Function at 0x407cf0
Capabilities:
Get hostname
Query environment variable

Disassembly:
push 0xffffffffffffffff
push 0x40c924
mov eax, dword fs:[0]
push eax
sub esp, 0x828
mov eax, dword [0x414018]
xor eax, esp
mov dword [esp + 0x824], eax
push ebx
push ebp
push esi
mov eax, dword [0x414018]
xor eax, esp
push eax
lea eax, [esp + 0x838]
mov dword fs:[0], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x38]
xor esi, esi
push ecx
mov word [esp + 0x3c], si
mov dword [esp + 0x34], 0x400
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
push 0x7d
lea ecx, [esp + 0x1c]
mov dword [esp + 0x844], esi
call dword [sym.imp.MFC80U.DLL_Ordinal_4026]
mov edx, dword [esp + 0x18]
mov eax, dword [edi + 0x28c]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push edx
push esi
push 0x143
push eax
call ebp
push 0x7e
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_4026]
push 0x40efa4
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
push 0x40f0e8
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
mov edx, dword [esp + 0x18]
mov eax, dword [edi + 0x28c]
push edx
push esi
push 0x143
push eax
call ebp
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
push 0x104
mov ebx, 1
push 0x104
lea ecx, [esp + 0x1c]
mov byte [esp + 0x848], bl
call dword [sym.imp.MFC80U.DLL_Ordinal_2460]
push eax
push 0x40f0ec
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
jne 0x407eaf
call dword [sym.imp.MFC80U.DLL_Ordinal_5398]
push 0x104
push 0x104
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_2460]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5398]
push 0x5c
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5524]
cmp eax, esi
jl 0x407e94
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_3990]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x844], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x30]
mov byte [esp + 0x840], bl
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
push str._timesrvr.txt
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
jmp 0x407eb5
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_2121]
push str._timesrvr.txt
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
jmp 0x407eb5
call dword [sym.imp.MFC80U.DLL_Ordinal_5398]
mov eax, dword [esp + 0x14]
cmp eax, esi
jne 0x407ec2
mov eax, 0x40e770
push esi
push esi
push 3
push esi
push 3
push SysReAllocString
push eax
mov dword [esp + 0x3c], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x1c], esi
je 0x407ee8
mov dword [esp + 0x20], ebx
cmp esi, 0xffffffff
mov dword [esp + 0x24], ebx
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
je 0x407f54
lea eax, [esp + 0x1c]
call fcn.00403440
test al, al
je 0x407f0b
mov byte [esp + 0x28], 0
lea edx, [esp + 0x1c]
push edx
lea ebx, [esp + 0x38]
call fcn.00403320
test eax, eax
jle 0x407f50
mov esi, 0x3b
cmp word [esp + 0x34], si
je 0x407f3e
mov ecx, dword [edi + 0x28c]
lea eax, [esp + 0x34]
push eax
push 0
push 0x143
push ecx
call ebp
lea edx, [esp + 0x1c]
push edx
lea ebx, [esp + 0x38]
call fcn.00403320
test eax, eax
jg 0x407f22
mov esi, dword [esp + 0x1c]
mov eax, dword [edi + 0x28c]
push 0
push 0
push 0x14e
push eax
call ebp
cmp esi, 0xffffffff
je 0x407f72
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov ecx, dword [esp + 0x838]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x824]
xor ecx, esp
call fcn.0040b277
add esp, 0x834
ret