Function at 0x5904c5e0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x591532e8
push eax
mov dword fs:[0], esp
sub esp, 0xa0
push ebx
push ebp
push esi
mov esi, dword [esp + 0xcc]
test esi, esi
push edi
je 0x5904c610
mov dword [esi], 0
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
test ebx, ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x48], ebp
je 0x5904de65
test ebp, ebp
je 0x5904de65
mov eax, dword [0x591ac718]
test eax, eax
je 0x5904c65b
push 0x5918de00
push str.MailLog
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x10
mov edi, str.Cookie:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Cookie:
push ebp
push ebx
call fcn.5900d6d0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x5904c69f
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xc8]
push esi
push eax
push ecx
push ebp
push ebx
call fcn.590138f0
add esp, 0x14
jmp 0x5904de65
mov edi, 0x591892c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x591892c4
push ebp
push ebx
call fcn.5900d6d0
add esp, 0x10
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x5904de65
mov edi, 0x591892c4
or ecx, 0xffffffff
xor eax, eax
mov esi, dword [esp + 0x10]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
add edx, esi
xor esi, esi
add edx, ebx
cmp byte [edx], 0xd
je 0x5904c719
mov ecx, dword [esp + 0x10]
mov eax, ebp
sub eax, ecx
mov dword [esp + 0x14], eax
mov edi, 0x591892c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
not ecx
dec ecx
sub eax, ecx
cmp esi, eax
jge 0x5904c719
mov al, byte [esi + edx + 1]
inc esi
cmp al, 0xd
jne 0x5904c6f7
mov edi, 0x591892c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [esp + 0x10]
mov eax, ebp
not ecx
dec ecx
sub eax, edi
sub eax, ecx
cmp esi, eax
jge 0x5904de65
test esi, esi
jle 0x5904de65
mov edi, 0x5918ddfc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x5918ddfc
push esi
push edx
call fcn.5900d6d0
mov eax, dword [0x59162880]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0x30], eax
mov byte [esp + 0xc8], 1
mov dword [esp + 0x3c], eax
mov byte [esp + 0xc8], 2
mov dword [esp + 0x4c], eax
mov byte [esp + 0xc8], 3
mov dword [esp + 0x44], eax
mov byte [esp + 0xc8], 4
mov dword [esp + 0x40], eax
mov byte [esp + 0xc8], 5
mov dword [esp + 0x38], eax
push 0x591892bc
push ebp
push ebx
mov byte [esp + 0xd4], 6
call fcn.5900f930
mov edx, eax
add esp, 0x1c
cmp edx, 0xffffffff
je 0x5904ddeb
mov edi, 0x591892bc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
sub ebp, edx
add ebx, edx
mov dword [esp + 0xc0], ebx
lea edi, [ebp + 1]
push edi
call fcn.5913d2d0
mov esi, eax
add esp, 4
test esi, esi
je 0x5904ca5e
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
rep stosb byte es:[edi], al
mov eax, ebx
push eax
push esi
call fcn.5908a040
mov ecx, dword [0x59162880]
add esp, 0xc
mov dword [esp + 0x10], ecx
push 0xfde9
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0xc0], 7
call fcn.590aa6a0
push esi
call fcn.5913d2f9
add esp, 4
lea ecx, [esp + 0x4c]
call fcn.59104140
mov edx, dword [esp + 0x10]
mov bl, 8
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0xbc], bl
call fcn.59104ea0
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.5904c270
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 9
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.5904c2d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0xa
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.5904c330
add esp, 0xc
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0xb
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
push 0
lea eax, [esp + 0x50]
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.5904c210
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0xbc], 0xc
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea edx, [esp + 0x4c]
push 0
lea eax, [esp + 0x18]
push edx
push eax
call fcn.5904c4c0
add esp, 0xc
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0xd
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x4c]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.5904c460
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xbc], 0xe
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5904c9ff
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904c9ff
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.5900b2f0
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x20]
push edx
mov byte [esp + 0xbc], 0xf
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea eax, [esp + 0x4c]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.5904c520
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xbc], 0x10
call fcn.590a63d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb8], 7
call fcn.591041d0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 6
call fcn.590a6240
mov ebx, dword [esp + 0xc0]
mov edx, dword [esp + 0x38]
xor esi, esi
cmp dword [edx - 8], esi
jne 0x5904d953
mov eax, dword [esp + 0x3c]
cmp dword [eax - 8], esi
jne 0x5904d953
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 8], esi
jne 0x5904d953
mov edx, dword [esp + 0x28]
cmp dword [edx - 8], esi
jne 0x5904d953
mov eax, dword [esp + 0x20]
cmp dword [eax - 8], esi
jne 0x5904d953
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 8], esi
jne 0x5904d953
mov edx, dword [esp + 0x2c]
cmp dword [edx - 8], esi
jne 0x5904d953
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x98]
mov dword [esp + 0x94], esi
rep stosd dword es:[edi], eax
push ebp
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x54], str._subject_:
mov dword [esp + 0x58], str._from_:
mov dword [esp + 0x5c], str._to_:
mov dword [esp + 0x60], str._cc_:
mov dword [esp + 0x64], str._bcc_:
mov dword [esp + 0x68], str._text_:
mov dword [esp + 0x6c], str._method_:
call fcn.590a0970
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xb8], 0x12
cmp dword [eax - 8], esi
jne 0x5904cb37
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x5904dde6
mov ecx, dword [esp + esi + 0x4c]
push ecx
lea ecx, [esp + 0x20]
call fcn.590a5700
mov dword [esp + esi + 0x94], eax
add esi, 4
cmp esi, 0x1c
jb 0x5904cb37
mov esi, dword [esp + 0xac]
cmp esi, 0xffffffff
je 0x5904cc3e
mov edx, dword [0x5916287c]
mov dword [esp + 0x10], edx
mov bl, 0x14
push esi
push 0x591888d8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904cc01
mov edi, str._method_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._method_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x15
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
mov ecx, dword [esp + 0x10]
push str.SaveMessage
push ecx
call fcn.59088717
add esp, 8
mov byte [esp + 0xb8], 0x12
test eax, eax
lea ecx, [esp + 0x10]
jne 0x5904cc39
call fcn.590a0ec0
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x5904dde6
call fcn.590a0ec0
mov esi, dword [esp + 0x94]
cmp esi, 0xffffffff
je 0x5904cde3
mov edx, dword [0x5916287c]
mov dword [esp + 0x10], edx
mov bl, 0x17
push esi
push 0x591888d8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904cceb
mov edi, str._subject_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._subject_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x18
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x5904cdd2
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.590a0490
lea eax, [esp + 0x18]
mov byte [esp + 0xbc], bl
push eax
call fcn.5900b190
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x1a
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.5900aca0
add esp, 8
test eax, eax
je 0x5904cdbf
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
test ecx, ecx
jle 0x5904cdd2
push 1
push 0
push eax
call fcn.5900adb0
mov ebp, eax
lea edi, [ebp + ebp + 4]
push edi
call fcn.5913d2d0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x5904cdd2
mov ecx, edi
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 2
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x18]
push eax
call fcn.5900adb0
add esp, 0xc
lea ecx, [esp + 0x28]
mov word [esi + ebp*2], 0
push esi
call fcn.590a64c0
push esi
call fcn.5913d2f9
add esp, 4
jmp 0x5904cdd2
mov ecx, dword [esp + 0x10]
push 0xfde9
push ecx
lea ecx, [esp + 0x30]
call fcn.590aa6a0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov esi, dword [esp + 0x98]
cmp esi, 0xffffffff
je 0x5904cfb4
mov eax, dword [0x5916287c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x1c
mov dword [esp + 0x24], eax
push esi
push 0x5918ddd8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x1d
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904cec6
mov edi, str._from_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._from_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
mov bl, 0x1e
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590a0490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x20
push ecx
lea ecx, [esp + 0x14]
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.590a0ec0
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x5904cf92
push str._email_:
lea ecx, [esp + 0x14]
call fcn.59081fc0
mov esi, eax
cmp esi, 0xffffffff
je 0x5904cf92
push esi
push 0x591888d8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov edx, eax
sub edx, esi
test edx, edx
jle 0x5904cf78
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x591888e8
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x22
call fcn.590a1040
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x1d
call fcn.590a0ec0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904cf92
push 0xfde9
push eax
lea ecx, [esp + 0x40]
call fcn.590aa6a0
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x1c
call fcn.590a0ec0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov esi, dword [esp + 0x9c]
cmp esi, 0xffffffff
je 0x5904d211
mov eax, dword [0x5916287c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x25
mov dword [esp + 0x14], eax
push esi
push 0x5918a388
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x26
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904d097
mov edi, str._to_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._to_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
mov bl, 0x27
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], bl
call fcn.590a0490
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x29
push ecx
lea ecx, [esp + 0x14]
call fcn.590a1040
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.590a0ec0
xor ebp, ebp
mov bl, 0x2c
test ebp, ebp
je 0x5904d0b0
mov edi, 0x5918ddc8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x5904d1d5
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x5904d1d5
push esi
push 0x591888d8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov edx, eax
sub edx, esi
test edx, edx
jle 0x5904d163
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x591888e8
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x44]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x2b
call fcn.590a1040
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], 0x26
call fcn.590a0ec0
mov ecx, dword [0x59162880]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x14]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904d18e
push 0xfde9
push eax
lea ecx, [esp + 0x2c]
call fcn.590aa6a0
lea edx, [esp + 0x24]
push 0x59187530
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.590a69b0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xbc], 0x2d
call fcn.590a6ef0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x26
call fcn.590a6240
push ebp
push 0x5918ddc8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x5904d09b
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x25
call fcn.590a0ec0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov esi, dword [esp + 0xa0]
cmp esi, 0xffffffff
je 0x5904d46e
mov eax, dword [0x5916287c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x30
mov dword [esp + 0x24], eax
push esi
push 0x5918a388
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x31
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904d2f4
mov edi, str._cc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._cc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
mov bl, 0x32
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590a0490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x34
push ecx
lea ecx, [esp + 0x14]
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.590a0ec0
xor ebp, ebp
mov bl, 0x37
test ebp, ebp
je 0x5904d30d
mov edi, 0x5918ddc8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x5904d432
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x5904d432
push esi
push 0x591888d8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov edx, eax
sub edx, esi
test edx, edx
jle 0x5904d3c0
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x591888e8
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x36
call fcn.590a1040
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x31
call fcn.590a0ec0
mov ecx, dword [0x59162880]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904d3eb
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.590aa6a0
lea edx, [esp + 0x14]
push 0x59187530
lea eax, [esp + 0x44]
push edx
push eax
call fcn.590a69b0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 0x38
call fcn.590a6ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x31
call fcn.590a6240
push ebp
push 0x5918ddc8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x5904d2f8
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x30
call fcn.590a0ec0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov esi, dword [esp + 0xa4]
cmp esi, 0xffffffff
je 0x5904d6cb
mov eax, dword [0x5916287c]
mov dword [esp + 0x10], eax
mov byte [esp + 0xb8], 0x3b
mov dword [esp + 0x24], eax
push esi
push 0x5918a388
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], 0x3c
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904d551
mov edi, str._bcc_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, str._bcc_:
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
mov bl, 0x3d
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.590a0490
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3f
push ecx
lea ecx, [esp + 0x14]
call fcn.590a1040
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.590a0ec0
xor ebp, ebp
mov bl, 0x42
test ebp, ebp
je 0x5904d56a
mov edi, 0x5918ddc8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x5904d68f
push ebp
push str._email_:
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x5904d68f
push esi
push 0x591888d8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov edx, eax
sub edx, esi
test edx, edx
jle 0x5904d61d
mov edi, str._email_:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x591888e8
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._email_:
sub edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
mov edx, ecx
mov edi, 0x591888e8
or ecx, 0xffffffff
add esi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 0x41
call fcn.590a1040
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], 0x3c
call fcn.590a0ec0
mov ecx, dword [0x59162880]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xb8], bl
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x5904d648
push 0xfde9
push eax
lea ecx, [esp + 0x1c]
call fcn.590aa6a0
lea edx, [esp + 0x14]
push 0x59187530
lea eax, [esp + 0x44]
push edx
push eax
call fcn.590a69b0
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], 0x43
call fcn.590a6ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 0x3c
call fcn.590a6240
push ebp
push 0x5918ddc8
lea ecx, [esp + 0x18]
call fcn.59081fd0
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x5904d555
lea ecx, [esp + 0x24]
mov byte [esp + 0xb8], 0x3b
call fcn.590a0ec0
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov esi, dword [esp + 0xa8]
cmp esi, 0xffffffff
je 0x5904d89f
mov ecx, dword [0x5916287c]
mov dword [esp + 0x10], ecx
mov bl, 0x45
push esi
push 0x591888d8
lea ecx, [esp + 0x24]
mov byte [esp + 0xc0], bl
call fcn.59081fd0
mov edx, eax
cmp edx, 0xffffffff
je 0x5904d756
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x46
call fcn.590a1040
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
jmp 0x5904d7b8
push 0x22
lea ecx, [esp + 0x20]
call fcn.59081f90
mov edx, eax
cmp edx, 0xffffffff
je 0x5904d7bd
mov edi, str._text_:
or ecx, 0xffffffff
xor eax, eax
sub edx, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str._text_:
sub edx, ecx
or ecx, 0xffffffff
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
add ecx, esi
lea eax, [esp + 0x1c]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.590a30e0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x47
call fcn.590a1040
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0x18]
call fcn.590a0ec0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x5904d88e
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.590a0490
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.5900b190
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 0x49
call fcn.590a1040
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.590a0490
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], bl
push eax
call fcn.590306f0
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4b
call fcn.590a63d0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.590a6240
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.5900bb50
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 0x4c
call fcn.590a63d0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.590a6240
lea ecx, [esp + 0x10]
mov byte [esp + 0xb8], 0x12
call fcn.590a0ec0
mov eax, dword [0x591ac718]
test eax, eax
je 0x5904d8e4
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
push str.AnalyseYahooEMailXml__wstrAccount_:__s___wstrTo_:__s____wstrCC_:__s___wstrSubject_:__s___wstrText_:__s___wstrBCC_:__s___wstrHtml_:__s_
push str.MailLog
push 0xffffffffffffffff
push 0x591ac6ac
call fcn.59083dc0
add esp, 0x2c
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5904d942
mov edx, dword [esp + 0x3c]
mov eax, dword [edx - 8]
test eax, eax
jne 0x5904d942
mov eax, dword [esp + 0x34]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5904d942
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5904d942
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
jne 0x5904d942
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x5904d942
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x5904d942
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x1c]
jmp 0x5904dde6
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb8], 6
call fcn.590a0ec0
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x5904d969
mov dword [eax], 1
jmp 0x5904ddeb
mov eax, dword [0x59162880]
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0xcc]
mov byte [esp + 0xb8], 0x4f
test esi, esi
je 0x5904dd1d
mov dword [esp + 0x68], eax
mov byte [esp + 0xb8], 0x50
mov dword [esp + 0x6c], eax
mov byte [esp + 0xb8], 0x51
mov dword [esp + 0x70], eax
mov byte [esp + 0xb8], 0x52
mov dword [esp + 0x74], eax
mov byte [esp + 0xb8], 0x53
mov dword [esp + 0x78], eax
mov byte [esp + 0xb8], 0x54
mov dword [esp + 0x7c], eax
mov byte [esp + 0xb8], 0x55
mov dword [esp + 0x80], eax
mov byte [esp + 0xb8], 0x56
mov dword [esp + 0x84], eax
mov edx, dword [0x5916287c]
mov byte [esp + 0xb8], 0x57
mov dword [esp + 0x88], edx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 8]
mov bl, 0x59
mov byte [esp + 0xb8], bl
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xc]
lea ecx, [esp + 0x60]
mov dword [esp + 0x58], edx
push ecx
mov dword [esp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0xc8]
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x50], edx
call fcn.590a63d0
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x78]
call fcn.590a63d0
lea edx, [esp + 0x34]
lea ecx, [esp + 0x78]
push edx
call fcn.590a63d0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x7c]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x74]
call fcn.590a63d0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x80]
push edx
call fcn.590a63d0
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x84]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x6c]
call fcn.590a63d0
lea edx, [esp + 0x18]
push 0x59189484
push edx
call fcn.59059ed0
add esp, 8
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xbc], 0x5a
call fcn.590a1040
lea ecx, [esp + 0x18]
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
mov eax, dword [esp + 0x88]
push 0x180
push 0x8101
push eax
call fcn.5908928d
mov ecx, dword [0x5916287c]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x10], ecx
cmp edi, 0xffffffff
mov byte [esp + 0xb8], 0x5b
je 0x5904db7a
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x90]
push edx
push eax
push edi
call fcn.5908909d
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov eax, dword [esi + 0xc]
add esp, 0xc
push ecx
mov ecx, dword [esi + 8]
push edx
mov edx, dword [esi + 4]
push eax
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x28]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push ecx
call fcn.590a3d20
mov edx, dword [esp + 0x30]
add esp, 0x20
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
push eax
push 0
call fcn.590a1b50
push eax
push edi
call fcn.5908909d
push edi
call fcn.59088fbd
add esp, 0x10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov esi, dword [0x591ad584]
mov eax, dword [eax - 8]
add eax, ecx
cmp esi, esi
mov dword [esp + 0x8c], eax
jl 0x5904dba8
lea edx, [esi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x591ad580
call fcn.59060b80
mov ecx, dword [0x591ad580]
mov eax, esi
mov edx, dword [esp + 0x4c]
shl eax, 4
add eax, esi
lea esi, [esp + 0x50]
lea ebp, [ecx + eax*4]
mov ecx, 6
lea eax, [esp + 0x68]
lea edi, [ebp + 4]
mov dword [ebp], edx
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp + 0x1c]
call fcn.590a63d0
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [ebp + 0x20]
call fcn.590a63d0
lea edx, [esp + 0x70]
lea ecx, [ebp + 0x24]
push edx
call fcn.590a63d0
lea eax, [esp + 0x74]
lea ecx, [ebp + 0x28]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x78]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.590a63d0
lea edx, [esp + 0x7c]
lea ecx, [ebp + 0x30]
push edx
call fcn.590a63d0
lea eax, [esp + 0x80]
lea ecx, [ebp + 0x34]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x84]
push ecx
lea ecx, [ebp + 0x38]
call fcn.590a63d0
lea edx, [esp + 0x88]
lea ecx, [ebp + 0x3c]
push edx
call fcn.590a1040
mov eax, dword [esp + 0x8c]
lea ecx, [esp + 0x10]
mov dword [ebp + 0x40], eax
mov byte [esp + 0xb8], bl
call fcn.590a0ec0
lea ecx, [esp + 0x88]
mov byte [esp + 0xb8], 0x63
call fcn.590a0ec0
lea ecx, [esp + 0x84]
mov byte [esp + 0xb8], 0x62
call fcn.590a6240
lea ecx, [esp + 0x80]
mov byte [esp + 0xb8], 0x61
call fcn.590a6240
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb8], 0x60
call fcn.590a6240
lea ecx, [esp + 0x78]
mov byte [esp + 0xb8], 0x5f
call fcn.590a6240
lea ecx, [esp + 0x74]
mov byte [esp + 0xb8], 0x5e
call fcn.590a6240
mov byte [esp + 0xb8], 0x5d
lea ecx, [esp + 0x70]
call fcn.590a6240
lea ecx, [esp + 0x6c]
mov byte [esp + 0xb8], 0x5c
call fcn.590a6240
lea ecx, [esp + 0x68]
mov byte [esp + 0xb8], 0x4f
call fcn.590a6240
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.590a6240
jmp 0x5904ddeb
lea ecx, [esp + 0x14]
mov byte [esp + 0xb8], 6
call fcn.590a6240
lea ecx, [esp + 0x44]
push 0
push ecx
call fcn.59059db0
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
push 1
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push eax
mov byte [esp + 0xec], 0x65
call fcn.5900c690
add esp, 0x34
test eax, eax
je 0x5904ddda
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x90]
mov ecx, dword [esp + 0x44]
push edi
push esi
push ecx
call fcn.5900c480
add esp, 0xc
test eax, eax
je 0x5904ddda
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push 0
push 0
push 0
push 0
push 0
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
push edx
push 2
push 1
push eax
push edi
push esi
call fcn.5900e750
add esp, 0x44
mov byte [esp + 0xb8], 6
lea ecx, [esp + 0x44]
call fcn.590a0ec0
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 5
call fcn.590a6240
lea ecx, [esp + 0x30]
mov byte [esp + 0xb8], 4
call fcn.590a6240
lea ecx, [esp + 0x34]
mov byte [esp + 0xb8], 3
call fcn.590a6240
lea ecx, [esp + 0x3c]
mov byte [esp + 0xb8], 2
call fcn.590a6240
lea ecx, [esp + 0x2c]
mov byte [esp + 0xb8], 1
call fcn.590a6240
lea ecx, [esp + 0x20]
mov byte [esp + 0xb8], 0
call fcn.590a6240
lea ecx, [esp + 0x38]
mov dword [esp + 0xb8], 0xffffffff
call fcn.590a6240
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xac
ret