Function at 0x422b60
Capabilities:
Get hostname

Disassembly:
mov eax, 0x6030
call fcn.0043ae00
mov al, byte [0x473aa0]
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov byte [esp + 0x28], al
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x29]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x6050]
mov edi, 2
push edi
mov dword [esp + 0x14], 0x1000
mov al, byte [ecx]
push 0x19
test al, al
je 0x42305d
mov edx, dword [esp + 0x6060]
mov esi, dword [esp + 0x6054]
push edx
push esi
mov ecx, ebx
call fcn.00419740
test eax, eax
jne 0x422bd1
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x6030
ret 0x18
mov eax, dword [esp + 0x6044]
lea eax, [eax + eax*2]
lea ebp, [eax + eax*4]
mov eax, dword [0x51a850]
lea ebp, [ebp + ebp*4]
shl ebp, 2
cmp dword [eax + ebp + 0x18], edi
jne 0x422c39
lea ecx, [esp + 0x10]
lea edx, [esp + 0x28]
push ecx
push edx
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea eax, [esp + 0x2c]
push 0x46fccc
push eax
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x422c39
mov ecx, dword [0x51a850]
cmp dword [ecx + ebp + 0x18], edi
je 0x422bf0
mov dl, byte [0x473aa0]
xor eax, eax
mov dword [esp + 0x15], eax
mov byte [esp + 0x14], dl
mov dword [esp + 0x19], eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x1d], eax
lea edx, [esp + 0x14]
mov word [esp + 0x21], ax
push ecx
push edx
mov byte [esp + 0x2b], al
mov dword [esp + 0x2c], 0xf
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, byte [esp + 0x14]
test al, al
jne 0x422cac
mov edi, 0x46eefc
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x14]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x604c]
mov edi, 2
lea ecx, [esp + 0x14]
lea edx, [esp + 0x28]
push ecx
push str.EHLO__s_r_n
push edx
call fcn.0043afc4
add esp, 0xc
lea eax, [esp + 0x28]
mov ecx, ebx
push eax
push esi
call fcn.00411160
mov ecx, dword [0x51a850]
cmp dword [ecx + ebp + 0x18], edi
jne 0x422d2d
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push edx
push eax
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea ecx, [esp + 0x2c]
push 0x470de8
push ecx
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x422d2d
mov edx, dword [0x51a850]
cmp dword [edx + ebp + 0x18], edi
je 0x422cdc
lea eax, [esp + 0x28]
push str.AUTH_LOGIN_r_n
push eax
call fcn.0043afc4
add esp, 8
lea ecx, [esp + 0x28]
push ecx
push esi
mov ecx, ebx
call fcn.00411160
mov edx, dword [0x51a850]
cmp dword [edx + ebp + 0x18], edi
jne 0x422da8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
push ecx
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea edx, [esp + 0x2c]
push 0x470dd4
push edx
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x422da8
mov eax, dword [0x51a850]
cmp dword [eax + ebp + 0x18], edi
je 0x422d58
mov dl, byte [0x473aa0]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2031]
mov byte [esp + 0x2030], dl
mov byte [esp + 0x4038], dl
rep stosd dword es:[edi], eax
mov edx, dword [esp + 0x6050]
mov ecx, 0x400
lea edi, [esp + 0x4039]
rep stosd dword es:[edi], eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0x2034]
push edx
push ecx
call fcn.00407da0
mov edx, dword [esp + 0x6060]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea edx, [esp + 0x404c]
push edx
call fcn.00407da0
mov al, byte [0x473aa0]
mov ecx, 0x400
mov byte [esp + 0x5054], al
xor eax, eax
lea edi, [esp + 0x5055]
lea edx, [esp + 0x5054]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push edx
call fcn.00407ec0
mov edi, str.USERNAME
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x505c]
push ecx
push str.USERNAME
push eax
call fcn.00445b80
add esp, 0x2c
test eax, eax
jne 0x422e81
mov edi, 1
lea ecx, [esp + 0x2030]
jmp 0x422e8a
xor edi, edi
lea ecx, [esp + 0x4038]
push ecx
lea edx, [esp + 0x2c]
push str._s_r_n
push edx
call fcn.0043afc4
add esp, 0xc
lea eax, [esp + 0x28]
mov ecx, ebx
push eax
push esi
call fcn.00411160
mov ecx, dword [0x51a850]
cmp dword [ecx + ebp + 0x18], 2
jne 0x422f09
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push edx
push eax
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea ecx, [esp + 0x2c]
push 0x470dd4
push ecx
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x422f09
mov edx, dword [0x51a850]
cmp dword [edx + ebp + 0x18], 2
je 0x422eb7
test edi, edi
je 0x422f21
lea eax, [esp + 0x4038]
lea ecx, [esp + 0x28]
push eax
push str._s_r_n
push ecx
jmp 0x422f33
lea edx, [esp + 0x2030]
lea eax, [esp + 0x28]
push edx
push str._s_r_n
push eax
call fcn.0043afc4
add esp, 0xc
lea ecx, [esp + 0x28]
push ecx
push esi
mov ecx, ebx
call fcn.00411160
mov dl, byte [0x473aa0]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x102d]
mov byte [esp + 0x102c], dl
rep stosd dword es:[edi], eax
mov eax, dword [0x51a850]
mov ecx, dword [eax + ebp + 0xc]
mov ebp, dword [eax + ebp + 0x20]
cmp ebp, 0xffffffff
je 0x422fa7
mov edx, dword [0x4f4398]
mov eax, ebp
shl eax, 5
add eax, ebp
lea eax, [edx + eax*4]
push eax
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x1034]
push str._s__s_ESMTP
push ecx
call fcn.0043afc4
add esp, 0x10
jmp 0x422fc4
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea edx, [esp + 0x1030]
push str._s_unknown_ESMTP
push edx
call fcn.0043afc4
add esp, 0xc
mov eax, dword [0x501cf0]
test eax, eax
je 0x423051
mov al, byte [0x473aa0]
mov ecx, 0x400
mov byte [esp + 0x3034], al
xor eax, eax
lea edi, [esp + 0x3035]
rep stosd dword es:[edi], eax
call fcn.0040a260
mov ecx, dword [esp + 0x6050]
mov edx, dword [esp + 0x6058]
push ecx
push edx
lea eax, [esp + 0x303c]
push str.LOGIN:_s__s
push eax
call fcn.0043afc4
lea edi, [esp + 0x3044]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x102c]
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x604c]
lea eax, [esp + 0x102c]
jmp 0x4232fd
mov eax, dword [esp + 0x6060]
mov esi, dword [esp + 0x6054]
push eax
push esi
mov ecx, ebx
call fcn.00419740
mov eax, dword [esp + 0x6044]
mov ecx, dword [0x51a850]
lea eax, [eax + eax*2]
lea ebp, [eax + eax*4]
lea ebp, [ebp + ebp*4]
shl ebp, 2
cmp dword [ecx + ebp + 0x18], edi
jne 0x4230e5
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push edx
push eax
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea ecx, [esp + 0x2c]
push 0x46fccc
push ecx
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x4230e5
mov edx, dword [0x51a850]
cmp dword [edx + ebp + 0x18], edi
je 0x423094
mov al, byte [0x473aa0]
xor ecx, ecx
mov dword [esp + 0x15], ecx
mov byte [esp + 0x14], al
mov dword [esp + 0x19], ecx
lea edx, [esp + 0x24]
mov dword [esp + 0x1d], ecx
lea eax, [esp + 0x14]
mov word [esp + 0x21], cx
push edx
push eax
mov byte [esp + 0x2b], cl
mov dword [esp + 0x2c], 0xf
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, byte [esp + 0x14]
test al, al
jne 0x423157
mov edi, 0x46eefc
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x14]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x604c]
mov edi, 2
lea ecx, [esp + 0x14]
lea edx, [esp + 0x28]
push ecx
push str.HELO__s_r_n
push edx
call fcn.0043afc4
add esp, 0xc
lea eax, [esp + 0x28]
mov ecx, ebx
push eax
push esi
call fcn.00411160
mov ecx, dword [0x51a850]
cmp dword [ecx + ebp + 0x18], edi
jne 0x4231d8
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push edx
push eax
push esi
mov ecx, ebx
mov dword [esp + 0x1c], 0x1000
call fcn.004123e0
test eax, eax
je 0x422bc2
push 3
lea ecx, [esp + 0x2c]
push 0x470de8
push ecx
call fcn.00445b80
add esp, 0xc
test eax, eax
jne 0x422bc2
cmp byte [esp + 0x2b], 0x20
je 0x4231d8
mov edx, dword [0x51a850]
cmp dword [edx + ebp + 0x18], edi
je 0x423187
mov eax, dword [esp + 0x6048]
push str.235_OK_r_n
push eax
mov ecx, ebx
call fcn.00411160
mov cl, byte [0x473aa0]
xor eax, eax
mov byte [esp + 0x102c], cl
mov ecx, 0x400
lea edi, [esp + 0x102d]
rep stosd dword es:[edi], eax
mov eax, dword [0x51a850]
mov ecx, dword [eax + ebp + 0xc]
mov ebp, dword [eax + ebp + 0x20]
cmp ebp, 0xffffffff
je 0x42324a
mov eax, dword [0x4f4398]
mov edx, ebp
shl edx, 5
add edx, ebp
lea edx, [eax + edx*4]
push edx
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea eax, [esp + 0x1034]
push str._s__s_SMTP
push eax
call fcn.0043afc4
add esp, 0x10
jmp 0x423267
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x1030]
push str._s_unknown_SMTP
push ecx
call fcn.0043afc4
add esp, 0xc
mov eax, dword [0x501cf0]
test eax, eax
je 0x4232f6
mov dl, byte [0x473aa0]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x3035]
mov byte [esp + 0x3034], dl
rep stosd dword es:[edi], eax
call fcn.0040a260
mov eax, dword [0x501cf8]
test eax, eax
je 0x4232bc
mov eax, dword [esp + 0x6058]
lea ecx, [esp + 0x3034]
push eax
push str.LOGIN:_s
push ecx
call fcn.0043afc4
add esp, 0xc
lea edi, [esp + 0x3034]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x102c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x604c]
lea eax, [esp + 0x102c]
push eax
call fcn.0040a330
mov ecx, dword [esp + 0x604c]
mov edx, dword [esp + 0x6048]
add esp, 4
push 0
push ecx
push esi
push edx
mov ecx, ebx
call fcn.00417ca0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x6030
ret 0x18