Function at 0x426f9a
Capabilities:
Connect socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
push edi
xor esi, esi
push 0x4f
lea eax, [ebp - 0x5b]
push esi
push eax
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x5c], 0
call fcn.005306b0
xor eax, eax
mov word [ebp - 0x6c], si
lea edi, [ebp - 0x6a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
cmp ebx, esi
stosw word es:[edi], ax
je 0x42747b
mov eax, dword [ebx + 0xc]
cmp eax, esi
je 0x42747b
cmp byte [eax], 0
je 0x42747b
push esi
push 1
push 2
call dword [sym.imp.WSOCK32.dll_socket]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x70], edi
jne 0x42700e
call dword [sym.imp.WSOCK32.dll_WSAGetLastError]
jmp 0x42747d
movzx eax, word [ebx + 0x40]
cmp ax, si
mov word [ebp - 0x6c], 2
jbe 0x427020
push eax
jmp 0x427022
push 0x19
call dword [sym.imp.WSOCK32.dll_htons]
mov word [ebp - 0x6a], ax
push 0x50
lea eax, [ebp - 0x5c]
push eax
push dword [ebx]
call fcn.004708b9
add esp, 0xc
test eax, eax
je 0x42748b
lea ecx, [ebp - 0x5c]
call fcn.004707e1
mov dword [ebp - 0x68], eax
push 0x10
lea eax, [ebp - 0x6c]
push eax
push edi
call dword [sym.imp.WSOCK32.dll_connect]
test eax, eax
jne 0x427003
push dword [ebp + 8]
mov ecx, str.220
push edi
call fcn.00427645
cmp eax, esi
pop ecx
pop ecx
je 0x427095
mov esi, eax
push str.QUIT_r_n
push dword [ebp - 0x70]
call fcn.004274a0
pop ecx
pop ecx
push dword [ebp - 0x70]
call dword [sym.imp.WSOCK32.dll_closesocket]
mov eax, esi
jmp 0x42747d
push str.HELO_PAULA_r_n
push edi
call fcn.004274a0
cmp eax, esi
pop ecx
pop ecx
jne 0x427074
push dword [ebp + 8]
push edi
mov edi, str.250
mov ecx, edi
call fcn.00427645
cmp eax, esi
pop ecx
pop ecx
jne 0x427074
mov eax, dword [ebx + 4]
cmp eax, esi
je 0x42715a
push 0x40
push eax
call fcn.005313b0
test eax, eax
pop ecx
pop ecx
push dword [ebx + 4]
jne 0x427153
push str.MAIL_FROM:___s_UNKNOWN__r_n
push dword [ebp - 0x70]
call fcn.004274a0
add esp, 0xc
cmp eax, esi
jne 0x427074
push dword [ebp + 8]
mov ecx, edi
push dword [ebp - 0x70]
call fcn.00427645
cmp eax, esi
pop ecx
pop ecx
jne 0x427074
push dword [ebx + 0xc]
call fcn.00530f70
pop ecx
add eax, 0xa
push eax
push 1
call fcn.00530848
cmp eax, esi
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
je 0x427146
push dword [ebx + 0xc]
mov edi, eax
push edi
call fcn.005312a0
mov esi, edi
call fcn.004cd772
push 0x3c
call fcn.004cd66d
add esp, 0xc
push 0x3e
call fcn.004cd66d
pop ecx
xor esi, esi
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x7c], esi
mov edi, 0x560548
jmp 0x4271b7
push str.MAIL_FROM:___s__r_n
jmp 0x4270dd
push str.MAIL_FROM:__Unknown_Unknown__r_n
push dword [ebp - 0x70]
call fcn.004274a0
pop ecx
pop ecx
jmp 0x4270e8
mov edx, esi
call fcn.00426f8f
test eax, eax
push esi
je 0x4271a9
push str.RCPT_TO:___s__r_n
push dword [ebp - 0x70]
call fcn.004274a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4271e6
push dword [ebp + 8]
mov ecx, 0x56055c
push dword [ebp - 0x70]
call fcn.00427645
mov dword [ebp - 0x7c], 1
jmp 0x4271b3
push str.:4:SendMailMessage___has_been_provided_an_invalid_email_address:___s__has_not_been_processed.
call fcn.0042bd38
pop ecx
pop ecx
xor ecx, ecx
push edi
lea eax, [ebp - 0x78]
call fcn.004ce974
mov esi, eax
test esi, esi
pop ecx
jne 0x42716e
cmp dword [ebp - 0x74], 0
je 0x4271d6
push dword [ebp - 0x74]
call fcn.0053061e
pop ecx
cmp dword [ebp - 0x7c], 0
jne 0x4271f4
mov esi, 0x2741
jmp 0x427076
push dword [ebp - 0x74]
call fcn.0053061e
pop ecx
jmp 0x427076
mov edi, dword [ebp - 0x70]
push str.DATA_r_n
push edi
call fcn.004274a0
test eax, eax
pop ecx
pop ecx
jne 0x427074
push dword [ebp + 8]
mov ecx, str.354
push edi
call fcn.00427645
test eax, eax
pop ecx
pop ecx
jne 0x427074
movzx eax, word [ebx + 0x3c]
push eax
movzx eax, word [ebx + 0x3a]
push eax
movzx eax, word [ebx + 0x38]
push eax
movzx eax, word [ebx + 0x30]
push eax
movzx eax, word [ebx + 0x32]
call fcn.004ce168
push eax
movzx eax, word [ebx + 0x36]
push eax
movzx eax, word [ebx + 0x34]
call fcn.004ce052
push eax
push str.Date:__s___02d__s__04d__02d:_02d:_02d_r_n
push edi
call fcn.004274a0
add esp, 0x24
test eax, eax
jne 0x427074
push str.PAULA_eMailer_v1.0
push str.X_Mailer:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
test eax, eax
jne 0x427074
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4272a0
push eax
push str.Message_ID:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
test eax, eax
jne 0x427074
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x42738b
push eax
push dword [ebx + 0xc]
push str.To:__s___s__r_n
push edi
call fcn.004274a0
add esp, 0x10
test eax, eax
jne 0x427074
mov eax, dword [ebx + 4]
test eax, eax
je 0x4273b5
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x4273a1
push ecx
push eax
push str.From:__s___s__r_n
push edi
call fcn.004274a0
add esp, 0x10
test eax, eax
jne 0x427074
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x42731d
mov ecx, dword [ebx + 0x18]
test ecx, ecx
je 0x4273c7
push ecx
push eax
push str.Reply_To:__s___s__r_n
push edi
call fcn.004274a0
add esp, 0x10
test eax, eax
jne 0x427074
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x42733b
push eax
push str.Subject:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
test eax, eax
jne 0x427074
push 0x5606b4
push edi
call fcn.004274a0
test eax, eax
pop ecx
pop ecx
jne 0x427074
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x4273db
cmp byte [eax], 0
je 0x4273db
push eax
call fcn.00530f70
pop ecx
add eax, 0xa
push eax
push 1
call fcn.00530848
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x42741a
push dword [ebx + 0x28]
push esi
call fcn.005312a0
pop ecx
pop ecx
jmp 0x4273f1
push dword [ebx + 0xc]
push str.To:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
jmp 0x4272bd
push eax
push str.From:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
jmp 0x4272eb
push str.From:_Unknown_Unknown_r_n
push edi
call fcn.004274a0
pop ecx
pop ecx
jmp 0x4272eb
push eax
push str.Reply_To:__s_r_n
push edi
call fcn.004274a0
add esp, 0xc
jmp 0x427315
mov eax, dword [ebx + 0x2c]
call fcn.0046940b
test eax, eax
je 0x42741a
mov eax, dword [ebx + 0x2c]
call fcn.0046994a
mov esi, eax
test esi, esi
je 0x42741a
mov eax, esi
call fcn.004277c9
push esi
push 0x54f4f0
push edi
call fcn.004274a0
add esp, 0xc
test eax, eax
jne 0x427074
push esi
call fcn.0053061e
pop ecx
push str._r_n._r_n
push edi
call fcn.004274a0
test eax, eax
pop ecx
pop ecx
jne 0x427074
push dword [ebp + 8]
mov ecx, str.250
push edi
call fcn.00427645
test eax, eax
pop ecx
pop ecx
jne 0x427074
push str.QUIT_r_n
push edi
call fcn.004274a0
test eax, eax
pop ecx
pop ecx
jne 0x427074
push dword [ebp + 8]
mov ecx, str.221
push edi
call fcn.00427645
test eax, eax
pop ecx
pop ecx
jne 0x427074
push edi
call dword [sym.imp.WSOCK32.dll_closesocket]
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
xor ecx, ebp
pop esi
call fcn.005317e7
leave
ret
push dword [ebx]
push str.SendMailMessage___FAILED:_ResolveHostNameToIP___could_not_resolve__s.
call fcn.0042bd38
pop ecx
pop ecx
mov eax, 0x2741
jmp 0x42747d