Function at 0x5b4150
Capabilities:
Get local ipv4 addresses
Get socket information
Receive data
Receive data on socket

Disassembly:
test dword [0x7eeab0], 0xffffff80
jne 0x5b4178
test dword [0x7eeab0], 0xffffffff
jne 0x5b431c
call fcn.006a7fbc
jmp fcn.005b4150
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x1c
call fcn.006977b0
mov ecx, dword [esp + 0x1c]
mov ebp, ecx
mov dword [esp + 0x10], 0x10
lea edx, [esp]
lea eax, [esp + 0x10]
push eax
push edx
push dword [ebp + 8]
call sub.WSOCK32.dll_getsockname
lea eax, [esp + 4]
push 2
push 0x10
push eax
call sub.WSOCK32.dll_gethostbyaddr
test eax, eax
je 0x5b4301
lea ecx, [esp + 0x14]
mov edx, dword [eax]
call fcn.004f60bc
mov ecx, dword [esp + 0x14]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x5b41e2
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x5b41cd
dec eax
add eax, 0xa
mov ecx, eax
call fcn.004dc288
mov dword [esp + 0x18], eax
push str.ESMTP
push 0x7e9d20
call fcn.006978b0
add esp, 8
test eax, eax
je 0x5b42e9
push dword [esp + 0x14]
push str.EHLO__s_r_n
mov eax, dword [esp + 0x20]
push eax
call fcn.00697936
add esp, 0xc
mov ecx, dword [esp + 0x18]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x5b423b
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x5b4226
dec eax
push eax
mov edx, dword [esp + 0x1c]
push edx
mov ecx, ebp
call fcn.005b5bbc
cmp eax, 1
je 0x5b42e2
mov esi, dword [ebp + 8]
mov byte [0x7e9d20], 0
xor ebx, ebx
lea eax, [esp + 0x1c]
push 0
push 1
push eax
push esi
call sub.WSOCK32.dll_recv
test eax, eax
jne 0x5b429c
mov byte [ebx + 0x7e9d20], 0
push 3
push 0x7e9d20
push 0x6d617c
call fcn.00698cf0
add esp, 0xc
test eax, eax
jne 0x5b42e2
cmp byte [0x7e9d23], 0x2d
je 0x5b4251
xor ebp, ebp
jmp 0x5b42c6
cmp eax, 0xffffffff
je 0x5b42c1
movzx eax, byte [esp + 0x1c]
mov byte [ebx + 0x7e9d20], al
inc ebx
cmp eax, 0xa
je 0x5b4270
cmp ebx, 0x3e8
jb 0x5b425d
mov byte [0x7e9d20], 0
mov ebp, 1
mov ecx, dword [esp + 0x14]
call fcn.004db958
mov ecx, dword [esp + 0x18]
call fcn.004db958
mov eax, ebp
add esp, 0x20
pop ebx
pop ebp
pop esi
pop edi
ret
mov ebp, 1
jmp 0x5b42c6
push dword [esp + 0x14]
push str.HELO__s_r_n
mov eax, dword [esp + 0x20]
push eax
call fcn.00697936
jmp 0x5b421d
push dword [esp + 4]
call sub.WSOCK32.dll_inet_ntoa
lea ecx, [esp + 0x14]
mov edx, eax
call fcn.004f60bc
jmp 0x5b41c7
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x1c
call fcn.006977b0
mov ecx, dword [esp + 0x1c]
mov ebp, ecx
mov dword [esp + 0x10], 0x10
lea edx, [esp]
lea eax, [esp + 0x10]
push eax
push edx
push dword [ebp + 8]
call sub.WSOCK32.dll_getsockname
lea eax, [esp + 4]
push 2
push 0x10
push eax
call sub.WSOCK32.dll_gethostbyaddr
test eax, eax
je 0x5b44a7
lea ecx, [esp + 0x14]
mov edx, dword [eax]
call fcn.004f60bc
mov ecx, dword [esp + 0x14]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x5b4386
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x5b4371
dec eax
add eax, 0xa
mov ecx, eax
call fcn.004dc288
mov dword [esp + 0x18], eax
push str.ESMTP
push 0x7e9d20
call fcn.006978b0
add esp, 8
test eax, eax
je 0x5b448f
push dword [esp + 0x14]
push str.EHLO__s_r_n
mov eax, dword [esp + 0x20]
push eax
call fcn.00697936
add esp, 0xc
mov ecx, dword [esp + 0x18]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x5b43df
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x5b43ca
dec eax
push eax
mov edx, dword [esp + 0x1c]
push edx
mov ecx, ebp
call fcn.005b5bbc
cmp eax, 1
je 0x5b447f
mov esi, dword [ebp + 8]
mov byte [0x7e9d20], 0
xor ebx, ebx
cmp ebx, 0x3e8
jae 0x5b4486
lea eax, [esp + 0x1c]
push 0
push 1
push eax
push esi
call sub.WSOCK32.dll_recv
test eax, eax
je 0x5b4439
cmp eax, 0xffffffff
jne 0x5b4428
mov ebp, 1
jmp 0x5b4463
movzx eax, byte [esp + 0x1c]
mov byte [ebx + 0x7e9d20], al
inc ebx
cmp eax, 0xa
jne 0x5b4401
mov byte [ebx + 0x7e9d20], 0
push 3
push 0x7e9d20
push 0x6d617c
call fcn.00698cf0
add esp, 0xc
test eax, eax
jne 0x5b447f
cmp byte [0x7e9d23], 0x2d
je 0x5b43f5
xor ebp, ebp
mov ecx, dword [esp + 0x14]
call fcn.004db958
mov ecx, dword [esp + 0x18]
call fcn.004db958
mov eax, ebp
add esp, 0x20
pop ebx
pop ebp
pop esi
pop edi
ret
mov ebp, 1
jmp 0x5b4463
mov byte [0x7e9d20], 0
jmp 0x5b4421
push dword [esp + 0x14]
push str.HELO__s_r_n
mov eax, dword [esp + 0x20]
push eax
call fcn.00697936
jmp 0x5b43c1
push dword [esp + 4]
call sub.WSOCK32.dll_inet_ntoa
lea ecx, [esp + 0x14]
mov edx, eax
call fcn.004f60bc
jmp 0x5b436b