Function at 0x520aff
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xcc
mov eax, 0x619704
call fcn.005cb937
mov edi, ecx
mov eax, edi
mov dword [ebp - 0xac], edi
call fcn.00521859
lea esi, [ebp - 0x98]
call fcn.004e8df6
and dword [ebp - 4], 0
xor ebx, ebx
inc ebx
push ebx
call fcn.00496798
pop ecx
call fcn.004968cc
mov esi, eax
neg esi
sbb esi, esi
xor ecx, ecx
and esi, 2
test eax, eax
setne cl
lea eax, [ebp - 0x98]
mov dword [ebp - 0xb0], ecx
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.smtp.mail.yahoo.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], bl
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.imap.mail.yahoo.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.pop.mail.yahoo.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.yahoo.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, edi
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.y7mail.com
call fcn.0040518c
push 0
sub esp, 0x1c
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x9c], esp
mov edi, 0x641040
push edi
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.y7mail.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.y7mail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.mail.messagingengine.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x9c], esp
push edi
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop3.operamail.com
call fcn.0040518c
push 0
sub esp, 0x1c
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.operamail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push dword [ebp - 0xb0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.juno.com
call fcn.0040518c
push dword [ebp - 0xb0]
mov byte [ebp - 4], 0xa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9c], esp
push edi
call fcn.0040518c
mov byte [ebp - 4], 0xb
push dword [ebp - 0xb0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.juno.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.juno.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push dword [ebp - 0xb0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.netzero.com
call fcn.0040518c
push dword [ebp - 0xb0]
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9c], esp
push edi
call fcn.0040518c
push dword [ebp - 0xb0]
mov byte [ebp - 4], 0xe
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.netzero.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.netzero.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.gmail.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.gmail.com
call fcn.0040518c
mov byte [ebp - 4], 0x11
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.gmail.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.gmail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.googlemail.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.gmail.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.googlemail.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.googlemail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.gmx.com
call fcn.0040518c
push esi
sub esp, 0x1c
mov byte [ebp - 4], 0x16
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.gmx.com
call fcn.0040518c
push esi
mov byte [ebp - 4], 0x17
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.gmx.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.gmx.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp_mail.outlook.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.outlook.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop_mail.outlook.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.hotmail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
push str.msn.com
lea ecx, [ebp - 0xcc]
call fcn.0040518c
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x98]
push eax
lea ebx, [ebp - 0xd8]
mov byte [ebp - 4], 0x1c
call fcn.0041276d
push 0
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004055c2
push str.live.com
lea ecx, [ebp - 0xcc]
call fcn.0040518c
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x1d
push eax
lea ebx, [ebp - 0xd8]
call fcn.0041276d
push 0
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004055c2
push str.outlook.com
lea ecx, [ebp - 0xcc]
call fcn.0040518c
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x98]
push eax
lea ebx, [ebp - 0xd8]
mov byte [ebp - 4], 0x1e
call fcn.0041276d
xor ebx, ebx
push 0
inc ebx
push ebx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004055c2
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.lycos.com
call fcn.0040518c
push esi
sub esp, 0x1c
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.lycos.com
call fcn.0040518c
push esi
sub esp, 0x1c
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.lycos.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.lycos.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.mail.com
call fcn.0040518c
push esi
mov byte [ebp - 4], 0x22
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.mail.com
call fcn.0040518c
push esi
sub esp, 0x1c
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.mail.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.mail.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.aol.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.aol.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.aol.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.aol.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.aim.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.aim.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0xa8], esp
push str.pop.aim.com
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.aim.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
mov esi, str.mail.messagingengine.com
push esi
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0x9c], esp
push esi
call fcn.0040518c
push 0
sub esp, 0x1c
mov byte [ebp - 4], 0x2c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push edi
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.fastmail.fm
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0
call fcn.005214fd
push str.operamail.com
lea ecx, [ebp - 0xcc]
call fcn.0040518c
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x98]
push eax
lea ebx, [ebp - 0xd8]
mov byte [ebp - 4], 0x2e
call fcn.0041276d
xor ebx, ebx
xor esi, esi
push ebx
inc esi
mov byte [ebp - 4], bl
push esi
lea ecx, [ebp - 0xcc]
call fcn.004055c2
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
lea eax, [ebp - 0x98]
call fcn.005204aa
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str.smtp.myopera.com
call fcn.0040518c
push esi
sub esp, 0x1c
mov byte [ebp - 4], 0x2f
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.imap.myopera.com
call fcn.0040518c
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x30
mov ecx, esp
mov dword [ebp - 0xa8], esp
push edi
call fcn.0040518c
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x31
mov ecx, esp
mov dword [ebp - 0xa4], esp
push str.myopera.com
call fcn.0040518c
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], bl
call fcn.005214fd
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0xac]
call fcn.005217ee
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x98]
call fcn.004e8e17
call fcn.005cb9ba
ret