Function at 0x426046
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x28]
push ebx
mov ebx, ecx
sub esp, 0x88
push 0x1400
call fcn.0042d128
mov dword [esp], esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push esi
xor esi, esi
call fcn.00419663
push eax
push dword [0x42e670]
push str._.255s_8.8X.msg
push edi
mov dword [ebp - 0x2c], eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0x44819f
push dword [ebx + 0x58]
call fcn.0041520e
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp byte [eax], 0x31
jne 0x4260de
cmp dword [str.draft], 0
jne 0x4260bb
mov dword [str.draft], 0x4481a1
mov eax, dword [ebp + 0xc]
sub esp, 0xc
push dword [ebp - 0x2c]
push dword [0x43a5c8]
push dword [eax + 0x14]
push str._.255smbox_.255s_8.8X.msg
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
jmp 0x4260e3
mov esi, 2
sub esp, 0xc
push edi
call fcn.004035b1
mov dword [ebp - 0x30], eax
add esp, 0xc
test eax, eax
jg 0x426130
test esi, esi
jne 0x4263da
mov eax, dword [ebp + 0xc]
push dword [0x43a5c8]
push dword [eax + 0x14]
push str._.255smbox_.255s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
pop esi
push 0x42e458
push edi
mov esi, 1
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
pop eax
pop edx
jmp 0x4260a0
push eax
push eax
push str.subj
push dword [ebx + 0x58]
call fcn.0041520e
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x1e]
mov word [ebp - 0x3c], ax
mov eax, dword [ebp - 0x20]
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x44], ax
movzx eax, word [ebp - 0x26]
mov eax, dword [eax*4 + 0x42e7fc]
mov dword [ebp - 0x48], eax
mov ax, word [ebp - 0x22]
mov word [ebp - 0x4a], ax
movzx eax, word [ebp - 0x24]
mov eax, dword [eax*4 + 0x42e830]
mov dword [ebp - 0x50], eax
pop eax
pop edx
push str.reto
push dword [ebx + 0x58]
call fcn.0041520e
add esp, 0x10
cmp byte [eax], 0
mov esi, eax
jne 0x42619f
mov esi, dword [ebp + 8]
push eax
push eax
push str.reply
push dword [ebx + 0x58]
call fcn.0041520e
mov dword [ebp - 0x54], eax
pop eax
pop edx
push str.tomail
push dword [ebx + 0x58]
call fcn.0041520e
pop ecx
mov dword [ebp - 0x58], eax
pop eax
push 0x4481ee
push dword [ebx + 0x58]
call fcn.0041520e
mov dword [ebp - 0x5c], eax
pop eax
pop edx
push str.from
push dword [ebx + 0x58]
call fcn.0041520e
pop ecx
mov dword [ebp - 0x60], eax
pop eax
push str.tomail
push dword [ebx + 0x58]
call fcn.0041520e
mov dword [ebp - 0x64], eax
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0x68], eax
movzx eax, word [ebp - 0x1e]
mov dword [ebp - 0x6c], eax
movzx eax, word [ebp - 0x20]
mov dword [ebp - 0x70], eax
movzx eax, word [ebp - 0x28]
mov dword [ebp - 0x74], eax
movzx eax, word [ebp - 0x26]
mov ecx, dword [eax*4 + 0x42e7fc]
movzx eax, word [ebp - 0x22]
mov dword [ebp - 0x78], eax
movzx eax, word [ebp - 0x24]
mov dword [ebp - 0x80], ecx
mov eax, dword [eax*4 + 0x42e830]
mov dword [ebp - 0x7c], eax
pop eax
pop edx
push str.REMOTE_ADDR
push dword [ebx + 0x54]
call fcn.0041520e
pop ecx
mov edx, eax
pop eax
movzx eax, word [ebp - 0x38]
push dword [ebp - 0x34]
push eax
movzx eax, word [ebp - 0x3c]
push eax
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x44]
push eax
movzx eax, word [ebp - 0x4a]
push dword [ebp - 0x48]
push eax
push dword [ebp - 0x50]
push esi
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push dword [ebp + 8]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
mov ecx, dword [ebp - 0x80]
push dword [ebp - 0x6c]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push ecx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push edx
push dword [ebp + 8]
push dword [0x43c410]
push edi
call esi
mov dword [ebp - 0x34], eax
add esp, 0x6c
push eax
push edi
push dword [ebp - 0x30]
call fcn.00403629
push eax
push 0x448202
push dword [ebx + 0x58]
call fcn.0041520e
mov dword [esp], eax
mov dword [ebp - 0x38], eax
call fcn.0042d208
add esp, 0xc
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
call fcn.00403629
push eax
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x40]
add esp, 0xc
add eax, 4
cmp byte [ecx], 0x31
jne 0x426316
push ecx
push ecx
push dword [0x43aea4]
push eax
call fcn.0042ca58
add esp, 0x10
jmp 0x4263da
push edx
push edx
push dword [0x43af00]
push eax
call fcn.0042ca58
mov eax, dword [str.sent]
add esp, 0x10
test eax, eax
je 0x4263da
sub esp, 0xc
mov ecx, dword [ebp - 0x34]
push dword [ebp - 0x2c]
push eax
mov eax, dword [ebp + 0xc]
lea ebx, [edi + ecx + 1]
push dword [eax + 0x14]
push str._.255smbox_.255s_8.8X.msg
push ebx
call esi
add esp, 0x14
push ebx
call fcn.004035b1
mov edx, eax
add esp, 0xc
test eax, eax
jg 0x4263ae
mov eax, dword [ebp + 0xc]
push dword [0x43a5cc]
push dword [eax + 0x14]
push str._.255smbox_.255s
push ebx
call esi
pop ecx
pop eax
push 0x42e458
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
mov eax, dword [ebp + 0xc]
push dword [ebp - 0x2c]
push dword [0x43a5cc]
push dword [eax + 0x14]
push str._.255smbox_.255s_8.8X.msg
push ebx
call esi
add esp, 0x14
push ebx
call fcn.004035b1
mov edx, eax
add esp, 0xc
test eax, eax
jle 0x4263da
push eax
push dword [ebp - 0x34]
push edi
push edx
mov dword [ebp - 0x30], edx
call fcn.00403629
mov edx, dword [ebp - 0x30]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
push edx
call fcn.00403629
push edx
push edx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0xc
test edi, edi
je 0x4263ea
sub esp, 0xc
push edi
call fcn.0042d10c
add esp, 0x10
mov eax, dword [ebp - 0x2c]
mov dword [0x46c9f0], eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 8