Function at 0x4e53b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x64a0eb
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20b4
call fcn.00616f00
mov eax, dword [0x74d890]
xor eax, esp
mov dword [esp + 0x20b0], eax
push ebx
push esi
push edi
mov eax, dword [0x74d890]
xor eax, esp
push eax
lea eax, [esp + 0x20c8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [0x753630], esi
mov dword [esp + 0x24], ebx
cmp dword [ebx + 0x40], esi
je 0x4ea431
mov eax, dword [ebx + 0x18]
push 0x672bb0
push eax
call fcn.0061849d
add esp, 8
mov dword [esp + 0x20], eax
cmp eax, esi
je 0x4ea431
push eax
lea eax, [esp + 0xc0]
push 0x2000
push eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x54], esi
mov dword [esp + 0x34], esi
call fcn.00619005
add esp, 0xc
test eax, eax
je 0x4ea431
cmp byte [esp + 0xbc], 0xef
mov edi, 0xfde9
jne 0x4e5485
cmp byte [esp + 0xbd], 0xbb
jne 0x4e5485
cmp byte [esp + 0xbe], 0xbf
jne 0x4e5485
mov esi, 1
mov dword [ebx + 0x38], edi
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, edi
jne 0x4e552f
xor eax, eax
cmp esi, eax
je 0x4e54ab
mov dword [ebx + 0x34], edi
mov dword [0x753630], 1
jmp 0x4e55a7
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e54f6
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e55a7
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x34], eax
mov eax, 1
mov dword [0x753630], eax
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], edi
jmp 0x4e55a7
xor eax, eax
cmp esi, eax
je 0x4e553a
mov dword [ebx + 0x34], edi
jmp 0x4e55a7
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
movzx eax, word [ebx + 0x3c]
mov ecx, 0x400
cmp ax, cx
movzx eax, ax
ja 0x4e5585
add eax, ecx
push 0x1000
lea edx, [esp + 0x98]
push edx
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
test eax, eax
je 0x4e55a7
mov eax, dword [esp + 0x98]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0xc0]
push 0x2000
push edx
call fcn.00619005
add esp, 0xc
test eax, eax
je 0x4ea3ff
or esi, 0xffffffff
lea ebx, [esi + 3]
nop
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edi
call fcn.00402500
mov dword [esp + 0x20d0], 1
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc0]
push 0x66e42c
push ecx
call fcn.006171be
add esp, 0xc
cmp eax, 1
je 0x4e5690
cmp byte [esp + 0xbc], 0x6d
jne 0x4e5650
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc1]
push 0x66e42c
push eax
call fcn.006171be
add esp, 0xc
cmp eax, 1
je 0x4e564b
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004f34f0
jmp 0x4ea3dd
mov edi, 1
cmp byte [esp + 0xbc], 0x74
jne 0x4e56bb
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc1]
push 0x66e42c
push edx
call fcn.006171be
add esp, 0xc
cmp eax, 1
je 0x4e568e
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004f34f0
jmp 0x4ea3dd
mov edi, ebx
lea eax, [esp + 0xbc]
push 0x3d
push eax
call fcn.00616db0
add esp, 8
test eax, eax
jne 0x4e56d4
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004f34f0
jmp 0x4ea3dd
test edi, edi
jne 0x4e5690
mov dword [esp + 0x20d0], esi
lea ecx, [esp + 0x18]
call fcn.004f34f0
jmp 0x4ea3dd
inc eax
mov ecx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4e56e0
sub ecx, esi
cmp ecx, ebx
jle 0x4e5702
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4e56f7
mov byte [ecx + eax], dl
dec ecx
cmp byte [ecx + eax], 0xd
jne 0x4e5702
mov byte [ecx + eax], 0
push eax
lea ecx, [esp + 0x14]
call fcn.004030b0
mov byte [esp + 0x20d0], bl
push 0x673ffc
push 0x694a88
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x673ff8
push 0x694a84
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x694a80
push 0x694a7c
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x694a78
push 0x694a74
lea ecx, [esp + 0x18]
call fcn.00402c10
push 0x671e74
push 0x694a70
lea ecx, [esp + 0x18]
call fcn.00402c10
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x24]
je 0x4e578e
mov edx, dword [esi + 0x34]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.004e05b0
add esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x4e20
jg 0x4e5897
je 0x4e5883
cmp eax, 0x4cc
jg 0x4e5827
cmp eax, 0x4cb
jge case.0x4e5820.1076
cmp eax, 0x424
jg 0x4e580a
je case.0x4e5820.1076
lea ecx, [eax - 0x86]
cmp ecx, 0xc9
ja case.0x4e5820.1077
movzx ecx, byte [ecx + 0x4ea46c]
jmp dword [ecx*4 + 0x4ea458]
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x754190
call fcn.00546c40
jmp case.0x4e57db.334
mov eax, dword [esp + 0x10]
push eax
mov ecx, 0x7545b0
call fcn.00546c40
jmp case.0x4e57db.334
lea ecx, [eax - 0x434]
cmp ecx, 0x31
ja case.0x4e5820.1077
movzx ecx, byte [ecx + 0x4ea540]
jmp dword [ecx*4 + 0x4ea538]
cmp eax, 0x54f
jg 0x4e585e
cmp eax, 0x54d
jge case.0x4e5820.1076
mov ecx, eax
sub ecx, 0x4d3
je case.0x4e5820.1076
sub ecx, 0x24
je case.0x4e5820.1076
sub ecx, 0x2e
je case.0x4e5820.1076
jmp case.0x4e5820.1077
mov ecx, eax
sub ecx, 0x698
je case.0x4e5820.1076
sub ecx, 0x62
je case.0x4e5820.1076
sub ecx, 0x46
je case.0x4e5820.1076
jmp case.0x4e5820.1077
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75392c
call fcn.00546c40
jmp case.0x4e57db.334
cmp eax, 0x82e6
jg 0x4e9e1b
je case.0x4e57db.334
lea ecx, [eax - 0x4e21]
cmp ecx, 0x4c6
ja case.0x4e5820.1077
jmp dword [ecx*4 + 0x4ea574]
cmp eax, 0x84f1
jl case.0x4e5820.1077
cmp eax, 0x84f3
jg case.0x4e5820.1077
cmp eax, 0x437
jne 0x4e9e42
mov ecx, 0x7542a0
jmp 0x4ea363
cmp eax, 0x434
jne 0x4e9e60
cmp edi, ebx
jne case.0x4e5820.1077
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x754760
jmp 0x4ea368
cmp eax, 0x14f
jne 0x4e9e76
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x7543f0
jmp 0x4ea368
cmp eax, 0x462
jne 0x4e9e87
mov ecx, 0x7546cc
jmp 0x4ea363
cmp eax, 0x6fa
jne 0x4e9e9d
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x7546c8
jmp 0x4ea368
cmp eax, 0x84f2
jne 0x4e9eb3
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x754414
jmp 0x4ea368
cmp eax, 0x84f3
jne 0x4e9ec4
mov ecx, 0x754418
jmp 0x4ea363
cmp eax, 0x54d
jne 0x4e9f19
lea ecx, [esp + 0x7c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 3
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], 0x73a
call fcn.00546c40
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x7c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x740
jne 0x4e9f68
lea ecx, [esp + 0x3c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 4
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x744
call fcn.00546c40
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x3c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x54e
jne 0x4e9fc6
lea ecx, [esp + 0x8c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 5
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x90]
mov dword [esp + 0x94], 0x73b
call fcn.00546c40
lea eax, [esp + 0x8c]
push eax
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x8c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x54f
jne 0x4ea015
lea ecx, [esp + 0x4c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 6
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], 0x73c
call fcn.00546c40
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x4c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x4d3
jne 0x4ea064
lea ecx, [esp + 0x2c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 7
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x735
call fcn.00546c40
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x2c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x4cb
jne 0x4ea0b3
lea ecx, [esp + 0x5c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 8
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], 0x736
call fcn.00546c40
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x5c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x4f7
jne 0x4ea111
lea ecx, [esp + 0xb4]
call fcn.004f34a0
mov byte [esp + 0x20d0], 9
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xbc], 0x737
call fcn.00546c40
lea edx, [esp + 0xb4]
push edx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0xb4]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x4cc
jne 0x4ea160
lea ecx, [esp + 0x6c]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xa
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x74], 0x738
call fcn.00546c40
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x6c]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x424
jne 0x4ea1af
lea ecx, [esp + 0x34]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xb
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x739
call fcn.00546c40
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x34]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x463
jne 0x4ea1fe
lea ecx, [esp + 0x44]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xc
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0x725
call fcn.00546c40
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x44]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x464
jne 0x4ea24d
lea ecx, [esp + 0x54]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xd
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x5c], 0x726
call fcn.00546c40
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x54]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x525
jne 0x4ea29c
lea ecx, [esp + 0x64]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xe
mov edx, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x6c], 0x1ee
call fcn.00546c40
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x64]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x698
jne 0x4ea2eb
lea ecx, [esp + 0x74]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0xf
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x78]
mov dword [esp + 0x7c], 0x731
call fcn.00546c40
lea edx, [esp + 0x74]
push edx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x74]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x465
jne 0x4ea346
lea ecx, [esp + 0x84]
call fcn.004f34a0
mov byte [esp + 0x20d0], 0x10
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], 0x727
call fcn.00546c40
lea ecx, [esp + 0x84]
push ecx
mov ecx, esi
call fcn.004e1640
mov byte [esp + 0x20d0], bl
lea ecx, [esp + 0x84]
call fcn.004f34f0
jmp 0x4ea36d
cmp eax, 0x84f1
jne case.0x4e5820.1077
cmp edi, 1
jne 0x4ea35e
mov edx, dword [esp + 0x10]
push edx
mov ecx, 0x75440c
jmp 0x4ea368
mov ecx, 0x754410
mov eax, dword [esp + 0x10]
push eax
call fcn.00546c40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], eax
call fcn.00546c40
mov eax, edi
sub eax, 1
je 0x4ea3a9
sub eax, 1
mov ecx, esi
je 0x4ea39d
lea edx, [esp + 0x18]
push edx
call fcn.004e1640
jmp case.0x4e57db.334
lea eax, [esp + 0x18]
push eax
call fcn.004e1740
jmp case.0x4e57db.334
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004e1540
mov byte [esp + 0x20d0], 1
lea ecx, [esp + 0x10]
call fcn.00402570
mov dword [esp + 0x20d0], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.004f34f0
or esi, 0xffffffff
mov edx, dword [esp + 0x20]
push edx
lea eax, [esp + 0xc0]
push 0x2000
push eax
call fcn.00619005
add esp, 0xc
test eax, eax
jne 0x4e55d0
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00618177
mov edx, dword [0x753f5c]
mov eax, dword [0x753f58]
push edx
push eax
push str.mailto:_subject_sbody_s__20https:__www.internetdownloadmanager.com
push 0x753f54
call fcn.00402f70
mov ecx, dword [esp + 0x38]
add esp, 0x14
call fcn.004dec30
mov ecx, dword [esp + 0x20c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20b0]
xor ecx, esp
call fcn.006157d3
mov esp, ebp
pop ebp
ret