Function at 0x1000ae60
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov eax, 0x4054
mov ebp, esp
push edi
push esi
push ebx
call fcn.1000f948
lea edi, [ebp + 8]
sub esp, eax
mov eax, dword [edi]
mov dword [ebp - 0x401c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x4018], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x4010], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x4014], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x4020], eax
mov eax, dword [0x10020050]
test eax, eax
je 0x1000aeb8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp eax
mov dword [esp], 0
call sym.mapi32.dll_MAPIInitialize
sub esp, 4
test eax, eax
je 0x1000bd80
mov ebx, dword [0x1002004c]
test ebx, ebx
je 0x1000bda0
mov eax, dword [ebp - 0x4014]
mov ecx, 0x1b
and eax, 0x40000
mov dword [ebp - 0x4038], eax
je 0x1000af08
lea esp, [ebp - 0xc]
mov eax, ecx
pop ebx
pop esi
pop edi
pop ebp
ret 0x14
mov eax, dword [ebp - 0x4010]
pxor xmm0, xmm0
movups xmmword [ebp - 0x200c], xmm0
mov edi, dword [eax + 4]
movups xmmword [ebp - 0x1ffc], xmm0
movups xmmword [ebp - 0x1fec], xmm0
test edi, edi
je 0x1000be80
mov edx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4024], edx
call edx
sub esp, 0x20
mov esi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov edx, dword [ebp - 0x4024]
call edx
sub esp, 0x20
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x2008], ebx
mov edi, dword [eax + 8]
test edi, edi
je 0x1000bec0
mov edx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4024], edx
call edx
sub esp, 0x20
mov esi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov edx, dword [ebp - 0x4024]
call edx
sub esp, 0x20
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x2004], ebx
mov edi, dword [eax + 0xc]
test edi, edi
je 0x1000beb0
mov edx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4024], edx
call edx
sub esp, 0x20
mov esi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov edx, dword [ebp - 0x4024]
call edx
sub esp, 0x20
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x2000], ebx
mov edi, dword [eax + 0x10]
test edi, edi
je 0x1000bea0
mov edx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4024], edx
call edx
sub esp, 0x20
mov esi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov edx, dword [ebp - 0x4024]
call edx
sub esp, 0x20
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x1ffc], ebx
mov edi, dword [eax + 0x14]
test edi, edi
je 0x1000be90
mov edx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4024], edx
call edx
sub esp, 0x20
mov esi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
mov edx, dword [ebp - 0x4024]
call edx
sub esp, 0x20
mov esi, dword [ebp - 0x4010]
mov dword [ebp - 0x1ff8], ebx
mov eax, dword [esi + 0x18]
mov ebx, dword [esi + 0x1c]
mov dword [ebp - 0x1ff4], eax
test ebx, ebx
je 0x1000bed5
mov dword [esp + 8], 0x18
mov dword [esp + 4], 8
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x4024], eax
call eax
mov ecx, eax
mov eax, dword [ebx + 4]
sub esp, 0xc
mov dword [ecx + 4], eax
mov edx, dword [ebx + 8]
test edx, edx
je 0x1000bece
mov dword [ebp - 0x4030], ecx
mov ecx, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 8], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [ebp - 0x402c], edx
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4028], ecx
call ecx
sub esp, 0x20
mov edi, eax
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4024]
call eax
sub esp, 0xc
mov esi, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov edx, dword [ebp - 0x402c]
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], 0
mov ecx, dword [ebp - 0x4028]
call ecx
mov ecx, dword [ebp - 0x4030]
sub esp, 0x20
mov dword [ecx + 8], esi
mov edx, dword [ebx + 0xc]
test edx, edx
je 0x1000bec7
mov eax, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [ebp - 0x4030], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [ebp - 0x402c], edx
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x4028], eax
call eax
sub esp, 0x20
mov edi, eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov esi, dword [ebp - 0x4024]
call esi
sub esp, 0xc
mov esi, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov edx, dword [ebp - 0x402c]
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], 0
mov eax, dword [ebp - 0x4028]
call eax
mov ecx, dword [ebp - 0x4030]
sub esp, 0x20
mov dword [ecx + 0xc], esi
mov eax, dword [ebx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [ebx + 0x14]
mov dword [ecx + 0x14], eax
mov esi, dword [ebp - 0x4010]
mov dword [ebp - 0x1ff0], ecx
mov edx, dword [esi + 0x20]
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x1fec], edx
mov dword [ebp - 0x1fe4], eax
test edx, edx
je 0x1000b7fd
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x1000b7fd
lea edx, [edx + edx*2]
mov dword [esp + 4], 8
shl edx, 3
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x4024], eax
call eax
mov dword [ebp - 0x4028], 0
mov ebx, eax
mov eax, dword [esi + 0x20]
mov esi, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
sub esp, 0xc
mov dword [ebp - 0x402c], ebx
mov dword [ebp - 0x4030], esi
test eax, eax
je 0x1000b7ee
mov dword [ebp - 0x4040], ebx
jmp 0x1000b787
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x1000be70
mov dword [esp + 8], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [ebp - 0x403c], ecx
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x4030]
call eax
mov edx, eax
sub esp, 0x20
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4034], edx
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov ecx, dword [ebp - 0x4024]
call ecx
sub esp, 0xc
mov edi, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov edx, dword [ebp - 0x4034]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], 0xffffffff
mov ecx, dword [ebp - 0x403c]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp], 0
mov eax, dword [ebp - 0x4030]
call eax
sub esp, 0x20
mov dword [esi + 8], edi
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x1000be60
mov dword [esp + 8], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [ebp - 0x403c], ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov edx, eax
sub esp, 0x20
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4034], edx
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4024]
call eax
sub esp, 0xc
mov edi, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov edx, dword [ebp - 0x4034]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], 0xffffffff
mov ecx, dword [ebp - 0x403c]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_WideCharToMultiByte]
sub esp, 0x20
mov dword [esi + 0xc], edi
mov eax, dword [ebx + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [ebx + 0x14]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x4010]
mov eax, dword [eax + 0x20]
add dword [ebp - 0x4028], 1
mov ebx, dword [ebp - 0x4028]
add dword [ebp - 0x402c], 0x18
cmp ebx, eax
jae 0x1000b7e8
mov ebx, dword [ebp - 0x4028]
mov edi, dword [ebp - 0x402c]
lea edx, [ebx + ebx*2]
mov ebx, dword [ebp - 0x4010]
mov esi, edi
mov ecx, dword [ebx + 0x24]
lea ebx, [ecx + edx*8]
test ebx, ebx
je 0x1000b76f
test edi, edi
jne 0x1000b5b0
mov dword [esp + 8], 0x18
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4024]
call eax
sub esp, 0xc
mov esi, eax
jmp 0x1000b5b0
mov ebx, dword [ebp - 0x4040]
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x1fe8], ebx
mov eax, dword [eax + 0x28]
test eax, eax
je 0x1000ba7d
mov ebx, dword [ebp - 0x4010]
mov edx, dword [ebx + 0x2c]
test edx, edx
je 0x1000ba7d
lea eax, [eax + eax*2]
mov dword [esp + 4], 8
shl eax, 3
mov dword [esp + 8], eax
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x4024], eax
call eax
mov esi, eax
mov eax, dword [ebx + 0x28]
sub esp, 0xc
test eax, eax
je 0x1000ba77
mov eax, dword [ebp - 0x4010]
mov dword [ebp - 0x403c], esi
lea ebx, [esi + 4]
mov dword [ebp - 0x4028], 0
mov ecx, dword [eax + 0x2c]
mov eax, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [ebp - 0x402c], eax
lea esi, [esi]
mov eax, dword [ebp - 0x4028]
lea esi, [eax + eax*2]
shl esi, 3
lea eax, [ecx + esi]
mov edx, dword [eax + 4]
mov dword [ebx], edx
mov edx, dword [eax + 8]
mov dword [ebx + 4], edx
mov edx, dword [eax + 0xc]
test edx, edx
je 0x1000be58
mov dword [esp + 8], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [ebp - 0x4034], edx
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov ecx, eax
sub esp, 0x20
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4030], ecx
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4024]
call eax
sub esp, 0xc
mov edi, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov ecx, dword [ebp - 0x4030]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0xffffffff
mov edx, dword [ebp - 0x4034]
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x4010]
sub esp, 0x20
mov ecx, dword [eax + 0x2c]
lea eax, [ecx + esi]
mov dword [ebx + 8], edi
mov edi, dword [eax + 0x10]
test edi, edi
je 0x1000be20
mov dword [esp + 8], edi
add ebx, 0x18
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x402c]
call eax
sub esp, 0x20
mov ecx, eax
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4030], ecx
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov ecx, dword [ebp - 0x4024]
call ecx
sub esp, 0xc
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov ecx, dword [ebp - 0x4030]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [ebp - 0x4030], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x402c]
call eax
mov edi, dword [ebp - 0x4010]
mov edx, dword [ebp - 0x4030]
add dword [ebp - 0x4028], 1
sub esp, 0x20
mov ecx, dword [edi + 0x2c]
mov dword [ebx - 0xc], edx
mov eax, dword [ecx + esi + 0x14]
mov dword [ebx - 8], eax
mov eax, dword [ebp - 0x4028]
cmp eax, dword [edi + 0x28]
jb 0x1000b880
mov esi, dword [ebp - 0x403c]
mov dword [ebp - 0x1fe0], esi
mov eax, dword [ebp - 0x4020]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4014]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x200c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x4018]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x401c]
mov dword [esp], eax
call dword [0x1002004c]
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, eax
mov eax, dword [ebp - 0x4010]
sub esp, 0x14
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x1000bb45
mov eax, dword [ebp - 0x1ff0]
mov dword [ebp - 0x4014], ecx
mov esi, dword fs:[0x18]
mov eax, dword [eax + 8]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1ff0]
sub esp, 0xc
mov eax, dword [eax + 0xc]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1ff0]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ecx, dword [ebp - 0x4014]
sub esp, 0xc
mov eax, dword [ebp - 0x4010]
mov edi, dword [eax + 0x20]
test edi, edi
je 0x1000bc12
mov esi, dword [eax + 0x24]
test esi, esi
je 0x1000bc12
mov dword [ebp - 0x4018], ecx
xor esi, esi
mov edx, dword fs:[0x18]
mov edi, edx
lea esi, [esi]
mov eax, dword [ebp - 0x1fe8]
lea ecx, [esi + esi*2]
add esi, 1
shl ecx, 3
mov eax, dword [eax + ecx + 8]
mov dword [ebp - 0x4014], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1fe8]
mov ecx, dword [ebp - 0x4014]
sub esp, 0xc
mov eax, dword [eax + ecx + 0xc]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x4010]
sub esp, 0xc
cmp esi, dword [eax + 0x20]
jb 0x1000bb78
mov ecx, dword [ebp - 0x4018]
mov eax, dword [ebp - 0x1fe8]
mov dword [ebp - 0x4014], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ecx, dword [ebp - 0x4014]
sub esp, 0xc
mov eax, dword [ebp - 0x4010]
mov edx, dword [eax + 0x28]
test edx, edx
je 0x1000bce2
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x1000bce2
mov dword [ebp - 0x4018], ecx
mov esi, dword [ebp - 0x4038]
mov edi, dword fs:[0x18]
lea esi, [esi]
mov eax, dword [ebp - 0x1fe0]
lea edx, [esi + esi*2]
add esi, 1
shl edx, 3
mov eax, dword [eax + edx + 0xc]
mov dword [ebp - 0x4014], edx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1fe0]
mov edx, dword [ebp - 0x4014]
sub esp, 0xc
mov eax, dword [eax + edx + 0x10]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x4010]
sub esp, 0xc
cmp esi, dword [eax + 0x28]
jb 0x1000bc48
mov ecx, dword [ebp - 0x4018]
mov eax, dword [ebp - 0x1fe0]
mov dword [ebp - 0x4010], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ecx, dword [ebp - 0x4010]
sub esp, 0xc
mov eax, dword [ebp - 0x2008]
mov dword [ebp - 0x4010], ecx
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x2004]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1ffc]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1ff8]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ecx, dword [ebp - 0x4010]
sub esp, 0xc
jmp 0x1000aef5
mov edx, dword [ebp - 0x4014]
mov eax, dword [ebp - 0x4010]
call sym._sendmail_extended_mapi.isra.0
mov ecx, eax
jmp 0x1000aef5
lea ebx, [ebp - 0x200c]
mov dword [esp + 0xc], 0x1000
mov edi, dword [sym.imp.user32.dll_LoadStringW]
lea esi, [ebp - 0x400c]
mov dword [esp + 8], ebx
mov dword [esp + 4], 1
mov eax, dword [section..bss]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [esp + 0xc], 0x1000
mov dword [esp + 8], esi
mov dword [esp + 4], 2
mov eax, dword [section..bss]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x4018]
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxW]
mov ecx, 0x1a
sub esp, 0x10
jmp 0x1000aef5
mov dword [ebx + 0xc], 0
mov esi, dword [ebp - 0x4010]
add ebx, 0x18
mov eax, dword [eax + 0x14]
add dword [ebp - 0x4028], 1
mov dword [ebx - 8], eax
mov eax, dword [ebp - 0x4028]
cmp eax, dword [esi + 0x28]
jb 0x1000b880
jmp 0x1000ba71
xor edi, edi
jmp 0x1000b973
xor edi, edi
jmp 0x1000b757
xor edi, edi
jmp 0x1000b687
xor ebx, ebx
jmp 0x1000afe4
xor ebx, ebx
jmp 0x1000b308
xor ebx, ebx
jmp 0x1000b23f
xor ebx, ebx
jmp 0x1000b176
xor ebx, ebx
jmp 0x1000b0ad
xor esi, esi
jmp 0x1000b50a
xor esi, esi
jmp 0x1000b431
xor ecx, ecx
jmp 0x1000b519