Function at 0x4fcb38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b4
mov eax, dword [0x665ebc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x1a8], esi
test esi, esi
jne 0x4fcb65
push 0x6a
pop eax
jmp 0x4fcdf0
mov ecx, dword [esi]
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 0x78], 0
mov byte [ebp - 0x14], 0x30
mov byte [ebp - 0x13], 0x31
mov byte [ebp - 0x12], 0x32
mov byte [ebp - 0x11], 0x33
mov byte [ebp - 0x10], 0x34
mov byte [ebp - 0xf], 0x35
mov byte [ebp - 0xe], 0x36
mov byte [ebp - 0xd], 0x37
mov byte [ebp - 0xc], 0x38
mov byte [ebp - 0xb], 0x39
mov byte [ebp - 0xa], 0x41
mov byte [ebp - 9], 0x42
mov byte [ebp - 8], 0x43
mov byte [ebp - 7], 0x44
mov byte [ebp - 6], 0x45
mov byte [ebp - 5], 0x46
test ecx, ecx
jne 0x4fcbbc
push 0x51
jmp 0x4fcb5f
mov eax, dword [ecx]
push 0
call dword [eax + 8]
cmp eax, 0xffffffff
je 0x4fcbb8
mov esi, dword [esi + 8]
lea eax, [ebp - 0x78]
test esi, esi
jne 0x4fcbe4
push str.Content_Type:_Text_Plain__charsetUS_ASCII_r_n
push 0x63
push eax
call fcn.005a8be4
add esp, 0xc
jmp 0x4fcbf5
push esi
push str.Content_Type:__s__charsetUS_ASCII_r_n
push 0x63
push eax
call fcn.005a8be4
add esp, 0x10
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push edi
mov edi, dword [ebx]
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 0x15], 0
add edi, 0x1c
call esi
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, ebx
call dword [edi]
mov edi, eax
lea eax, [ebp - 0x78]
push eax
call esi
cmp edi, eax
jne 0x4fcddf
push str.Content_Transfer_Encoding:_Quoted_Printable_r_n
lea eax, [ebp - 0x78]
push 0x63
push eax
call fcn.005a8be4
mov edi, dword [ebx]
add esp, 0xc
lea eax, [ebp - 0x78]
push eax
add edi, 0x1c
call esi
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, ebx
call dword [edi]
mov edi, eax
lea eax, [ebp - 0x78]
push eax
call esi
cmp edi, eax
jne 0x4fcddf
mov ecx, dword [ebp - 0x1ac]
and dword [ebp - 0x1b0], 0
test ecx, ecx
je 0x4fccd2
push 0
jmp 0x4fccc3
mov edi, dword [ebx]
push dword [ebp - 0x1b4]
inc dword [ebp - 0x1b0]
add edi, 0x1c
call esi
push eax
push dword [ebp - 0x1b4]
mov ecx, ebx
call dword [edi]
push dword [ebp - 0x1b4]
mov edi, eax
call esi
cmp edi, eax
jne 0x4fcddf
mov eax, dword [ebx]
push 2
push 0x602a28
mov ecx, ebx
call dword [eax + 0x1c]
cmp eax, 2
jne 0x4fcddf
push dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
call fcn.0050086f
mov dword [ebp - 0x1b4], eax
test eax, eax
jne 0x4fcc70
mov eax, dword [ebx]
push 2
push 0x602a28
mov ecx, ebx
call dword [eax + 0x1c]
cmp eax, 2
jne 0x4fcddf
xor esi, esi
mov edi, dword [ebp - 0x1a8]
mov ecx, dword [edi]
mov eax, dword [ecx]
push 0x63
lea edx, [ebp - 0x78]
push edx
call dword [eax + 0x18]
mov dword [ebp - 0x1b0], eax
test eax, eax
jle 0x4fce00
and dword [ebp - 0x1ac], 0
test eax, eax
jle 0x4fce00
xor edi, edi
cmp esi, 0x48
jle 0x4fcd56
mov eax, dword [ebx]
mov byte [ebp + esi - 0x1a4], 0x3d
inc esi
mov byte [ebp + esi - 0x1a4], 0xd
inc esi
mov byte [ebp + esi - 0x1a4], 0xa
inc esi
push esi
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
cmp eax, esi
jne 0x4fcddf
xor esi, esi
mov ecx, dword [ebp - 0x1ac]
mov al, byte [ebp + ecx - 0x78]
cmp al, 0x21
jl 0x4fcd68
cmp al, 0x3c
jle 0x4fcd70
cmp al, 0x3e
jl 0x4fcd7b
cmp al, 0x7e
jg 0x4fcd7b
xor edi, edi
mov byte [ebp + esi - 0x1a4], al
inc edi
inc esi
cmp al, 9
je 0x4fcd83
cmp al, 0x20
jne 0x4fcd8e
mov byte [ebp + esi - 0x1a4], al
xor edi, edi
inc esi
inc edi
test edi, edi
jne 0x4fcdc7
movzx eax, al
mov edx, eax
shr edx, 4
mov dl, byte [ebp + edx - 0x14]
mov byte [ebp + esi - 0x1a4], 0x3d
inc esi
mov byte [ebp + esi - 0x1a4], dl
inc esi
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x4fcdbb
dec eax
or eax, 0xfffffff0
inc eax
mov al, byte [ebp + eax - 0x14]
mov byte [ebp + esi - 0x1a4], al
inc esi
inc ecx
cmp ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1ac], ecx
jl 0x4fcd1b
jmp 0x4fcceb
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0xc]
push 0x53
pop eax
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0059ca15
leave
ret 8
test esi, esi
jle 0x4fce25
mov eax, dword [ebx]
push esi
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
cmp eax, esi
je 0x4fce25
push 0x53
pop esi
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov eax, esi
jmp 0x4fcdef
xor esi, esi
jmp 0x4fce1a