Function at 0x4261a0
Capabilities:
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x469143
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push esi
push edi
mov eax, dword [0x48fac0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp + 0x14], esi
push str.COLShadow::SendReportData
xor ebx, ebx
push str._____s__IN
mov dword [ebp - 4], ebx
call fcn.00409e70
mov eax, dword [ebp + 0x7c]
add esp, 8
sub eax, ebx
je 0x426272
sub eax, 1
je 0x42626b
sub eax, 1
jne 0x426279
mov eax, 0x49129c
mov edi, dword [eax + 4]
cmp edi, ebx
mov dword [ebp + 0x34], eax
je 0x426356
test edi, edi
mov eax, edi
je 0x426387
mov edi, dword [edi]
lea esi, [eax + 8]
mov eax, dword [esi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x42623f
push 0
mov ecx, esi
call fcn.00402010
mov esi, dword [esi]
push esi
lea ecx, [ebp + 0x7c]
call fcn.004189c0
mov esi, dword [ebp + 0x7c]
test esi, esi
mov byte [ebp - 4], 1
je 0x42628a
cmp dword [esi + 4], 0
jne 0x426266
mov ecx, dword [esi]
push ecx
call fcn.00436760
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
jmp 0x42628c
mov eax, 0x491280
jmp 0x426205
mov eax, 0x491264
jmp 0x426205
push 0x484ef4
lea eax, [ebp + 0x59]
push eax
mov byte [ebp + 0x59], bl
call fcn.004489f1
xor eax, eax
push eax
lea ecx, [ebp + 0x50]
call fcn.0040dc60
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x42638c
mov eax, dword [0x4910c4]
jmp 0x4262b0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4262d6
test dx, dx
je 0x4262d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4262d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4262b0
xor eax, eax
jmp 0x4262db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
mov eax, dword [ebp + 0x50]
sete bl
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4262ff
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
jne 0x426396
test esi, esi
mov byte [ebp - 4], bl
je 0x426349
lea ecx, [esi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x426342
mov eax, dword [esi]
test eax, eax
je 0x426329
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x426339
push eax
call fcn.00437b08
add esp, 4
push esi
call fcn.00437b08
add esp, 4
mov dword [ebp + 0x7c], 0
test edi, edi
jne 0x426213
mov esi, dword [ebp + 0x14]
xor ebx, ebx
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x44], ebx
mov eax, dword [esi + 0x54]
mov ecx, dword [eax]
lea edx, [ebp + 0x44]
push edx
push ebx
push eax
mov eax, dword [ecx + 0x40]
mov byte [ebp - 4], 3
call eax
cmp eax, ebx
jge 0x4263d7
push 0x484ef4
lea ecx, [ebp + 0x63]
push ecx
mov byte [ebp + 0x63], 0
call fcn.004489f1
call fcn.00437c06
push 0x80004005
call fcn.00401210
push str.____Need_not_report_to_the_same_account
call fcn.00409e70
push str.COLShadow::SendReportData
push str._____s__OUT
call fcn.00409e70
add esp, 0xc
lea ecx, [ebp + 0x7c]
call fcn.0041ada0
mov eax, dword [ebp + 0x74]
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x4263d0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
xor al, al
jmp 0x426dba
mov ecx, dword [ebp + 0x44]
xor eax, eax
cmp ecx, ebx
mov dword [ebp + 0x38], eax
je 0x4263f6
mov edx, dword [ecx]
lea eax, [ebp + 0x38]
push eax
push 0x46f014
push ecx
mov ecx, dword [edx]
call ecx
mov eax, dword [ebp + 0x38]
cmp eax, ebx
mov byte [ebp - 4], 4
jne 0x426410
push 0x484ef4
lea edx, [ebp + 0x57]
push edx
mov byte [ebp + 0x57], 0
call fcn.004489f1
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov edi, eax
push eax
mov dword [ebp + 0x20], edi
call edx
mov dword [ebp + 0x40], ebx
mov esi, dword [esi + 0x54]
push str.Redemption.SafeMailItem
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 6
call fcn.004124b0
mov eax, dword [eax]
mov ecx, dword [esi]
lea edx, [ebp + 0x40]
push edx
push eax
mov eax, dword [ecx + 0x48]
push esi
mov byte [ebp - 4], 7
call eax
mov ecx, dword [ebp + 0x50]
push ecx
mov esi, eax
mov byte [ebp - 4], 6
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp esi, ebx
jge 0x42646d
push 0x484ef4
lea edx, [ebp + 0x64]
push edx
mov byte [ebp + 0x64], 0
call fcn.004489f1
mov eax, dword [ebp + 0x40]
push eax
lea ecx, [ebp + 0x68]
call fcn.00412ac0
mov eax, dword [ebp + 0x68]
cmp eax, ebx
mov byte [ebp - 4], 8
jne 0x426496
push 0x484ef4
lea ecx, [ebp + 0x5a]
push ecx
mov byte [ebp + 0x5a], 0
call fcn.004489f1
mov edx, dword [eax]
push edi
push eax
mov eax, dword [edx + 0x20]
call eax
cmp eax, ebx
jge 0x4264b5
push 0x484ef4
lea ecx, [ebp + 0x62]
push ecx
mov byte [ebp + 0x62], 0
call fcn.004489f1
mov edx, dword [ebp + 0x78]
add edx, 0xc
push edx
lea eax, [ebp + 0x2c]
push str.FW:
push eax
call fcn.0040bc50
add esp, 0xc
push ebx
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 9
call fcn.00402670
push eax
lea ecx, [ebp + 0x28]
call fcn.004124b0
mov edx, dword [ebp + 0x28]
mov ecx, dword [edi]
mov eax, dword [ecx + 0xb0]
push edx
push edi
mov byte [ebp - 4], 0xa
call eax
cmp eax, ebx
jge 0x42650c
push 0x484ef4
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp + 0x58], 0
call fcn.004489f1
mov dword [ebp + 0x3c], ebx
mov eax, dword [ebp + 0x68]
mov edx, dword [eax]
mov edx, dword [edx + 0x40]
lea ecx, [ebp + 0x3c]
push ecx
push eax
mov byte [ebp - 4], 0xb
call edx
cmp eax, ebx
jge 0x426538
push 0x484ef4
lea eax, [ebp + 0x5b]
push eax
mov byte [ebp + 0x5b], 0
call fcn.004489f1
mov edi, dword [ebp + 0x34]
mov ecx, dword [edi + 4]
mov esi, dword [ebp + 0x14]
mov dword [ebp + 0x34], ecx
mov bl, 0xc
cmp dword [ebp + 0x34], 0
je 0x42660c
lea edx, [ebp + 0x34]
push edx
mov ecx, edi
call fcn.004174b0
push 0
mov ecx, eax
call fcn.00402670
push eax
lea ecx, [ebp + 0x78]
call fcn.004189c0
push ecx
lea eax, [ebp + 0x78]
mov ecx, esp
mov dword [ebp + 0x50], esp
push eax
mov byte [ebp - 4], bl
call fcn.00418f20
mov ecx, esi
call fcn.00422870
test al, al
jne 0x4265a9
push str.Report_email_address_Error_pls_enter_the_correct_email_address_like:a_a.com
call fcn.00409e70
add esp, 4
push 0x484ef4
lea ecx, [ebp + 0x56]
push ecx
mov byte [ebp + 0x56], 0
call fcn.004489f1
mov dword [ebp + 0x50], 0
push ecx
lea edx, [ebp + 0x78]
mov ecx, esp
mov dword [ebp - 0x50], esp
push edx
mov byte [ebp - 4], 0xd
call fcn.00418f20
mov ecx, dword [ebp + 0x3c]
lea eax, [ebp + 0x24]
push eax
call fcn.0041b340
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x50]
call fcn.004129d0
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x4265e9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x50]
test eax, eax
mov byte [ebp - 4], bl
je 0x4265fb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [ebp + 0x78]
mov byte [ebp - 4], 0xb
call fcn.0041ada0
jmp 0x426546
mov dword [ebp + 0x48], 0
mov esi, dword [esi + 0x54]
push str.Redemption.SafeMailItem
lea ecx, [ebp + 0x78]
mov byte [ebp - 4], 0xe
call fcn.004124b0
mov eax, dword [eax]
mov ecx, dword [esi]
lea edx, [ebp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x48]
push esi
mov byte [ebp - 4], 0xf
call eax
mov ecx, dword [ebp + 0x78]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe
call ebx
test esi, esi
jge 0x426711
push str.____Failed_to_create_Redemption.TMSafeMailItem_when_report_sample
call fcn.00409e70
mov eax, dword [ebp + 0x48]
add esp, 4
test eax, eax
mov byte [ebp - 4], 0xb
je 0x426674
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp + 0x3c]
test eax, eax
mov byte [ebp - 4], 0xa
je 0x426687
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x28]
push eax
call ebx
lea ecx, [ebp + 0x2c]
call fcn.00408280
mov eax, dword [ebp + 0x68]
test eax, eax
mov byte [ebp - 4], 6
je 0x4266a8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
test eax, eax
mov byte [ebp - 4], 5
je 0x4266bb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x20]
test eax, eax
mov byte [ebp - 4], 4
je 0x4266ce
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x38]
test eax, eax
mov byte [ebp - 4], 3
je 0x4266e1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x44]
test eax, eax
mov byte [ebp - 4], 2
je 0x4266f4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x74]
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x42670a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor al, al
jmp 0x426dba
mov eax, dword [ebp + 0x48]
push eax
lea ecx, [ebp + 0x30]
call fcn.00412ac0
mov eax, dword [ebp + 0x30]
test eax, eax
mov byte [ebp - 4], 0x10
jne 0x426800
push str.____Faild_to_create_QiSafeMailItem
call fcn.00409e70
mov eax, dword [ebp + 0x30]
add esp, 4
test eax, eax
mov byte [ebp - 4], 0xe
je 0x42674c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x48]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x42675f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x3c]
test eax, eax
mov byte [ebp - 4], 0xa
je 0x426772
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x28]
push eax
call ebx
lea ecx, [ebp + 0x2c]
call fcn.00408280
mov eax, dword [ebp + 0x68]
test eax, eax
mov byte [ebp - 4], 6
je 0x426793
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
test eax, eax
mov byte [ebp - 4], 5
je 0x4267a6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x20]
test eax, eax
mov byte [ebp - 4], 4
je 0x4267b9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x38]
test eax, eax
mov byte [ebp - 4], 3
je 0x4267cc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x44]
test eax, eax
mov byte [ebp - 4], 2
je 0x4267df
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x74]
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x42670a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor al, al
jmp 0x426dba
mov edx, dword [ebp + 0x74]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
jge 0x42682f
push str.____Failed_to_put_spMailItem_to_spQiSafeMailItem
call fcn.00409e70
add esp, 4
push 0x484ef4
lea ecx, [ebp + 0x4f]
push ecx
mov byte [ebp + 0x4f], 0
call fcn.004489f1
push str.temp_
lea edx, [ebp + 0x78]
push 0x4910b0
push edx
call fcn.0040bb70
add esp, 0xc
push str..eml
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call fcn.0040ca20
lea ecx, [ebp + 0x78]
mov byte [ebp - 4], 0x13
call fcn.00408280
lea eax, [ebp + 0x5c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040cac0
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 0x14
jne 0x42688e
push 0x484ef4
lea ecx, [ebp + 0x67]
push ecx
mov byte [ebp + 0x67], 0
call fcn.004489f1
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call ebx
push 3
push 0x400
lea ecx, [ebp - 0x20]
call fcn.00443c49
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 0x15
call fcn.00417eb0
lea edx, [ebp]
push edx
push 0
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x16
call fcn.00402670
push ecx
mov ecx, esp
mov dword [ebp + 0x78], esp
push eax
call fcn.004189c0
mov ecx, dword [ebp + 0x30]
call fcn.0041b410
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
mov byte [ebp - 4], 0x14
call esi
test edi, edi
jge 0x426a08
push 0
lea ecx, [ebp + 0x5c]
call fcn.00402670
push eax
push str.____Failed_to_save_eml_file__s
call fcn.00409e70
mov edx, dword [ebp + 0x5c]
add esp, 8
push edx
call ebx
push str.COLShadow::SendReportData
push str._____s__OUT
call fcn.00409e70
add esp, 8
lea ecx, [ebp + 0x5c]
call fcn.00408280
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
call fcn.0040bd40
mov eax, dword [ebp + 0x30]
test eax, eax
mov byte [ebp - 4], 0xe
je 0x426950
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x48]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x426963
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x3c]
test eax, eax
mov byte [ebp - 4], 0xa
je 0x426976
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp + 0x2c]
call fcn.00408280
mov eax, dword [ebp + 0x68]
test eax, eax
mov byte [ebp - 4], 6
je 0x42699b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
test eax, eax
mov byte [ebp - 4], 5
je 0x4269ae
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x20]
test eax, eax
mov byte [ebp - 4], 4
je 0x4269c1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x38]
test eax, eax
mov byte [ebp - 4], 3
je 0x4269d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x44]
test eax, eax
mov byte [ebp - 4], 2
je 0x4269e7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x74]
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x42670a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor al, al
jmp 0x426dba
push str.____After_spQiSafeMailItem2__SaveAs
call fcn.00409e70
xor ebx, ebx
add esp, 4
mov dword [ebp + 0x10], ebx
mov eax, dword [ebp + 0x68]
mov ecx, dword [eax]
lea edx, [ebp + 0x10]
push edx
push eax
mov eax, dword [ecx + 0x44]
mov byte [ebp - 4], 0x17
call eax
cmp eax, ebx
jge 0x426a42
push 0x484ef4
lea ecx, [ebp + 0x66]
push ecx
mov byte [ebp + 0x66], bl
call fcn.004489f1
push str.____After_spQiSafeItem__get_Attachments__
call fcn.00409e70
add esp, 4
mov dword [ebp + 0x78], ebx
lea edx, [ebp + 0x24]
push edx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x18
call fcn.00419c20
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x19
call fcn.004124b0
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x1b
call fcn.00408280
mov eax, dword [ebp + 0x5c]
push eax
lea ecx, [ebp + 0x1c]
call fcn.004124b0
lea ecx, [ebp - 0x30]
push ecx
mov byte [ebp - 4], 0x1c
mov word [ebp - 0x30], bx
call esi
mov ecx, dword [ebp + 0x18]
cmp ecx, ebx
mov edi, 8
mov word [ebp - 0x30], di
jne 0x426aab
xor eax, eax
jmp 0x426ac0
push ecx
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, dword [ebp + 0x18]
push eax
push edx
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov ecx, dword [ebp + 0x18]
cmp eax, ebx
mov dword [ebp - 0x28], eax
jne 0x426ae2
cmp ecx, ebx
je 0x426ae2
push 0x8007000e
mov word [ebp - 0x30], 0xa
mov dword [ebp - 0x28], 0x8007000e
call fcn.00401210
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x1d
mov word [ebp - 0x40], bx
call esi
mov ecx, dword [ebp + 0x1c]
cmp ecx, ebx
mov word [ebp - 0x40], di
jne 0x426aff
xor eax, eax
jmp 0x426b14
push ecx
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov ecx, dword [ebp + 0x1c]
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov ecx, dword [ebp + 0x1c]
cmp eax, ebx
mov dword [ebp - 0x38], eax
jne 0x426b36
cmp ecx, ebx
je 0x426b36
push 0x8007000e
mov word [ebp - 0x40], 0xa
mov dword [ebp - 0x38], 0x8007000e
call fcn.00401210
mov edi, 3
mov eax, 1
mov word [ebp - 0x70], di
mov dword [ebp - 0x68], eax
mov word [ebp - 0x60], di
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.00417eb0
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x21
call fcn.00417eb0
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x22
call fcn.00417eb0
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp]
mov byte [ebp - 4], 0x23
call fcn.00417eb0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x24]
push ecx
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 0x24
call fcn.00418c90
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x78]
call fcn.004129d0
mov eax, dword [ebp + 0x24]
cmp eax, ebx
je 0x426bce
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp]
push ecx
call esi
lea edx, [ebp - 0x80]
push edx
call esi
lea eax, [ebp - 0x90]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
mov byte [ebp - 4], 0x20
call esi
push str.____After_spAttachments__Add__
call fcn.00409e70
add esp, 4
mov word [ebp], di
mov dword [ebp + 8], 1
lea edx, [ebp]
push edx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x25
call fcn.00417eb0
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 0x60]
mov eax, dword [0x49110c]
mov ebx, dword [ebp + 0x20]
push 0
lea edx, [ebp - 0x20]
push edx
push eax
push ebx
mov byte [ebp - 4], 0x26
call fcn.00417a50
lea ecx, [ebp - 0x20]
push ecx
mov edi, eax
call esi
lea edx, [ebp]
push edx
mov byte [ebp - 4], 0x20
call esi
push edi
push str.____After_m_spEMapiWprMAPIUtils__HrSetOneProp____return_code_d
call fcn.00409e70
mov ecx, dword [ebp + 0x68]
add esp, 8
call fcn.00417a20
push str.____After_spQiSafeItem__Send__
mov edi, eax
call fcn.00409e70
add esp, 4
test edi, edi
jge 0x426c81
push 0x484ef4
lea eax, [ebp + 0x65]
push eax
mov byte [ebp + 0x65], 0
call fcn.004489f1
lea ecx, [ebp - 0x60]
push ecx
call esi
lea edx, [ebp - 0x70]
push edx
call esi
lea eax, [ebp - 0x40]
push eax
call esi
lea ecx, [ebp - 0x30]
push ecx
call esi
mov edx, dword [ebp + 0x1c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edx
call esi
mov eax, dword [ebp + 0x18]
push eax
call esi
mov eax, dword [ebp + 0x78]
test eax, eax
mov byte [ebp - 4], 0x17
je 0x426cbe
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x10]
test eax, eax
mov byte [ebp - 4], 0x14
je 0x426cd1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [ebp + 0x5c]
call fcn.00408280
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
call fcn.0040bd40
mov eax, dword [ebp + 0x30]
test eax, eax
mov byte [ebp - 4], 0xe
je 0x426cf8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x48]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x426d0b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x3c]
test eax, eax
mov byte [ebp - 4], 0xa
je 0x426d1e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x28]
push eax
call esi
lea ecx, [ebp + 0x2c]
call fcn.00408280
mov eax, dword [ebp + 0x68]
test eax, eax
mov byte [ebp - 4], 6
je 0x426d3f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
test eax, eax
mov byte [ebp - 4], 5
je 0x426d52
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test ebx, ebx
mov byte [ebp - 4], 4
je 0x426d62
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
push ebx
call ecx
mov eax, dword [ebp + 0x38]
test eax, eax
mov byte [ebp - 4], 3
je 0x426d75
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp + 0x44]
test eax, eax
mov byte [ebp - 4], 2
je 0x426d88
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [ebp - 4], 0
push str.COLShadow::SendReportData
push str._____s__OUT
call fcn.00409e70
mov eax, dword [ebp + 0x74]
add esp, 8
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x426db7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov al, byte [ebp + 0x7f]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x6c
mov esp, ebp
pop ebp
ret 0xc