Function at 0x407366
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x58ba58
mov eax, dword fs:[0]
push eax
sub esp, 0x9c8
mov eax, dword [0x6015a8]
xor eax, esp
mov dword [esp + 0x9c0], eax
push ebx
push esi
push edi
mov eax, dword [0x6015a8]
xor eax, esp
push eax
lea eax, [esp + 0x9d8]
mov dword fs:[0], eax
mov edi, ecx
call fcn.0055e1b8
mov esi, 0x613908
call fcn.004079e4
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x48
push 0x5a
push eax
mov dword [esp + 0x20], eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_MulDiv]
push eax
push 8
call ebx
push 0x48
push 0x5a
push dword [esp + 0x1c]
neg eax
mov dword [esp + 0x24], eax
call esi
push eax
push 9
call ebx
push 0x48
push 0x5a
push dword [esp + 0x1c]
call esi
push eax
push 0xa
call ebx
push 0x48
push 0x5a
push dword [esp + 0x1c]
call esi
push eax
push 0xb
call ebx
push dword [esp + 0x14]
xor ebx, ebx
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x614630]
cmp eax, ebx
jne 0x407428
mov eax, dword [esp + 0x18]
push 0x61442c
push ebx
mov esi, 0x190
push esi
push eax
lea eax, [edi + 0x914]
push eax
mov al, 0x20
xor cl, cl
call fcn.0040949e
mov eax, dword [0x61462c]
cmp eax, ebx
jne 0x407452
mov eax, dword [esp + 0x18]
push 0x61422c
push ebx
push esi
push eax
lea eax, [edi + 0x91c]
push eax
mov al, 0x20
xor cl, cl
call fcn.0040949e
mov eax, dword [edi + 0x48]
push 0x5b8830
mov dword [edi + 0x8bc], ebx
mov esi, 0x200
lea ebx, [edi + 0x4b4]
push esi
push ebx
mov dword [esp + 0x20], eax
call fcn.00460100
add esp, 0xc
push str._txt
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x4074da
push esi
push ebx
push str._txt_s
push eax
mov dword [edi + 0x8b8], 1
call fcn.00563b36
push str..txt
push esi
push ebx
call fcn.00562e2e
add esp, 0x1c
mov dword [edi + 0x8bc], 1
jmp 0x40771b
push str._html
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x407523
push esi
push ebx
push str._html_s
push eax
mov dword [edi + 0x8b8], 1
call fcn.00563b36
push str..htm
push esi
push ebx
call fcn.00562e2e
add esp, 0x1c
mov dword [edi + 0x8bc], 2
jmp 0x40771b
push str._console
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x407550
mov dword [edi + 0x8b8], 1
mov dword [edi + 0x8bc], 3
jmp 0x40771b
push str._bench
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x40757d
mov dword [edi + 0x8b8], 1
mov dword [edi + 0x8bc], 6
jmp 0x40771b
push str._jsontxt
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x407665
push esi
push ebx
push str._jsontxt_s
push eax
mov dword [edi + 0x8b8], 1
call fcn.00563b36
add esp, 0x10
test eax, eax
jge 0x4075c3
lea eax, [esp + 0x18]
push eax
push ebx
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x38]
push eax
movzx eax, word [esp + 0x3a]
push eax
movzx eax, word [esp + 0x3c]
push eax
movzx eax, word [esp + 0x3e]
push eax
movzx eax, word [esp + 0x3e]
push eax
movzx eax, word [esp + 0x40]
push eax
push str.__04d_02d_02d__02d_02d_02d
lea eax, [esp + 0x1e8]
push esi
push eax
call fcn.00460100
add esp, 0x24
lea eax, [esp + 0x1cc]
push eax
push esi
push ebx
call fcn.00562e2e
add esp, 0xc
push 0x400
call fcn.00551daf
pop ecx
push ebx
push esi
push eax
mov dword [edi + 0x8b4], eax
call fcn.00563919
add esp, 0xc
push str..json
push esi
push ebx
call fcn.00562e2e
add esp, 0xc
push str..txt
push esi
push dword [edi + 0x8b4]
call fcn.00562e2e
mov dword [edi + 0x8bc], 8
jmp 0x407718
push str._json
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
test eax, eax
je 0x40771b
push esi
push ebx
push str._json_s
push eax
mov dword [edi + 0x8b8], 1
call fcn.00563b36
add esp, 0x10
test eax, eax
jge 0x4076ab
lea eax, [esp + 0x18]
push eax
push ebx
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x28]
push eax
movzx eax, word [esp + 0x2a]
push eax
movzx eax, word [esp + 0x2c]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
push str.__04d_02d_02d__02d_02d_02d
lea eax, [esp + 0x5e8]
push esi
push eax
call fcn.00460100
add esp, 0x24
lea eax, [esp + 0x5cc]
push eax
push esi
push ebx
call fcn.00562e2e
add esp, 0xc
push str..json
push esi
push ebx
call fcn.00562e2e
mov dword [edi + 0x8bc], 7
add esp, 0xc
push str._core
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
xor ebx, ebx
push 4
pop esi
cmp eax, ebx
je 0x40774a
push esi
lea ecx, [edi + 0x8c0]
push ecx
push str._core_d
push eax
call fcn.00563b36
add esp, 0x10
push str._coremask
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
cmp eax, ebx
je 0x407784
push esi
lea ecx, [edi + 0x8c4]
push ecx
push str._coremask_X
push eax
call fcn.00563b36
add esp, 0x10
mov dword [edi + 0x8b8], 1
mov dword [edi + 0x8bc], esi
push str._removeservice
push dword [esp + 0x18]
call fcn.005638b8
pop ecx
pop ecx
cmp eax, ebx
je 0x4077ac
mov dword [edi + 0x8b8], 1
mov dword [edi + 0x8bc], 5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov dword [edi + 0xd84], eax
cmp dword [edi + 0x8b8], ebx
jne 0x407831
call fcn.0042abf7
mov ecx, edi
call fcn.00409501
mov ecx, dword [0x6138e0]
mov eax, dword [ecx]
call dword [eax + 0x60]
mov ecx, dword [0x6138e0]
cmp ecx, ebx
je 0x4077ef
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov esi, edi
mov dword [0x6138e0], ebx
call fcn.00409cb9
lea eax, [esp + 0x3c]
push eax
call fcn.0040a1af
lea eax, [esp + 0x3c]
mov dword [esp + 0x9e0], ebx
mov ecx, eax
mov dword [edi + 0x20], eax
call fcn.00554a62
or dword [esp + 0x9e0], 0xffffffff
lea eax, [esp + 0x3c]
push eax
call fcn.0040785f
xor eax, eax
jmp 0x40783b
mov ecx, edi
call fcn.00409501
xor eax, eax
inc eax
mov ecx, dword [esp + 0x9d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x9c0]
xor ecx, esp
call fcn.00562d51
mov esp, ebp
pop ebp
ret