Function at 0x495160
Capabilities:
Get hostname
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bb12b
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x4e5b00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x200], ecx
mov ecx, dword [ebp - 0x200]
call fcn.0047d650
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x200]
mov dword [eax], vtable.h_vdezxccURG.0
push fcn.00401750
push fcn.0041b540
push 0x200
push 0x1c
mov ecx, dword [ebp - 0x200]
add ecx, 0x974
push ecx
call fcn.004655b7
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x200]
add ecx, 0x4174
call fcn.0042ae30
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x200]
add ecx, 0x469c
call fcn.0041b540
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x200]
mov dword [0x515150], edx
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x4ac8], 0
mov dword [ebp - 0x198], 0x1000002
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
cmp eax, 1
jne 0x495247
mov dword [0x514d48], 1
jmp 0x495251
mov dword [0x514d48], 0
push 0x400
push 0
mov ecx, dword [ebp - 0x200]
add ecx, 0x46c8
push ecx
call fcn.00465660
add esp, 0xc
push 0x1f4
push 0
mov edx, dword [ebp - 0x200]
add edx, 0x5c8
push edx
call fcn.00465660
add esp, 0xc
push 0x14
push 0
mov eax, dword [ebp - 0x200]
add eax, 0x7bc
push eax
call fcn.00465660
add esp, 0xc
push 0xc8
push 0
mov ecx, dword [ebp - 0x200]
add ecx, 0x7d0
push ecx
call fcn.00465660
add esp, 0xc
push 0x64
push 0
mov edx, dword [ebp - 0x200]
add edx, 0x898
push edx
call fcn.00465660
add esp, 0xc
push 0x1f4
push 0
mov eax, dword [ebp - 0x200]
add eax, 0x18
push eax
call fcn.00465660
add esp, 0xc
push 0x12c
push 0
mov ecx, dword [ebp - 0x200]
add ecx, 0x20c
push ecx
call fcn.00465660
add esp, 0xc
push pe_nt_image_headers32
push 0
mov edx, dword [ebp - 0x200]
add edx, 0x338
push edx
call fcn.00465660
add esp, 0xc
push 0xa
push 0
mov eax, dword [ebp - 0x200]
add eax, 0x438
push eax
call fcn.00465660
add esp, 0xc
push 0x14
push 0
mov ecx, dword [ebp - 0x200]
add ecx, 0x442
push ecx
call fcn.00465660
add esp, 0xc
push 0x32
push 0
mov edx, dword [ebp - 0x200]
add edx, 0x456
push edx
call fcn.00465660
add esp, 0xc
push 0x32
push 0
mov eax, dword [ebp - 0x200]
add eax, 0x488
push eax
call fcn.00465660
add esp, 0xc
push 0xc8
push 0
mov ecx, dword [ebp - 0x200]
add ecx, 0x4ba
push ecx
call fcn.00465660
add esp, 0xc
push 0x32
push 0
mov edx, dword [ebp - 0x200]
add edx, 0x582
push edx
call fcn.00465660
add esp, 0xc
push 0x14
push 0
mov eax, dword [ebp - 0x200]
add eax, 0x5b4
push eax
call fcn.00465660
add esp, 0xc
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x900], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x8fc], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x904], 0
mov ecx, dword [ebp - 0x200]
mov byte [ecx + 0x908], 1
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x90c], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x910], 1
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x914], 1
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x918], 1
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x924], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x928], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x92c], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x930], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x934], 0x384
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x938], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x93c], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x940], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x944], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x948], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x94c], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x950], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x954], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x958], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x95c], 0xa
xor eax, eax
mov ecx, dword [ebp - 0x200]
mov word [ecx + 0x960], ax
mov edx, 1
mov eax, dword [ebp - 0x200]
mov word [eax + 0x962], dx
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x964], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x968], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x96c], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x970], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x4690], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x4694], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x4698], 0
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x46c4], 0
mov eax, dword [ebp - 0x200]
mov dword [eax + 0x91c], 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x920], 0
lea ecx, [ebp - 0x48]
call fcn.0041b540
mov byte [ebp - 4], 4
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [ebp - 0x8c], pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
push 0
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00465660
add esp, 0xc
push str.c:_mac.ini
push pe_nt_image_headers32
lea edx, [ebp - 0x18c]
push edx
push 0x4c90ed
push str.notreadmac
push 0x4c9108
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00401710
mov byte [ebp - 4], 5
push 0x4c90ee
lea ecx, [ebp - 0x88]
call fcn.00401710
mov byte [ebp - 4], 6
push 0x4c90ef
lea ecx, [ebp - 0x68]
push ecx
call fcn.00404b30
add esp, 8
movzx edx, al
test edx, edx
je 0x49570c
lea eax, [ebp - 0x1f0]
push eax
mov ecx, 0x5171a8
call fcn.004ae530
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x208], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x208]
push edx
lea ecx, [ebp - 0x88]
call fcn.0041b560
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f0]
call fcn.00401750
lea ecx, [ebp - 0x88]
call fcn.00423b50
cmp eax, 0xc
jae 0x49570c
push str.NotFindMacAddress
lea ecx, [ebp - 0x88]
call fcn.004028f0
mov eax, dword [ebp - 0x8c]
push eax
push 0
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00465660
add esp, 0xc
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x18c]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov ecx, dword [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x18c]
push edx
call fcn.004ac0d0
add esp, 8
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
push 0x4c9124
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00460c94
add esp, 0xc
lea edx, [ebp - 0x18c]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00401710
mov byte [ebp - 4], 8
mov byte [ebp - 0x1b8], 0
xor eax, eax
mov dword [ebp - 0x1b7], eax
mov dword [ebp - 0x1b3], eax
mov dword [ebp - 0x1af], eax
mov dword [ebp - 0x1ab], eax
mov dword [ebp - 0x1a7], eax
mov dword [ebp - 0x1a3], eax
mov dword [ebp - 0x19f], eax
mov word [ebp - 0x19b], ax
mov byte [ebp - 0x199], al
mov ecx, dword [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x194]
push edx
push 0x4c9128
lea eax, [ebp - 0x1b8]
push eax
call fcn.00460c94
add esp, 0x10
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0x1d4]
call fcn.00401710
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x194]
and edx, 0xff
mov eax, dword [ebp - 0x190]
and eax, 0
mov ecx, dword [ebp - 0x200]
mov dword [ecx + 0x970], edx
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x1f4], esp
push 9
lea ecx, [ebp - 0x1d4]
call fcn.00423b50
sub eax, 9
push eax
push esi
lea ecx, [ebp - 0x1d4]
call fcn.0041b6c0
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x200]
add edx, 0x7bc
push edx
mov ecx, dword [ebp - 0x200]
call fcn.00495d40
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x1f8], esp
lea ecx, [ebp - 0x2c]
push ecx
push 0x4c9130
push eax
call fcn.0041c450
add esp, 0xc
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x200]
add edx, 0x898
push edx
mov ecx, dword [ebp - 0x200]
call fcn.00495d40
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x1fc], esp
push 0x1a
push eax
call fcn.00484c50
add esp, 8
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x200]
add ecx, 0x338
push ecx
mov ecx, dword [ebp - 0x200]
call fcn.00495d40
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d4]
call fcn.00401750
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.00401750
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x88]
call fcn.00401750
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x68]
call fcn.00401750
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x48]
call fcn.00401750
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004606fe
mov esp, ebp
pop ebp
ret