Function at 0x440540
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4b7dff
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x844
push ebx
push ebp
push esi
push edi
mov esi, dword [esp + 0x864]
mov edi, dword [sym.imp.MSVCRT.dll_wcscmp]
push str.All_Monitor_Logs
mov dword [esp + 0x860], 1
mov eax, dword [esi + 0x10]
lea ebx, [esi + 0x10]
push eax
call edi
add esp, 8
test eax, eax
je 0x440b8f
mov ecx, dword [esp + 0x868]
push str.smtp
push ecx
call dword [sym.imp.MSVCRT.dll_wcsstr]
add esp, 8
test eax, eax
jne 0x440641
mov eax, dword [0x9b0bc4]
mov edx, dword [esi + 4]
lea ebp, [esi + 4]
push eax
push edx
call edi
add esp, 8
test eax, eax
jne 0x44060a
mov eax, dword [0x9b0bc0]
push eax
mov eax, dword [esi + 8]
push eax
call edi
add esp, 8
test eax, eax
jne 0x44060a
mov eax, dword [0x9b0bbc]
mov ecx, dword [ebx]
push eax
push ecx
call edi
add esp, 8
test eax, eax
jne 0x44060a
mov eax, dword [esi + 0x28]
mov ecx, dword [0x9b0bc8]
cmp ecx, eax
jne 0x44060a
mov edx, dword [esi + 0x18]
mov ecx, dword [0x9b0bcc]
mov eax, dword [edx - 8]
cmp ecx, eax
je 0x440b8f
push ebp
mov ecx, 0x9b0bc4
call sub.MFC42u.DLL_CString::operator_2
lea eax, [esi + 8]
mov ecx, 0x9b0bc0
push eax
call sub.MFC42u.DLL_CString::operator_2
push ebx
mov ecx, 0x9b0bbc
call sub.MFC42u.DLL_CString::operator_2
mov eax, dword [esi + 0x28]
mov dword [0x9b0bc8], eax
mov ecx, dword [esi + 0x18]
mov eax, dword [ecx - 8]
mov dword [0x9b0bcc], eax
xor ebp, ebp
lea ecx, [esp + 0x18]
mov word [esp + 0x1e], bp
mov word [esp + 0x1c], 1
call sub.MFC42u.DLL_CString::CString_1
lea edx, [esp + 0x38]
mov byte [esp + 0x85c], 2
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [esp + 0x20]
call sub.MFC42u.DLL_CString::CString_1
mov eax, dword [esp + 0x46]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x42]
and eax, 0xffff
and ecx, 0xffff
push eax
mov eax, dword [esp + 0x44]
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x46]
push edx
mov edx, dword [esp + 0x46]
and eax, 0xffff
and ecx, 0xffff
push eax
and edx, 0xffff
push ecx
push edx
lea eax, [esp + 0x38]
push str._02d__02d__02d:_02d:_02d:_04d
push eax
mov byte [esp + 0x87c], 3
call sub.MFC42u.DLL_CString::Format
add esp, 0x20
lea ecx, [esp + 0x20]
lea edi, [esi + 0xc]
push ecx
mov ecx, edi
call sub.MFC42u.DLL_CString::operator_2
lea edx, [esp + 0x1c]
lea eax, [esp + 0x10]
push edx
push edi
push eax
call sub.MFC42u.DLL_operator_4
lea ecx, [esi + 4]
mov byte [esp + 0x85c], 4
push ecx
lea ecx, [esp + 0x28]
push eax
push ecx
call sub.MFC42u.DLL_operator
lea edx, [esp + 0x1c]
mov byte [esp + 0x85c], 5
push edx
push eax
lea eax, [esp + 0x30]
push eax
call sub.MFC42u.DLL_operator_4
lea ecx, [esi + 8]
mov byte [esp + 0x85c], 6
push ecx
lea ecx, [esp + 0x38]
push eax
push ecx
call sub.MFC42u.DLL_operator
lea edx, [esp + 0x1c]
mov byte [esp + 0x85c], 7
push edx
push eax
lea eax, [esp + 0x34]
push eax
call sub.MFC42u.DLL_operator_4
push ebx
lea ecx, [esp + 0x34]
push eax
push ecx
mov byte [esp + 0x868], 8
call sub.MFC42u.DLL_operator
lea edx, [esp + 0x1c]
mov byte [esp + 0x85c], 9
push edx
push eax
lea eax, [esp + 0x1c]
push eax
call sub.MFC42u.DLL_operator_4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x860], 0xa
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x14]
mov byte [esp + 0x85c], 9
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x30]
mov byte [esp + 0x85c], 8
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x85c], 7
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x34]
mov byte [esp + 0x85c], 6
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0x85c], 5
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0x85c], 4
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x85c], 3
call sub.MFC42u.DLL_CString::CString
mov eax, dword [esi + 0x28]
test eax, eax
jle 0x440875
lea ecx, [esp + 0x10]
push ebp
push ecx
lea ecx, [esi + 0x20]
call fcn.00401460
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x860], 0xb
call fcn.004b0394
lea ecx, [esp + 0x10]
mov byte [esp + 0x85c], 3
call sub.MFC42u.DLL_CString::CString
push 0x4d0290
lea ecx, [esp + 0x18]
call sub.MFC42u.DLL_CString::CString_4
lea edx, [esp + 0x14]
lea ecx, [esp + 0x18]
push edx
mov byte [esp + 0x860], 0xc
call fcn.004b0394
lea ecx, [esp + 0x14]
mov byte [esp + 0x85c], 3
call sub.MFC42u.DLL_CString::CString
mov eax, dword [esi + 0x28]
inc ebp
cmp ebp, eax
jl 0x440807
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
call sub.MFC42u.DLL_CString::operator_1
mov ecx, dword [esp + 0x868]
push str.smtp
push ecx
call dword [sym.imp.MSVCRT.dll_wcsstr]
add esp, 8
test eax, eax
je 0x440935
mov eax, dword [0x4e2a9c]
cmp eax, 0xc8
jge 0x4409bf
push edi
push eax
mov ecx, 0x4e2a94
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2a9c]
lea ecx, [esi + 4]
push ecx
push eax
mov ecx, 0x4e2a94
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2a9c]
lea ecx, [esi + 8]
push ecx
push eax
mov ecx, 0x4e2a94
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2a9c]
push ebx
push eax
mov ecx, 0x4e2a94
call sub.MFC42u.DLL_CStringArray::SetAtGrow
xor ebp, ebp
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
call sub.MFC42u.DLL_CString::CString_3
push ecx
mov byte [esp + 0x868], 0xd
mov edx, esp
mov dword [esp + 0x30], esp
push 0x6c
push edx
call fcn.00422460
add esp, 8
mov byte [esp + 0x868], 3
call fcn.004016e0
add esp, 0xc
jmp 0x4409c1
mov eax, dword [0x4e2ab0]
cmp eax, 0xc8
jge 0x4409bf
push edi
push eax
mov ecx, 0x4e2aa8
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2ab0]
lea ecx, [esi + 4]
push ecx
push eax
mov ecx, 0x4e2aa8
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2ab0]
lea ecx, [esi + 8]
push ecx
push eax
mov ecx, 0x4e2aa8
call sub.MFC42u.DLL_CStringArray::SetAtGrow
mov eax, dword [0x4e2ab0]
push ebx
push eax
mov ecx, 0x4e2aa8
call sub.MFC42u.DLL_CStringArray::SetAtGrow
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
call sub.MFC42u.DLL_CString::CString_3
push ecx
mov byte [esp + 0x868], 0xe
mov eax, esp
mov dword [esp + 0x30], esp
push 0x6d
push eax
call fcn.00422460
add esp, 8
mov byte [esp + 0x868], 3
call fcn.004016e0
add esp, 0xc
xor ebp, ebp
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x456]
mov word [esp + 0x454], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x656]
mov ebx, dword [sym.imp.MSVCRT.dll_wcscpy]
mov word [esp + 0x654], bp
lea edx, [esp + 0x454]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x868]
push ecx
push edx
stosw word es:[edi], ax
call ebx
mov eax, dword [esp + 0x874]
lea ecx, [esp + 0x65c]
push eax
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call sub.MFC42u.DLL_CString::CString_3
lea eax, [esp + 0x458]
push eax
call fcn.00425820
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x25e]
mov word [esp + 0x25c], bp
rep stosd dword es:[edi], eax
mov ecx, dword [0x1404c10]
lea edx, [esp + 0x25c]
push ecx
push edx
stosw word es:[edi], ax
call ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x5e]
mov word [esp + 0x5c], bp
rep stosd dword es:[edi], eax
add esp, 0x10
lea ecx, [esp + 0x20]
stosw word es:[edi], ax
push 0x40
push 0x3a
call sub.MFC42u.DLL_CString::Replace_1
mov eax, dword [esp + 0x868]
push str.smtp
push eax
call dword [sym.imp.MSVCRT.dll_wcsstr]
mov ecx, dword [esp + 0x28]
add esp, 8
lea edx, [esp + 0x254]
test eax, eax
push ecx
push edx
je 0x440abc
push str._ssmtp_file_s.cfg
jmp 0x440ac1
push str._spop3_file_s.cfg
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.MSVCRT.dll_swprintf]
add esp, 0x10
lea ecx, [esp + 0x4c]
push ecx
call fcn.00428bd0
mov edi, eax
push 0x4d0e50
push edi
mov dword [esp + 0x1c], edi
call dword [sym.imp.MSVCRT.dll_fopen]
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x440b64
push 0x4e2868
lea ecx, [esp + 0x18]
call sub.MFC42u.DLL_CString::CString_4
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
push edx
push eax
call dword [sym.imp.MSVCRT.dll_wcscmp]
add esp, 8
lea ecx, [esp + 0x14]
test eax, eax
setne bl
call sub.MFC42u.DLL_CString::CString
test bl, bl
je 0x440b2b
mov esi, dword [esi + 0x1c]
jmp 0x440b2e
mov esi, dword [esi + 0x18]
push esi
call fcn.00428bd0
mov esi, eax
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ebp
push ecx
push 1
push esi
call dword [sym.imp.MSVCRT.dll_fwrite]
push esi
call fcn.00428c40
add esp, 0x18
push ebp
call dword [sym.imp.MSVCRT.dll_fclose]
mov edi, dword [esp + 0x14]
add esp, 4
push edi
call fcn.00428c40
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x85c], 2
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x85c], 1
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x868]
mov byte [esp + 0x85c], 0
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x86c]
mov dword [esp + 0x85c], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x854]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x850
ret