Function at 0x10052128
Capabilities:
Contain obfuscated stackstrings
Delete file
Parse pe header

Disassembly:
push 0x400
mov eax, 0x101cc576
call fcn.10094739
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x144], 0
mov dword [ebp - 0x158], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x160], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1d8], ecx
je 0x10055437
push str.CAddin::OnItemSend________
mov edi, str.OnItemSend
push edi
or ebx, 0xffffffff
push ebx
mov esi, 0x1025cd9c
push esi
call fcn.10023e79
add esp, 0x10
lea ecx, [ebp - 0x1d4]
call fcn.1005e791
and dword [ebp - 4], 0
push dword [ebp - 0x158]
lea ecx, [ebp - 0x1d4]
call fcn.1005e7fb
push eax
push str.CAddin::OnItemSend_1___lx_
push edi
push ebx
push esi
mov dword [ebp - 0x17c], eax
call fcn.10023e79
add esp, 0x14
cmp dword [ebp - 0x17c], 0
jge 0x100521cd
mov dword [ebp - 4], ebx
jmp 0x1005542c
push str.CAddin::OnItemSend__1_1
push edi
push ebx
push esi
call fcn.10023e79
lea eax, [ebp - 0x1d4]
push eax
call fcn.100424ec
push str.CAddin::OnItemSend__1_2
push edi
push ebx
push esi
call fcn.10023e79
add esp, 0x24
lea ecx, [ebp - 0x40c]
call fcn.1018d110
mov byte [ebp - 4], 1
and dword [ebp - 0x1f4], 0
mov byte [ebp - 4], 3
and dword [ebp - 0x1f0], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x40c]
push eax
push 1
lea eax, [ebp - 0x1d4]
push eax
call fcn.1004989d
lea ecx, [ebp - 0x40c]
call fcn.1018ef70
mov dword [ebp - 0x1e0], eax
test eax, eax
jne 0x1005228c
mov byte [ebp - 4], 3
push dword [ebp - 0x1f0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f4]
call fcn.1003dec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40c]
call fcn.1018d230
jmp 0x100521c5
lea ecx, [ebp - 0x158]
push ecx
mov ecx, eax
call fcn.101935f0
mov byte [ebp - 4], 5
push dword [eax]
lea ecx, [ebp - 0x168]
call fcn.1004203b
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.100c9e10
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x100522c8
mov eax, dword [eax]
jmp 0x100522ca
xor eax, eax
push eax
lea ecx, [ebp - 0x16c]
call fcn.100c9670
mov byte [ebp - 4], 8
mov ebx, 0x101ebadc
push ebx
lea ecx, [ebp - 0x16c]
call fcn.100cd910
push ebx
lea ecx, [ebp - 0x16c]
call fcn.100cd620
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x158]
push eax
call fcn.10193630
mov byte [ebp - 4], 9
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.100c9670
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x158]
call fcn.100c9e10
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x158]
push eax
call fcn.10193630
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x168], 0
je 0x10052352
mov ecx, dword [ebp - 0x168]
mov ecx, dword [ecx]
jmp 0x10052354
xor ecx, ecx
push dword [eax]
push ecx
push str.CAddin::OnItemSend_MailInfo_MailFrom__s____s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x158]
call fcn.100c9e10
mov eax, dword [0x10204778]
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 0xd
mov eax, dword [0x10204778]
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 0xe
mov eax, dword [0x10204778]
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 4], 0xf
mov eax, dword [0x10204778]
mov dword [ebp - 0x188], eax
mov byte [ebp - 4], 0x10
mov eax, dword [0x10204778]
mov dword [ebp - 0x184], eax
mov byte [ebp - 4], 0x11
mov eax, dword [0x10204778]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 0x12
mov eax, dword [0x10204778]
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 0x13
mov eax, dword [0x10204778]
mov dword [ebp - 0x1e8], eax
mov byte [ebp - 4], 0x14
mov eax, dword [0x10204778]
mov dword [ebp - 0x1ec], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x320]
call fcn.100cf740
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x330]
call fcn.100cf740
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x310]
call fcn.100cf740
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2e0]
call fcn.100cf740
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x300]
call fcn.100cf740
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2f0]
call fcn.100cf740
mov byte [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.10033bc0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x15c], eax
call fcn.1003c23a
push dword [ebp - 0x29c]
mov dword [ebp - 0x164], eax
push dword [ebp - 0x214]
push str.CAddin::OnItemSend__r_ndwSessionID__lu__r_ndwState__lu__r_n
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
cmp dword [ebp - 0x29c], 2
mov ebx, 0x101dc75c
jne 0x100531ac
push dword [ebp - 0x20c]
push dword [ebp - 0x214]
call fcn.100307c2
pop ecx
pop ecx
test eax, eax
jne 0x1005250e
cmp dword [ebp - 0x164], 1
je 0x1005250e
cmp dword [ebp - 0x164], 2
jne 0x100531ac
lea ecx, [ebp - 0x248]
call fcn.100cf740
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2c0]
call fcn.100cf740
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x19c]
call fcn.100cf740
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x284]
call fcn.100cf740
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x360]
call fcn.100cf740
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x340]
call fcn.100cf740
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x224]
call fcn.100cf740
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x264]
call fcn.100cf740
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x274]
call fcn.100cf740
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2b0]
call fcn.100cf740
mov byte [ebp - 4], 0x25
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
test eax, eax
jle 0x10052767
push 0
push dword [ebp - 0x154]
lea ecx, [ebp - 0x40c]
call fcn.1018efd0
mov dword [ebp - 0x14c], eax
test eax, eax
je 0x10052748
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x158]
push eax
call fcn.101935f0
mov byte [ebp - 4], 0x26
push dword [eax]
lea ecx, [ebp - 0x140]
call fcn.1004203b
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x158]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x10052626
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x10052628
xor eax, eax
push eax
lea ecx, [ebp - 0x138]
call fcn.100c9670
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x170]
push eax
call fcn.10193630
mov byte [ebp - 4], 0x2a
push dword [eax]
lea ecx, [ebp - 0x150]
call fcn.100c9670
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x170]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x1005267d
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x1005267f
xor eax, eax
push dword [ebp - 0x150]
push eax
push str.CAddin::OnItemSend_MailInfo_bstrRecipients__s____s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd910
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd620
mov eax, dword [ebp - 0x138]
cmp dword [eax - 8], 0
je 0x1005270b
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x220]
lea ecx, [ebp - 0x224]
call fcn.100cfd50
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x2b0]
call fcn.100cfd50
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2e0]
call fcn.100cfd50
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x150]
call fcn.100c9e10
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x138]
call fcn.100c9e10
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x140], 0
je 0x10052748
mov ecx, dword [ebp - 0x140]
call fcn.100471e9
and dword [ebp - 0x140], 0
inc dword [ebp - 0x154]
push 0
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
cmp dword [ebp - 0x154], eax
jl 0x100525c0
and dword [ebp - 0x154], 0
push 1
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
test eax, eax
jle 0x1005292a
push 1
push dword [ebp - 0x154]
lea ecx, [ebp - 0x40c]
call fcn.1018efd0
mov dword [ebp - 0x14c], eax
test eax, eax
je 0x1005290b
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x158]
push eax
call fcn.101935f0
mov byte [ebp - 4], 0x2d
push dword [eax]
lea ecx, [ebp - 0x140]
call fcn.1004203b
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x158]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x100527e9
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x100527eb
xor eax, eax
push eax
lea ecx, [ebp - 0x138]
call fcn.100c9670
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x170]
push eax
call fcn.10193630
mov byte [ebp - 4], 0x31
push dword [eax]
lea ecx, [ebp - 0x150]
call fcn.100c9670
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x170]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x10052840
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x10052842
xor eax, eax
push dword [ebp - 0x150]
push eax
push str.CAddin::OnItemSend_MailInfo_bstrRecipients2__s____s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd910
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd620
mov eax, dword [ebp - 0x138]
cmp dword [eax - 8], 0
je 0x100528ce
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x270]
lea ecx, [ebp - 0x274]
call fcn.100cfd50
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x2b0]
call fcn.100cfd50
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x2f0]
call fcn.100cfd50
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x150]
call fcn.100c9e10
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x138]
call fcn.100c9e10
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x140], 0
je 0x1005290b
mov ecx, dword [ebp - 0x140]
call fcn.100471e9
and dword [ebp - 0x140], 0
inc dword [ebp - 0x154]
push 1
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
cmp dword [ebp - 0x154], eax
jl 0x10052783
and dword [ebp - 0x154], 0
push 2
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
test eax, eax
jle 0x10052aed
push 2
push dword [ebp - 0x154]
lea ecx, [ebp - 0x40c]
call fcn.1018efd0
mov dword [ebp - 0x14c], eax
test eax, eax
je 0x10052ace
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x158]
push eax
call fcn.101935f0
mov byte [ebp - 4], 0x34
push dword [eax]
lea ecx, [ebp - 0x140]
call fcn.1004203b
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x158]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x100529ac
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x100529ae
xor eax, eax
push eax
lea ecx, [ebp - 0x138]
call fcn.100c9670
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x170]
push eax
call fcn.10193630
mov byte [ebp - 4], 0x38
push dword [eax]
lea ecx, [ebp - 0x150]
call fcn.100c9670
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x170]
call fcn.100c9e10
cmp dword [ebp - 0x140], 0
je 0x10052a03
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
jmp 0x10052a05
xor eax, eax
push dword [ebp - 0x150]
push eax
push str.CAddin::OnItemSend_MailInfo_bstrRecipients3__s____s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd910
push 0x101ebadc
lea ecx, [ebp - 0x138]
call fcn.100cd620
mov eax, dword [ebp - 0x138]
cmp dword [eax - 8], 0
je 0x10052a91
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x260]
lea ecx, [ebp - 0x264]
call fcn.100cfd50
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x2b0]
call fcn.100cfd50
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x300]
call fcn.100cfd50
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x150]
call fcn.100c9e10
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x138]
call fcn.100c9e10
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x140], 0
je 0x10052ace
mov ecx, dword [ebp - 0x140]
call fcn.100471e9
and dword [ebp - 0x140], 0
inc dword [ebp - 0x154]
push 2
lea ecx, [ebp - 0x40c]
call fcn.1018efa0
cmp dword [ebp - 0x154], eax
jl 0x10052946
lea ecx, [ebp - 0x298]
call fcn.100cf740
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x350]
call fcn.100cf740
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x234]
call fcn.100cf740
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x298]
push eax
push dword [ebp - 0x20c]
lea eax, [ebp - 0x2b0]
push eax
push dword [ebp - 0x16c]
call fcn.10030a44
add esp, 0x18
cmp dword [ebp - 0x164], 1
je 0x10052b83
cmp dword [ebp - 0x164], 2
jne 0x10052db7
cmp dword [ebp - 0x34c], 0
jle 0x10052db7
push str.CAddin::OnItemSend_has_not_decrypt_recv__do_not_send___
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
lea eax, [ebp - 0x350]
jmp 0x10052ba4
cmp dword [ebp - 0x230], 0
jle 0x10052db7
push str.CAddin::OnItemSend_has_NotMatchRecvs__do_not_send___
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
lea eax, [ebp - 0x234]
mov ecx, dword [ebp - 0x13c]
add esp, 0x10
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.10040a65
mov ecx, dword [ebp - 0x160]
or eax, 0xffffffff
mov word [ecx], ax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x234]
call fcn.100cf750
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x350]
call fcn.100cf750
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x298]
call fcn.100cf750
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2b0]
call fcn.100cf750
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x274]
call fcn.100cf750
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x264]
call fcn.100cf750
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x224]
call fcn.100cf750
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x340]
call fcn.100cf750
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x360]
call fcn.100cf750
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x284]
call fcn.100cf750
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x19c]
call fcn.100cf750
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2c0]
call fcn.100cf750
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x248]
call fcn.100cf750
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2f0]
call fcn.100cf750
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x300]
call fcn.100cf750
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2e0]
call fcn.100cf750
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x310]
call fcn.100cf750
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x330]
call fcn.100cf750
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x320]
call fcn.100cf750
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1ec]
call fcn.100c9e10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1e8]
call fcn.100c9e10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e4]
call fcn.100c9e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18c]
call fcn.100c9e10
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x184]
call fcn.100c9e10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x188]
call fcn.100c9e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1bc]
call fcn.100c9e10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1b8]
call fcn.100c9e10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b4]
call fcn.100c9e10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x200]
call fcn.100c9e10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x16c]
call fcn.100c9e10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x10052da2
call fcn.100471e9
and dword [ebp - 0x168], 0
mov byte [ebp - 4], 3
push dword [ebp - 0x1f0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1005540a
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.1003e748
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.1003e748
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.1003e748
xor eax, eax
cmp dword [ebp - 0x280], eax
jne 0x10052e5f
cmp dword [ebp - 0x35c], eax
jne 0x10052e5f
cmp dword [ebp - 0x33c], eax
je 0x10052f25
xor ecx, ecx
inc ecx
mov dword [ebp - 0x178], ecx
cmp dword [ebp - 0x244], eax
jne 0x10052e80
cmp dword [ebp - 0x2bc], eax
jne 0x10052e80
cmp dword [ebp - 0x198], eax
je 0x10052e9e
cmp dword [ebp - 0x1c4], ecx
jne 0x10052e93
mov dword [ebp - 0x1dc], ecx
jmp 0x10052f25
mov dword [ebp - 0x178], eax
jmp 0x10052f25
call fcn.1003c041
cmp eax, 5
jne 0x10052f25
cmp dword [ebp - 0x1c4], 1
jne 0x10052f1e
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x10052ebf
mov eax, dword [eax]
jmp 0x10052ec1
xor eax, eax
push eax
push dword [ebp - 0x244]
lea ecx, [ebp - 0x248]
call fcn.100cfc60
lea eax, [ebp - 0x200]
push eax
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2e0]
call fcn.100cfd50
cmp dword [ebp - 0x168], 0
je 0x10052efe
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
jmp 0x10052f00
xor eax, eax
push eax
push dword [ebp - 0x220]
lea ecx, [ebp - 0x224]
call fcn.100cfc60
mov dword [ebp - 0x1dc], 1
jmp 0x10052f25
and dword [ebp - 0x178], 0
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x320]
call fcn.100cf990
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x310]
call fcn.100cf990
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x330]
call fcn.100cf990
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.10040caf
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.10040caf
push ebx
lea ecx, [ebp - 0x1b4]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x1b8]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x1bc]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x188]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x184]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x18c]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x1e4]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x1e8]
call fcn.100cd620
push ebx
lea ecx, [ebp - 0x1ec]
call fcn.100cd620
push dword [ebp - 0x18c]
push dword [ebp - 0x184]
push dword [ebp - 0x188]
push dword [ebp - 0x1dc]
push dword [ebp - 0x178]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1b4]
push str.CAddin::OnItemSend_MailInfo_ToRecipients__s___s___s__Decrypt__d__d_:__s___s___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x30
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x234]
call fcn.100cf750
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x350]
call fcn.100cf750
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x298]
call fcn.100cf750
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2b0]
call fcn.100cf750
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x274]
call fcn.100cf750
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x264]
call fcn.100cf750
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x224]
call fcn.100cf750
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x340]
call fcn.100cf750
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x360]
call fcn.100cf750
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x284]
call fcn.100cf750
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x19c]
call fcn.100cf750
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2c0]
call fcn.100cf750
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x248]
call fcn.100cf750
lea ecx, [ebp - 0x88]
call fcn.10035b2b
mov byte [ebp - 4], 0x3e
mov ebx, 0x101dcc6c
push ebx
lea ecx, [ebp - 0x1b0]
call fcn.100c9670
mov byte [ebp - 4], 0x3f
push ebx
lea ecx, [ebp - 0x180]
call fcn.100c9670
mov byte [ebp - 4], 0x40
and dword [ebp - 0x140], 0
lea ecx, [ebp - 0x2d0]
call fcn.100cf740
mov byte [ebp - 4], 0x41
cmp dword [ebp - 0x178], 0
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
je 0x10054787
cmp dword [ebp - 0x1dc], 0
jne 0x1005328f
push dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x2d0]
push eax
push 1
push dword [ebp - 0x214]
lea eax, [ebp - 0x1d4]
push dword [ebp - 0x20c]
push dword [ebp - 0x15c]
push eax
call fcn.100501a3
test eax, eax
je 0x10053285
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1003eb34
push str.CAddin::OnItemSend_ItemDecrypt_1
jmp 0x1005478c
push str.CAddin::OnItemSend_Send_Two_Mails_r_n
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
mov eax, dword [0x10204778]
and dword [ebp - 0x164], 0
and dword [ebp - 0x158], 0
add esp, 0x10
mov dword [ebp - 0x154], eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x274]
call fcn.100cf740
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x248]
call fcn.100cf740
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x298]
call fcn.100cf740
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x264]
call fcn.100d5ab0
mov byte [ebp - 4], 0x46
push dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x2d0]
push eax
push 1
push dword [ebp - 0x214]
lea eax, [ebp - 0x1d4]
push dword [ebp - 0x20c]
push dword [ebp - 0x15c]
push eax
call fcn.1004ef57
test eax, eax
jne 0x10053362
push str.No_Attach_DecryptOrEncrypt__r_n
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x10
jmp 0x100546d1
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1003eb34
push 0xffffffffffffffff
lea ecx, [ebp - 0x21c]
call fcn.100104e2
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x13c]
push 1
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.10042e6d
test eax, eax
je 0x100546ab
cmp dword [ebp - 0x164], 0
je 0x100546ab
lea ecx, [ebp - 0x1a0]
call fcn.1005e791
mov byte [ebp - 4], 0x48
push dword [ebp - 0x164]
lea ecx, [ebp - 0x1a0]
call fcn.1005e7fb
mov dword [ebp - 0x17c], eax
test eax, eax
jge 0x1005343d
push eax
push str.CAddin::OnItemSend_ItemDecrypt_2_Err_2__08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x14
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a0]
call fcn.1005e71e
jmp 0x100546c2
push 0x101dc75c
lea ecx, [ebp - 0x188]
call fcn.100cd620
push 0x101dc75c
lea ecx, [ebp - 0x184]
call fcn.100cd620
push 0x101dc75c
lea ecx, [ebp - 0x18c]
call fcn.100cd620
push dword [ebp - 0x188]
lea ecx, [ebp - 0x1f8]
call fcn.1003da6b
mov byte [ebp - 4], 0x49
push dword [ebp - 0x184]
lea ecx, [ebp - 0x204]
call fcn.1003da6b
mov byte [ebp - 4], 0x4a
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x1fc]
call fcn.1003da6b
mov byte [ebp - 4], 0x4b
cmp dword [ebp - 0x190], 1
mov eax, 0x101dcc6c
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x254], eax
jne 0x10053582
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
lea edx, [ebp - 0x238]
push edx
push eax
call dword [ecx + 0x1c0]
cmp dword [ebp - 0x190], 1
jne 0x10053582
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
lea edx, [ebp - 0x250]
push edx
push eax
call dword [ecx + 0xf8]
cmp dword [ebp - 0x190], 1
jne 0x10053582
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
lea edx, [ebp - 0x254]
push edx
push eax
call dword [ecx + 0xf0]
cmp dword [ebp - 0x190], 1
jne 0x10053582
mov eax, dword [ebp - 0x19c]
push dword [ebp - 0x1f8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c4]
cmp dword [ebp - 0x190], 1
jne 0x10053582
mov eax, dword [ebp - 0x19c]
push dword [ebp - 0x204]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xfc]
cmp dword [ebp - 0x190], 1
jne 0x10053582
mov eax, dword [ebp - 0x19c]
push dword [ebp - 0x1fc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xf4]
push dword [ebp - 0x254]
push dword [ebp - 0x250]
push dword [ebp - 0x238]
push dword [ebp - 0x1fc]
push dword [ebp - 0x204]
push dword [ebp - 0x1f8]
push str.CAddin::OnItemSend_Decrypt_name_New__s___s___s__Old__s___s___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x28
call fcn.1003c041
cmp eax, 4
jne 0x1005378e
mov eax, dword [0x10204778]
and dword [ebp - 0x14c], 0
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x13c]
and dword [ebp - 0x148], 0
push 1
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.10042e6d
test eax, eax
je 0x10053947
cmp dword [ebp - 0x148], 0
je 0x10053947
lea ecx, [ebp - 0x288]
call fcn.1005e791
mov byte [ebp - 4], 0x4d
push dword [ebp - 0x148]
lea ecx, [ebp - 0x288]
call fcn.1005e7fb
and dword [ebp - 0x138], 0
mov byte [ebp - 4], 0x4f
cmp dword [ebp - 0x278], 1
jne 0x1005366c
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
lea edx, [ebp - 0x138]
push edx
push eax
call dword [ecx + 0x1a0]
jmp 0x1005368f
cmp dword [ebp - 0x278], 2
jne 0x1005370f
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x138]
push edx
push eax
call dword [ecx + 0x140]
test eax, eax
jl 0x1005370f
cmp dword [ebp - 0x138], 0
je 0x1005370f
cmp dword [ebp - 0x278], 1
jne 0x100536ad
mov eax, dword [ebp - 0x284]
jmp 0x100536bc
cmp dword [ebp - 0x278], 2
jne 0x100536c7
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0xb8]
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x288]
push eax
call fcn.10040f80
cmp dword [ebp - 0x278], 1
jne 0x100536ea
mov eax, dword [ebp - 0x284]
jmp 0x100536f9
cmp dword [ebp - 0x278], 2
jne 0x1005370f
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x160]
push edx
push dword [ebp - 0x138]
push eax
call dword [ecx + 0xd0]
cmp dword [ebp - 0x14c], 0
je 0x10053761
push 0xffffffffffffffff
lea ecx, [ebp - 0x22c]
call fcn.100104e2
mov byte [ebp - 4], 0x50
push dword [ebp - 0x144]
mov ecx, dword [ebp - 0x13c]
call fcn.1003c958
push dword [ebp - 0x144]
push eax
push str.CAddin::OnItemSend_DelFile___d___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x22c]
call fcn.1001050e
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x138]
call fcn.1003de9b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x288]
call fcn.1005e71e
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x144]
call fcn.100c9e10
mov ecx, dword [ebp - 0x13c]
lea eax, [ecx + 0x698]
push eax
push 1
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.1004ae3f
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x13c]
push 0xffff
add eax, 0x698
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.1004a7c8
mov eax, dword [ebp - 0x13c]
add eax, 0x6a8
cmp dword [eax], 0
jne 0x10053826
mov ecx, dword [ebp - 0x13c]
mov dword [eax], 1
push 2
lea eax, [ecx + 0x698]
push eax
call fcn.10046f3d
test eax, eax
je 0x10053826
mov ecx, dword [ebp - 0x13c]
push 0xfffe
lea eax, [ecx + 0x698]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1004a7c8
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x144], eax
js 0x100538e2
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x144]
lea eax, [eax + ecx*4]
push dword [eax]
lea eax, [ebp - 0x14c]
push eax
call fcn.100101b3
pop ecx
pop ecx
mov byte [ebp - 4], 0x51
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x14c]
call fcn.100c9e10
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x144]
lea eax, [eax + ecx*4]
push dword [eax]
lea eax, [ebp - 0x160]
push eax
call fcn.100101b3
pop ecx
pop ecx
mov byte [ebp - 4], 0x52
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x160]
call fcn.100c9e10
mov ecx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x144]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x248]
push dword [ecx + eax*4]
push str.delete_temp_file___s___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
dec dword [ebp - 0x144]
jns 0x10053839
call fcn.1003c041
cmp eax, 1
je 0x10053906
cmp dword [ebp - 0x190], 1
jne 0x10053906
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x10c]
cmp dword [ebp - 0x2cc], 0
jne 0x10053bdd
cmp dword [ebp - 0x190], 1
jne 0x10053b62
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x294]
cmp dword [ebp - 0x190], 1
jne 0x10053b62
mov eax, dword [ebp - 0x19c]
jmp 0x10053b71
push 0
push str._pIDispPatchOrg_Err__08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x14
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x144]
call fcn.100c9e10
mov byte [ebp - 4], 0x4a
push dword [ebp - 0x1fc]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov byte [ebp - 4], 0x49
push dword [ebp - 0x204]
call esi
mov byte [ebp - 4], 0x48
push dword [ebp - 0x1f8]
call esi
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a0]
call fcn.1005e71e
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x21c]
call fcn.1001050e
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x264]
call fcn.100d5ac0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x298]
call fcn.100cf750
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x248]
call fcn.100cf750
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x274]
call fcn.100cf750
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x154]
call fcn.100c9e10
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2d0]
call fcn.100cf750
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x180]
call fcn.100c9e10
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1b0]
call fcn.100c9e10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x88]
call fcn.10035855
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2f0]
call fcn.100cf750
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x300]
call fcn.100cf750
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2e0]
call fcn.100cf750
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x310]
call fcn.100cf750
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x330]
call fcn.100cf750
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x320]
call fcn.100cf750
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1ec]
call fcn.100c9e10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1e8]
call fcn.100c9e10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e4]
call fcn.100c9e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18c]
call fcn.100c9e10
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x184]
call fcn.100c9e10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x188]
call fcn.100c9e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1bc]
call fcn.100c9e10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1b8]
call fcn.100c9e10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b4]
call fcn.100c9e10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x200]
call fcn.100c9e10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x16c]
call fcn.100c9e10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x168]
test ecx, ecx
je 0x10053b51
call fcn.100471e9
and dword [ebp - 0x168], 0
mov byte [ebp - 4], 3
push dword [ebp - 0x1f0]
call esi
jmp 0x1005540a
cmp dword [ebp - 0x190], 2
jne 0x10053b7a
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xd8]
cmp dword [ebp - 0x190], 1
jne 0x10053b8b
mov eax, dword [ebp - 0x19c]
jmp 0x10053b9a
cmp dword [ebp - 0x190], 2
jne 0x10053ba3
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc8]
push str.CAddin::OnItemSend_No_Attach_Decrypt__r_n
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x10
mov byte [ebp - 4], 0x4a
push dword [ebp - 0x1fc]
call ebx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x204]
call ebx
mov byte [ebp - 4], 0x48
push dword [ebp - 0x1f8]
call ebx
jmp 0x10053429
cmp dword [ebp - 0x190], 1
jne 0x10053bee
mov eax, dword [ebp - 0x19c]
jmp 0x10053bfd
cmp dword [ebp - 0x190], 2
jne 0x10053c0c
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xd8]
mov dword [ebp - 0x17c], eax
push 0x101dc75c
lea ecx, [ebp - 0x1b4]
call fcn.100cd620
push 0x101dc75c
lea ecx, [ebp - 0x1b8]
call fcn.100cd620
push 0x101dc75c
lea ecx, [ebp - 0x1bc]
call fcn.100cd620
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x14c]
call fcn.1003da6b
mov byte [ebp - 4], 0x53
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x160]
call fcn.1003da6b
mov byte [ebp - 4], 0x54
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x1d8]
call fcn.1003da6b
mov byte [ebp - 4], 0x55
cmp dword [ebp - 0x1c4], 1
mov eax, 0x101dcc6c
mov dword [ebp - 0x15c], 0x80004005
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x24c], eax
jne 0x10053cc3
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push eax
call dword [ecx + 0x1c0]
mov dword [ebp - 0x148], eax
jmp 0x10053ccd
mov dword [ebp - 0x148], 0x80004005
cmp dword [ebp - 0x1c4], 1
jne 0x10053cf4
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0xf8]
mov dword [ebp - 0x138], eax
jmp 0x10053cfe
mov dword [ebp - 0x138], 0x80004005
cmp dword [ebp - 0x1c4], 1
jne 0x10053d25
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x24c]
push edx
push eax
call dword [ecx + 0xf0]
mov dword [ebp - 0x144], eax
jmp 0x10053d2f
mov dword [ebp - 0x144], 0x80004005
push dword [ebp - 0x24c]
push dword [ebp - 0x210]
push dword [ebp - 0x170]
push dword [ebp - 0x1d8]
push dword [ebp - 0x160]
push dword [ebp - 0x14c]
push str.CAddin::OnItemSend_set_name_1_New__s___s___s__Old__s___s___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x28
call fcn.1003c041
cmp eax, 1
je 0x10053d86
call fcn.1003c041
cmp eax, 4
je 0x10053d86
call fcn.1003c041
cmp eax, 5
jne 0x10053e16
cmp dword [ebp - 0x1c4], 1
jne 0x10053dac
mov eax, dword [ebp - 0x1d0]
push dword [ebp - 0x14c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c4]
mov dword [ebp - 0x148], eax
jmp 0x10053db6
mov dword [ebp - 0x148], 0x80004005
cmp dword [ebp - 0x1c4], 1
jne 0x10053ddc
mov eax, dword [ebp - 0x1d0]
push dword [ebp - 0x160]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xfc]
mov dword [ebp - 0x138], eax
jmp 0x10053de6
mov dword [ebp - 0x138], 0x80004005
cmp dword [ebp - 0x1c4], 1
jne 0x10053e0c
mov eax, dword [ebp - 0x1d0]
push dword [ebp - 0x1d8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xf4]
mov dword [ebp - 0x144], eax
jmp 0x10053e16
mov dword [ebp - 0x144], 0x80004005
cmp dword [ebp - 0x1c4], 1
jne 0x10053e27
mov eax, dword [ebp - 0x1d0]
jmp 0x10053e36
cmp dword [ebp - 0x1c4], 2
jne 0x10053e45
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xd8]
mov dword [ebp - 0x15c], eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x138]
push dword [ebp - 0x148]
push str.CAddin::OnItemSend_set_name_2__08x___08x___08x___08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
and dword [ebp - 0x144], 0
add esp, 0x20
mov byte [ebp - 4], 0x57
cmp dword [ebp - 0x1c4], 1
jne 0x10053e9a
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x144]
push edx
push eax
call dword [ecx + 0x164]
jmp 0x10053e9f
mov eax, 0x80004005
test eax, eax
jl 0x10053f37
cmp dword [ebp - 0x144], 0
je 0x10053f37
push str.CAddin::OnItemSend_set_name_2_1
push str.Addin
push 0xffffffffffffffff
push esi
call fcn.10023e79
mov eax, dword [ebp - 0x144]
and dword [ebp - 0x15c], 0
mov ecx, dword [eax]
add esp, 0x10
lea edx, [ebp - 0x15c]
push edx
push eax
call dword [ecx + 0x2c]
push dword [ebp - 0x15c]
push eax
push str.CAddin::OnItemSend_set_name_2_2___08x___d_
push str.Addin
push 0xffffffffffffffff
push esi
call fcn.10023e79
mov eax, dword [ebp - 0x144]
and dword [ebp - 0x148], 0
mov ecx, dword [eax]
add esp, 0x18
lea edx, [ebp - 0x148]
push edx
push eax
call dword [ecx + 0x3c]
movsx ecx, word [ebp - 0x148]
push ecx
push eax
push str.CAddin::OnItemSend_set_name_2_3___08x___d_
push str.Addin
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x144]
call fcn.1003e723
and dword [ebp - 0x174], 0
mov byte [ebp - 4], 0x59
cmp dword [ebp - 0x190], 1
mov eax, 0x80004005
jne 0x10053f77
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
lea edx, [ebp - 0x174]
push edx
push eax
call dword [ecx + 0x1a0]
jmp 0x10053f96
cmp dword [ebp - 0x190], 2
jne 0x10053f96
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
lea edx, [ebp - 0x174]
push edx
push eax
call dword [ecx + 0x140]
xor ecx, ecx
mov dword [ebp - 0x2a0], ecx
mov byte [ebp - 4], 0x5a
mov dword [ebp - 0x208], ecx
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0x150], ecx
mov byte [ebp - 4], 0x5c
cmp eax, ecx
jl 0x10054115
mov eax, dword [ebp - 0x174]
cmp eax, ecx
je 0x10054115
mov ecx, dword [eax]
lea edx, [ebp - 0x2a0]
push edx
push eax
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x208]
push edx
push eax
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax + 0x150]
mov ecx, dword [eax]
lea edx, [ebp - 0x148]
push edx
push 5
push eax
call dword [ecx + 0x40]
push eax
push dword [ebp - 0x150]
mov dword [ebp - 0x15c], eax
push dword [ebp - 0x208]
push dword [ebp - 0x2a0]
push str.CAddin::OnItemSend_SentFolderName1__s___s___s__hrPare_0x_x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x20
cmp dword [ebp - 0x15c], 0
jl 0x10054115
cmp dword [ebp - 0x148], 0
je 0x10054115
and dword [ebp - 0x144], 0
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
lea edx, [ebp - 0x144]
push edx
push eax
call dword [ecx + 0x3c]
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x144]
call fcn.1003bcc0
test al, al
jne 0x100540ec
cmp dword [ebp - 0x190], 1
jne 0x100540b2
mov eax, dword [ebp - 0x19c]
push dword [ebp - 0x148]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1a4]
jmp 0x100540d0
cmp dword [ebp - 0x190], 2
jne 0x100540d0
mov eax, dword [ebp - 0x198]
push dword [ebp - 0x148]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x144]
push dword [ebp - 0x208]
lea ecx, [ebp - 0x18]
call fcn.100ca090
push dword [ebp - 0x150]
lea ecx, [ebp - 0x14]
call fcn.100ca090
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push str.CAddin::OnItemSend_ID1__s__hrPare_0x_x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x5c
push dword [ebp - 0x144]
call ebx
push dword [ebp - 0x17c]
push str.CAddin::OnItemSend_ItemDecrypt_2_1___08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx - 8]
add esp, 0x14
lea edx, [ebp - 0x88]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x188]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x78]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x184]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x68]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x58]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
lea ecx, [ebp - 0x134]
call fcn.1018d110
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.1003f7d1
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x134]
call fcn.1018ef40
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x1b0]
call fcn.100c9fa0
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x15c]
call fcn.100c9e10
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x48]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
lea ecx, [ebp - 0x2c0]
call fcn.100cf740
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.100428c1
mov eax, dword [ebp - 0x2cc]
add esp, 0xc
cmp dword [ebp - 0x140], eax
je 0x1005427e
and dword [ebp - 0x148], 0
test eax, eax
jle 0x1005427e
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x148]
lea eax, [eax + ecx*4]
push eax
lea ecx, [ebp - 0x1c]
call fcn.100caac0
push 0x101dc75c
lea ecx, [ebp - 0x1c]
call fcn.100caa60
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x2cc]
jl 0x10054245
push dword [ebp - 0x1c]
push str.CAddin::OnItemSend_ItemDecrypt_filename__s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
mov ecx, dword [ebp - 0x13c]
add esp, 0x14
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.10040caf
push 0x101dc75c
lea ecx, [ebp - 0x180]
call fcn.100cd620
mov ecx, dword [ebp - 0x180]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x38]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x22c]
push eax
call fcn.100214c7
mov ecx, eax
call fcn.10020ed7
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.100424ec
cmp dword [ebp - 0x190], 1
pop ecx
jne 0x10054322
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1e8]
jmp 0x1005433a
cmp dword [ebp - 0x190], 2
jne 0x10054340
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x168]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x100545fb
cmp dword [ebp - 0x140], 0
je 0x100545fb
xor eax, eax
inc eax
push eax
push 0x1026067c
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x1e0], eax
call fcn.100d6910
mov byte [ebp - 4], 0x61
mov ecx, 0x1026069c
call fcn.10035af6
mov dword [ebp - 0x144], eax
test eax, eax
je 0x10054497
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x1026069c
call fcn.1003d66e
mov dword [ebp - 0x15c], eax
add eax, 0x30
push 0x10
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.100dbba0
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0x62
mov eax, dword [ebp - 0x15c]
add eax, 0x20
push 0x10
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.100dbba0
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 0x63
mov eax, dword [ebp - 0x15c]
add eax, 0x10
push 0x10
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0x64
push 0x10
push dword [ebp - 0x15c]
lea eax, [ebp - 0x1c0]
push eax
call fcn.100dbba0
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x148]
push dword [ecx]
mov ecx, dword [ebp - 0x138]
push dword [ecx]
mov ecx, dword [ebp - 0x1a4]
push dword [ecx]
push dword [eax]
push str.CAddin::OnItemAdd_Before__f:_s__t:_s__c:_s__b:_s_
push str.OnItemAdd
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x50
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x1c0]
call fcn.100c9e10
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x1a8]
call fcn.100c9e10
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1ac]
call fcn.100c9e10
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x228]
call fcn.100c9e10
cmp dword [ebp - 0x144], 0
jne 0x10054390
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x1026069c
call fcn.10035e82
mov ecx, 0x1026069c
call fcn.10035af6
mov dword [ebp - 0x144], eax
test eax, eax
je 0x100545c7
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x1026069c
call fcn.1003d66e
mov dword [ebp - 0x15c], eax
add eax, 0x30
push 0x10
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.100dbba0
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x15c]
add eax, 0x20
push 0x10
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x15c]
add eax, 0x10
push 0x10
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x68
push 0x10
push dword [ebp - 0x15c]
lea eax, [ebp - 0x1c0]
push eax
call fcn.100dbba0
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x228]
push dword [ecx]
mov ecx, dword [ebp - 0x1ac]
push dword [ecx]
mov ecx, dword [ebp - 0x1a8]
push dword [ecx]
push dword [eax]
push str.CAddin::OnItemAdd_After__f:_s__t:_s__c:_s__b:_s_
push str.OnItemAdd
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x50
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x1c0]
call fcn.100c9e10
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x1a4]
call fcn.100c9e10
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x148]
call fcn.100c9e10
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x138]
call fcn.100c9e10
cmp dword [ebp - 0x144], 0
jne 0x100544c0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x2ac]
call fcn.100d6970
push dword [ebp - 0x1b0]
push dword [ebp - 0x180]
push dword [ebp - 0x140]
push str.CAddin::OnItemSend_MailInfo_Attachment_num:_d___s__Subject__s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x1c
jmp 0x10054612
push dword [ebp - 0x17c]
push str.CAddin::OnItemSend_ItemDecrypt_2_Err_3__08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x14
lea eax, [ebp - 0x1a0]
push eax
call fcn.100424ec
mov dword [esp], str.CAddin::OnItemSend_ItemDecrypt_2_2
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x10
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x2c0]
call fcn.100cf750
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x134]
call fcn.1018d230
mov byte [ebp - 4], 0x5b
push dword [ebp - 0x150]
call ebx
mov byte [ebp - 4], 0x5a
push dword [ebp - 0x208]
call ebx
mov byte [ebp - 4], 0x59
push dword [ebp - 0x2a0]
call ebx
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x174]
call fcn.1003de9b
mov byte [ebp - 4], 0x54
push dword [ebp - 0x1d8]
call ebx
mov byte [ebp - 4], 0x53
push dword [ebp - 0x160]
call ebx
mov byte [ebp - 4], 0x4b
push dword [ebp - 0x14c]
call ebx
jmp 0x10053bb4
push dword [ebp - 0x17c]
push str.CAddin::OnItemSend_ItemDecrypt_2_Err_1__08x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x14
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x21c]
call fcn.1001050e
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x264]
call fcn.100d5ac0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x298]
call fcn.100cf750
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x248]
call fcn.100cf750
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x274]
call fcn.100cf750
mov eax, dword [ebp - 0x164]
test eax, eax
je 0x10054724
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x158], 0
je 0x10054776
push 0xffffffffffffffff
lea ecx, [ebp - 0x21c]
call fcn.100104e2
mov byte [ebp - 4], 0x6a
push dword [ebp - 0x154]
mov ecx, dword [ebp - 0x13c]
call fcn.1003c958
push dword [ebp - 0x154]
push eax
push str.CAddin::OnItemSend_DelFile___d___s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x21c]
call fcn.1001050e
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x154]
call fcn.100c9e10
jmp 0x10054798
push str.No_need_to_rebuild_attachment
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x10
push str.CAddin::OnItemSend__3_1
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
lea eax, [ebp - 0x1d4]
push eax
call fcn.100424ec
push str.CAddin::OnItemSend__3_2
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x24
cmp dword [ebp - 0x2cc], 0
jne 0x100547e2
push str.CAddin::OnItemSend_No_Attach_Decrypt___r_n
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x10
jmp 0x10054ee2
cmp dword [ebp - 0x178], 0
je 0x10054ee2
cmp dword [ebp - 0x1dc], 0
jne 0x10054ee2
lea ecx, [ebp - 0x2c0]
call fcn.100cf740
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.100428c1
mov eax, dword [ebp - 0x2cc]
add esp, 0xc
cmp dword [ebp - 0x140], eax
je 0x1005487a
and dword [ebp - 0x150], 0
test eax, eax
jle 0x1005487a
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x150]
lea eax, [eax + ecx*4]
push eax
lea ecx, [ebp - 0x1c]
call fcn.100caac0
push 0x101dc75c
lea ecx, [ebp - 0x1c]
call fcn.100caa60
inc dword [ebp - 0x150]
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x2cc]
jl 0x10054841
push dword [ebp - 0x1c]
push str.CAddin::OnItemSend_ItemDecrypt_filename2__s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x14
cmp dword [ebp - 0x140], 0
je 0x10054ed3
and dword [ebp - 0x138], 0
mov byte [ebp - 4], 0x6d
cmp dword [ebp - 0x1c4], 1
mov dword [ebp - 0x174], 0x80004005
jne 0x100548d1
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x138]
push edx
push eax
call dword [ecx + 0x1a0]
jmp 0x100548f0
cmp dword [ebp - 0x1c4], 2
jne 0x100548f6
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x138]
push edx
push eax
call dword [ecx + 0x140]
mov dword [ebp - 0x174], eax
xor eax, eax
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x164], eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0x70
xor ecx, ecx
cmp dword [ebp - 0x138], eax
setne cl
push ecx
xor ecx, ecx
cmp dword [ebp - 0x174], eax
setge cl
push ecx
push str.CAddin::OnItemSend_get_SaveSentMessageFolder_0x_x___d_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
cmp dword [ebp - 0x174], 0
jl 0x10054abd
mov eax, dword [ebp - 0x138]
test eax, eax
je 0x10054abd
mov ecx, dword [eax]
lea edx, [ebp - 0x160]
push edx
push eax
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax]
lea edx, [ebp - 0x164]
push edx
push eax
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax]
lea edx, [ebp - 0x148]
push edx
push eax
call dword [ecx + 0x50]
and dword [ebp - 0x178], 0
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax + 0x150]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 5
push eax
call dword [ecx + 0x40]
push eax
push dword [ebp - 0x148]
mov dword [ebp - 0x174], eax
push dword [ebp - 0x164]
push dword [ebp - 0x160]
push str.CAddin::OnItemSend_SentFolderName__s___s___s__hrPare_0x_x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x20
cmp dword [ebp - 0x174], 0
jl 0x10054aae
cmp dword [ebp - 0x178], 0
je 0x10054aae
and dword [ebp - 0x150], 0
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [ecx + 0x3c]
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x150]
call fcn.1003bcc0
test al, al
jne 0x10054a85
cmp dword [ebp - 0x1c4], 1
jne 0x10054a4b
mov eax, dword [ebp - 0x1d0]
push dword [ebp - 0x178]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1a4]
jmp 0x10054a69
cmp dword [ebp - 0x1c4], 2
jne 0x10054a69
mov eax, dword [ebp - 0x1cc]
push dword [ebp - 0x178]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x144]
push dword [ebp - 0x164]
lea ecx, [ebp - 0x18]
call fcn.100ca090
push dword [ebp - 0x148]
lea ecx, [ebp - 0x14]
call fcn.100ca090
push dword [ebp - 0x174]
push dword [ebp - 0x150]
push str.CAddin::OnItemSend_ID__s__hrPare_0x_x_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x72
push dword [ebp - 0x150]
call ebx
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x178]
call fcn.1003de9b
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x88]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x1e4]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x78]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x68]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x58]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
lea ecx, [ebp - 0x134]
call fcn.1018d110
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1003f7d1
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x134]
call fcn.1018ef40
mov byte [ebp - 4], 0x75
push eax
lea ecx, [ebp - 0x1b0]
call fcn.100c9fa0
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x228]
call fcn.100c9e10
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x48]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.10040caf
push 0x101dc75c
lea ecx, [ebp - 0x180]
call fcn.100cd620
mov ecx, dword [ebp - 0x180]
mov eax, dword [ecx - 8]
lea edx, [ebp - 0x38]
push edx
add eax, eax
push eax
push ecx
push 1
call fcn.1017b100
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x21c]
push eax
call fcn.100214c7
mov ecx, eax
call fcn.10020ed7
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
xor eax, eax
inc eax
push eax
push 0x1026067c
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x1e0], eax
call fcn.100d6910
lea ecx, [ebp - 0x2ac]
call fcn.100d6970
mov ecx, 0x1026069c
call fcn.10035af6
mov dword [ebp - 0x154], eax
test eax, eax
je 0x10054d3e
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x1026069c
call fcn.1003d66e
mov dword [ebp - 0x14c], eax
add eax, 0x30
push 0x10
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.100dbba0
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0x14c]
add eax, 0x20
push 0x10
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x77
mov eax, dword [ebp - 0x14c]
add eax, 0x10
push 0x10
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x78
push 0x10
push dword [ebp - 0x14c]
lea eax, [ebp - 0x1c0]
push eax
call fcn.100dbba0
mov byte [ebp - 4], 0x79
mov ecx, dword [ebp - 0x228]
push dword [ecx]
mov ecx, dword [ebp - 0x1ac]
push dword [ecx]
mov ecx, dword [ebp - 0x1a8]
push dword [ecx]
push dword [eax]
push str.CAddin::OnItemAdd_Before__f:_s__t:_s__c:_s__b:_s_
push str.OnItemAdd
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x50
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x1c0]
call fcn.100c9e10
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x1a4]
call fcn.100c9e10
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x158]
call fcn.100c9e10
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x170]
call fcn.100c9e10
cmp dword [ebp - 0x154], 0
jne 0x10054c37
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x1026069c
call fcn.10035e82
mov ecx, 0x1026069c
call fcn.10035af6
mov dword [ebp - 0x154], eax
test eax, eax
je 0x10054e6e
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x1026069c
call fcn.1003d66e
mov dword [ebp - 0x14c], eax
add eax, 0x30
push 0x10
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.100dbba0
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 0x7a
mov eax, dword [ebp - 0x14c]
add eax, 0x20
push 0x10
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x14c]
add eax, 0x10
push 0x10
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x7c
push 0x10
push dword [ebp - 0x14c]
lea eax, [ebp - 0x1c0]
push eax
call fcn.100dbba0
mov byte [ebp - 4], 0x7d
mov ecx, dword [ebp - 0x228]
push dword [ecx]
mov ecx, dword [ebp - 0x1ac]
push dword [ecx]
mov ecx, dword [ebp - 0x1a8]
push dword [ecx]
push dword [eax]
push str.CAddin::OnItemAdd_After__f:_s__t:_s__c:_s__b:_s_
push str.OnItemAdd
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x50
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x1c0]
call fcn.100c9e10
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x1a4]
call fcn.100c9e10
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x158]
call fcn.100c9e10
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x170]
call fcn.100c9e10
cmp dword [ebp - 0x154], 0
jne 0x10054d67
push dword [ebp - 0x1b0]
push dword [ebp - 0x180]
push dword [ebp - 0x140]
push str.CAddin::OnItemSend_MailInfo_Attachment2_num:_d___s__Subject__s_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x1c
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x134]
call fcn.1018d230
mov byte [ebp - 4], 0x6f
push dword [ebp - 0x148]
call ebx
mov byte [ebp - 4], 0x6e
push dword [ebp - 0x164]
call ebx
mov byte [ebp - 4], 0x6d
push dword [ebp - 0x160]
call ebx
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x138]
call fcn.1003de9b
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2c0]
call fcn.100cf750
cmp dword [ebp - 0x1e0], 0
je 0x10055282
lea ecx, [ebp - 0x104]
call fcn.1003bd39
push 0x10
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.10094860
push 0x10
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.10094860
push 0x10
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.10094860
push 0x10
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10094860
push 0x10
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.10094860
push 0x10
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.10094860
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax - 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x94], edx
mov eax, dword [eax - 8]
mov dword [ebp - 0x90], eax
mov ecx, dword [ecx - 8]
mov dword [ebp - 0x8c], ecx
add ecx, eax
mov eax, dword [ebp - 0x100]
add ecx, edx
lea eax, [eax + ecx*2 + 6]
add esp, 0x48
push eax
mov dword [ebp - 0x104], eax
call fcn.10096e34
pop ecx
mov dword [ebp - 0x138], eax
test eax, eax
je 0x10055282
push dword [ebp - 0x104]
push 0
push eax
call fcn.100947e0
push dword [ebp - 0x100]
lea eax, [ebp - 0x104]
push eax
push dword [ebp - 0x138]
call fcn.10094860
mov eax, dword [ebp - 0x1c]
push dword [eax - 8]
push eax
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
add ecx, eax
push ecx
call fcn.10094d7c
mov eax, dword [ebp - 0x18]
push dword [eax - 8]
push eax
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 0x70]
lea ecx, [eax + ecx*2 + 2]
add ecx, dword [eax + 4]
push ecx
call fcn.10094d7c
mov eax, dword [ebp - 0x14]
push dword [eax - 8]
push eax
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 0x74]
add ecx, dword [eax + 0x70]
lea ecx, [eax + ecx*2 + 4]
add ecx, dword [eax + 4]
push ecx
call fcn.10094d7c
mov eax, dword [ebp - 0x138]
add esp, 0x3c
push dword [eax]
mov ecx, 0x10260678
push eax
call fcn.1005870b
push 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x21c]
call fcn.10020e83
lea eax, [ebp - 0x21c]
push eax
call fcn.100212f7
cmp dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x18c]
pop ecx
jne 0x1005508e
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x1dc], 0
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x184]
jne 0x100550a9
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x1dc], 0
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x188]
jne 0x100550c4
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x210], eax
push 0x101e0df0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x21c]
call fcn.100215e7
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 0x7e
push 0x10
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x7f
push 0x10
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x80
push 0x10
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 0x81
push 0x10
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100dbba0
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0x82
push 0x10
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.100dbba0
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0x83
push 0x10
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.100dbba0
add esp, 0x48
mov byte [ebp - 4], 0x84
mov ecx, dword [ebp - 0x228]
push dword [ecx]
mov ecx, dword [ebp - 0x1ac]
push dword [ebp - 0x180]
push dword [ebp - 0x1b0]
push dword [ebp - 0x158]
push dword [ebp - 0x170]
push dword [ebp - 0x210]
push dword [ebp - 0x16c]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ecx]
mov ecx, dword [ebp - 0x1a8]
push dword [ecx]
mov ecx, dword [ebp - 0x1c0]
push dword [ecx]
mov ecx, dword [ebp - 0x1a4]
push dword [ecx]
mov ecx, dword [ebp - 0x24c]
push dword [ecx]
push dword [eax]
push str.CAddin::OnItemSend_MailInfo_Decrypt:_r_nbtSenderMD5:_s__r_nbtToRecverMD5:_s__r_nbtCCRecverMD5:_s__r_nbtBCCRecverMD5:_s__r_nbtSubjectMD5:_s__r_nbtAttachMD5:_s__r_ndwAttachNmb:_d__r_ndwRecordTime:_d__r_nwstrDecryptAttach:_s__r_nwstrSentFolderEntryID:_s__r_nwstrSentStoreEntryID:_s__r_nwstrMailFrom:_s__r_nwstrToRecipients:_s__r_nwstrCcRecipients:_s__r_nwstrBccRecipients:_s__r_nwstrMailSubject:_s__r_nwstrAttName:_s__r_ntime:_s__r_n
push str.MailInfo
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x58
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x238]
call fcn.100c9e10
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x250]
call fcn.100c9e10
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x254]
call fcn.100c9e10
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x1e0]
call fcn.100c9e10
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x14c]
call fcn.100c9e10
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x160]
call fcn.100c9e10
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1d8]
call fcn.100c9e10
push dword [ebp - 0x138]
call fcn.10096cdd
pop ecx
mov ecx, 0x1026069c
call fcn.10035af2
push eax
push dword [ebp - 0x17c]
push str.CAddin::OnItemSend_______08x____d_
push edi
push 0xffffffffffffffff
push esi
call fcn.10023e79
add esp, 0x18
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2d0]
call fcn.100cf750
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x180]
call fcn.100c9e10
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1b0]
call fcn.100c9e10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x88]
call fcn.10035855
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2f0]
call fcn.100cf750
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x300]
call fcn.100cf750
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2e0]
call fcn.100cf750
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x310]
call fcn.100cf750
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x330]
call fcn.100cf750
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x320]
call fcn.100cf750
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1ec]
call fcn.100c9e10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1e8]
call fcn.100c9e10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e4]
call fcn.100c9e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18c]
call fcn.100c9e10
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x184]
call fcn.100c9e10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x188]
call fcn.100c9e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1bc]
call fcn.100c9e10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1b8]
call fcn.100c9e10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b4]
call fcn.100c9e10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x200]
call fcn.100c9e10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x16c]
call fcn.100c9e10
mov byte [ebp - 4], 4
cmp dword [ebp - 0x168], 0
je 0x100553fe
mov ecx, dword [ebp - 0x168]
call fcn.100471e9
and dword [ebp - 0x168], 0
mov byte [ebp - 4], 3
push dword [ebp - 0x1f0]
call ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f4]
call fcn.1003dec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40c]
call fcn.1018d230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.1005e71e
call fcn.100947bc
ret 0x10