Function at 0x415000
Capabilities:
Get hostname

Disassembly:
sub esp, 0x16c
xor eax, eax
push ebp
push esi
mov esi, dword [sym.imp.MSVCRT.dll_time]
mov ebp, ecx
push edi
mov ecx, 8
lea edi, [esp + 0x24]
push eax
rep stosd dword es:[edi], eax
call esi
mov edi, dword [sym.imp.MSVCRT.dll_srand]
push eax
call edi
mov eax, dword [ebp + 8]
xor ecx, ecx
add esp, 8
mov cl, byte [eax + 0x188]
cmp ecx, 3
ja case.default.0x415041
jmp dword [ecx*4 + 0x4152f8]
push 0
call esi
push eax
call edi
mov eax, dword [ebp + 8]
add esp, 8
xor esi, esi
mov cl, byte [eax + 0x189]
test cl, cl
jbe 0x41508b
mov edi, dword [sym.imp.MSVCRT.dll_rand]
call edi
mov edx, dword [ebp + 4]
add eax, edx
mov edx, dword [ebp + 8]
and eax, 0xf
inc esi
mov cl, byte [eax + str.ABCDEF0123456789]
xor eax, eax
mov byte [esp + esi + 0x23], cl
mov al, byte [edx + 0x189]
cmp esi, eax
jl 0x415067
mov ecx, dword [ebp + 8]
cmp byte [ecx + 0x189], 0xe
jbe 0x4152bf
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.00417eb0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x28], ecx
mov cl, byte [esp + 0x20]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], cl
jmp 0x4152bf
mov cl, byte [eax + 0x189]
xor esi, esi
test cl, cl
jbe 0x4152bf
mov ecx, dword [eax + 0x18c]
cmp esi, dword [ecx - 8]
jge 0x4150f8
mov dl, byte [ecx + esi]
mov byte [esp + esi + 0x24], dl
jmp 0x4150fd
mov byte [esp + esi + 0x24], 0x30
xor ecx, ecx
inc esi
mov cl, byte [eax + 0x189]
cmp esi, ecx
jl 0x4150e4
jmp 0x4152bf
mov eax, dword [0x497744]
mov ecx, dword [0x497740]
lea edx, [esp + 0x58]
push 0xa
push edx
push eax
push ecx
call dword [sym.imp.MSVCRT.dll__i64toa]
lea edi, [esp + 0x68]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
mov edi, dword [ebp + 8]
xor esi, esi
not ecx
mov al, byte [edi + 0x189]
dec ecx
test eax, eax
jle 0x4152bf
mov edx, dword [edi + 0x190]
cmp esi, dword [edx - 8]
jge 0x415161
mov dl, byte [edx + esi]
mov byte [esp + esi + 0x24], dl
jmp 0x41517e
mov edx, eax
sub edx, ecx
cmp esi, edx
jge 0x415170
mov byte [esp + esi + 0x24], 0x30
jmp 0x41517e
mov edx, ecx
sub edx, eax
add edx, esi
mov al, byte [esp + edx + 0x58]
mov byte [esp + esi + 0x24], al
xor eax, eax
inc esi
mov al, byte [edi + 0x189]
cmp esi, eax
jl 0x41514d
jmp 0x4152bf
cmp byte [eax + 0x189], 0x14
jb case.default.0x415041
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [esp + 0x52]
xor edx, edx
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x14], edx
and eax, 0xffff
mov dword [esp + 0x18], edx
push eax
mov eax, dword [esp + 0x50]
mov word [esp + 0x20], dx
mov byte [esp + 0x22], dl
mov edx, dword [esp + 0x52]
and ecx, 0xffff
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x52]
and eax, 0xffff
push edx
mov edx, dword [esp + 0x52]
push eax
mov eax, dword [esp + 0x54]
and ecx, 0xffff
and eax, 0xffff
and edx, 0xffff
push ecx
sub eax, 0x7d0
push edx
push eax
lea ecx, [esp + 0x2c]
push str._2d_02d_02d_02d_02d_02d_03d
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov eax, dword [ebp + 8]
add esp, 0x24
xor esi, esi
mov cl, byte [eax + 0x189]
test cl, cl
jbe 0x4152bf
mov edi, dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [eax + 0x1a8]
cmp esi, dword [eax - 8]
jge 0x41524e
mov dl, byte [eax + esi]
mov byte [esp + esi + 0x24], dl
jmp 0x4152a9
cmp esi, 6
jge 0x415295
lea eax, [esp + 0xc]
lea ecx, [esp + 0x78]
push eax
push ecx
mov dword [esp + 0x14], 0xff
call edi
mov edx, dword [esp + 0xc]
lea eax, [edx + esi]
cmp eax, 6
jb 0x4152a4
mov al, byte [esp + eax + 0x72]
cmp al, 0x30
jl 0x41527f
cmp al, 0x39
jle 0x41529e
cmp al, 0x61
jl 0x415287
cmp al, 0x7a
jle 0x41529e
cmp al, 0x41
jl 0x4152a4
cmp al, 0x5a
jg 0x4152a4
mov byte [esp + esi + 0x24], al
jmp 0x4152a9
cmp esi, 0x14
jge 0x4152a4
mov al, byte [esp + esi + 0xa]
mov byte [esp + esi + 0x24], al
jmp 0x4152a9
mov byte [esp + esi + 0x24], 0x30
mov eax, dword [ebp + 8]
xor ecx, ecx
inc esi
mov cl, byte [eax + 0x189]
cmp esi, ecx
jl 0x41523a
jmp 0x4152bf
mov esi, dword [esp + 0xc]
lea edx, [esp + 0x24]
lea ecx, [ebp + 0x10]
push edx
mov byte [esp + esi + 0x28], 0
call fcn.004581ae
mov ecx, dword [0x497740]
mov eax, dword [0x497744]
add ecx, 1
pop edi
adc eax, 0
pop esi
mov dword [0x497740], ecx
mov dword [0x497744], eax
pop ebp
add esp, 0x16c
ret