecx
cmp byte [ecx + eax], 0xd
jne 0x4e4592
mov byte [ecx + eax], 0
push eax
lea ecx, [esp + 0x14]
call fcn.004030c0
mov byte [esp + 0x20d0], bl
push 0x670fec
push 0x691a60
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x670fe8
push 0x691a5c
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x691a58
push 0x691a54
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x691a50
push 0x691a4c
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x66ee6c
push 0x691a48
lea ecx, [esp + 0x18]
call fcn.00402c10
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x24]
je 0x4e461e
mov edx, dword [esi + 0x34]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.004df430
add esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x4e20
jg 0x4e4727
je 0x4e4713
cmp eax, 0x4cc
jg 0x4e46b7
cmp eax, 0x4cb
jge case.0x4e46b0.1076
cmp eax, 0x424
jg 0x4e469a
je case.0x4e46b0.1076
lea ecx, [eax - 0x86]
cmp ecx, 0xc9
ja case.0x4e46b0.1077
movzx ecx, byte [ecx + 0x4e92fc]
jmp dword [ecx*4 + 0x4e92e8]
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x74ffd0
call fcn.00545860
jmp case.0x4e466b.334
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x7503f0
call fcn.00545860
jmp case.0x4e466b.334
lea ecx, [eax - 0x434]
cmp ecx, 0x31
ja case.0x4e46b0.1077
movzx ecx, byte [ecx + 0x4e93d0]
jmp dword [ecx*4 + 0x4e93c8]
cmp eax, 0x54f
jg 0x4e46ee
cmp eax, 0x54d
jge case.0x4e46b0.1076
mov ecx, eax
sub ecx, 0x4d3
je case.0x4e46b0.1076
sub ecx, 0x24
je case.0x4e46b0.1076
sub ecx, 0x2e
je case.0x4e46b0.1076
jmp case.0x4e46b0.1077
mov ecx, eax
sub ecx, 0x698
je case.0x4e46b0.1076
sub ecx, 0x62
je case.0x4e46b0.1076
sub ecx, 0x46
je case.0x4e46b0.1076
jmp case.0x4e46b0.1077
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x74f76c
call fcn.00545860
jmp case.0x4e466b.334
cmp eax, 0x82e6
jg 0x4e8cab
je case.0x4e466b.334
lea ecx, [eax - 0x4e21]
cmp ecx, 0x4c6
ja case.0x4e46b0.1077
jmp dword [ecx*4 + 0x4e9404]
cmp eax, 0x84f1
jl case.0x4e46b0.1077
cmp eax, 0x84f3
jg case.0x4e46b0.1077
cmp eax, 0x437
jne 0x4e8cd2
mov ecx, 0x7500e0
jmp 0x4e91f3
cmp eax, 0x434
jne 0x4e8cf0
cmp edi, ebx
jne case.0x4e46b0.1077
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x7505a0
jmp 0x4e91f8
cmp eax, 0x14f
jne 0x4e8d06
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x750230
jmp 0x4e91f8
cmp eax, 0x462
jne 0x4e8d17
mov ecx, 0x75050c
jmp 0x4e91f3
cmp eax, 0x6fa
jne 0x4e8d2d
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x750508
jmp 0x4e91f8
cmp eax, 0x84f2
jne 0x4e8d43
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x750254
jmp 0x4e91f8
cmp eax, 0x84f3
jne 0x4e8d54
mov ecx, 0x750258
jmp 0x4e91f3
cmp eax, 0x54d
jne 0x4e8da9
lea ecx, [esp + 0x7c]
call fcn.004de670
mov byte [esp + 0x20d0], 3
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], 0x73a
call fcn.00545860
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x7c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x740
jne 0x4e8df8
lea ecx, [esp + 0x3c]
call fcn.004de670
mov byte [esp + 0x20d0], 4
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x744
call fcn.00545860
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x3c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x54e
jne 0x4e8e56
lea ecx, [esp + 0x8c]
call fcn.004de670
mov byte [esp + 0x20d0], 5
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x90]
mov dword [esp + 0x94], 0x73b
call fcn.00545860
lea eax, [esp + 0x8c]
push eax
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x8c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x54f
jne 0x4e8ea5
lea ecx, [esp + 0x4c]
call fcn.004de670
mov byte [esp + 0x20d0], 6
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], 0x73c
call fcn.00545860
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x4c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x4d3
jne 0x4e8ef4
lea ecx, [esp + 0x2c]
call fcn.004de670
mov byte [esp + 0x20d0], 7
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x735
call fcn.00545860
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x2c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x4cb
jne 0x4e8f43
lea ecx, [esp + 0x5c]
call fcn.004de670
mov byte [esp + 0x20d0], 8
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], 0x736
call fcn.00545860
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x5c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x4f7
jne 0x4e8fa1
lea ecx, [esp + 0xb4]
call fcn.004de670
mov byte [esp + 0x20d0], 9
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xbc], 0x737
call fcn.00545860
lea edx, [esp + 0xb4]
push edx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0xb4]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x4cc
jne 0x4e8ff0
lea ecx, [esp + 0x6c]
call fcn.004de670
mov byte [esp + 0x20d0], 0xa
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x74], 0x738
call fcn.00545860
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x6c]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x424
jne 0x4e903f
lea ecx, [esp + 0x34]
call fcn.004de670
mov byte [esp + 0x20d0], 0xb
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x739
call fcn.00545860
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x34]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x463
jne 0x4e908e
lea ecx, [esp + 0x44]
call fcn.004de670
mov byte [esp + 0x20d0], 0xc
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0x725
call fcn.00545860
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x44]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x464
jne 0x4e90dd
lea ecx, [esp + 0x54]
call fcn.004de670
mov byte [esp + 0x20d0], 0xd
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x5c], 0x726
call fcn.00545860
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x54]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x525
jne 0x4e912c
lea ecx, [esp + 0x64]
call fcn.004de670
mov byte [esp + 0x20d0], 0xe
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x6c], 0x1ee
call fcn.00545860
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x64]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x698
jne 0x4e917b
lea ecx, [esp + 0x74]
call fcn.004de670
mov byte [esp + 0x20d0], 0xf
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x78]
mov dword [esp + 0x7c], 0x731
call fcn.00545860
lea edx, [esp + 0x74]
push edx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x74]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x465
jne 0x4e91d6
lea ecx, [esp + 0x84]
call fcn.004de670
mov byte [esp + 0x20d0], 0x10
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], 0x727
call fcn.00545860
lea ecx, [esp + 0x84]
push ecx
mov ecx, esi
call fcn.004e04c0
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x84]
call fcn.0040e050
jmp 0x4e91fd
cmp eax, 0x84f1
jne case.0x4e46b0.1077
cmp edi, 1
jne 0x4e91ee
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75024c
jmp 0x4e91f8
mov ecx, 0x750250
mov eax, dword [esp + 0x10]
push eax
call fcn.00545860
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], eax
call fcn.00545860
mov eax, edi
sub eax, 1
je 0x4e9239
sub eax, 1
mov ecx, esi
je 0x4e922d
lea edx, [esp + 0x18]
push edx
call fcn.004e04c0
jmp case.0x4e466b.334
lea eax, [esp + 0x18]
push eax
call fcn.004e05c0
jmp case.0x4e466b.334
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004e03c0
mov byte [esp + 0x20d0], 1
lea ecx, [esp + 0x10]
call fcn.00402570
mov dword [esp + 0x20d0], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.0040e050
or esi, 0xffffffff
mov edx, dword [esp + 0x20]
push edx
lea eax, [esp + 0xc0]
push 0x2000
push eax
call fcn.00616a75
add esp, 0xc
test eax, eax
jne 0x4e4460
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00615be7
mov edx, dword [0x74fd9c]
mov eax, dword [0x74fd98]
push edx
push eax
push str.mailto:_subject_sbody_s__20https:__www.internetdownloadmanager.com
push 0x74fd94
call fcn.00402f80
mov ecx, dword [esp + 0x38]
add esp, 0x14
call fcn.004dda50
mov ecx, dword [esp + 0x20c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20b0]
xor ecx, esp
call fcn.00613241
mov esp, ebp
pop ebp
ret