Function at 0x5902a680
Capabilities:
Delete file
Encode data using base64
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5914e934
push eax
mov eax, dword [0x591ac718]
mov dword fs:[0], esp
sub esp, 0x584
push ebx
push ebp
xor ebp, ebp
push esi
cmp eax, ebp
push edi
je 0x5902a6c3
push str.CheckEMails
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x10
mov eax, dword [0x591ad710]
mov ecx, dword [0x591ad714]
or eax, ecx
jne 0x5902a8ad
push 0x591ad710
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x59c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebp
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 1
call fcn.590abbc0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x48]
mov byte [esp + 0x5a4], 2
call fcn.59060b80
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
call fcn.59060d10
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x8c]
call fcn.590abc30
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x591ac690
call fcn.590a0590
push ecx
mov byte [esp + 0x5a8], 3
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x591ac690
call fcn.590a0590
lea ecx, [esp + 0x90]
lea edx, [esp + 0x5c]
push ecx
lea eax, [esp + 0x50]
push edx
push eax
mov byte [esp + 0x5b4], 2
call fcn.59026fe0
mov esi, dword [0x591ad584]
mov ecx, dword [esp + 0x5c]
add esp, 0x18
lea edx, [esi + ecx]
mov ecx, 0x591ad580
push 0xffffffffffffffff
push edx
call fcn.59060b80
mov ecx, dword [0x591ad580]
mov eax, esi
shl eax, 4
mov edi, dword [esp + 0x40]
add eax, esi
lea esi, [ecx + eax*4]
mov eax, dword [esp + 0x44]
cmp eax, ebp
je 0x5902a7e7
lea ebx, [eax]
mov eax, edi
mov ecx, esi
push eax
add edi, 0x44
add esi, 0x44
call fcn.59060630
dec ebx
jne 0x5902a7d4
mov edi, dword [0x591ad574]
mov edx, dword [esp + 0x54]
push 0xffffffffffffffff
mov ecx, 0x591ad570
lea eax, [edi + edx]
push eax
call fcn.59060d10
mov edx, dword [0x591ad570]
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
lea ecx, [edi + edi*8]
cmp eax, ebp
lea edi, [edx + ecx*8]
je 0x5902a82e
lea ebx, [eax]
mov eax, esi
mov ecx, edi
push eax
add esi, 0x48
add edi, 0x48
call fcn.59061030
dec ebx
jne 0x5902a81b
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 1
call fcn.590abbd0
mov esi, dword [esp + 0x50]
mov byte [esp + 0x59c], 0
cmp esi, ebp
je 0x5902a876
mov eax, dword [esp + 0x54]
cmp eax, ebp
je 0x5902a86d
lea edi, [eax]
mov ecx, esi
call fcn.59013870
add esi, 0x48
dec edi
jne 0x5902a85c
mov esi, dword [esp + 0x50]
push esi
call fcn.5913d2f9
add esp, 4
mov esi, dword [esp + 0x40]
mov dword [esp + 0x59c], 0xffffffff
cmp esi, ebp
je 0x5902a8ad
mov eax, dword [esp + 0x44]
cmp eax, ebp
je 0x5902a8a4
lea edi, [eax]
mov ecx, esi
call fcn.59012880
add esi, 0x44
dec edi
jne 0x5902a893
mov esi, dword [esp + 0x40]
push esi
call fcn.5913d2f9
add esp, 4
lea eax, [esp + 0xe0]
mov dword [esp + 0xe0], 1
push eax
call fcn.59029fe0
mov eax, dword [esp + 0xe4]
add esp, 4
cmp eax, ebp
je 0x5902cb90
lea ecx, [esp + 0x180]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ebx, dword [0x591ad584]
xor esi, esi
cmp ebx, ebp
jle 0x5902ab5b
xor ebp, ebp
mov dword [esp + 0x2c], ebp
lea eax, [esi + 1]
mov edi, esi
cmp eax, ebx
mov dword [esp + 0x24], eax
jge 0x5902ab4a
mov ecx, dword [0x591ad580]
lea edx, [ebp + 0x44]
mov dword [esp + 0x18], ebp
lea ecx, [edx + ecx + 0xc]
mov ebx, dword [0x591ad580]
mov ebp, dword [esp + 0x18]
lea ebx, [ebx + ebp + 0xc]
mov ebp, dword [ebx + 4]
cmp ebp, dword [ecx + 4]
jl 0x5902a943
jg 0x5902a93d
mov ebx, dword [ebx]
mov ebp, dword [ecx]
cmp ebx, ebp
jbe 0x5902a943
mov edi, eax
mov dword [esp + 0x18], edx
mov ebx, dword [0x591ad584]
inc eax
add edx, 0x44
add ecx, 0x44
cmp eax, ebx
jl 0x5902a91d
cmp esi, edi
je 0x5902ab42
lea edx, [esp + 0xe8]
push esi
push edx
mov ecx, 0x591ad580
call fcn.59060110
lea eax, [esp + 0x13c]
mov ebx, 5
push esi
push eax
mov ecx, 0x591ad580
mov dword [esp + 0x5a4], ebx
call fcn.59060110
mov edx, dword [0x591ad580]
mov ebp, dword [esp + 0x2c]
lea ecx, [esp + 0x13c]
mov byte [esp + 0x59c], 6
push ecx
lea ecx, [edx + ebp]
call fcn.59060630
mov edx, dword [0x591ad580]
mov ecx, edi
shl ecx, 4
add ecx, edi
lea eax, [esp + 0xe8]
push eax
lea ecx, [edx + ecx*4]
call fcn.59060630
lea ecx, [esp + 0x178]
mov byte [esp + 0x59c], 0xe
call fcn.590a0ec0
lea ecx, [esp + 0x174]
mov byte [esp + 0x59c], 0xd
call fcn.590a6240
lea ecx, [esp + 0x170]
mov byte [esp + 0x59c], 0xc
call fcn.590a6240
lea ecx, [esp + 0x16c]
mov byte [esp + 0x59c], 0xb
call fcn.590a6240
lea ecx, [esp + 0x168]
mov byte [esp + 0x59c], 0xa
call fcn.590a6240
lea ecx, [esp + 0x164]
mov byte [esp + 0x59c], 9
call fcn.590a6240
lea ecx, [esp + 0x160]
mov byte [esp + 0x59c], 8
call fcn.590a6240
lea ecx, [esp + 0x15c]
mov byte [esp + 0x59c], 7
call fcn.590a6240
lea ecx, [esp + 0x158]
mov byte [esp + 0x59c], bl
call fcn.590a6240
lea ecx, [esp + 0x124]
mov dword [esp + 0x59c], 0x17
call fcn.590a0ec0
lea ecx, [esp + 0x120]
mov byte [esp + 0x59c], 0x16
call fcn.590a6240
mov byte [esp + 0x59c], 0x15
lea ecx, [esp + 0x11c]
call fcn.590a6240
lea ecx, [esp + 0x118]
mov byte [esp + 0x59c], 0x14
call fcn.590a6240
lea ecx, [esp + 0x114]
mov byte [esp + 0x59c], 0x13
call fcn.590a6240
lea ecx, [esp + 0x110]
mov byte [esp + 0x59c], 0x12
call fcn.590a6240
lea ecx, [esp + 0x10c]
mov byte [esp + 0x59c], 0x11
call fcn.590a6240
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x10
call fcn.590a6240
lea ecx, [esp + 0x104]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590a6240
mov ebx, dword [0x591ad584]
jmp 0x5902ab46
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
mov esi, eax
add ebp, 0x44
cmp esi, ebx
mov dword [esp + 0x2c], ebp
jl 0x5902a8fb
mov eax, dword [0x591ad71c]
mov edi, dword [0x591ad574]
cmp eax, ebx
mov byte [esp + 0x1f], 0
jne 0x5902ab77
cmp dword [0x591ad720], edi
je 0x5902ab88
mov dword [0x591ad71c], ebx
mov dword [0x591ad720], edi
mov byte [esp + 0x1f], 1
test ebx, ebx
mov dword [esp + 0x20], 0
jle 0x5902c171
mov eax, dword [0x591ac718]
test eax, eax
je 0x5902ad5e
mov eax, dword [0x59162880]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x10]
push ecx
push str.current_content:__d_n
push edx
mov dword [esp + 0x5a8], 0x19
call fcn.590a91c0
mov eax, dword [0x591ac718]
add esp, 0xc
test eax, eax
je 0x5902abf7
mov eax, dword [esp + 0x10]
push eax
push 0x5918c4b8
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov eax, dword [0x591ad584]
xor edi, edi
test eax, eax
jle 0x5902ac6d
xor esi, esi
mov eax, dword [0x591ad580]
mov ecx, dword [esi + eax + 0x1c]
mov edx, dword [esi + eax + 0x10]
push ecx
mov ecx, dword [esi + eax + 0xc]
push edx
mov edx, dword [esi + eax + 8]
push ecx
mov ecx, dword [esi + eax + 4]
push edx
mov edx, dword [esi + eax]
push ecx
push edx
push edi
lea eax, [esp + 0x2c]
push str.content_i:_d____dwType:_0x_04x____tickbegin:__I64u____tickend:__I64u____flag:__s_
push eax
call fcn.590a91c0
mov eax, dword [0x591ac718]
add esp, 0x24
test eax, eax
je 0x5902ac60
mov ecx, dword [esp + 0x10]
push ecx
push 0x5918c4b8
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov eax, dword [0x591ad584]
inc edi
add esi, 0x44
cmp edi, eax
jl 0x5902ac04
mov eax, dword [0x591ad574]
xor edi, edi
test eax, eax
jle 0x5902ace3
xor esi, esi
mov eax, dword [0x591ad570]
mov edx, dword [esi + eax + 0x1c]
mov ecx, dword [esi + eax + 0x10]
push edx
mov edx, dword [esi + eax + 0xc]
push ecx
mov ecx, dword [esi + eax + 8]
push edx
mov edx, dword [esi + eax + 4]
mov eax, dword [esi + eax]
push ecx
push edx
push eax
push edi
lea ecx, [esp + 0x2c]
push str.attach_j:_d____dwType:_0x_04x____tickbegin:__I64u____tickend:__I64u____flag:__s_
push ecx
call fcn.590a91c0
mov eax, dword [0x591ac718]
add esp, 0x24
test eax, eax
je 0x5902acd6
mov edx, dword [esp + 0x10]
push edx
push 0x5918c4b8
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov eax, dword [0x591ad574]
inc edi
add esi, 0x48
cmp edi, eax
jl 0x5902ac7a
mov eax, dword [0x591ad654]
xor edi, edi
test eax, eax
jle 0x5902ad4a
xor esi, esi
mov eax, dword [0x591ad650]
mov ecx, dword [esi + eax + 0xc]
mov edx, dword [esi + eax + 8]
mov eax, dword [esi + eax]
push ecx
push edx
push eax
push edi
lea ecx, [esp + 0x20]
push str.g_arrTypeAndTime__d_:__dwType:0x_04x____tickend:__I64u_
push ecx
call fcn.590a91c0
mov eax, dword [0x591ac718]
add esp, 0x18
test eax, eax
je 0x5902ad3d
mov edx, dword [esp + 0x10]
push edx
push 0x5918c4b8
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov eax, dword [0x591ad654]
inc edi
add esi, 0x20
cmp edi, eax
jl 0x5902acf0
lea ecx, [esp + 0x10]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590a6240
push 1
push 0x591ad630
lea ecx, [esp + 0x190]
or ebp, 0xffffffff
call fcn.590b48a0
mov eax, dword [0x591ad654]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x59c], 0x1a
jle 0x5902adec
mov eax, dword [esp + 0x20]
mov ecx, dword [0x591ad650]
mov esi, eax
shl esi, 4
add esi, eax
mov eax, dword [0x591ad580]
shl esi, 2
xor edi, edi
mov eax, dword [esi + eax]
mov ecx, dword [edi + ecx]
push eax
push ecx
call fcn.590253f0
mov ecx, dword [0x591ad650]
add esp, 8
test al, al
mov eax, dword [0x591ad580]
je 0x5902adda
mov edx, dword [edi + ecx + 0xc]
cmp edx, dword [esi + eax + 0x10]
jl 0x5902adea
jg 0x5902adda
mov edx, dword [edi + ecx + 8]
cmp edx, dword [esi + eax + 0xc]
jb 0x5902adea
mov edx, dword [0x591ad654]
inc ebx
add edi, 0x20
cmp ebx, edx
jl 0x5902ada5
jmp 0x5902adec
mov ebp, ebx
lea ecx, [esp + 0x188]
call fcn.590b4950
mov esi, dword [esp + 0x20]
cmp ebp, 0xffffffff
je 0x5902ae7b
mov eax, dword [0x591ad580]
mov edx, dword [esp + 0x180]
mov ecx, esi
mov edi, dword [esp + 0x184]
shl ecx, 4
add ecx, esi
push 0
push 0x3e8
sub edx, dword [eax + ecx*4 + 0x14]
sbb edi, dword [eax + ecx*4 + 0x18]
push edi
push edx
call fcn.59088a40
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], edx
fild qword [esp + 0xd8]
fild qword [0x591ad710]
fdivp st(1)
fabs
fild qword [0x59188240]
fcompp
fnstsw ax
test ah, 0x41
jne 0x5902ae7b
lea ecx, [esp + 0x188]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590b4900
jmp 0x5902c158
lea ecx, [esp + 0x50]
call fcn.590abbc0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x59c], 0x1b
call fcn.590abbc0
lea ecx, [esp + 0x98]
mov byte [esp + 0x59c], 0x1c
call fcn.590aaee0
lea ecx, [esp + 0x60]
mov byte [esp + 0x59c], 0x1d
call fcn.590b3a40
lea ecx, [esp + 0x12c]
mov byte [esp + 0x59c], 0x1e
call fcn.590b3a40
mov eax, dword [0x591ad580]
mov edi, esi
shl edi, 4
add edi, esi
lea ecx, [esp + 0xa8]
shl edi, 2
mov byte [esp + 0x59c], 0x1f
mov dword [esp + 0x2c], edi
mov ebx, dword [edi + eax + 0x40]
add ebx, 4
mov dword [esp + 0x70], ebx
call fcn.590b3a40
mov eax, dword [0x591ad574]
mov byte [esp + 0x59c], 0x20
dec eax
test eax, eax
mov dword [esp + 0x14], eax
jl 0x5902b0f5
lea esi, [eax + eax*8]
shl esi, 3
mov ecx, dword [0x591ad570]
mov ecx, dword [esi + ecx]
test ecx, ecx
je 0x5902b0dd
mov edx, dword [0x591ad580]
mov eax, dword [edi + edx]
test eax, eax
je 0x5902b0dd
push eax
push ecx
call fcn.590253f0
add esp, 8
test al, al
je 0x5902b0dd
mov eax, dword [0x591ad570]
mov ebx, dword [esi + eax + 0xc]
mov edx, dword [esi + eax + 0x10]
mov eax, ebx
or eax, edx
je 0x5902b0dd
mov eax, dword [0x591ad580]
mov ecx, dword [edi + eax + 4]
mov eax, dword [edi + eax + 8]
mov ebp, ecx
or ebp, eax
je 0x5902b0dd
cmp edx, eax
jg 0x5902b0dd
jl 0x5902af97
cmp ebx, ecx
ja 0x5902b0dd
mov ecx, dword [0x591ad570]
mov ecx, dword [esi + ecx + 0x1c]
mov eax, dword [ecx - 8]
test eax, eax
je 0x5902afcb
mov edx, dword [0x591ad580]
mov eax, dword [edi + edx + 0x1c]
mov edx, dword [eax - 8]
test edx, edx
je 0x5902afcb
push eax
push ecx
call fcn.59089858
add esp, 8
test eax, eax
jne 0x5902b0dd
mov eax, dword [0x591ad570]
mov ecx, dword [esp + 0x54]
lea eax, [esi + eax + 0x20]
push eax
push ecx
lea ecx, [esp + 0x58]
call fcn.590ac1d0
mov edx, dword [0x591ad570]
lea ecx, [esp + 0xb8]
lea eax, [esi + edx + 0x24]
push eax
mov eax, dword [esp + 0xc0]
push eax
call fcn.590ac1d0
mov ecx, dword [0x591ad570]
mov edx, dword [esp + 0x9c]
lea eax, [esi + ecx + 0x2c]
lea ecx, [esp + 0x98]
push eax
push edx
call fcn.590ab4e0
mov eax, dword [0x591ad570]
mov ecx, dword [esp + 0x64]
mov eax, dword [esi + eax + 0x28]
push eax
push ecx
lea ecx, [esp + 0x68]
call fcn.590b3c80
mov edx, dword [0x591ad570]
lea ecx, [esp + 0x12c]
mov eax, dword [esi + edx + 0x30]
push eax
mov eax, dword [esp + 0x134]
push eax
call fcn.590b3c80
mov eax, dword [0x591ad570]
mov edx, dword [esp + 0x70]
mov ecx, dword [esi + eax + 0x30]
mov eax, dword [esi + eax]
push eax
lea ecx, [edx + ecx + 4]
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x74], ecx
push edx
lea ecx, [esp + 0xb0]
call fcn.590b3c80
mov edi, dword [0x591ad574]
mov ecx, dword [esp + 0x14]
mov eax, dword [0x591ad570]
sub edi, ecx
dec edi
xor ebp, ebp
lea ebx, [esi + eax]
mov ecx, ebx
call fcn.59013870
add ebx, 0x48
mov ecx, ebp
dec ebp
test ecx, ecx
jne 0x5902b09c
test edi, edi
je 0x5902b0ce
mov eax, dword [0x591ad570]
lea edx, [edi + edi*8]
shl edx, 3
push edx
lea ecx, [esi + eax + 0x48]
lea edx, [esi + eax]
push ecx
push edx
call fcn.59088c50
add esp, 0xc
mov eax, dword [0x591ad574]
mov edi, dword [esp + 0x2c]
dec eax
mov dword [0x591ad574], eax
mov eax, dword [esp + 0x14]
sub esi, 0x48
dec eax
test eax, eax
mov dword [esp + 0x14], eax
jge 0x5902af23
mov ebx, dword [esp + 0x70]
mov eax, dword [0x591ad580]
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0x130]
mov esi, dword [edi + eax]
push ebx
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0xa4]
push eax
lea edx, [esp + 0xc8]
push ecx
lea eax, [esp + 0x64]
push edx
push eax
push esi
call fcn.59029630
lea ecx, [esp + 0x14c]
push ebx
lea edx, [esp + 0x84]
push ecx
lea eax, [esp + 0xc0]
push edx
lea ecx, [esp + 0xe4]
push eax
lea edx, [esp + 0x80]
push ecx
lea eax, [esp + 0xdc]
push edx
push eax
push esi
call fcn.59029f00
add esp, 0x40
cmp esi, 0x290
je 0x5902b1bc
cmp esi, 0x291
je 0x5902b1bc
cmp esi, 0x292
je 0x5902b1bc
cmp esi, 0x293
je 0x5902b1bc
cmp esi, 0x294
je 0x5902b1bc
cmp esi, 0x10
je 0x5902b1bc
cmp esi, 0x11
je 0x5902b1bc
cmp esi, 0x14
je 0x5902b1bc
cmp esi, 0x13
je 0x5902b1bc
cmp esi, 0x40
je 0x5902b1bc
cmp esi, 0x41
je 0x5902b1bc
cmp esi, 0x44
je 0x5902b1bc
cmp esi, 0x43
jne 0x5902be31
xor ebx, ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x9c]
xor ebp, ebp
cmp eax, ebx
mov byte [esp + 0x59c], 0x21
mov dword [esp + 0x18], ebp
jle 0x5902b70e
test ebx, ebx
je 0x5902b1f8
push ebx
call fcn.5913d2f9
add esp, 4
mov ecx, dword [esp + 0x12c]
mov esi, dword [ecx + ebp*4]
lea edx, [esi + 1]
push edx
call fcn.5913d2d0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x5902b70e
mov eax, dword [esp + 0x98]
push 0x180
push 0x8000
mov eax, dword [eax + ebp*4]
push eax
call fcn.5908928d
mov edi, eax
add esp, 0xc
cmp edi, 0xffffffff
je 0x5902b6ab
push esi
push ebx
push edi
call fcn.59089a3b
push edi
call fcn.59088fbd
mov eax, dword [0x59162880]
add esp, 0x10
mov dword [esp + 0x100], eax
mov byte [esp + 0x59c], 0x22
mov dword [esp + 0x104], eax
mov byte [esp + 0x59c], 0x23
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0xb8]
mov byte [esp + 0x59c], 0x25
lea edx, [ecx + ebp*4]
lea ecx, [esp + 0x28]
push edx
call fcn.590a5840
push eax
lea ecx, [esp + 0x10c]
mov byte [esp + 0x5a0], 0x26
call fcn.590a63d0
lea ecx, [esp + 0x28]
mov byte [esp + 0x59c], 0x25
call fcn.590a6240
push str.Mail_Upload_size:
push esi
push ebx
call fcn.5900f930
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x5902b2f6
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x28
call fcn.590a6240
mov byte [esp + 0x59c], 0x27
jmp 0x5902b68b
mov edi, str.Mail_Upload_size:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
mov ecx, dword [esp + 0x10]
add ebp, ecx
add ebp, ebx
je 0x5902b6c5
mov al, byte [ebp]
xor edx, edx
cmp al, 0xd
je 0x5902b348
mov eax, esi
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, str.Mail_Upload_size:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp edx, eax
jge 0x5902b348
mov al, byte [edx + ebp + 1]
inc edx
cmp al, 0xd
jne 0x5902b326
mov edi, str.Mail_Upload_size:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
mov eax, esi
not ecx
dec ecx
sub eax, edi
sub eax, ecx
cmp edx, eax
jl 0x5902b386
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x2e
call fcn.590a6240
mov byte [esp + 0x59c], 0x2d
jmp 0x5902b68b
push edx
push ebp
lea ecx, [esp + 0x2c]
call fcn.590a5cf0
mov ecx, dword [esp + 0x24]
push 0xa
push 0
push ecx
mov byte [esp + 0x5a8], 0x30
call fcn.59088c32
push str.Mail_Upload_offset:
push esi
push ebx
mov dword [esp + 0x104], eax
call fcn.5900f930
add esp, 0x18
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x5902b3d6
mov dword [esp + 0xf8], 0
jmp 0x5902b488
mov edi, str.Mail_Upload_offset:
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
not ecx
dec ecx
mov edx, ecx
add edx, edi
add edx, ebx
cmp byte [edx], 0xd
je 0x5902b422
mov eax, esi
mov ecx, edi
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, str.Mail_Upload_offset:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp ebp, eax
jge 0x5902b422
mov al, byte [edx + ebp + 1]
inc ebp
cmp al, 0xd
jne 0x5902b400
mov edi, str.Mail_Upload_offset:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
mov eax, esi
not ecx
dec ecx
sub eax, edi
sub eax, ecx
cmp ebp, eax
jge 0x5902c4aa
push ebp
push edx
lea ecx, [esp + 0xec]
call fcn.590a5cf0
mov ecx, dword [esp + 0xe4]
push 0xa
push 0
push ecx
mov byte [esp + 0x5a8], 0x34
call fcn.59088c32
add esp, 0xc
mov dword [esp + 0xf8], eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x59c], 0x30
call fcn.590a6240
push str.Mail_Upload_length:
push esi
push ebx
call fcn.5900f930
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x5902b4d2
lea ecx, [esp + 0x24]
mov byte [esp + 0x59c], 0x25
call fcn.590a6240
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x36
call fcn.590a6240
mov byte [esp + 0x59c], 0x35
jmp 0x5902b68b
mov edi, str.Mail_Upload_length:
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
not ecx
dec ecx
mov edx, ecx
add edx, edi
add edx, ebx
cmp byte [edx], 0xd
je 0x5902b51e
mov eax, esi
mov ecx, edi
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, str.Mail_Upload_length:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp ebp, eax
jge 0x5902b51e
mov al, byte [edx + ebp + 1]
inc ebp
cmp al, 0xd
jne 0x5902b4fc
mov edi, str.Mail_Upload_length:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x10]
not ecx
dec ecx
sub esi, eax
sub esi, ecx
cmp ebp, esi
jl 0x5902b56b
lea ecx, [esp + 0x24]
mov byte [esp + 0x59c], 0x25
call fcn.590a6240
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x39
call fcn.590a6240
mov byte [esp + 0x59c], 0x38
jmp 0x5902b68b
push ebp
push edx
lea ecx, [esp + 0x9c]
call fcn.590a5cf0
mov ecx, dword [esp + 0x94]
push 0xa
push 0
push ecx
mov byte [esp + 0x5a8], 0x3b
call fcn.59088c32
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x24]
add esp, 0xc
mov dword [esp + 0xe8], eax
lea ecx, [esp + 0x104]
lea eax, [edx + eax*4]
push eax
call fcn.590a63d0
mov eax, dword [0x591ac718]
test eax, eax
je 0x5902b615
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
mov eax, dword [esp + 0x108]
push ecx
mov ecx, dword [esp + 0xfc]
push edx
mov edx, dword [esp + 0xf8]
push eax
mov eax, dword [esp + 0xf8]
push ecx
mov ecx, dword [esp + 0xf8]
push edx
push eax
push ecx
push str.dwIndex___08x___dwSize____08x__dwUploadLength___08x__dwUploadOffset___08x_wstrAttachFilePath___s_wstrFileName___s_wstrUploadModtime___s_r_n
push str.Winncap
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x2c
mov esi, dword [esp + 0x34]
push 0xffffffffffffffff
lea ecx, [esp + 0x34]
lea edx, [esi + 1]
push edx
call fcn.59061930
mov edx, dword [esp + 0x30]
lea ecx, [esi + esi*8]
lea eax, [esp + 0xe8]
push eax
lea ecx, [edx + ecx*4]
call fcn.59029ea0
push ebx
call fcn.5913d2f9
add esp, 4
lea ecx, [esp + 0x94]
xor ebx, ebx
mov byte [esp + 0x59c], 0x30
call fcn.590a6240
lea ecx, [esp + 0x24]
mov byte [esp + 0x59c], 0x25
call fcn.590a6240
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x3d
call fcn.590a6240
mov byte [esp + 0x59c], 0x3c
lea ecx, [esp + 0x104]
call fcn.590a6240
lea ecx, [esp + 0x100]
mov byte [esp + 0x59c], 0x21
call fcn.590a6240
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x9c]
inc ebp
cmp ebp, eax
mov dword [esp + 0x18], ebp
jl 0x5902b1eb
jmp 0x5902b701
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x2b
call fcn.590a6240
lea ecx, [esp + 0x104]
mov byte [esp + 0x59c], 0x2a
call fcn.590a6240
lea ecx, [esp + 0x100]
mov byte [esp + 0x59c], 0x21
call fcn.590a6240
test ebx, ebx
je 0x5902b70e
push ebx
call fcn.5913d2f9
add esp, 4
lea ecx, [esp + 0x74]
call fcn.590b3a40
lea ecx, [esp + 0xc8]
mov byte [esp + 0x59c], 0x3f
mov dword [esp + 0x18], 0
call fcn.590b3a40
mov eax, dword [esp + 0x34]
mov byte [esp + 0x59c], 0x40
test eax, eax
jle 0x5902bcf5
lea ecx, [esp + 0x40]
call fcn.590abbc0
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x41
call fcn.590abbc0
mov eax, dword [0x59162880]
mov byte [esp + 0x59c], 0x42
mov dword [esp + 0x154], eax
mov byte [esp + 0x59c], 0x43
mov dword [esp + 0x158], eax
mov byte [esp + 0x59c], 0x44
mov dword [esp + 0x15c], eax
mov ecx, dword [esp + 0x34]
xor ebp, ebp
test ecx, ecx
mov byte [esp + 0x59c], 0x46
jle 0x5902bc3a
mov edx, dword [esp + 0x30]
lea eax, [edx + 4]
mov esi, dword [eax]
mov edi, dword [eax + 4]
cmp esi, edi
jb 0x5902b7c3
mov esi, dword [eax + 0xc]
test esi, esi
je 0x5902b7d1
inc ebp
add eax, 0x24
cmp ebp, ecx
jge 0x5902bc3a
jmp 0x5902b7b3
lea edi, [ebp + ebp*8]
lea ecx, [esp + 0x40]
shl edi, 2
lea eax, [edi + edx + 0x20]
push eax
mov eax, dword [esp + 0x48]
push eax
call fcn.590ac1d0
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x88]
lea eax, [edi + ecx + 0x1c]
lea ecx, [esp + 0x84]
push eax
push edx
call fcn.590ac1d0
mov eax, dword [esp + 0x30]
mov ecx, dword [edi + eax]
lea esi, [edi + eax]
mov dword [esp + 0x13c], ecx
mov edx, dword [esi + 4]
mov dword [esp + 0x140], edx
mov eax, dword [esi + 8]
mov dword [esp + 0x144], eax
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x148], ecx
mov edx, dword [esi + 0x10]
lea ecx, [esi + 0x18]
mov dword [esp + 0x14c], edx
mov eax, dword [esi + 0x14]
push ecx
lea ecx, [esp + 0x158]
mov dword [esp + 0x154], eax
call fcn.590a63d0
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x158]
push edx
call fcn.590a63d0
add esi, 0x20
lea ecx, [esp + 0x15c]
push esi
call fcn.590a63d0
mov eax, dword [esp + 0xcc]
push ebp
push eax
lea ecx, [esp + 0xd0]
call fcn.590b3c80
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
sub esi, ebp
mov dword [esp + 0x14], 0
dec esi
lea ebx, [edi + ecx]
mov ecx, ebx
call fcn.59027b30
mov eax, dword [esp + 0x14]
add ebx, 0x24
mov edx, eax
dec eax
test edx, edx
mov dword [esp + 0x14], eax
jne 0x5902b8a6
test esi, esi
je 0x5902b8e1
lea eax, [esi + esi*8]
lea ecx, [ebp + ebp*8 + 9]
shl eax, 2
push eax
mov eax, dword [esp + 0x34]
add edi, eax
lea edx, [eax + ecx*4]
push edx
push edi
call fcn.59088c50
add esp, 0xc
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x144]
dec eax
mov dword [esp + 0x14], ecx
test eax, eax
mov dword [esp + 0x34], eax
jle 0x5902ba18
xor ebp, ebp
test eax, eax
jle 0x5902ba18
mov eax, dword [esp + 0x30]
xor esi, esi
mov eax, dword [esi + eax + 0x1c]
mov edx, dword [esp + 0x158]
push eax
push edx
call fcn.59089858
add esp, 8
test eax, eax
jne 0x5902b962
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x154]
mov eax, dword [esi + eax + 0x18]
push eax
push ecx
call fcn.59089858
add esp, 8
test eax, eax
jne 0x5902b962
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x140]
cmp edx, dword [esi + eax + 4]
jne 0x5902b966
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + eax + 0x10]
cmp ecx, edx
je 0x5902b978
jmp 0x5902b966
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
inc ebp
add esi, 0x24
cmp ebp, ecx
jge 0x5902ba18
jmp 0x5902b90d
mov edx, dword [esp + 0x44]
lea esi, [ebp + ebp*8]
shl esi, 2
lea ecx, [esp + 0x40]
lea eax, [esi + eax + 0x20]
push eax
push edx
call fcn.590ac1d0
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [esi + eax + 8]
mov eax, dword [esi + eax]
add edx, ecx
push eax
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x7c]
push edx
lea ecx, [esp + 0x7c]
call fcn.590b3c80
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
sub edi, ebp
mov dword [esp + 0x10], 0
dec edi
lea ebx, [esi + eax]
mov ecx, ebx
call fcn.59027b30
mov eax, dword [esp + 0x10]
add ebx, 0x24
mov ecx, eax
dec eax
test ecx, ecx
mov dword [esp + 0x10], eax
jne 0x5902b9cc
test edi, edi
je 0x5902ba07
mov eax, dword [esp + 0x30]
lea edx, [edi + edi*8]
shl edx, 2
lea ecx, [ebp + ebp*8 + 9]
push edx
add esi, eax
lea edx, [eax + ecx*4]
push edx
push esi
call fcn.59088c50
add esp, 0xc
mov eax, dword [esp + 0x34]
dec eax
test eax, eax
mov dword [esp + 0x34], eax
jg 0x5902b8fd
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esp + 0x10], 1
jne 0x5902bbba
mov eax, dword [esp + 0x44]
or ebp, 0xffffffff
or esi, 0xffffffff
mov dword [esp + 0x14], 0
test eax, eax
jle 0x5902bb5e
mov edi, dword [esp + 0x14]
cmp eax, 1
je 0x5902bb36
test edi, edi
jne 0x5902ba9c
mov ecx, dword [esp + 0x40]
push 0x180
push 0x8002
mov eax, dword [ecx]
push eax
call fcn.59089d51
mov ebp, eax
add esp, 0xc
cmp ebp, 0xffffffff
je 0x5902bc2c
push 2
push edi
push ebp
call fcn.590896b6
add esp, 0xc
cmp eax, 0xffffffff
je 0x5902bc33
jmp 0x5902bb25
mov edx, dword [esp + 0x40]
push 0x180
push 0x8000
mov eax, dword [edx + edi*4]
push eax
call fcn.59089d51
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x5902bc33
push 2
push 0
push esi
call fcn.590896b6
push 0
push 0
push esi
mov ebx, eax
call fcn.590896b6
push 0
push 0
push esi
call fcn.590896b6
add esp, 0x24
cmp eax, 0xffffffff
je 0x5902bc33
lea eax, [ebx + 1]
push eax
call fcn.5913d2d0
mov edi, eax
push ebx
push edi
push esi
call fcn.59089a3b
push eax
push edi
push ebp
call fcn.5908909d
push esi
call fcn.59088fbd
add esp, 0x20
or esi, 0xffffffff
test edi, edi
je 0x5902bb21
push edi
call fcn.5913d2f9
add esp, 4
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
inc edi
cmp edi, eax
mov dword [esp + 0x14], edi
jl 0x5902ba51
mov edi, dword [esp + 0x10]
cmp ebp, 0xffffffff
je 0x5902bb48
push ebp
call fcn.59088fbd
add esp, 4
cmp esi, 0xffffffff
je 0x5902bb56
push esi
call fcn.59088fbd
add esp, 4
test edi, edi
je 0x5902bc58
mov ecx, dword [esp + 0x13c]
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x140]
mov dword [edx + ecx*4], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xb8]
mov eax, dword [esp + 0x13c]
push ecx
lea ecx, [edx + eax*4]
call fcn.590a63d0
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x13c]
lea ecx, [esp + 0x158]
push ecx
lea ecx, [edx + eax*4]
call fcn.590a63d0
mov ecx, dword [esp + 0x140]
mov eax, dword [esp + 0x18]
add eax, ecx
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x59c], 0x4e
call fcn.590a6240
lea ecx, [esp + 0x158]
mov byte [esp + 0x59c], 0x4d
call fcn.590a6240
lea ecx, [esp + 0x154]
mov byte [esp + 0x59c], 0x42
call fcn.590a6240
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x41
call fcn.590abbd0
lea ecx, [esp + 0x40]
mov byte [esp + 0x59c], 0x40
call fcn.590abbd0
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x5902bcb9
jmp 0x5902b747
xor edi, edi
jmp 0x5902bb48
xor edi, edi
jmp 0x5902bb3a
lea ecx, [esp + 0x15c]
mov byte [esp + 0x59c], 0x48
call fcn.590a6240
mov byte [esp + 0x59c], 0x47
jmp 0x5902bc74
lea ecx, [esp + 0x15c]
mov byte [esp + 0x59c], 0x4b
call fcn.590a6240
mov byte [esp + 0x59c], 0x4a
lea ecx, [esp + 0x158]
call fcn.590a6240
lea ecx, [esp + 0x154]
mov byte [esp + 0x59c], 0x42
call fcn.590a6240
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x41
call fcn.590abbd0
lea ecx, [esp + 0x40]
mov byte [esp + 0x59c], 0x40
call fcn.590abbd0
cmp dword [esp + 0x18], 0x6400000
jb 0x5902bcf5
mov eax, dword [esp + 0xcc]
xor esi, esi
test eax, eax
jle 0x5902bcf5
mov edx, dword [esp + 0xc8]
lea ecx, [esp + 0x74]
mov eax, dword [edx + esi*4]
push eax
mov eax, dword [esp + 0x7c]
push eax
call fcn.590b3c80
mov eax, dword [esp + 0xcc]
inc esi
cmp esi, eax
jl 0x5902bcd0
mov edi, dword [esp + 0x78]
test edi, edi
jle 0x5902bd3e
mov eax, dword [esp + 0x74]
xor ecx, ecx
mov ebx, 1
cmp ebx, edi
mov edx, ebx
jge 0x5902bd31
mov esi, dword [eax + edx*4]
mov ebp, dword [ecx + eax]
cmp ebp, esi
jae 0x5902bd2c
mov dword [ecx + eax], esi
mov eax, dword [esp + 0x74]
mov edi, ebp
mov dword [eax + edx*4], edi
mov edi, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
inc edx
cmp edx, edi
jl 0x5902bd0e
inc ebx
add ecx, 4
lea edx, [ebx - 1]
cmp edx, edi
jl 0x5902bd08
jmp 0x5902bd42
mov eax, dword [esp + 0x74]
xor esi, esi
test edi, edi
jle 0x5902bda7
jmp 0x5902bd4e
mov eax, dword [esp + 0x74]
mov eax, dword [eax + esi*4]
mov ecx, dword [esp + 0xb8]
mov eax, dword [ecx + eax*4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [esp + 0x74]
push 1
lea ecx, [esp + 0x54]
mov eax, dword [edx + esi*4]
push eax
call fcn.590ac7a0
mov ecx, dword [esp + 0x74]
push 1
mov edx, dword [ecx + esi*4]
lea ecx, [esp + 0xbc]
push edx
call fcn.590ac7a0
mov eax, dword [esp + 0x74]
push 1
mov ecx, dword [eax + esi*4]
push ecx
lea ecx, [esp + 0x68]
call fcn.590b3d60
mov eax, dword [esp + 0x78]
inc esi
cmp esi, eax
jl 0x5902bd4a
lea ecx, [esp + 0xc8]
mov byte [esp + 0x59c], 0x3f
call fcn.590b3a50
lea ecx, [esp + 0x74]
mov byte [esp + 0x59c], 0x21
call fcn.590b3a50
mov esi, dword [esp + 0x30]
mov byte [esp + 0x59c], 0x20
test esi, esi
je 0x5902be31
mov eax, dword [esp + 0x34]
mov dword [esp + 0x18], esi
test eax, eax
je 0x5902be28
lea edi, [eax]
lea ecx, [esi + 0x20]
mov byte [esp + 0x59c], 0x51
call fcn.590a6240
lea ecx, [esi + 0x1c]
mov byte [esp + 0x59c], 0x50
call fcn.590a6240
lea ecx, [esi + 0x18]
mov byte [esp + 0x59c], 0x20
call fcn.590a6240
add esi, 0x24
dec edi
mov dword [esp + 0x18], esi
jne 0x5902bdea
mov esi, dword [esp + 0x30]
push esi
call fcn.5913d2f9
add esp, 4
mov eax, dword [esp + 0x70]
xor ebp, ebp
test eax, eax
je 0x5902bfe0
lea esi, [eax + 1]
xor ebx, ebx
push esi
call fcn.5913d2d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x5902c52b
mov ecx, esi
xor eax, eax
mov edx, ecx
mov edi, ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 0x180
and ecx, 3
push 0x8000
rep stosb byte es:[edi], al
mov eax, dword [0x591ad580]
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx + eax + 0x3c]
push eax
call fcn.5908928d
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x5902befc
mov edx, dword [0x591ad580]
mov edi, dword [esp + 0x2c]
mov eax, dword [edi + edx + 0x40]
push eax
push ebp
push esi
call fcn.59089a3b
push esi
mov ebx, eax
call fcn.59088fbd
mov ecx, dword [0x591ad580]
add esp, 0x10
mov eax, dword [edi + ecx + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, 0x591892bc
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebx + ebp]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x591892bc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebx, ecx
jmp 0x5902bf1e
mov edi, str.Origin_data_has_been_deleted_unexpectedly__r_n_r_n
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x14], 0
test eax, eax
jle 0x5902bfe0
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x14]
push 0x180
push 0x8000
mov eax, dword [eax + ecx*4]
push eax
call fcn.5908928d
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x5902bfc8
mov edx, dword [esp + 0x12c]
mov edi, dword [esp + 0x14]
lea ecx, [ebx + ebp]
mov eax, dword [edx + edi*4]
push eax
push ecx
push esi
call fcn.59089a3b
push esi
add ebx, eax
call fcn.59088fbd
mov edx, dword [esp + 0xa8]
add esp, 0x10
mov eax, dword [edx + edi*4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, 0x591892bc
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebx + ebp]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x591892bc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebx, ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x9c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x5902bf35
mov esi, dword [esp + 0x2c]
lea ecx, [esp + 0x12c]
mov edi, dword [esp + 0x70]
lea edx, [esp + 0x60]
push ecx
push edx
mov edx, dword [0x591ad580]
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0xc4]
lea eax, [esi + edx]
push ecx
push eax
push edi
push ebp
call fcn.59029190
mov eax, dword [0x591ad580]
lea ecx, [esp + 0x7c]
lea edx, [esp + 0x6c]
push ecx
push edx
lea ecx, [esp + 0xdc]
lea edx, [esi + eax + 0x38]
push ecx
push edx
lea ecx, [esi + eax + 0x34]
lea edx, [esi + eax + 0x24]
push ecx
push edx
lea ecx, [esi + eax + 0x30]
lea edx, [esi + eax + 0x2c]
push ecx
push edx
lea ecx, [esi + eax + 0x28]
lea edx, [esi + eax + 0x20]
push ecx
push edx
push edi
push ebp
call fcn.59024d80
add esp, 0x4c
test ebp, ebp
je 0x5902c064
push ebp
call fcn.5913d2f9
add esp, 4
mov edi, dword [0x591ad584]
mov ecx, dword [esp + 0x20]
mov eax, dword [0x591ad580]
sub edi, ecx
dec edi
xor ebp, ebp
lea ebx, [esi + eax]
mov ecx, ebx
call fcn.59012880
add ebx, 0x44
mov ecx, ebp
dec ebp
test ecx, ecx
jne 0x5902c07b
test edi, edi
je 0x5902c0bb
mov eax, dword [esp + 0x20]
mov edx, edi
shl edx, 4
add edx, edi
shl edx, 2
inc eax
push edx
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, dword [0x591ad580]
add esi, eax
lea edx, [eax + ecx*4]
push edx
push esi
call fcn.59088c50
add esp, 0xc
mov eax, dword [0x591ad584]
lea ecx, [esp + 0xa8]
dec eax
mov byte [esp + 0x1f], 1
mov dword [0x591ad584], eax
mov byte [esp + 0x59c], 0x1f
call fcn.590b3a50
lea ecx, [esp + 0x12c]
mov byte [esp + 0x59c], 0x1e
call fcn.590b3a50
lea ecx, [esp + 0x60]
mov byte [esp + 0x59c], 0x1d
call fcn.590b3a50
lea ecx, [esp + 0x98]
mov byte [esp + 0x59c], 0x1c
call fcn.590aaef0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x59c], 0x1b
call fcn.590abbd0
lea ecx, [esp + 0x50]
mov byte [esp + 0x59c], 0x1a
call fcn.590abbd0
lea ecx, [esp + 0x188]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590b4900
mov esi, dword [esp + 0x20]
mov ebx, dword [0x591ad584]
inc esi
cmp esi, ebx
mov dword [esp + 0x20], esi
jl 0x5902ab98
mov edi, dword [0x591ad574]
test edi, edi
mov dword [esp + 0x20], 0
jle 0x5902c5cf
mov esi, dword [0x591ad570]
xor ebp, ebp
mov eax, dword [esp + 0x180]
mov ecx, dword [esi + ebp + 0x14]
mov edx, dword [esi + ebp + 0x18]
sub eax, ecx
mov ecx, dword [esp + 0x184]
push 0
sbb ecx, edx
push 0x3e8
push ecx
push eax
call fcn.59088a40
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], edx
fild qword [esp + 0xd8]
fild qword [0x591ad710]
fdivp st(1)
fabs
fild qword [0x59188248]
fcompp
fnstsw ax
test ah, 1
je 0x5902c5b9
lea edx, [esp + 0x24]
push 0
push edx
call fcn.59059db0
add esp, 8
lea ecx, [esp + 0xa8]
mov dword [esp + 0x59c], 0x53
call fcn.590abbc0
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x54
call fcn.590b3a40
lea ecx, [esp + 0xc8]
mov byte [esp + 0x59c], 0x55
call fcn.590abbc0
mov eax, dword [0x591ad570]
mov ecx, dword [esp + 0xcc]
mov byte [esp + 0x59c], 0x56
lea eax, [eax + ebp + 0x24]
push eax
push ecx
lea ecx, [esp + 0xd0]
call fcn.590ac1d0
mov edx, dword [0x591ad570]
lea ecx, [esp + 0xa8]
lea eax, [edx + ebp + 0x20]
push eax
mov eax, dword [esp + 0xb0]
push eax
call fcn.590ac1d0
mov ecx, dword [0x591ad570]
mov edx, dword [esp + 0x88]
xor ebx, ebx
mov esi, dword [ecx + ebp + 0x30]
lea ecx, [esp + 0x84]
push esi
push edx
call fcn.590b3c80
test esi, esi
je 0x5902c30a
lea edi, [esi + 1]
push edi
call fcn.5913d2d0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x5902c96d
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 0x180
and ecx, 3
push 0x8000
rep stosb byte es:[edi], al
mov eax, dword [0x591ad570]
mov eax, dword [eax + ebp + 0x2c]
push eax
call fcn.5908928d
mov edi, eax
add esp, 0xc
cmp edi, 0xffffffff
je 0x5902c30a
push esi
push ebx
push edi
call fcn.59089a3b
push edi
call fcn.59088fbd
mov ecx, dword [0x591ad570]
add esp, 0x10
mov eax, dword [ecx + ebp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [esp + 0xa8]
push 1
lea eax, [esp + 0xcc]
mov ecx, dword [esp + 0x28]
push edx
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
call fcn.5900c690
add esp, 0x2c
test eax, eax
je 0x5902c38b
mov edx, dword [esp + 0x24]
push esi
push ebx
push edx
call fcn.5900c480
add esp, 0xc
test eax, eax
je 0x5902c38b
push 0
lea eax, [esp + 0x88]
push 0
lea ecx, [esp + 0xb0]
push eax
lea edx, [esp + 0xd4]
push ecx
push edx
mov eax, dword [esp + 0x38]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
push 1
push eax
push esi
push ebx
call fcn.5900e750
add esp, 0x44
test ebx, ebx
je 0x5902c398
push ebx
call fcn.5913d2f9
add esp, 4
mov ebx, dword [0x591ad574]
mov ecx, dword [esp + 0x20]
sub ebx, ecx
mov ecx, dword [0x591ad570]
dec ebx
xor edi, edi
lea esi, [ecx + ebp]
mov dword [esp + 0x28], esi
lea ecx, [esi + 0x44]
mov byte [esp + 0x59c], 0x5a
call fcn.590a6240
lea ecx, [esi + 0x2c]
mov byte [esp + 0x59c], 0x59
call fcn.590a0ec0
lea ecx, [esi + 0x24]
mov byte [esp + 0x59c], 0x58
call fcn.590a6240
lea ecx, [esi + 0x20]
mov byte [esp + 0x59c], 0x57
call fcn.590a6240
lea ecx, [esi + 0x1c]
mov byte [esp + 0x59c], 0x56
call fcn.590a6240
add esi, 0x48
mov edx, edi
dec edi
mov dword [esp + 0x28], esi
test edx, edx
jne 0x5902c3b4
test ebx, ebx
je 0x5902c433
lea eax, [ebx + ebx*8]
shl eax, 3
push eax
mov eax, dword [0x591ad570]
lea ecx, [eax + ebp + 0x48]
lea edx, [eax + ebp]
push ecx
push edx
call fcn.59088c50
add esp, 0xc
mov eax, dword [0x591ad574]
lea ecx, [esp + 0xc8]
dec eax
mov byte [esp + 0x1f], 1
mov dword [0x591ad574], eax
mov byte [esp + 0x59c], 0x55
call fcn.590abbd0
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x54
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x59c], 0x53
call fcn.590abbd0
lea ecx, [esp + 0x24]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590a0ec0
mov ebx, dword [0x591ad584]
mov edi, dword [0x591ad574]
mov esi, dword [0x591ad570]
jmp 0x5902c5c5
lea ecx, [esp + 0x24]
mov byte [esp + 0x59c], 0x25
call fcn.590a6240
lea ecx, [esp + 0x108]
mov byte [esp + 0x59c], 0x32
call fcn.590a6240
lea ecx, [esp + 0x104]
mov byte [esp + 0x59c], 0x31
call fcn.590a6240
lea ecx, [esp + 0x100]
mov byte [esp + 0x59c], 0x21
call fcn.590a6240
mov esi, dword [esp + 0x30]
mov byte [esp + 0x59c], 0x20
test esi, esi
je 0x5902c52b
mov eax, dword [esp + 0x34]
test eax, eax
je 0x5902c522
lea edi, [eax]
mov ecx, esi
call fcn.59027b30
add esi, 0x24
dec edi
jne 0x5902c511
mov esi, dword [esp + 0x30]
push esi
call fcn.5913d2f9
add esp, 4
lea ecx, [esp + 0xa8]
mov byte [esp + 0x59c], 0x1f
call fcn.590b3a50
lea ecx, [esp + 0x12c]
mov byte [esp + 0x59c], 0x1e
call fcn.590b3a50
lea ecx, [esp + 0x60]
mov byte [esp + 0x59c], 0x1d
call fcn.590b3a50
lea ecx, [esp + 0x98]
mov byte [esp + 0x59c], 0x1c
call fcn.590aaef0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x59c], 0x1b
call fcn.590abbd0
lea ecx, [esp + 0x50]
mov byte [esp + 0x59c], 0x1a
call fcn.590abbd0
lea ecx, [esp + 0x188]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590b4900
jmp 0x5902cb90
mov ecx, dword [esp + 0x20]
inc ecx
add ebp, 0x48
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], edi
jl 0x5902c189
mov al, byte [esp + 0x1f]
test al, al
je 0x5902cb84
mov eax, dword [0x5916287c]
mov dword [esp + 0x14], eax
mov ecx, dword [0x591ad628]
mov dword [esp + 0x59c], 0x5c
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5902c734
xor edx, edx
lea eax, [esp + 0x60]
mov dword [esp + 0x62], edx
push eax
mov dword [esp + 0x6a], edx
mov word [esp + 0x64], 0
mov dword [esp + 0x6e], edx
mov word [esp + 0x72], dx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x6a]
mov eax, dword [esp + 0x68]
and ecx, 0xffff
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x6a]
and eax, 0xffff
push edx
mov edx, dword [esp + 0x6a]
push eax
mov eax, dword [esp + 0x6c]
and ecx, 0xffff
and edx, 0xffff
push ecx
and eax, 0xffff
push edx
push eax
lea ecx, [esp + 0x1ac]
push str._d_d_d_d_d_d
push ecx
call fcn.590881e0
lea edx, [esp + 0x48]
push edx
call fcn.5900d7e0
add esp, 0x24
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.mtmp
push str.ContentBuf
mov byte [esp + 0x5a4], 0x5d
call edi
mov ecx, dword [esi]
push eax
lea eax, [esp + 0x1a0]
push eax
push ecx
push str._s_s__d_s._s
push 0x591ad628
call fcn.590a3d20
add esp, 0x1c
lea ecx, [esp + 0x28]
mov byte [esp + 0x59c], 0x5c
call fcn.590a0ec0
cmp dword [0x591ad704], 1
jne 0x5902c734
mov ecx, 0x591ad628
call fcn.590a0c40
lea edx, [esp + 0x28]
push edx
call fcn.5900d7e0
add esp, 4
mov esi, eax
push str.mtmp
push str.http_ContentBuf
mov byte [esp + 0x5a4], 0x5e
call edi
mov ecx, dword [esi]
push eax
lea eax, [esp + 0x1a0]
push eax
push ecx
push str._s_s__d_s._s
push 0x591ad628
call fcn.590a3d20
add esp, 0x1c
lea ecx, [esp + 0x28]
mov byte [esp + 0x59c], 0x5c
call fcn.590a0ec0
push 0x591ad628
lea ecx, [esp + 0x18]
call fcn.590a1040
mov edx, dword [0x59162880]
mov dword [esp + 0x10], edx
mov eax, dword [0x591ad584]
xor edi, edi
test eax, eax
mov byte [esp + 0x59c], 0x5f
jle 0x5902c812
xor esi, esi
mov bl, 0x60
mov eax, dword [0x59162880]
mov dword [esp + 0x18], eax
mov eax, dword [0x591ad580]
mov byte [esp + 0x59c], bl
mov ecx, dword [esi + eax + 0x1c]
mov edx, dword [esi + eax + 0x40]
push ecx
mov ecx, dword [esi + eax + 0x3c]
push edx
mov edx, dword [esi + eax + 0x38]
push ecx
mov ecx, dword [esi + eax + 0x34]
push edx
mov edx, dword [esi + eax + 0x24]
push ecx
mov ecx, dword [esi + eax + 0x30]
push edx
mov edx, dword [esi + eax + 0x2c]
push ecx
mov ecx, dword [esi + eax + 0x28]
push edx
mov edx, dword [esi + eax + 0x20]
push ecx
mov ecx, dword [esi + eax + 0x18]
push edx
mov edx, dword [esi + eax + 0x14]
push ecx
mov ecx, dword [esi + eax + 0x10]
push edx
mov edx, dword [esi + eax + 0xc]
push ecx
mov ecx, dword [esi + eax + 8]
push edx
mov edx, dword [esi + eax + 4]
mov eax, dword [esi + eax]
push ecx
push edx
push eax
lea ecx, [esp + 0x5c]
push str.Content:_TYPE_dTB_I64xTE_I64xTR_I64xACCOUNT_sTO_sCC_sBCC_sSUBJ_sTXT_sHTML_sOrgPath_SSize_dFLAG_s_r_n
push ecx
call fcn.590a91c0
add esp, 0x4c
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.590a6ef0
lea ecx, [esp + 0x18]
mov byte [esp + 0x59c], 0x5f
call fcn.590a6240
mov eax, dword [0x591ad584]
inc edi
add esi, 0x44
cmp edi, eax
jl 0x5902c767
cmp dword [0x591ad704], 1
jne 0x5902c9d9
mov eax, dword [0x591ad574]
lea esi, [eax - 1]
test esi, esi
mov dword [esp + 0x20], esi
jl 0x5902c9d9
mov eax, dword [0x591ad570]
lea ebx, [esi + esi*8]
shl ebx, 3
mov ecx, dword [0x591ac718]
test ecx, ecx
je 0x5902c86b
mov ecx, dword [ebx + eax + 0x24]
push ecx
push str.remove_1___s_
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
mov eax, dword [0x591ad570]
add esp, 0x14
cmp dword [ebx + eax], 0x3d2
jne 0x5902c9c7
mov eax, dword [ebx + eax + 0x24]
push 0
push eax
call fcn.590c43b0
add esp, 8
test eax, eax
jne 0x5902c9c2
mov eax, dword [0x591ac718]
test eax, eax
je 0x5902c8bb
mov edx, dword [0x591ad570]
mov eax, dword [ebx + edx]
push eax
push str.remove_2___d_
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov ebp, dword [0x591ad574]
mov ecx, dword [esp + 0x20]
sub ebp, ecx
mov ecx, dword [0x591ad570]
dec ebp
xor edi, edi
lea esi, [ebx + ecx]
mov dword [esp + 0x28], esi
lea ecx, [esi + 0x44]
mov byte [esp + 0x59c], 0x64
call fcn.590a6240
lea ecx, [esi + 0x2c]
mov byte [esp + 0x59c], 0x63
call fcn.590a0ec0
lea ecx, [esi + 0x24]
mov byte [esp + 0x59c], 0x62
call fcn.590a6240
lea ecx, [esi + 0x20]
mov byte [esp + 0x59c], 0x61
call fcn.590a6240
lea ecx, [esi + 0x1c]
mov byte [esp + 0x59c], 0x5f
call fcn.590a6240
add esi, 0x48
mov edx, edi
dec edi
mov dword [esp + 0x28], esi
test edx, edx
jne 0x5902c8d7
test ebp, ebp
je 0x5902c957
lea eax, [ebp + ebp*8]
shl eax, 3
push eax
mov eax, dword [0x591ad570]
lea ecx, [ebx + eax + 0x48]
lea edx, [ebx + eax]
push ecx
push edx
call fcn.59088c50
add esp, 0xc
mov eax, dword [0x591ad574]
mov esi, dword [esp + 0x20]
dec eax
mov dword [0x591ad574], eax
mov eax, dword [0x591ad570]
jmp 0x5902c9c7
lea ecx, [esp + 0xc8]
mov byte [esp + 0x59c], 0x55
call fcn.590abbd0
lea ecx, [esp + 0x84]
mov byte [esp + 0x59c], 0x54
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x59c], 0x53
call fcn.590abbd0
lea ecx, [esp + 0x24]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590a0ec0
jmp 0x5902cb90
mov eax, dword [0x591ad570]
dec esi
sub ebx, 0x48
test esi, esi
mov dword [esp + 0x20], esi
jge 0x5902c83e
jmp 0x5902c9de
mov eax, dword [0x591ad570]
mov ecx, dword [0x591ad574]
xor edi, edi
test ecx, ecx
jle 0x5902ca8c
xor esi, esi
mov bl, 0x66
jmp 0x5902c9f9
mov eax, dword [0x591ad570]
mov ecx, dword [0x59162880]
mov dword [esp + 0x18], ecx
mov edx, dword [esi + eax + 0x28]
mov ecx, dword [esi + eax + 0x1c]
push edx
mov edx, dword [esi + eax + 0x30]
push ecx
mov ecx, dword [esi + eax + 0x2c]
push edx
mov edx, dword [esi + eax + 0x24]
push ecx
mov ecx, dword [esi + eax + 0x20]
push edx
mov edx, dword [esi + eax + 0x18]
push ecx
mov ecx, dword [esi + eax + 0x14]
push edx
mov edx, dword [esi + eax + 0x10]
push ecx
mov ecx, dword [esi + eax + 0xc]
push edx
mov edx, dword [esi + eax + 8]
push ecx
mov ecx, dword [esi + eax + 4]
push edx
mov edx, dword [esi + eax]
push ecx
push edx
lea eax, [esp + 0x4c]
push str.Attach:_TYPE_dTB_I64xTE_I64xTR_I64xATTACHNAME_sATTACHPATH_sOrgPath_SSize_dFLAG_sAttachFileSize_d_r_n
push eax
mov byte [esp + 0x5d8], bl
call fcn.590a91c0
add esp, 0x3c
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.590a6ef0
lea ecx, [esp + 0x18]
mov byte [esp + 0x59c], 0x5f
call fcn.590a6240
mov eax, dword [0x591ad574]
inc edi
add esi, 0x48
cmp edi, eax
jl 0x5902c9f4
mov eax, dword [0x591ac718]
test eax, eax
je 0x5902cab3
mov edx, dword [esp + 0x10]
push edx
push str.Contentbuf.mtmp__s_
push str.Combine
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x14
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5902cace
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x5902cb53
mov edx, dword [esp + 0x14]
push 0x180
push 0x8201
push edx
call fcn.5908928d
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
jne 0x5902cb2d
mov eax, dword [esp + 0x14]
push 0x180
push 0x8101
push eax
call fcn.5908928d
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
jne 0x5902cb2d
lea ecx, [esp + 0x10]
mov byte [esp + 0x59c], 0x5c
call fcn.590a6240
lea ecx, [esp + 0x14]
mov dword [esp + 0x59c], esi
call fcn.590a0ec0
jmp 0x5902cb90
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
lea edx, [eax + eax]
push edx
push 0
call fcn.590a6f10
push eax
push esi
call fcn.5908909d
push esi
call fcn.59088fbd
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x59c], 0x5c
call fcn.590a6240
lea ecx, [esp + 0x14]
mov dword [esp + 0x59c], 0xffffffff
call fcn.590a0ec0
mov ebx, dword [0x591ad584]
mov edi, dword [0x591ad574]
mov dword [0x591ad71c], ebx
mov dword [0x591ad720], edi
mov ecx, dword [esp + 0x594]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x590
ret