Function at 0x46ff2d
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4b1d72
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6b8
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
push ebx
lea ecx, [esp + 0x1b4]
mov dword [esp + 0x2c], esi
call fcn.00413ea0
mov ebp, dword [esp + 0x6dc]
lea eax, [esp + 0x1b0]
push ebx
push eax
mov ecx, ebp
mov dword [esp + 0x6d8], ebx
call fcn.0044bcd0
mov ecx, dword [esi + 0x4c]
push eax
call fcn.00408c90
test al, al
je 0x470315
mov edi, dword [esp + 0x6d8]
push str.uidl
mov ecx, edi
call fcn.004991f0
mov esi, eax
cmp esi, ebx
mov dword [esp + 0x24], esi
je 0x470315
push esi
lea ecx, [esp + 0x1b4]
call fcn.00415080
cmp eax, ebx
je 0x470315
mov ecx, eax
call fcn.00440440
push eax
mov ecx, ebp
call fcn.00479dd0
mov ecx, eax
call fcn.00447460
mov ecx, dword [0x4d5f90]
test al, al
jne 0x470010
mov dword [esp + 0x10], ecx
mov ecx, ebp
mov byte [esp + 0x6d0], 1
call fcn.00479da0
push eax
lea edx, [esp + 0x14]
push str._error_id_serrorno3
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov ecx, edi
push eax
call fcn.00498030
lea ecx, [esp + 0x10]
mov byte [esp + 0x6d0], bl
call fcn.004a3625
jmp 0x470315
mov dword [esp + 0x10], ecx
push esi
mov ecx, ebp
mov byte [esp + 0x6d4], 2
call fcn.00479da0
push eax
lea edx, [esp + 0x18]
push str._getattachmentcid_id_suidl_scid
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x20]
add esp, 0x10
mov ecx, ebp
push eax
call fcn.00479dd0
mov ecx, eax
call fcn.00448d20
lea ecx, [esp + 0x10]
mov byte [esp + 0x6d0], bl
call fcn.004a3625
mov ecx, ebp
call fcn.00479dd0
mov ecx, eax
call fcn.00448c40
test al, al
push str.type
mov ecx, edi
sete byte [esp + 0x14]
call fcn.004991f0
mov edi, eax
cmp edi, ebx
je 0x4701c4
mov esi, str.html
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4700ae
cmp cl, bl
je 0x4700aa
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4700ae
add eax, 2
add esi, 2
cmp cl, bl
jne 0x47008a
xor eax, eax
jmp 0x4700b3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x470123
mov ecx, ebp
call fcn.00479dd0
mov ecx, eax
call fcn.00448c40
test al, al
jne 0x47011f
mov eax, dword [0x4d5f90]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x6d0], 3
push ecx
mov ecx, ebp
call fcn.00479da0
push eax
lea edx, [esp + 0x18]
push str._readmsgbody_id_suidl_stypetext
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x6e8]
add esp, 0x10
push eax
call fcn.00498030
lea ecx, [esp + 0x10]
mov byte [esp + 0x6d0], bl
call fcn.004a3625
jmp 0x470315
mov byte [esp + 0x10], bl
mov esi, str.text
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x47014e
cmp cl, bl
je 0x47014a
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x47014e
add eax, 2
add esi, 2
cmp cl, bl
jne 0x47012a
xor eax, eax
jmp 0x470153
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4701c4
mov ecx, ebp
call fcn.00479dd0
mov ecx, eax
call fcn.00448c50
test al, al
jne 0x4701bf
mov eax, dword [0x4d5f90]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x6d0], 4
push ecx
mov ecx, ebp
call fcn.00479da0
push eax
lea edx, [esp + 0x18]
push str._readmsgbody_id_suidl_stypehtml
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x6e8]
add esp, 0x10
push eax
call fcn.00498030
lea ecx, [esp + 0x10]
mov byte [esp + 0x6d0], bl
call fcn.004a3625
jmp 0x470315
mov byte [esp + 0x10], 1
mov cl, byte [0x4d83ac]
xor eax, eax
mov byte [esp + 0x44], cl
mov ecx, 0x41
lea edi, [esp + 0x45]
lea edx, [esp + 0x44]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x28]
push edx
call fcn.004997e0
lea ecx, [esp + 0x14]
call fcn.00489cd0
push ebx
push 1
lea eax, [esp + 0x4c]
push 1
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x6e0], 5
call fcn.00489d20
test al, al
je 0x4702fa
cmp byte [esp + 0x10], bl
je 0x470258
mov ecx, 0x19
mov esi, str._HTML__body_bgcolor_FFFFFF__text_000000__link_0000FF__vlink_000066__alink_FF0000___pre__r_n
lea edi, [esp + 0x14c]
lea edx, [esp + 0x14c]
rep movsd dword es:[edi], dword [esi]
push 0x63
push edx
lea ecx, [esp + 0x1c]
call fcn.00489f00
test al, al
jne 0x470258
lea ecx, [esp + 0x14]
call fcn.00489e00
lea eax, [esp + 0x44]
push eax
jmp 0x4702ff
mov ecx, dword [esp + 0x10]
push 1
push 0x5a
push ebx
push 1
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebp
call fcn.00479dd0
mov ecx, eax
call fcn.004474c0
test al, al
jne 0x47028b
lea ecx, [esp + 0x14]
call fcn.00489e00
lea eax, [esp + 0x44]
push eax
jmp 0x4702ff
cmp byte [esp + 0x10], bl
je 0x4702c6
mov ecx, 5
mov esi, str.__pre___BODY___HTML_
lea edi, [esp + 0x2c]
push 0x14
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x1c]
movsb byte es:[edi], byte [esi]
call fcn.00489f00
test al, al
jne 0x4702c6
lea ecx, [esp + 0x14]
call fcn.00489e00
lea edx, [esp + 0x44]
push edx
jmp 0x4702ff
lea ecx, [esp + 0x14]
call fcn.00489e00
mov esi, dword [esp + 0x6d8]
push str.html
push 1
lea eax, [esp + 0x4c]
push 0xc8
push eax
mov ecx, esi
call fcn.00495a70
test al, al
jne 0x470305
push ebx
mov ecx, esi
call fcn.00497450
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.kernel32.dll_DeleteFileA]
lea ecx, [esp + 0x14]
mov byte [esp + 0x6d0], bl
call fcn.00489d10
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x6d0], 0xffffffff
call fcn.00414790
mov ecx, dword [esp + 0x6c8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x6c4
ret 8