Function at 0x46d6e4
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x508
push 0x100
lea eax, [ebp - 0x508]
push eax
call sub.WSOCK32.dll_gethostname
cmp eax, 0xffffffff
jne 0x46d726
push 0x50a954
call sub.WSOCK32.dll_gethostbyname
mov eax, dword [eax + 0xc]
push dword [eax]
call sub.WSOCK32.dll_inet_ntoa
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.004af6d0
pop ecx
pop ecx
push ebx
push esi
push edi
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x408]
push str.EHLO__s_r_n
push eax
call fcn.004b0cdd
mov ebx, dword [ebp + 0x24]
add esp, 0xc
push ebx
push dword [ebp + 0x20]
mov edi, 0xc8
push dword [ebp + 0x1c]
mov esi, 0x400
push edi
lea eax, [ebp - 0x408]
push esi
push eax
call fcn.004af4f0
pop ecx
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp + 8]
call fcn.0046d0ef
add esp, 0x20
test eax, eax
jne 0x46d815
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x408]
push str.HELO__s_r_n
push eax
call fcn.004b0cdd
add esp, 0xc
push ebx
push dword [ebp + 0x20]
lea eax, [ebp - 0x408]
push dword [ebp + 0x1c]
push edi
push esi
push eax
call fcn.004af4f0
pop ecx
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp + 8]
call fcn.0046d0ef
add esp, 0x20
test eax, eax
je 0x46d80e
push dword [ebp + 0x14]
lea eax, [ebp - 0x408]
push str.MAIL_FROM:__s__r_n
push eax
call fcn.004b0cdd
add esp, 0xc
push ebx
push dword [ebp + 0x20]
lea eax, [ebp - 0x408]
push dword [ebp + 0x1c]
push edi
push esi
push eax
call fcn.004af4f0
pop ecx
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp + 8]
call fcn.0046d0ef
add esp, 0x20
test eax, eax
jne 0x46d883
xor eax, eax
jmp 0x46d97f
lea eax, [ebp - 0x408]
push eax
call fcn.0046d15e
test eax, eax
pop ecx
je 0x46d7ca
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x46d7ca
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x46d7ca
test al, 4
je 0x46d84b
push ebx
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push ecx
push edx
push dword [ebp + 8]
call fcn.0046d59a
jmp 0x46d860
test al, 1
je 0x46d868
push ebx
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push ecx
push edx
push dword [ebp + 8]
call fcn.0046d344
add esp, 0x18
jmp 0x46d7c6
test al, 2
je 0x46d7ca
push ebx
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push ecx
push edx
push dword [ebp + 8]
call fcn.0046d27c
jmp 0x46d860
mov ebx, 0x529cc0
push ebx
push dword [ebp + 0x18]
call fcn.004b1bd8
pop ecx
pop ecx
jmp 0x46d92e
push 0x3c
push dword [ebp - 4]
call fcn.004b0a90
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 8], eax
jne 0x46d8b1
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x408]
push str.RCPT_TO:_
push eax
call fcn.004af6d0
lea eax, [ebp - 0x408]
push eax
call fcn.004af4f0
mov edx, dword [ebp - 8]
add esp, 0xc
lea eax, [ebp + eax - 0x408]
jmp 0x46d8e6
cmp cl, 0x3e
je 0x46d8ec
mov byte [eax], cl
inc eax
inc edx
mov cl, byte [edx]
test cl, cl
jne 0x46d8dd
push dword [ebp + 0x24]
mov byte [eax], 0x3e
push dword [ebp + 0x20]
inc eax
push dword [ebp + 0x1c]
mov byte [eax], 0xd
inc eax
mov byte [eax], 0xa
and byte [eax + 1], 0
push edi
lea eax, [ebp - 0x408]
push esi
push eax
call fcn.004af4f0
pop ecx
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp + 8]
call fcn.0046d0ef
push ebx
push 0
call fcn.004b1bd8
add esp, 0x28
test eax, eax
mov dword [ebp - 4], eax
jne 0x46d898
push dword [ebp + 0x14]
lea eax, [ebp - 0x408]
push str.DATA_r_n
push eax
call fcn.004b0cdd
add esp, 0xc
push dword [ebp + 0x24]
lea eax, [ebp - 0x408]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push 0x12c
push esi
push eax
call fcn.004af4f0
pop ecx
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp + 8]
call fcn.0046d0ef
add esp, 0x20
pop edi
pop esi
pop ebx
leave
ret