Function at 0x4214b1
Capabilities:
Check for time delay via gettickcount
Get file size
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0xcc4
push ebx
push esi
mov esi, dword [ebp + 0x7c]
xor ecx, ecx
push edi
push 7
pop eax
push 0xffffffffffffffff
xor edi, edi
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], ecx
mov word [ebp - 0x20], cx
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x30], ecx
mov word [ebp + 0x20], cx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ecx
mov word [ebp - 0x3c], cx
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x50], ecx
mov word [ebp + 0x40], cx
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x14], ecx
mov word [ebp + 4], cx
call fcn.00412917
mov ebx, dword [ebp + 0x78]
mov edi, dword [ebx + 0xb4]
add edi, dword [ebx + 0x90]
mov eax, 0x466874
lea esi, [ebp - 0x24]
call fcn.0040f4fc
mov ecx, esi
lea eax, [ebx + 0xbc]
push ecx
call fcn.00423174
cmp edi, 1
jle 0x421609
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x844]
push 0x466890
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
lea esi, [ebp + 0x3c]
call fcn.0040f4fc
push str.multipart_
lea eax, [ebp - 0x844]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebx + 0xd8]
cmp dword [eax], 0
jne 0x42158a
xor ecx, ecx
cmp dword [ebx + 0xb4], ecx
sete cl
inc ecx
mov dword [eax], ecx
mov eax, dword [eax]
dec eax
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
je 0x4215a9
dec eax
je 0x4215a2
dec eax
jne 0x4215b7
push str.related
jmp 0x4215ae
push str.alternative
jmp 0x4215ae
push str.mixed
lea eax, [ebp - 0x844]
push eax
call esi
push str.__r_n_tboundary_
lea eax, [ebp - 0x844]
push eax
call esi
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x4215d1
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp - 0x844]
push eax
call esi
push 0x466924
lea eax, [ebp - 0x844]
push eax
call esi
lea eax, [ebp - 0x844]
lea esi, [ebp + 0x1c]
call fcn.0040f4fc
mov eax, esi
push eax
lea eax, [ebp - 0x24]
push eax
lea edi, [ebx + 0xbc]
call fcn.0042310e
mov eax, 0x466928
lea esi, [ebp - 0x24]
call fcn.0040f4fc
mov eax, 0x466944
lea esi, [ebp + 0x1c]
call fcn.0040f4fc
lea eax, [ebp - 0x24]
push eax
lea edi, [ebx + 0xbc]
mov eax, edi
call fcn.00423174
mov eax, esi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0042310e
mov eax, str.Message_ID
lea esi, [ebp - 0x24]
call fcn.0040f4fc
mov eax, esi
push eax
lea eax, [ebx + 0xbc]
call fcn.00423174
cmp dword [ebx + 0xf0], 0
je 0x4216ae
lea eax, [ebx + 0xdc]
cmp dword [eax + 0x18], 8
jb 0x421675
mov eax, dword [eax + 4]
jmp 0x421678
add eax, 4
push eax
lea eax, [ebp - 0x844]
push str.__s_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
lea esi, [ebp + 0x1c]
call fcn.0040f4fc
mov eax, esi
push eax
lea eax, [ebp - 0x24]
push eax
lea edi, [ebx + 0xbc]
call fcn.0042310e
push ebx
call fcn.004210a3
mov esi, dword [ebx + 0xc4]
test esi, esi
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [ebp + 0x6c], esi
jle 0x421753
lea eax, [esi - 1]
imul esi, esi, 0x1c
mov dword [ebp + 0x68], eax
sub esi, 0x1c
mov eax, dword [ebp + 0x68]
test eax, eax
jl 0x421811
lea ecx, [ebx + 0xbc]
cmp eax, dword [ecx + 8]
jge 0x421811
mov eax, dword [ecx + 4]
add eax, esi
cmp dword [eax + 0x18], 8
jb 0x421701
mov edx, dword [eax + 4]
jmp 0x421704
lea edx, [eax + 4]
mov eax, dword [ebp + 0x68]
cmp eax, dword [ecx + 8]
jge 0x421811
mov eax, dword [ecx]
add eax, esi
cmp dword [eax + 0x18], 8
jb 0x42171f
mov eax, dword [eax + 4]
jmp 0x421722
add eax, 4
push edx
push eax
lea eax, [ebp - 0x844]
push str._s:__s_r_n
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
dec dword [ebp + 0x6c]
sub esi, 0x1c
dec dword [ebp + 0x68]
cmp dword [ebp + 0x6c], 0
jg 0x4216d7
xor esi, esi
cmp dword [ebp + 0x50], esi
je 0x42177f
push str.This_is_a_multipart_message_in_MIME_format
lea eax, [ebp - 0x844]
push str._r_n_s_r_n
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
cmp dword [ebx + 0xb4], esi
je 0x4217f7
cmp dword [ebx + 0x90], 1
jle 0x4217f7
cmp dword [ebp + 0x50], esi
je 0x4217f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x844]
push str._____________8.8X
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x844]
lea esi, [ebp]
call fcn.0040f4fc
cmp dword [ebp + 0x18], 8
mov ecx, dword [ebp + 4]
jae 0x4217c7
lea ecx, [ebp + 4]
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x4217d3
lea eax, [ebp + 0x40]
push ecx
push eax
lea eax, [ebp - 0x844]
push str._r_n___s_r_nContent_Type:_multipart_alternative__r_n_tboundary__s__r_n
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
xor esi, esi
cmp dword [ebx + 0x90], esi
mov dword [ebp + 0x6c], esi
jle 0x4219c9
add ebx, 0x8c
mov dword [ebp + 0x68], ebx
jmp 0x421825
push 0
push 0
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov ebx, dword [ebp + 0x68]
xor edi, edi
cmp dword [ebp + 0x50], edi
jne 0x421831
cmp dword [ebp + 0x14], edi
je 0x42185d
mov esi, dword [ebp + 0x7c]
push str._r_n__
push esi
call fcn.00422fe1
cmp dword [ebp + 0x14], edi
push 0xffffffffffffffff
push edi
lea eax, [ebp]
jne 0x42184d
lea eax, [ebp + 0x3c]
call fcn.0042328f
push 0x4654c0
push esi
call fcn.00422fe1
push 0xffffffffffffffff
xor edi, edi
lea esi, [ebp + 0x1c]
call fcn.00412917
mov esi, dword [ebp + 0x7c]
push str.Content_Type:
push esi
call fcn.00422fe1
mov eax, dword [ebp + 0x6c]
mov ecx, ebx
call fcn.00422fff
push 0xffffffffffffffff
push edi
call fcn.0042328f
mov eax, dword [ebp + 0x6c]
mov ecx, ebx
call fcn.00422fff
cmp dword [eax + 0x18], 8
jb 0x42189e
mov eax, dword [eax + 4]
jmp 0x4218a1
add eax, 4
push 5
push str.text_
push eax
call fcn.00429ba5
add esp, 0xc
test eax, eax
jne 0x4218f3
mov eax, dword [ebp + 0x6c]
mov ecx, ebx
call fcn.00422fff
add eax, 0x1c
cmp dword [eax + 0x18], 8
jb 0x4218cd
mov eax, dword [eax + 4]
jmp 0x4218d0
add eax, 4
push eax
lea eax, [ebp - 0x844]
push str.__r_n_tcharset__s_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push 0x4654c0
push esi
call fcn.00422fe1
mov eax, dword [ebp + 0x6c]
mov ecx, ebx
call fcn.00422fff
push 0xffffffffffffffff
lea ecx, [ebp + 0x1c]
add eax, 0x58
push ecx
xor ebx, ebx
call fcn.004123a7
mov edi, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x68]
push ebx
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 0x1c]
push eax
mov eax, edi
call fcn.00422fff
push dword [eax + 0x54]
xor eax, eax
call fcn.004221d8
push str.Content_Transfer_Encoding:
push esi
call fcn.00422fe1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x40]
call fcn.0042328f
mov ecx, dword [ebp + 0x68]
mov eax, edi
call fcn.00422fff
add eax, 0x38
cmp dword [eax + 0x14], ebx
je 0x42199e
mov ecx, dword [ebp + 0x68]
mov eax, edi
call fcn.00422fff
add eax, 0x38
cmp dword [eax + 0x18], 8
jb 0x421978
mov eax, dword [eax + 4]
jmp 0x42197b
add eax, 4
push eax
lea eax, [ebp - 0x844]
push str._r_nContent_ID:___s_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push str._r_n_r_n
push esi
call fcn.00422fe1
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x1c]
call fcn.0042328f
mov eax, dword [ebp + 0x78]
inc edi
cmp edi, dword [eax + 0x90]
mov dword [ebp + 0x6c], edi
jl 0x421822
mov ebx, eax
xor esi, esi
cmp dword [ebp + 0x14], esi
je 0x421a01
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x4219dc
lea eax, [ebp + 4]
push eax
lea eax, [ebp - 0x844]
push str._r_n___s___r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
cmp dword [ebx + 0xb4], esi
mov dword [ebp + 0x6c], esi
jle 0x421ddc
add ebx, 0xb0
mov dword [ebp + 0x64], ebx
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
and dword [ebp + 0x68], 0
call fcn.004230ea
push 0xffffffffffffffff
lea ecx, [ebp + 0x1c]
add eax, 0x58
push ecx
xor ebx, ebx
call fcn.004123a7
cmp dword [ebp + 0x34], 8
mov eax, dword [ebp + 0x20]
jae 0x421a44
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp - 0xc54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor edi, edi
push edi
push edi
push 3
push edi
push 1
push connect
lea eax, [ebp - 0xc54]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp + 0x38], eax
je 0x421dc7
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
lea esi, [ebx + 1]
push esi
mov dword [ebp - 4], ebx
call fcn.0042819a
push esi
push edi
push eax
mov dword [ebp + 0x58], eax
call fcn.00428c40
add esp, 0x10
push edi
lea eax, [ebp - 0x44]
push eax
push ebx
push dword [ebp + 0x58]
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x421da7
cmp dword [ebp + 0x50], edi
je 0x421af1
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x421ac8
lea eax, [ebp + 0x40]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push eax
lea eax, [ebp - 0x844]
push str._r_n___s_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
jmp 0x421af7
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
add eax, 0x74
cmp dword [eax + 0x14], edi
jne 0x421b2c
lea eax, [ebp - 0xc54]
push 0x5c
push eax
call fcn.00429c49
mov esi, eax
cmp esi, edi
pop ecx
pop ecx
jne 0x421b28
lea esi, [ebp - 0xc54]
jmp 0x421b48
inc esi
inc esi
jmp 0x421b48
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
add eax, 0x74
cmp dword [eax + 0x18], 8
jb 0x421b45
mov esi, dword [eax + 4]
jmp 0x421b48
lea esi, [eax + 4]
push str.application_octet_stream
lea eax, [ebp - 0xa4c]
push eax
mov dword [ebp + 0x60], esi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x2e
push esi
call fcn.004293c3
cmp eax, edi
pop ecx
pop ecx
je 0x421bbc
lea ecx, [ebp + 0x5c]
push ecx
push 0x20019
push edi
push eax
push connect
mov dword [ebp + 0x5c], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, edi
jne 0x421bbc
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x68], eax
lea eax, [ebp + 0x68]
push eax
lea edi, [ebp - 8]
lea esi, [ebp - 0xa4c]
mov dword [ebp - 8], 0x104
call fcn.004234a1
cmp dword [ebp + 0x5c], 0
je 0x421bba
push dword [ebp + 0x5c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp + 0x68], 0
xor edi, edi
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
cmp dword [eax + 0x14], edi
je 0x421bf3
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
cmp dword [eax + 0x18], 8
jb 0x421be2
mov eax, dword [eax + 4]
jmp 0x421be5
add eax, 4
push eax
lea eax, [ebp - 0xa4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0x844]
push str.Content_Type:__s
push eax
call ebx
mov esi, dword [ebp + 0x7c]
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push 5
lea eax, [ebp - 0xa4c]
push str.text_
push eax
call fcn.00429ba5
add esp, 0xc
test eax, eax
jne 0x421c70
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
add eax, 0x1c
cmp dword [eax + 0x18], 8
jb 0x421c4e
mov eax, dword [eax + 4]
jmp 0x421c51
add eax, 4
push eax
lea eax, [ebp - 0x844]
push str.__r_n_tcharset__s_
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push dword [ebp + 0x60]
lea eax, [ebp - 0x844]
push str.__r_n_tname__s__r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 0x1c]
push eax
mov eax, dword [ebp + 0x6c]
call fcn.004230ea
push dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.004221d8
cmp dword [ebp - 0x28], 8
mov eax, dword [ebp - 0x3c]
jae 0x421cbe
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x844]
push str.Content_Transfer_Encoding:__s_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push str.Content_Disposition:
push esi
call fcn.00422fe1
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
cmp dword [eax + 0x90], edi
je 0x421d02
push str.inline
jmp 0x421d07
push str.attachment
push esi
call fcn.00422fe1
push str.__r_n_tfilename_
push esi
call fcn.00422fe1
push dword [ebp + 0x60]
push esi
call fcn.00422fe1
push 0x466924
push esi
call fcn.00422fe1
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
add eax, 0x38
cmp dword [eax + 0x14], edi
je 0x421d7a
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x64]
call fcn.004230ea
add eax, 0x38
cmp dword [eax + 0x18], 8
jb 0x421d58
mov eax, dword [eax + 4]
jmp 0x421d5b
add eax, 4
push eax
lea eax, [ebp - 0x844]
push str._r_nContent_ID:___s_
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push esi
call fcn.00422fe1
push str._r_n_r_n
push esi
call fcn.00422fe1
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x1c]
call fcn.0042328f
push 0xffffffffffffffff
xor edi, edi
lea esi, [ebp - 0x40]
call fcn.00412917
push 0xffffffffffffffff
lea esi, [ebp + 0x1c]
call fcn.00412917
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp + 0x58]
call fcn.004280b8
cmp dword [ebp + 0x68], edi
pop ecx
je 0x421dc7
push dword [ebp + 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x78]
mov ecx, dword [ebp + 0x6c]
cmp ecx, dword [eax + 0xb4]
jl 0x421a19
xor ebx, ebx
cmp dword [ebp + 0x50], ebx
je 0x421e14
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x421def
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp - 0x844]
push str._r_n___s___r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x844]
push eax
push dword [ebp + 0x7c]
call fcn.00422fe1
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp]
call fcn.00410e15
push ebx
push edi
lea esi, [ebp + 0x3c]
call fcn.00410e15
push ebx
push edi
lea esi, [ebp - 0x40]
call fcn.00410e15
push ebx
push edi
lea esi, [ebp + 0x1c]
call fcn.00410e15
push ebx
push edi
lea esi, [ebp - 0x24]
call fcn.00410e15
pop edi
pop esi
pop ebx
add ebp, 0x70
leave
ret 8