Function at 0x44f6f0
Capabilities:
Access peb ldr_data
Get hostname

Disassembly:
push 0xffffffffffffffff
push 0x5ca1f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebp
push esi
push edi
mov edi, ecx
push 0x61b6c0
call sub.etinfo.dll_unsigned_short_int_const____cdecl_mgLoadLocateString_unsigned_short_int_const__
add esp, 4
lea ecx, [esp + 0x10]
push eax
call fcn.005c0fb0
mov eax, dword [esp + 0x60]
push 0x61b6a4
lea ecx, [esp + 0x1c]
push eax
push ecx
mov dword [esp + 0x64], 0
call sub.mfc42u.dll_operator
lea edx, [esp + 0x1c]
mov byte [esp + 0x58], 1
push edx
call sub.mfc42u.dll_CTime::GetTickCount
lea eax, [esp + 0xc]
push 0x61b680
push eax
lea ecx, [esp + 0x24]
call sub.mfc42u.dll_CTime::Format
lea ecx, [edi + 0x2e0]
mov byte [esp + 0x58], 2
call fcn.004dfab0
mov ecx, dword [esp + 0x18]
push 0x3001
push ecx
lea ecx, [esp + 0x28]
mov esi, eax
call sub.mfc42u.dll_CFile::CFile_1
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x20]
mov byte [esp + 0x58], 3
call sub.mfc42u.dll_CFile::GetLength
mov edx, eax
push ebp
mov dword [esp + 0x64], edx
call dword [sym.imp.msvcrt.dll_wcslen]
mov edx, dword [esp + 0x64]
add esp, 4
shl eax, 1
cmp edx, eax
jae 0x44f7ec
lea eax, [esp + 0x60]
push 2
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x68], 0xff
mov byte [esp + 0x69], 0xfe
call sub.mfc42u.dll_CFile::Write
mov eax, dword [esp + 0x10]
push eax
mov ebp, eax
call dword [sym.imp.msvcrt.dll_wcslen]
add esp, 4
lea ecx, [esp + 0x20]
shl eax, 1
push eax
push ebp
call sub.mfc42u.dll_CFile::Write
jmp 0x44f801
push 0
lea ecx, [esp + 0x24]
call sub.mfc42u.dll_CFile::GetLength
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Seek
lea ecx, [esp + 0x14]
lea edx, [esp + 0x30]
push ecx
push edx
mov dword [esp + 0x1c], 0xf
call dword [sym.imp.kernel32.dll_GetComputerNameW]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x30]
lea ecx, [eax + eax]
push ecx
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea eax, [esp + 0x30]
push 0x61b67c
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
add esp, 8
lea ecx, [esp + 0x30]
push 2
push ecx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
lea edx, [ecx + ecx]
lea ecx, [esp + 0x20]
push edx
push eax
call sub.mfc42u.dll_CFile::Write
lea eax, [esp + 0x30]
push 2
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
mov ecx, dword [edi + 0x1ec]
mov edx, dword [ecx]
lea ecx, [esp + 0xc]
add edx, 0x1c
push edx
call sub.mfc42u.dll_CString::operator_2
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea edx, [esp + 0x30]
push 2
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call fcn.004f6ec0
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x5c], 4
call sub.mfc42u.dll_CString::operator_2
lea ecx, [esp + 0x60]
mov byte [esp + 0x58], 3
call sub.mfc42u.dll_CString::CString
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea edx, [esp + 0x30]
push 2
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
mov eax, dword [esi + 0xc]
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea edx, [esp + 0x30]
push 2
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
fld qword [esi + 0x18]
fmul qword [0x5e2640]
sub esp, 8
lea eax, [esp + 0x14]
fstp qword [esp]
push 0x617b6c
push eax
call sub.mfc42u.dll_CString::Format_1
mov eax, dword [esp + 0x1c]
add esp, 0x10
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea edx, [esp + 0x30]
push 2
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
fld qword [0x5e27a0]
fsub qword [esi + 0x28]
sub esp, 8
lea eax, [esp + 0x14]
fdivr qword [0x5e27a0]
fmul qword [esi + 0xc0]
fld dword [esi + 0xf4]
fadd st(0), st(0)
faddp st(1)
fmul qword [0x5e2640]
fstp qword [esp]
push 0x617b6c
push eax
call sub.mfc42u.dll_CString::Format_1
mov eax, dword [esp + 0x1c]
add esp, 0x10
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea edx, [esp + 0x30]
push 2
push edx
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
mov eax, dword [esi + 0xcc]
push eax
push 0x617f60
call sub.etinfo.dll_unsigned_short_int_const____cdecl_mgLoadLocateString_unsigned_short_int_const__
add esp, 4
lea ecx, [esp + 0x10]
push eax
push ecx
call sub.mfc42u.dll_CString::Format_1
mov eax, dword [esp + 0x18]
add esp, 0xc
mov ecx, dword [eax - 8]
lea edx, [ecx + ecx]
lea ecx, [esp + 0x20]
push edx
push eax
call sub.mfc42u.dll_CFile::Write
lea eax, [esp + 0x30]
push 2
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
mov eax, dword [edi + 0x24]
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
push 4
push 0x61b674
lea ecx, [esp + 0x28]
call sub.mfc42u.dll_CFile::Write
lea ecx, [esp + 0x20]
call sub.mfc42u.dll_CFile::Close
lea ecx, [esp + 0x20]
mov byte [esp + 0x58], 2
call fcn.005c111e
lea ecx, [esp + 0xc]
mov byte [esp + 0x58], 1
call sub.mfc42u.dll_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x58], 0
call sub.mfc42u.dll_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x58], 0xffffffff
call sub.mfc42u.dll_CString::CString
mov ecx, dword [esp + 0x50]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x50
ret 4