Function at 0x4a4555
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x500144]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
push edi
mov dword [ebp - 0x2c], eax
xor esi, esi
mov eax, dword [ebp + 0x1c]
mov ebx, ecx
push 0x30
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x60]
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x28], esi
xor eax, eax
lea edi, [ebp - 0x24]
push 8
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [ebx + 0x6c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0x70], eax
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0x48], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x4c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebx + 0x78], eax
mov eax, dword [ebp + 0x24]
mov dword [ebx + 0x90], eax
mov eax, dword [ebp - 0x2c]
push 0x10
pop edi
cmp word [eax], si
jne 0x4a463e
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], edi
push eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x4a463b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x4a461c
test byte [eax + 0x1c], 8
je 0x4a461c
cmp byte [eax + 0x19], 2
jb 0x4a461c
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
mov edx, 0x417cf0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.00421fda
test esi, esi
jle 0x4a462b
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x4a4808
mov esi, 0x80004005
jmp 0x4a4808
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebx + 0x74], eax
test eax, eax
jne 0x4a4699
mov eax, dword [section..data]
mov esi, 0x8007000e
cmp eax, section..data
je 0x4a4808
test byte [eax + 0x1c], 8
je 0x4a4808
cmp byte [eax + 0x19], 2
jb 0x4a4808
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x13
mov edx, 0x417cf0
pop ecx
call fcn.00421fda
jmp 0x4a4808
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebx + 0x7c], eax
test eax, eax
jne 0x4a46e8
mov eax, dword [section..data]
mov esi, 0x8007000e
cmp eax, section..data
je 0x4a4808
test byte [eax + 0x1c], 8
je 0x4a4808
cmp byte [eax + 0x19], 2
jb 0x4a4808
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x14
jmp 0x4a4689
push edi
call fcn.004fb25b
pop ecx
test eax, eax
je 0x4a470f
mov edx, ebx
mov dword [eax], 0x402910
neg edx
mov dword [eax + 8], esi
lea ecx, [ebx + 8]
mov dword [eax + 0xc], esi
sbb edx, edx
and edx, ecx
mov dword [eax + 4], edx
jmp 0x4a4711
mov eax, esi
mov dword [ebx + 0x2c], eax
test eax, eax
jne 0x4a475a
mov eax, dword [section..data]
mov esi, 0x8007000e
cmp eax, section..data
je 0x4a4808
test byte [eax + 0x1c], 8
je 0x4a4808
cmp byte [eax + 0x19], 2
jb 0x4a4808
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x15
jmp 0x4a4689
mov eax, dword [ebx + 0x6c]
push 0x7f00
push esi
mov dword [ebp - 0x60], 0x30
mov dword [ebp - 0x58], 0x4a6030
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
push 5
mov dword [ebp - 0x44], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x38], 0x417c40
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x4a4808
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x582
je 0x4a4808
test edi, edi
je 0x4a4808
mov eax, dword [section..data]
mov ebx, 0x80070000
cmp eax, section..data
je 0x4a47fb
test byte [eax + 0x1c], 8
je 0x4a47fb
cmp byte [eax + 0x19], 2
jb 0x4a47fb
test edi, edi
jg 0x4a47d7
mov esi, edi
jmp 0x4a47dc
movzx esi, di
or esi, ebx
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
mov edx, 0x417cf0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x16
pop ecx
call fcn.00421fda
test edi, edi
jg 0x4a4803
mov esi, edi
jmp 0x4a4808
movzx esi, di
or esi, ebx
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004fb5e0
leave
ret 0x20