Function at 0x4084d7
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x250
push ebx
push esi
push edi
xor eax, eax
mov ax, word [0x5538c4]
test eax, eax
jne 0x4084fd
mov eax, 0xffffffb9
jmp 0x40dc5d
mov eax, dword [ebp + 8]
and eax, 0xffff
xor ecx, ecx
mov cx, word [0x5538c4]
cmp eax, ecx
jl 0x408520
mov eax, 0xffffffb7
jmp 0x40dc5d
mov eax, dword [ebp + 8]
mov eax, dword [eax*4 + 0x5c40c8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0x200a
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
add eax, 0x400c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
cmp dword [eax + 0x8cf8], ecx
jbe 0x40857c
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x270f
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cfc], 0
je 0x4085b3
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
cmp dword [eax + 0x8cfc], ecx
jae 0x4085b3
push 0xfffffffffffffff8
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8d9c]
test ecx, ecx
je 0x4085ee
push 2
mov eax, dword [ebp - 4]
push eax
call fcn.0040e073
add esp, 8
test eax, eax
jne 0x4085ee
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x270f
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d3c]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d38], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d38], 0
jle 0x408623
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d00]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408695
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d38]
cmp dword [eax + 0x8d34], ecx
je 0x408695
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d38]
push eax
push str.__3d:_ld__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d38]
mov dword [ebp - 0x248], eax
jmp 0x40d938
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d38], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x8cf8], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8cfc], 0
xor eax, eax
jmp 0x40dc5d
call fcn.004042fa
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408726
mov eax, dword [ebp - 0x14]
push eax
push str.vSocket:__i_created_r_n
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
call fcn.004037b9
add esp, 4
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
cmp dword [ebp - 0x14], 0
jge 0x40874d
push 0xffffffffffffffee
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf4], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408784
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
push 0x3e9
mov eax, dword [ebp - 0x14]
push eax
call fcn.00405991
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x66
jmp 0x40dc30
push 0x2000
mov eax, dword [ebp - 0x10]
push eax
call fcn.00404530
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
push 0x2000
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040e178
add esp, 8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40880e
mov eax, dword [ebp - 0x10]
push eax
push str.LocalHost___s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x68
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408875
mov eax, dword [ebp - 4]
add eax, 0x829a
push eax
push str.Server___s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
add eax, 0x829a
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
call fcn.00404435
add esp, 8
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x4088b4
push 0xffffffffffffffd2
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x69
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408929
push 0x12
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
call fcn.00405937
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
push str.ServerIP___s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8dc0], 0
je 0x408958
push 0
mov eax, dword [ebp - 0x64]
push eax
call fcn.004045d1
add esp, 8
mov eax, dword [ebp - 4]
mov ax, word [eax + 0x8d20]
push eax
mov eax, dword [ebp - 4]
add eax, 0x829a
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
call fcn.00404c46
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 0
cmp dword [ebp - 0x68], 0
jge 0x4089ac
push 0xffffffffffffffdc
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [0x5538e4]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x6a
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
mov dword [ebp - 0x6c], eax
push 3
mov eax, dword [ebp - 4]
push eax
call fcn.0040e073
add esp, 8
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x408a1d
push 0xffffffffffffffdc
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
push 2
mov eax, dword [ebp - 4]
push eax
call fcn.0040e073
add esp, 8
test eax, eax
je 0x408a96
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8dc0], 0
je 0x408a51
push 1
mov eax, dword [ebp - 0x6c]
push eax
call fcn.004045d1
add esp, 8
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d40]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d3c], eax
jmp 0x40dc30
jmp 0x40dc30
push 0x20
mov eax, dword [ebp - 4]
add eax, 0x8bb2
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jge 0x408ae6
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x18f
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x408b6f
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jge 0x408b62
mov eax, dword [ebp - 0x78]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408b90
mov eax, dword [ebp - 4]
push eax
call fcn.00408204
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x65
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d40], 0x12d
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e099
add esp, 8
test eax, eax
je 0x408d07
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x408d02
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x408c02
push 0xf
push str.Greeting_seen_r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x408c3b
mov eax, dword [ebp - 0x84]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
push 0x3c
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x408ca2
push 0x3e
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x408c93
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x7c]
inc eax
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.00403770
add esp, 0xc
jmp 0x408c9d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8c16], 0
jmp 0x408cac
mov eax, dword [ebp - 4]
mov byte [eax + 0x8c16], 0
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dce]
test ecx, ecx
je 0x408cf5
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x12e
jmp 0x408d02
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x12f
jmp 0x408d13
mov eax, dword [0x5538e8]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8c16]
test ecx, ecx
jne 0x408d45
push 0xffffffffffffffc7
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
push 0x40
mov eax, dword [ebp - 4]
add eax, 0x8462
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004037fa
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
call fcn.00414b81
add esp, 4
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
push str.APOP__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jge 0x408dc5
push 0xffffffffffffffcd
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x132
jmp 0x40dc30
mov eax, dword [ebp - 4]
add eax, 0x8420
push eax
push str.USER__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x408e58
push 0xffffffffffffffcd
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x130
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x408ef9
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jge 0x408edd
mov eax, dword [ebp - 0x90]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x131
jmp 0x408f05
mov eax, dword [0x5538e8]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dc30
mov eax, dword [ebp - 4]
add eax, 0x8462
push eax
push str.PASS__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jge 0x408f62
push 0xffffffffffffffcd
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x132
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x408ffe
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jge 0x408fec
mov eax, dword [ebp - 0x98]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40900a
mov eax, dword [0x5538e8]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dc30
push str.STAT
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jge 0x40905e
push 0xffffffffffffffcd
mov eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d4c], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x134
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x4090fb
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x4090ee
mov eax, dword [ebp - 0x10]
add eax, 4
push eax
call fcn.0040e1dd
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d4c], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40914c
push str._Saving_to_buffer__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d5c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d54]
push eax
push str.TOP__d__d
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jge 0x4091af
push 0xffffffffffffffcd
mov eax, dword [ebp - 0xa4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x13a
jmp 0x40dc30
mov eax, dword [0x5538e0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x409386
mov eax, dword [0x5538e0]
push eax
mov eax, dword [0x5538e0]
push eax
push 0x1000
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00407fcc
add esp, 0x14
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffff
jne 0x40926c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40925a
push 7
push str._EOF__r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
cmp dword [ebp - 0xa8], 0
jge 0x409293
mov eax, dword [ebp - 0xa8]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax]
cmp eax, 0x2e
jne 0x4092e2
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax + 1]
cmp eax, 0xd
jne 0x4092c9
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
mov eax, dword [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.00405c30
add esp, 8
dec dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d04], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d68], 0
je 0x409374
mov dword [ebp - 0xac], 0
jmp 0x409316
inc dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xa8], eax
jle 0x409374
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d68]
cmp dword [eax + 0x8d6c], ecx
jl 0x409345
jmp 0x409374
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x10]
mov al, byte [eax + ecx]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d6c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x8d64]
mov byte [ecx + edx], al
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
jmp 0x409310
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
jmp 0x40dc30
push 0x80
mov eax, dword [ebp - 4]
add eax, 0x8526
push eax
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 4]
xor edx, edx
mov dl, byte [eax + ecx + 0x86ab]
cmp edx, 0x5c
je 0x4093f7
push 0x80
push 0x555154
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call fcn.004037fa
add esp, 0xc
push 0x80
mov eax, dword [ebp - 4]
add eax, 0x84a4
push eax
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call fcn.004037fa
add esp, 0xc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40946b
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
push str.Email:_Saving_to__s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
push 0
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call dword [sym.imp.KERNEL32.dll__lcreat]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d60], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d60], 0
jg 0x4094c8
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d60], 0
mov eax, dword [ebp - 4]
add eax, 0x86ac
push eax
call fcn.0040dc62
add esp, 4
push 0xffffffffffffffbd
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40951e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d60]
push eax
push str.Email:_File__d_opened_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d54]
push eax
push str.RETR__d
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jge 0x409577
push 0xffffffffffffffcd
mov eax, dword [ebp - 0xb0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8d70]
cmp ecx, 1
jne 0x4095bc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x135
mov eax, dword [ebp - 4]
mov dword [eax + 0x8cf8], 0
jmp 0x4095db
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x138
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
jmp 0x40dc30
mov eax, dword [0x5538e0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x4099d8
mov eax, dword [0x5538e0]
shl eax, 2
push eax
mov eax, dword [0x5538e0]
push eax
push 0x1000
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00407fcc
add esp, 0x14
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffff
jne 0x40966a
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x409658
push 8
push str._EOF1__r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
cmp dword [ebp - 0xbc], 0
jge 0x409691
mov eax, dword [ebp - 0xbc]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x10]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax]
cmp eax, 0x2e
jne 0x4096ed
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax + 1]
cmp eax, 0xd
jne 0x4096d4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
mov eax, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.00405c30
add esp, 8
dec dword [ebp - 0xbc]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8d70]
cmp ecx, 2
jl 0x409758
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8d70]
cmp ecx, 9
jg 0x409758
mov eax, dword [ebp - 4]
push eax
call fcn.0040e818
add esp, 4
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dae]
cmp ecx, 1
sbb eax, eax
neg eax
xor ecx, ecx
mov cl, byte [0x553904]
test ecx, eax
je 0x409753
mov dword [ebp - 0xb8], 0
jmp 0x409762
mov dword [ebp - 0xb8], 1
cmp dword [ebp - 0xb8], 0
je 0x4099c6
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d04], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d68], 0
je 0x409911
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d7c], 3
jne 0x409830
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040809f
add esp, 8
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc0], 0
jmp 0x4097cc
inc dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xbc], eax
jle 0x40982b
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d68]
cmp dword [eax + 0x8d6c], ecx
jl 0x4097fb
jmp 0x40982b
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 4]
mov al, byte [eax + ecx + 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d6c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x8d64]
mov byte [ecx + edx], al
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
jmp 0x4097c6
jmp 0x40990c
mov eax, dword [ebp - 4]
add eax, 0x400c
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], 0
jmp 0x40985c
inc dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc0], eax
jge 0x4098ba
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d68]
cmp dword [eax + 0x8d6c], ecx
jl 0x40988b
jmp 0x4098ba
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x10]
mov al, byte [eax + ecx]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d6c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x8d64]
mov byte [ecx + edx], al
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
jmp 0x409856
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8d70]
cmp ecx, 3
jne 0x40990c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d6c]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d64]
mov byte [eax + ecx], 0xd
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d6c]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d64]
mov byte [eax + ecx], 0xa
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
jmp 0x4099c1
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d7c], 3
jne 0x409965
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040809f
add esp, 8
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d60]
push eax
call fcn.0040df6b
add esp, 0xc
mov dword [ebp - 0xbc], eax
jmp 0x40999a
mov eax, dword [ebp - 0x10]
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d60]
push eax
call fcn.0040df6b
add esp, 0xc
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jge 0x4099c1
mov eax, dword [ebp - 0xbc]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
jmp 0x4099c6
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
call fcn.00405ba0
add esp, 4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x409a2d
push str._CLOSE__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
push 9
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
push eax
call fcn.0040e670
add esp, 4
mov eax, dword [ebp - 4]
push eax
call fcn.0040e5dd
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [0x5538e0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x409b83
mov eax, dword [0x5538e0]
push eax
mov eax, dword [0x5538e0]
push eax
push 0x1000
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00407fcc
add esp, 0x14
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jge 0x409ade
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x409acc
push 8
push str._EOF2__r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d04], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x10]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d60]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d0c], eax
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax]
cmp eax, 0x2e
jne 0x409b67
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax + 1]
cmp eax, 0xd
jne 0x409b67
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
jmp 0x40dc30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x5538d8]
add ecx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8cfc], ecx
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x139
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x5538d8]
add ecx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8cfc], ecx
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d54]
push eax
push str.DELE__d
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jge 0x409c05
push 0xffffffffffffffcd
mov eax, dword [ebp - 0xd0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x134
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x409c6a
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d54]
push eax
push str.LIST__d
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jge 0x409cc8
push 0xffffffffffffffcd
mov eax, dword [ebp - 0xd4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d58], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x13e
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x409dac
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x409d9f
push 0x20
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x409d79
push 0x20
mov eax, dword [ebp - 0xd8]
inc eax
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x409d9f
mov eax, dword [ebp - 0xd8]
inc eax
push eax
call fcn.0040e1dd
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d58], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d54]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x409deb
mov eax, dword [ebp - 0xe4]
push eax
push str.UIDL__d
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x409dfd
push str.UIDL
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jge 0x409e3a
push 0xffffffffffffffcc
mov eax, dword [ebp - 0xe0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x141
jmp 0x40dc30
mov eax, dword [0x5538e0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a033
mov eax, dword [0x5538e0]
shl eax, 2
push eax
mov eax, dword [0x5538e0]
push eax
push 0x1000
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00407fcc
add esp, 0x14
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffff
jne 0x409ed3
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
cmp dword [ebp - 0xe8], 0
jge 0x409efa
mov eax, dword [ebp - 0xe8]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x10]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax]
cmp eax, 0x2e
jne 0x409f66
mov eax, dword [ebp - 0x10]
movsx eax, byte [eax + 1]
cmp eax, 0x2e
je 0x409f66
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d68]
cmp dword [eax + 0x8d6c], ecx
jge 0x409f54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d6c]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d64]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d68], 0
je 0x409fff
mov dword [ebp - 0xec], 0
jmp 0x409f8b
inc dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xe8], eax
jle 0x409fe9
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d68]
cmp dword [eax + 0x8d6c], ecx
jl 0x409fba
jmp 0x409fe9
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x10]
mov al, byte [eax + ecx]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d6c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x8d64]
mov byte [ecx + edx], al
mov eax, dword [ebp - 4]
inc dword [eax + 0x8d6c]
jmp 0x409f85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d6c]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8d64]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d54], 0
jle 0x40a021
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
jmp 0x40dc30
push 0x20
mov eax, dword [ebp - 4]
add eax, 0x8bb2
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jge 0x40a08c
push 0xffffffffffffffcc
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x12b
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a11e
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jge 0x40a111
mov eax, dword [ebp - 0xf4]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40a13f
mov eax, dword [ebp - 4]
push eax
call fcn.00408204
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x65
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d40], 0xc9
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a1de
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jge 0x40a1ad
mov eax, dword [ebp - 0xf8]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xca
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d0c], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d10], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d04], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d08], 0
push 0x40
mov eax, dword [ebp - 4]
add eax, 0x831c
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x40a2b8
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dcd]
test ecx, ecx
je 0x40a26f
mov eax, dword [ebp - 0xfc]
inc eax
push eax
push str.EHLO__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40a289
mov eax, dword [ebp - 0xfc]
inc eax
push eax
push str.HELO__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x3e
mov eax, dword [ebp - 0xc]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x40a2b3
mov eax, dword [ebp - 0xfc]
mov byte [eax], 0
jmp 0x40a2fc
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dcd]
test ecx, ecx
je 0x40a2e6
push 0x2000
push str.EHLO_marshallsoft.com
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
jmp 0x40a2fc
push 0x2000
push str.HELO_marshallsoft.com
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
push 0x3e8
mov eax, dword [ebp - 4]
push eax
call fcn.0040e099
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jge 0x40a34a
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x100]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xcb
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a553
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jge 0x40a3da
mov eax, dword [ebp - 0x10c]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dcd]
test ecx, ecx
je 0x40a546
push str.AUTH
mov eax, dword [ebp - 4]
add eax, 0x400c
push eax
call fcn.00403a26
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jne 0x40a428
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x8dd3]
mov byte [ebp - 0x104], al
xor eax, eax
mov al, byte [ebp - 0x104]
test al, 1
je 0x40a475
push str._CRAM_MD5
mov eax, dword [ebp - 0x108]
push eax
call fcn.00403a26
add esp, 8
test eax, eax
je 0x40a475
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x96
jmp 0x40dc30
xor eax, eax
mov al, byte [ebp - 0x104]
test al, 2
je 0x40a4e1
push str._LOGIN
mov eax, dword [ebp - 0x108]
push eax
call fcn.00403a26
add esp, 8
test eax, eax
je 0x40a4b3
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xa0
jmp 0x40dc30
push str.LOGIN
mov eax, dword [ebp - 0x108]
push eax
call fcn.00403a26
add esp, 8
test eax, eax
je 0x40a4e1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xa0
jmp 0x40dc30
xor eax, eax
mov al, byte [ebp - 0x104]
test al, 4
je 0x40a51f
push str._PLAIN
mov eax, dword [ebp - 0x108]
push eax
call fcn.00403a26
add esp, 8
test eax, eax
je 0x40a51f
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xaa
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40a546
push 0xf
push str.No_protocols__r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
push 0x2000
push str.AUTH_LOGIN
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jge 0x40a5ab
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x110]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xa2
jmp 0x40dc30
mov eax, dword [ebp - 4]
add eax, 0x8bd4
push eax
mov eax, dword [ebp - 4]
add eax, 0x8420
push eax
mov eax, dword [ebp - 4]
add eax, 0x8420
push eax
push str._s__s__s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], 0
jmp 0x40a646
inc dword [ebp - 0x118]
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x11c], eax
jle 0x40a680
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xc]
movsx eax, byte [eax + ecx]
cmp eax, 0x24
jne 0x40a67b
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
jmp 0x40a640
push 0x2000
push str.AUTH_PLAIN_X
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0xb
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004133df
add esp, 0xc
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx + 0xb], 0
mov eax, dword [ebp - 0x11c]
add eax, 0xb
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0e5
add esp, 0xc
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jge 0x40a70e
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x114]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xab
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a7cd
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x40a799
mov eax, dword [ebp - 0x120]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40a7c0
push 0x12
push str.AUTH_PLAIN_ok_r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40a8f5
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x40a821
mov eax, dword [ebp - 0x128]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
add eax, 0x8420
push eax
push 0x555288
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004133df
add esp, 0xc
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e10f
add esp, 8
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jge 0x40a8c4
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x128]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xa3
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40aa22
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x40a949
mov eax, dword [ebp - 0x130]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
add eax, 0x8bd4
push eax
push 0x55528c
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004133df
add esp, 0xc
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e10f
add esp, 8
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x40a9ec
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x130]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xa4
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40aaaa
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jge 0x40aa76
mov eax, dword [ebp - 0x134]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40aa9d
push 0xf
push str.AUTH_LOGIN_ok_r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
push 0x2000
push str.AUTH_CRAM_MD5
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jge 0x40ab02
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x97
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40ac35
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jge 0x40ab88
mov eax, dword [ebp - 0x140]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0x10]
add eax, 4
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
mov eax, dword [ebp - 0x10]
add eax, 4
push eax
call fcn.0041345d
add esp, 0xc
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 4]
mov byte [eax + ecx + 0x8c16], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40ac28
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
push str.Challenge__s_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x98
jmp 0x40dc30
mov eax, dword [ebp - 4]
push eax
call fcn.00414b40
add esp, 4
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c16
push eax
call fcn.004133df
add esp, 0xc
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e10f
add esp, 8
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jge 0x40acc9
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x148]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
add eax, 0xc8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x99
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40ad87
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jge 0x40ad53
mov eax, dword [ebp - 0x14c]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40ad7a
push 0x12
push str.AUTH_CRAM_MD5_ok_r_n
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x831c]
test ecx, ecx
jne 0x40adb4
push 0xffffffffffffffd8
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
push 0x3c
mov eax, dword [ebp - 4]
add eax, 0x831c
push eax
call fcn.0040fb7f
add esp, 8
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jne 0x40adef
push 0xffffffffffffffd7
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 0x150]
push eax
push str.MAIL_FROM:_s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jge 0x40ae45
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xcd
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40af47
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jge 0x40aeca
mov eax, dword [ebp - 0x158]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cc8], 0
je 0x40aefe
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d18], 0
jmp 0x40af0b
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d18], 1
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ccc], 0
je 0x40af2d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d1c], 0
jmp 0x40af3a
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d1c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xce
jmp 0x40dc30
push 0x3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc0]
push eax
call fcn.0040fbc1
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d98], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d98], 0
jne 0x40af8e
push 0xffffffffffffffdb
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov al, byte [0x553908]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d98]
push eax
call fcn.0040fb7f
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf0], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cf0], 0
je 0x40afe3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf0]
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf0]
inc eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
jmp 0x40aff1
mov eax, dword [0x5538cc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xcf
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d98]
push eax
push str.RCPT_TO:_s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jge 0x40b078
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x15c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd0
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40b27d
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jge 0x40b170
cmp dword [ebp - 0x160], 0xffffffcf
je 0x40b0f8
mov eax, dword [ebp - 0x160]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd1]
test ecx, ecx
jne 0x40b125
mov eax, dword [ebp - 0x160]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cbc], 0
jle 0x40b15e
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd1
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd3
jmp 0x40dc30
mov eax, dword [ebp - 4]
inc dword [eax + 0x8cbc]
push 0x20
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d98]
push eax
mov eax, dword [ebp - 4]
add eax, 0x8c98
push eax
call fcn.004036e8
add esp, 0xc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cf0], 0
je 0x40b1b6
mov al, byte [0x553908]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x8cf0]
mov byte [ecx], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc0]
movsx eax, byte [eax]
test eax, eax
jne 0x40b270
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d18], 0
jne 0x40b20b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d18], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xce
jmp 0x40b26b
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d1c], 0
jne 0x40b24c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ccc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d1c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xce
jmp 0x40b26b
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd1
jmp 0x40b27d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xce
jmp 0x40dc30
push str.RSET
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jge 0x40b2d1
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd4
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40b38d
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x8d50]
cmp eax, 0x53
jne 0x40b347
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x168], eax
jmp 0x40b359
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jge 0x40b380
mov eax, dword [ebp - 0x168]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
push 0x555300
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jge 0x40b3e1
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x16c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xd2
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40b4ba
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jge 0x40b466
mov eax, dword [ebp - 0x170]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8da8], 2
jne 0x40b488
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xdc
jmp 0x40b495
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xdd
mov eax, dword [0x5538d0]
add eax, eax
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xdd
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd4]
test ecx, ecx
je 0x40b539
mov eax, dword [str.X_Mailer:_MarshallSoft_SMTP_POP3_Email_Engine_Version_3.6]
push eax
push 0x555308
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jge 0x40b539
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x174]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xde
jmp 0x40dc30
mov eax, dword [str._OEM__74d0ddb_3195_X_OEM:_DynEd_International__Inc]
add eax, 0x13
push eax
push 0x555310
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jge 0x40b5a3
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x178]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xdf
jmp 0x40dc30
mov eax, dword [ebp - 0xc]
push eax
call fcn.00405e02
add esp, 4
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jge 0x40b5fe
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x17c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe0
jmp 0x40dc30
xor eax, eax
mov al, byte [0x553900]
test eax, eax
je 0x40b631
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe1
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cc4], 0
je 0x40b69a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc4]
push eax
push str.To:__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jge 0x40b69a
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x180]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe1
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x831c]
test ecx, ecx
je 0x40b73b
mov eax, dword [ebp - 4]
add eax, 0x831c
push eax
push str.From:__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jge 0x40b73b
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x184]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe2
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x839e]
test ecx, ecx
je 0x40b7b8
mov eax, dword [ebp - 4]
add eax, 0x839e
push eax
push str.Reply_To:__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jge 0x40b7b8
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x188]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe3
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cd0], 0
je 0x40b833
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cd0]
push eax
push str.Subject:__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jge 0x40b833
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x18c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe4
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cd4], 0
je 0x40b8ae
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cd4]
push eax
push 0x555350
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jge 0x40b8ae
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x190]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe5
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cc8], 0
je 0x40b929
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc8]
push eax
push str.CC:__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jge 0x40b929
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x194]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40b94e
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe6
jmp 0x40b99f
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8da8], 0
je 0x40b970
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe6
jmp 0x40b99f
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce4], 0
je 0x40b992
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe6
jmp 0x40b99f
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe9
jmp 0x40dc30
mov eax, dword [str.MIME_Version:_1.0]
push eax
push 0x555364
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jge 0x40b9f9
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x198]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe7
jmp 0x40dc30
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.SEE000000000]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_multipart_mixed__boundary]
push eax
push str._s_c_sMIX_c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jge 0x40ba76
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x19c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd6], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xe9
jmp 0x40dc30
push 2
push 0x555380
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0e5
add esp, 0xc
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jge 0x40bad2
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40baf7
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xea
jmp 0x40bb4b
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8da8], 0
je 0x40bb19
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xea
jmp 0x40bb4b
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd6]
test ecx, ecx
je 0x40bb3e
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xea
jmp 0x40bb4b
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xee
jmp 0x40dc30
mov eax, dword [str.SEE000000000]
push eax
push str.___sMIX
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jge 0x40bba5
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd6], 1
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40bd5e
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.SEE000000000]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_multipart_related__boundary]
push eax
push str._s_c_sREL_c_r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jge 0x40bc2d
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd8], 1
mov eax, dword [str.SEE000000000]
push eax
push str.___sREL
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jge 0x40bc8c
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.SEE000000000]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_multipart_alternative__boundary]
push eax
push str._s_c_sALT_c_r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jge 0x40bcf7
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [str.SEE000000000]
push eax
push 0x5553cc
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jge 0x40bd4c
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x190
jmp 0x40bd6b
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xec
jmp 0x40dc30
mov eax, dword [0x55397c]
push eax
push 0x5553dc
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jge 0x40bdc5
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1a8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cdc], 0
je 0x40be20
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cdc]
mov al, byte [eax]
mov byte [ebp - 0x1ac], al
movsx eax, byte [ebp - 0x1ac]
movsx ecx, byte [0x55387c]
cmp eax, ecx
jne 0x40be0e
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x192
jmp 0x40be1b
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x191
jmp 0x40be2d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x194
jmp 0x40dc30
push 0x2000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cdc]
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.004036e8
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cdc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
jge 0x40be96
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1b0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
push 0x5553e4
mov eax, dword [ebp - 4]
push eax
call fcn.0040e10f
add esp, 8
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x194
jmp 0x40dc30
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x1b4]
push eax
call fcn.0040de6b
add esp, 8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d30], 0
jg 0x40bf0b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cdc]
push eax
call fcn.0040dc9b
add esp, 4
push 0xffffffffffffffdd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d30]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x193
jmp 0x40dc30
push 0x2000
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d30]
push eax
call dword [sym.imp.KERNEL32.dll__lread]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jg 0x40bf78
mov eax, dword [ebp - 4]
push eax
call fcn.0040ddc6
add esp, 4
push 0x5553e8
mov eax, dword [ebp - 4]
push eax
call fcn.0040e10f
add esp, 8
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x194
jmp 0x40dc30
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jge 0x40bfc2
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1b8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
jmp 0x40dc30
mov eax, dword [str.SEE000000000]
push eax
push str.___sALT
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jge 0x40c04a
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1c0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xec
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40c1bb
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8da8], 2
jne 0x40c191
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd9]
mov dword [ebp - 0x24c], ecx
jmp 0x40c143
mov eax, dword [str.Content_Type:_text_html___charsetus_ascii]
push eax
push 0x5553fc
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
mov eax, dword [str.Content_Type:_text_html__charsetiso_8859_1]
push eax
push 0x555404
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
mov eax, dword [str.Content_Type:_text_html__charsetiso_8859_8]
push eax
push 0x55540c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
mov eax, dword [str.Content_Type:_text_html__charsetwindows_1252]
push eax
push 0x555414
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
mov eax, dword [str.Content_Type:_text_html__charsetwindows_1255]
push eax
push 0x55541c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
mov eax, dword [str.Content_Type:_text_html]
push eax
push 0x555424
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c17f
dec dword [ebp - 0x24c]
cmp dword [ebp - 0x24c], 6
ja case.0x40c15c.1
mov eax, dword [ebp - 0x24c]
jmp dword [eax*4 + 0x40c163]
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xed
jmp 0x40c1b6
mov eax, dword [str.Content_Type:_text_html]
push eax
push 0x55542c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xee
jmp 0x40c350
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xed
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8da8]
mov dword [ebp - 0x250], eax
jmp 0x40c30c
mov eax, dword [str.Content_Type:_text_plain]
push eax
push 0x555434
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_plain__charsetiso_8859_1]
push eax
push 0x55543c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_plain__charsetiso_8859_8]
push eax
push 0x555444
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_plain__charsetwindows_1252]
push eax
push 0x55544c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_plain__charsetwindows_1255]
push eax
push 0x555454
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_enriched]
push eax
push 0x55545c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c350
push 0x5c3fb0
push 0x555464
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xed
jmp 0x40c350
mov eax, dword [str.Content_Type:_text_html]
push eax
push 0x55546c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xed
jmp 0x40c350
mov eax, dword [0x55397c]
push eax
push 0x555474
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xee
jmp 0x40c350
dec dword [ebp - 0x250]
cmp dword [ebp - 0x250], 8
ja case.0x40c325.7
mov eax, dword [ebp - 0x250]
jmp dword [eax*4 + 0x40c32c]
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jge 0x40c38d
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
jmp 0x40dc30
xor eax, eax
mov al, byte [0x5539d8]
test eax, eax
jle 0x40c3ca
push 0x5c4030
push 0x55547c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xee
jmp 0x40c3ef
mov eax, dword [str.Content_Transfer_Encoding:_quoted_printable]
push eax
push 0x555484
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xed
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jge 0x40c42c
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1c8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xee
jmp 0x40dc30
push 1
mov eax, dword [ebp - 4]
push eax
call fcn.0040fea3
add esp, 8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cd8]
mov al, byte [eax]
mov byte [ebp - 0x1cc], al
movsx eax, byte [ebp - 0x1cc]
movsx ecx, byte [0x55387c]
cmp eax, ecx
jne 0x40c485
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xf4
jmp 0x40c492
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xf0
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dad], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d14], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xf1
jmp 0x40dc30
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004100fe
add esp, 8
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jge 0x40c5f6
mov eax, dword [ebp - 4]
inc dword [eax + 4]
mov eax, dword [ebp - 4]
push eax
call fcn.0040e15b
add esp, 4
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40c5c2
mov eax, dword [str.SEE000000000]
push eax
push 0x55548c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jge 0x40c55d
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1d0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce0], 0
jne 0x40c5c2
mov eax, dword [str.SEE000000000]
push eax
push 0x5554a0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jge 0x40c5c2
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1d0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce8], 0
je 0x40c5e4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x104
jmp 0x40c5f1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfb
jmp 0x40dc30
mov eax, dword [ebp - 0x1d4]
add eax, 2
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d0c], eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jge 0x40c645
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1d0]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538dc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
jmp 0x40dc30
movsx eax, byte [0x55387c]
test eax, eax
jne 0x40c69b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cd8]
mov dword [ebp - 0x1d8], eax
jmp 0x40c6ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cd8]
inc eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d14], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40c70b
mov eax, dword [ebp - 0x1d8]
push eax
push str.Opening_message_file___s__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x1d8]
push eax
call fcn.0040dcd4
add esp, 8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d2c], 0
jg 0x40c75a
mov eax, dword [ebp - 0x1d8]
push eax
call fcn.0040dc9b
add esp, 4
push 0xffffffffffffffdd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d2c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xf5
jmp 0x40dc30
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004100fe
add esp, 8
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jge 0x40c8ae
mov eax, dword [ebp - 4]
push eax
call fcn.004074d4
add esp, 4
mov eax, dword [ebp - 4]
inc dword [eax + 4]
mov eax, dword [ebp - 4]
push eax
call fcn.0040e15b
add esp, 4
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
je 0x40c87a
mov eax, dword [str.SEE000000000]
push eax
push str.___sALT___r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jge 0x40c815
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1dc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce0], 0
jne 0x40c87a
mov eax, dword [str.SEE000000000]
push eax
push str.___sREL___r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jge 0x40c87a
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1dc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce8], 0
je 0x40c89c
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x104
jmp 0x40c8a9
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfb
jmp 0x40dc30
mov eax, dword [ebp - 0x1e0]
add eax, 2
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d0c], eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jge 0x40c8fd
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1dc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd7]
test ecx, ecx
je 0x40c990
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x8dac]
cmp eax, 0xa
jne 0x40c973
mov eax, dword [str.SEE000000000]
push eax
push str._r_n___sREL
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c98b
mov eax, dword [str.SEE000000000]
push eax
push str._r_n_r_n___sREL
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c9e2
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x8dac]
cmp eax, 0xa
jne 0x40c9c0
mov eax, dword [str.SEE000000000]
push eax
push str._r_n___sMIX
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40c9d8
mov eax, dword [str.SEE000000000]
push eax
push str._r_n_r_n___sMIX
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd6], 1
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jge 0x40ca1f
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1e4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x105
jmp 0x40dc30
mov eax, dword [ebp - 4]
push eax
call fcn.004083c5
add esp, 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ce8]
push eax
call fcn.0040e3e7
add esp, 4
mov dword [ebp - 0x1ec], eax
mov al, byte [0x553910]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
je 0x40ca8a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8daf]
test ecx, ecx
je 0x40cc1d
mov eax, dword [ebp - 0x1ec]
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 4
jle 0x40cc1d
mov eax, dword [ebp - 0x1f0]
sub eax, 4
add eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1e8], eax
push 4
push str..gif
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00403924
add esp, 0xc
test eax, eax
je 0x40cb2c
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_Image_GIF]
push eax
push 0x555548
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cc1d
push 4
push str..bmp
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00403924
add esp, 0xc
test eax, eax
je 0x40cb7e
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_Image_BMP]
push eax
push 0x555564
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cc1d
push 4
push str..tif
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00403924
add esp, 0xc
test eax, eax
je 0x40cbd0
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_Image_TIFF]
push eax
push 0x555580
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cc1d
push 4
push str..jpg
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00403924
add esp, 0xc
test eax, eax
je 0x40cc1d
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_Image_JPEG]
push eax
push str._s__name_c_s_c
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xc]
movsx eax, byte [eax]
test eax, eax
jne 0x40ccc4
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dcc], 0
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd0]
test ecx, ecx
je 0x40cc65
mov eax, dword [0x55397c]
push eax
push 0x5555b0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40ccbf
xor eax, eax
mov al, byte [0x5539dc]
test eax, eax
je 0x40cc90
push 0x5be730
push 0x5555b8
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40ccbf
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Type:_application_octet_stream__name]
push eax
push 0x5555c0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cd0b
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dcc], 1
mov eax, dword [ebp - 0xc]
push eax
call fcn.004037b9
add esp, 4
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x8dc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8dc4]
push eax
push str._r_nContent_ID:__message_root._1d_
mov eax, dword [ebp - 0x1f0]
add eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jge 0x40cd48
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x106
jmp 0x40dc30
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd0]
test ecx, ecx
je 0x40cd8a
mov eax, dword [str.Content_Transfer_Encoding:_quoted_printable]
push eax
push 0x5555f0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40cda2
mov eax, dword [str.Content_Transfer_Encoding:_base64]
push eax
push 0x5555f8
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jge 0x40cddf
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x107
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ce8]
push eax
call fcn.0040e3e7
add esp, 4
mov dword [ebp - 0x200], eax
mov al, byte [0x553910]
push eax
mov eax, dword [ebp - 0x200]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
je 0x40ce3e
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dcc]
test ecx, ecx
je 0x40ce85
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x200]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Disposition:_inline__filename]
push eax
push 0x555600
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cefc
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd0]
cmp ecx, 1
jne 0x40cecd
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x200]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Disposition:_inline__filename]
push eax
push 0x555610
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cefc
movsx eax, byte [0x553950]
push eax
mov eax, dword [ebp - 0x200]
push eax
movsx eax, byte [0x553950]
push eax
mov eax, dword [str.Content_Disposition:_attachment__filename]
push eax
push str._s_c_s_c_r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jge 0x40cf39
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x204]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x108
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ce8]
mov dword [ebp - 0x20c], eax
mov al, byte [0x553910]
push eax
mov eax, dword [ebp - 0x20c]
push eax
call fcn.0040386c
add esp, 8
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
je 0x40cf97
mov eax, dword [ebp - 0x208]
mov byte [eax], 0
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x20c]
push eax
call fcn.0040dcd4
add esp, 8
cmp dword [ebp - 0x208], 0
je 0x40cfc4
mov al, byte [0x553910]
mov ecx, dword [ebp - 0x208]
mov byte [ecx], al
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d2c], 0
jge 0x40d000
mov eax, dword [ebp - 0x20c]
push eax
call fcn.0040dc9b
add esp, 4
push 0xffffffffffffffdd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d2c]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd0]
test ecx, ecx
je 0x40d054
push 1
mov eax, dword [ebp - 4]
push eax
call fcn.0040fea3
add esp, 8
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dad], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d14], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x10b
jmp 0x40d061
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x109
jmp 0x40dc30
mov eax, dword [ebp - 0xc]
add eax, 0x50
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x214], 0
jmp 0x40d090
inc dword [ebp - 0x214]
cmp dword [ebp - 0x214], 0x8c
jge 0x40d0b2
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
jmp 0x40d08a
push 0x39
mov eax, dword [ebp - 0x21c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d2c]
push eax
call dword [sym.imp.KERNEL32.dll__lread]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jg 0x40d292
mov eax, dword [ebp - 4]
push eax
call fcn.004074d4
add esp, 4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40d186
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ce8]
push eax
push str._AttachBegPtr____s__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cec]
push eax
push str._AttachEndPtr____s__r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cec]
movsx eax, byte [eax]
test eax, eax
jne 0x40d26e
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd7]
test ecx, ecx
je 0x40d25c
mov eax, dword [str.SEE000000000]
push eax
push str._r_n_r_n___sREL___r_n
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jge 0x40d202
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd8], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8ce4], 0
je 0x40d24a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ce4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8ce8], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8dd7], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x104
jmp 0x40d257
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfb
jmp 0x40d269
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfb
jmp 0x40d28d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cec]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8ce8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x104
jmp 0x40dc30
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d08], eax
mov eax, dword [ebp - 0x220]
push eax
mov eax, dword [ebp - 0x210]
push eax
mov eax, dword [ebp - 0x21c]
push eax
call fcn.0040e259
add esp, 0xc
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
add eax, 2
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d10], eax
mov eax, dword [ebp - 0x224]
add eax, 2
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0e5
add esp, 0xc
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jge 0x40d31d
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538dc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x109
jmp 0x40dc30
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004100fe
add esp, 8
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x40d3d6
mov eax, dword [ebp - 4]
push eax
call fcn.004074d4
add esp, 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cec]
movsx eax, byte [eax]
test eax, eax
jne 0x40d3b2
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfb
jmp 0x40d3d1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cec]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8ce8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x104
jmp 0x40dc30
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 4]
add dword [ecx + 0x8d08], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0xc]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jge 0x40d42f
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x228]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d4]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538dc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x10b
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8da8], 0
jne 0x40d4a5
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd5]
test ecx, ecx
jne 0x40d4a5
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x8dd6]
test ecx, ecx
je 0x40d4ff
mov eax, dword [str.SEE000000000]
push eax
push str._r_n___sMIX___r_n_r_n.
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x40d4fa
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
jmp 0x40d54e
push 0x555698
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x40d54e
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0xfc
jmp 0x40dc30
push 0x64
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40d5e0
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jge 0x40d5d3
mov eax, dword [ebp - 0x234]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d98], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d98]
movsx eax, byte [eax]
test eax, eax
jne 0x40d61d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov al, byte [0x553908]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cc0]
push eax
call fcn.0040fb7f
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf0], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8cf0], 0
je 0x40d672
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf0]
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf0]
inc eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
jmp 0x40d680
mov eax, dword [0x5538cc]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cc0], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x8d9c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x10f
jmp 0x40dc30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d98]
push eax
push str.VRFY__s
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x40d707
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x238]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x110
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40d7b1
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jl 0x40d797
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d28], 0xfa
jne 0x40d797
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d8c], 1
jmp 0x40d7a4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d8c], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x10e
jmp 0x40dc30
push 0x5556ac
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e135
add esp, 8
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jge 0x40d805
push 0xffffffffffffffcc
mov eax, dword [ebp - 0x240]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 8]
add eax, dword [0x5538d0]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cf8], eax
mov eax, dword [ebp - 8]
add eax, dword [0x5538d8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8cfc], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0x103
jmp 0x40dc30
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e0bf
add esp, 8
test eax, eax
je 0x40d8d3
mov eax, dword [ebp - 4]
movsx eax, byte [eax + 0x8d50]
cmp eax, 0x53
jne 0x40d87b
mov eax, dword [ebp - 4]
push eax
call fcn.0040fc1f
add esp, 4
mov dword [ebp - 0x244], eax
jmp 0x40d88d
mov eax, dword [ebp - 4]
push eax
call fcn.0040fd8b
add esp, 4
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jge 0x40d8b4
mov eax, dword [ebp - 0x244]
push eax
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040e469
add esp, 0xc
jmp 0x40dc5d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8cf4]
push eax
call fcn.00405ba0
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d3c], 0
jmp 0x40dc30
mov eax, dword [ebp - 4]
cmp dword [eax + 0x8d48], 0
je 0x40d92e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d38]
push eax
push str.ERROR__Unknown_state__d_r_n
mov eax, dword [ebp - 4]
add eax, 8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 8
push eax
call fcn.004037b9
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d48]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
jmp 0x40dc30
cmp dword [ebp - 0x248], 0x65
jg 0x40d95d
je 0x4086d7
cmp dword [ebp - 0x248], 0
je 0x4086a9
jmp case.0x40d982.93
sub dword [ebp - 0x248], 0x66
cmp dword [ebp - 0x248], 0x12e
ja case.0x40d982.93
mov eax, dword [ebp - 0x248]
xor ecx, ecx
mov cl, byte [eax + 0x40db01]
jmp dword [ecx*4 + 0x40d989]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d38]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x8d34], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x8d38], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d3c]
jmp 0x40dc5d
pop edi
pop esi
pop ebx
leave
ret