Function at 0x59046d60
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x591468b8
push eax
mov dword fs:[0], esp
sub esp, 0xa0
push ebx
push ebp
push esi
mov esi, dword [esp + 0xcc]
test esi, esi
push edi
je 0x59046d90
mov dword [esi], 0
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
test ebx, ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x48], ebp
je 0x590485e5
test ebp, ebp
je 0x590485e5
mov eax, dword [0x5919cca0]
test eax, eax
je 0x59046ddb
push 0x5917eba8
push str.MailLog
push 0xffffffffffffffff
push 0x5919cc34
call fcn.5907cd70
add esp, 0x10
mov edi, str.Cookie:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Cookie:
push ebp
push ebx
call fcn.5900d130
add esp, 0x10
cmp eax, 0xffffffff
jne 0x59046e1f
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xc8]
push esi
push eax
push ecx
push ebp
push ebx
call fcn.59013350
add esp, 0x14
jmp 0x590485e5
mov edi, 0x5917ae38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x5917ae38
push ebp
push ebx
call fcn.5900d130
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x590485e5
mov edi, 0x5917ae38
or ecx, 0xffffffff
xor eax, eax
mov esi, dword [esp + 0x10]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, esi
xor esi, esi
add edx, ebx
cmp byte [edx], 0xd
je 0x59046e99
mov ecx, dword [esp + 0x10]
mov eax, ebp
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, 0x5917ae38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp esi, eax
jge 0x59046e99
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0xd
jne 0x59046e77
mov edi, 0x5917ae38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
mov eax, ebp
not ecx
dec ecx
sub eax, edi
sub eax, ecx
cmp esi, eax
jge 0x590485e5
test esi, esi
jle 0x590485e5
mov edi, 0x5917eba4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x5917eba4
push esi
push edx
call fcn.5900d130
mov eax, dword [0x59155850]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0x30], eax
mov byte [esp + 0xc8], 1
mov dword [esp + 0x3c], eax
mov byte [esp + 0xc8], 2
mov dword [esp + 0x4c], eax
mov byte [esp + 0xc8], 3
mov dword [esp + 0x44], eax
mov byte [esp + 0xc8], 4
mov dword [esp + 0x40], eax
mov byte [esp + 0xc8], 5
mov dword [esp + 0x38], eax
push 0x5917ae30
push ebp
push ebx
mov byte [esp + 0xd4], 6
call fcn.5900f390
mov edx, eax
add esp, 0x1c
cmp edx, 0xffffffff
je 0x5904856b
mov edi, 0x5917ae30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
sub ebp, edx
add ebx, edx
mov dword [esp + 0xc0], ebx
lea edi, [ebp + 1]
push edi
call fcn.591315b0
mov esi, eax
add esp, 4
test esi, esi
je 0x590471de
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
push eax
push esi
call fcn.59082f60
mov ecx, dword [0x59155850]
add esp, 0xc
mov dword [esp + 0x10], ecx
push 0xfde9
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0xc0], 7
call fcn.590a35e0
push esi
call fcn.591315d9
add esp, 4
lea ecx, [esp + 0x4c]
call fcn.590fa350
mov edx, dword [esp + 0x10]
mov bl, 8
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0xbc], bl
call fcn.590fb0b0
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.590469f0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 9
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.59046a50
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0xa
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.59046ab0
add esp, 0xc
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0xb
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
push 0
lea eax, [esp + 0x50]
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.59046990
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0xbc], 0xc
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.59046c40
add esp, 0xc
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0xd
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.59046be0
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xbc], 0xe
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5904717f
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904717f
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.5900ad50
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x20]
push edx
mov byte [esp + 0xbc], 0xf
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.59046ca0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xbc], 0x10
call fcn.5909f310
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb8], 7
call fcn.590fa3e0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 6
call fcn.5909f180
mov ebx, dword [esp + 0xc0]
mov edx, dword [esp + 0x38]
xor esi, esi
cmp dword [edx - 8], esi
jne 0x590480d3
mov eax, dword [esp + 0x3c]
cmp dword [eax - 8], esi
jne 0x590480d3
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 8], esi
jne 0x590480d3
mov edx, dword [esp + 0x28]
cmp dword [edx - 8], esi
jne 0x590480d3
mov eax, dword [esp + 0x20]
cmp dword [eax - 8], esi
jne 0x590480d3
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 8], esi
jne 0x590480d3
mov edx, dword [esp + 0x2c]
cmp dword [edx - 8], esi
jne 0x590480d3
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x98]
mov dword [esp + 0x94], esi
rep stosd dword es:[edi], eax
push ebp
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x54], str._subject_:
mov dword [esp + 0x58], str._from_:
mov dword [esp + 0x5c], str._to_:
mov dword [esp + 0x60], str._cc_:
mov dword [esp + 0x64], str._bcc_:
mov dword [esp + 0x68], str._text_:
mov dword [esp + 0x6c], str._method_:
call fcn.590998b0
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xb8], 0x12
cmp dword [eax - 8], esi
jne 0x590472b7
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x59048566
mov ecx, dword [esp + esi + 0x4c]
push ecx
lea ecx, [esp + 0x20]
call fcn.5909e640
mov dword [esp + esi + 0x94], eax
add esi, 4
cmp esi, 0x1c
jb 0x590472b7
mov esi, dword [esp + 0xac]
cmp esi, 0xffffffff
je 0x590473be
mov edx, dword [0x5915584c]
mov dword [esp + 0x10], edx
mov bl, 0x14
push esi
push 0x5917a478
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047381
mov edi, str._method_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._method_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x15
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
mov ecx, dword [esp + 0x10]
push str.SaveMessage
push ecx
call fcn.59081676
add esp, 8
mov byte [esp + 0xb8], 0x12
test eax, eax
lea ecx, [esp + 0x10]
jne 0x590473b9
call fcn.59099e00
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x59048566
call fcn.59099e00
mov esi, dword [esp + 0x94]
cmp esi, 0xffffffff
je 0x59047563
mov edx, dword [0x5915584c]
mov dword [esp + 0x10], edx
mov bl, 0x17
push esi
push 0x5917a478
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x5904746b
mov edi, str._subject_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._subject_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x18
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x59047552
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.590993d0
lea eax, [esp + 0x18]
mov byte [esp + 0xbc], bl
push eax
call fcn.5900abf0
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x1a
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900a700
add esp, 8
test eax, eax
je 0x5904753f
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
test ecx, ecx
jle 0x59047552
push 1
push 0
push eax
call fcn.5900a810
mov ebp, eax
lea edi, [ebp + ebp + 4]
push edi
call fcn.591315b0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x59047552
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x18]
push eax
call fcn.5900a810
add esp, 0xc
lea ecx, [esp + 0x28]
mov word [esi + ebp*2], 0
push esi
call fcn.5909f400
push esi
call fcn.591315d9
add esp, 4
jmp 0x59047552
mov ecx, dword [esp + 0x10]
push 0xfde9
push ecx
lea ecx, [esp + 0x30]
call fcn.590a35e0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov esi, dword [esp + 0x98]
cmp esi, 0xffffffff
je 0x59047734
mov eax, dword [0x5915584c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x1c
mov dword [esp + 0x24], eax
push esi
push 0x5917eb80
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x1d
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047646
mov edi, str._from_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._from_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
mov bl, 0x1e
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590993d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x20
push ecx
lea ecx, [esp + 0x14]
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.59099e00
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x59047712
push str._email_:
lea ecx, [esp + 0x14]
call fcn.5907af70
mov esi, eax
cmp esi, 0xffffffff
je 0x59047712
push esi
push 0x5917a478
lea ecx, [esp + 0x18]
call fcn.5907af80
mov edx, eax
sub edx, esi
test edx, edx
jle 0x590476f8
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x5917a488
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.5909c020
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x22
call fcn.59099f80
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.59099e00
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59047712
push 0xfde9
push eax
lea ecx, [esp + 0x40]
call fcn.590a35e0
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x1c
call fcn.59099e00
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov esi, dword [esp + 0x9c]
cmp esi, 0xffffffff
je 0x59047991
mov eax, dword [0x5915584c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x25
mov dword [esp + 0x14], eax
push esi
push 0x5917be74
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x26
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047817
mov edi, str._to_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._to_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
mov bl, 0x27
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], bl
call fcn.590993d0
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x29
push ecx
lea ecx, [esp + 0x14]
call fcn.59099f80
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], bl
call fcn.59099e00
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.59099e00
xor ebp, ebp
mov bl, 0x2c
test ebp, ebp
je 0x59047830
mov edi, 0x5917eb70
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x59047955
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.5907af80
mov esi, eax
cmp esi, 0xffffffff
je 0x59047955
push esi
push 0x5917a478
lea ecx, [esp + 0x18]
call fcn.5907af80
mov edx, eax
sub edx, esi
test edx, edx
jle 0x590478e3
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x5917a488
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.5909c020
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x2b
call fcn.59099f80
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.59099e00
mov ecx, dword [0x59155850]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x14]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904790e
push 0xfde9
push eax
lea ecx, [esp + 0x2c]
call fcn.590a35e0
lea edx, [esp + 0x24]
push 0x59179460
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.5909f8f0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 0x2d
call fcn.5909fe30
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x26
call fcn.5909f180
push ebp
push 0x5917eb70
lea ecx, [esp + 0x18]
call fcn.5907af80
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x5904781b
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x25
call fcn.59099e00
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov esi, dword [esp + 0xa0]
cmp esi, 0xffffffff
je 0x59047bee
mov eax, dword [0x5915584c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x30
mov dword [esp + 0x24], eax
push esi
push 0x5917be74
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x31
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047a74
mov edi, str._cc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._cc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
mov bl, 0x32
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590993d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x34
push ecx
lea ecx, [esp + 0x14]
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.59099e00
xor ebp, ebp
mov bl, 0x37
test ebp, ebp
je 0x59047a8d
mov edi, 0x5917eb70
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x59047bb2
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.5907af80
mov esi, eax
cmp esi, 0xffffffff
je 0x59047bb2
push esi
push 0x5917a478
lea ecx, [esp + 0x18]
call fcn.5907af80
mov edx, eax
sub edx, esi
test edx, edx
jle 0x59047b40
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x5917a488
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.5909c020
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x36
call fcn.59099f80
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.59099e00
mov ecx, dword [0x59155850]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59047b6b
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.590a35e0
lea edx, [esp + 0x14]
push 0x59179460
lea eax, [esp + 0x44]
push edx
push eax
call fcn.5909f8f0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0x38
call fcn.5909fe30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x31
call fcn.5909f180
push ebp
push 0x5917eb70
lea ecx, [esp + 0x18]
call fcn.5907af80
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x59047a78
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x30
call fcn.59099e00
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov esi, dword [esp + 0xa4]
cmp esi, 0xffffffff
je 0x59047e4b
mov eax, dword [0x5915584c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x3b
mov dword [esp + 0x24], eax
push esi
push 0x5917be74
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x3c
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047cd1
mov edi, str._bcc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._bcc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
mov bl, 0x3d
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590993d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3f
push ecx
lea ecx, [esp + 0x14]
call fcn.59099f80
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.59099e00
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.59099e00
xor ebp, ebp
mov bl, 0x42
test ebp, ebp
je 0x59047cea
mov edi, 0x5917eb70
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x59047e0f
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.5907af80
mov esi, eax
cmp esi, 0xffffffff
je 0x59047e0f
push esi
push 0x5917a478
lea ecx, [esp + 0x18]
call fcn.5907af80
mov edx, eax
sub edx, esi
test edx, edx
jle 0x59047d9d
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x5917a488
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x5917a488
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.5909c020
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x41
call fcn.59099f80
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.59099e00
mov ecx, dword [0x59155850]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x59047dc8
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.590a35e0
lea edx, [esp + 0x14]
push 0x59179460
lea eax, [esp + 0x44]
push edx
push eax
call fcn.5909f8f0
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0x43
call fcn.5909fe30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3c
call fcn.5909f180
push ebp
push 0x5917eb70
lea ecx, [esp + 0x18]
call fcn.5907af80
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x59047cd5
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x3b
call fcn.59099e00
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov esi, dword [esp + 0xa8]
cmp esi, 0xffffffff
je 0x5904801f
mov ecx, dword [0x5915584c]
mov dword [esp + 0x10], ecx
mov bl, 0x45
push esi
push 0x5917a478
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.5907af80
mov edx, eax
cmp edx, 0xffffffff
je 0x59047ed6
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.5909c020
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x46
call fcn.59099f80
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
jmp 0x59047f38
push 0x22
lea ecx, [esp + 0x20]
call fcn.5907af40
mov edx, eax
cmp edx, 0xffffffff
je 0x59047f3d
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea eax, [esp + 0x1c]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.5909c020
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x47
call fcn.59099f80
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
call fcn.59099e00
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x5904800e
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.590993d0
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.5900abf0
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x49
call fcn.59099f80
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.59099e00
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.590993d0
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.5902bc20
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4b
call fcn.5909f310
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.5909f180
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.5900b5b0
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4c
call fcn.5909f310
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.5909f180
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.59099e00
mov eax, dword [0x5919cca0]
test eax, eax
je 0x59048064
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
push str.AnalyseYahooEMailXml__wstrAccount_:__s___wstrTo_:__s____wstrCC_:__s___wstrSubject_:__s___wstrText_:__s___wstrBCC_:__s___wstrHtml_:__s_
push str.MailLog
push 0xffffffffffffffff
push 0x5919cc34
call fcn.5907cd70
add esp, 0x2c
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x590480c2
mov edx, dword [esp + 0x3c]
mov eax, dword [edx - 8]
test eax, eax
jne 0x590480c2
mov eax, dword [esp + 0x34]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x590480c2
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x590480c2
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
jne 0x590480c2
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x590480c2
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x590480c2
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x59048566
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb8], 6
call fcn.59099e00
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x590480e9
mov dword [eax], 1
jmp 0x5904856b
mov eax, dword [0x59155850]
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0xcc]
mov byte [esp + 0xb8], 0x4f
test esi, esi
je 0x5904849d
mov dword [esp + 0x68], eax
mov byte [esp + 0xb8], 0x50
mov dword [esp + 0x6c], eax
mov byte [esp + 0xb8], 0x51
mov dword [esp + 0x70], eax
mov byte [esp + 0xb8], 0x52
mov dword [esp + 0x74], eax
mov byte [esp + 0xb8], 0x53
mov dword [esp + 0x78], eax
mov byte [esp + 0xb8], 0x54
mov dword [esp + 0x7c], eax
mov byte [esp + 0xb8], 0x55
mov dword [esp + 0x80], eax
mov byte [esp + 0xb8], 0x56
mov dword [esp + 0x84], eax
mov edx, dword [0x5915584c]
mov byte [esp + 0xb8], 0x57
mov dword [esp + 0x88], edx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 8]
mov bl, 0x59
mov byte [esp + 0xb8], bl
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xc]
lea ecx, [esp + 0x60]
mov dword [esp + 0x58], edx
push ecx
mov dword [esp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0xc8]
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x50], edx
call fcn.5909f310
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x78]
call fcn.5909f310
lea edx, [esp + 0x34]
lea ecx, [esp + 0x78]
push edx
call fcn.5909f310
lea eax, [esp + 0x30]
lea ecx, [esp + 0x7c]
push eax
call fcn.5909f310
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x74]
call fcn.5909f310
lea edx, [esp + 0x20]
lea ecx, [esp + 0x80]
push edx
call fcn.5909f310
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x84]
push eax
call fcn.5909f310
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x6c]
call fcn.5909f310
lea edx, [esp + 0x18]
push 0x5917aff8
push edx
call fcn.59054500
add esp, 8
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xbc], 0x5a
call fcn.59099f80
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.59099e00
mov eax, dword [esp + 0x88]
push 0x180
push 0x8101
push eax
call fcn.590821dd
mov ecx, dword [0x5915584c]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x10], ecx
cmp edi, 0xffffffff
mov byte [esp + 0xb8], 0x5b
je 0x590482fa
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x90]
push edx
push eax
push edi
call fcn.59081fed
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov eax, dword [esi + 0xc]
add esp, 0xc
push ecx
mov ecx, dword [esi + 8]
push edx
mov edx, dword [esi + 4]
push eax
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x28]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push ecx
call fcn.5909cc60
mov edx, dword [esp + 0x30]
add esp, 0x20
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
push eax
push 0
call fcn.5909aa90
push eax
push edi
call fcn.59081fed
push edi
call fcn.59081f0d
add esp, 0x10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov esi, dword [0x5919db0c]
mov eax, dword [eax - 8]
add eax, ecx
cmp esi, esi
mov dword [esp + 0x8c], eax
jl 0x59048328
lea edx, [esi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x5919db08
call fcn.5905af50
mov ecx, dword [0x5919db08]
mov eax, esi
mov edx, dword [esp + 0x4c]
shl eax, 4
add eax, esi
lea esi, [esp + 0x50]
lea ebp, [ecx + eax*4]
mov ecx, 6
lea eax, [esp + 0x68]
lea edi, [ebp + 4]
mov dword [ebp], edx
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp + 0x1c]
call fcn.5909f310
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [ebp + 0x20]
call fcn.5909f310
lea edx, [esp + 0x70]
lea ecx, [ebp + 0x24]
push edx
call fcn.5909f310
lea eax, [esp + 0x74]
lea ecx, [ebp + 0x28]
push eax
call fcn.5909f310
lea ecx, [esp + 0x78]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.5909f310
lea edx, [esp + 0x7c]
lea ecx, [ebp + 0x30]
push edx
call fcn.5909f310
lea eax, [esp + 0x80]
lea ecx, [ebp + 0x34]
push eax
call fcn.5909f310
lea ecx, [esp + 0x84]
push ecx
lea ecx, [ebp + 0x38]
call fcn.5909f310
lea edx, [esp + 0x88]
lea ecx, [ebp + 0x3c]
push edx
call fcn.59099f80
mov eax, dword [esp + 0x8c]
lea ecx, [esp + 0x10]
mov dword [ebp + 0x40], eax
mov byte [esp + 0xb8], bl
call fcn.59099e00
lea ecx, [esp + 0x88]
mov byte [esp + 0xb8], 0x63
call fcn.59099e00
lea ecx, [esp + 0x84]
mov byte [esp + 0xb8], 0x62
call fcn.5909f180
lea ecx, [esp + 0x80]
mov byte [esp + 0xb8], 0x61
call fcn.5909f180
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb8], 0x60
call fcn.5909f180
lea ecx, [esp + 0x78]
mov byte [esp + 0xb8], 0x5f
call fcn.5909f180
lea ecx, [esp + 0x74]
mov byte [esp + 0xb8], 0x5e
call fcn.5909f180
mov byte [esp + 0xb8], 0x5d
lea ecx, [esp + 0x70]
call fcn.5909f180
lea ecx, [esp + 0x6c]
mov byte [esp + 0xb8], 0x5c
call fcn.5909f180
lea ecx, [esp + 0x68]
mov byte [esp + 0xb8], 0x4f
call fcn.5909f180
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.5909f180
jmp 0x5904856b
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.5909f180
lea ecx, [esp + 0x44]
push 0
push ecx
call fcn.590543e0
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
push 1
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push eax
mov byte [esp + 0xec], 0x65
call fcn.5900c0f0
add esp, 0x34
test eax, eax
je 0x5904855a
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x90]
mov ecx, dword [esp + 0x44]
push edi
push esi
push ecx
call fcn.5900bee0
add esp, 0xc
test eax, eax
je 0x5904855a
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push 0
push 0
push 0
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push 2
push 1
push eax
push edi
push esi
call fcn.5900e1b0
add esp, 0x44
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x44]
call fcn.59099e00
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 5
call fcn.5909f180
lea ecx, [esp + 0x30]
mov byte [esp + 0xb8], 4
call fcn.5909f180
lea ecx, [esp + 0x34]
mov byte [esp + 0xb8], 3
call fcn.5909f180
lea ecx, [esp + 0x3c]
mov byte [esp + 0xb8], 2
call fcn.5909f180
lea ecx, [esp + 0x2c]
mov byte [esp + 0xb8], 1
call fcn.5909f180
lea ecx, [esp + 0x20]
mov byte [esp + 0xb8], 0
call fcn.5909f180
lea ecx, [esp + 0x38]
mov dword [esp + 0xb8], 0xffffffff
call fcn.5909f180
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xac
ret