Function at 0x1004f490
Capabilities:
Get hostname
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10162d68
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74
mov eax, dword [0x101b9578]
push ebx
push esi
mov dword [esp + 0x78], eax
push edi
push 0x20
push 1
lea ecx, [esp + 0x98]
mov dword [esp + 0x90], 7
call fcn.10015260
push 0x20
push 1
lea ecx, [esp + 0xa0]
call fcn.10015260
push 0x20
push 1
lea ecx, [esp + 0xa4]
call fcn.10015260
mov eax, dword [esp + 0x98]
mov esi, dword [eax - 0xc]
cmp dword [esp + 0xa8], 3
jne 0x1004f695
lea ecx, [esp + 0x94]
call fcn.10001f40
cmp esi, 0x64
jle 0x1004f56a
mov esi, 0x64
push esi
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0xa0]
call fcn.100022f0
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x8c], 8
call fcn.10002a40
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x88], 7
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1004f56a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.10152999
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x98]
mov eax, dword [esp + 0xa4]
push ebx
push eax
lea ecx, [esp + 0x14]
push 0x10175240
push ecx
mov byte [esp + 0x98], 9
call fcn.10001360
mov edi, dword [esp + 0x1c]
push 0
push edi
call fcn.1004a940
add esp, 0x18
test eax, eax
mov byte [esp + 0x88], 7
lea eax, [edi - 0x10]
je 0x1004f67e
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1004f5dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
mov byte [esp + 0x88], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f606
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov byte [esp + 0x88], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f62f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0x88], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f651
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
mov byte [esp + 0x88], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004fa1b
mov ecx, dword [eax]
push eax
jmp 0x1004fa16
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f695
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, esi
cdq
mov ecx, 0x3e8
idiv ecx
test edx, edx
mov esi, eax
mov dword [esp + 0x10], esi
jle 0x1004f6ae
inc esi
mov dword [esp + 0x10], esi
xor edx, edx
mov dword [esp + 0x29], edx
mov dword [esp + 0x2d], edx
mov dword [esp + 0x31], edx
mov dword [esp + 0x35], edx
mov word [esp + 0x39], dx
mov byte [esp + 0x28], 0
mov byte [esp + 0x3b], dl
push edx
call fcn.10102351
add esp, 4
mov dword [esp + 0x20], eax
push str._Y__m__d__H:_M:_S
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x2c], edx
call fcn.100153c0
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x2c]
push 0x10167f04
push edx
call fcn.10101c69
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f725
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
mov byte [esp + 0x3c], 0
mov ecx, 0xf
lea edi, [esp + 0x3d]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
stosb byte es:[edi], al
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x44]
push ecx
mov dword [esp + 0x24], 0x3f
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.10152999
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
test esi, esi
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x94]
mov byte [esp + 0x8c], 0xa
jle 0x1004f964
mov eax, dword [esp + 0x14]
xor esi, esi
mov dword [esp + 0x14], eax
jmp 0x1004f7a0
mov eax, dword [0x101cf008]
test eax, eax
push 0x3e8
push esi
je 0x1004f86b
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0xa8]
call fcn.100023f0
mov edx, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
push edx
mov edx, dword [esp + 0xb4]
push ecx
push edx
mov edx, dword [esp + 0xb0]
push 0x10167a1b
push 0x10167a1b
push ebx
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [0x101cf19c]
push edx
push ecx
mov ecx, dword [0x101cf074]
push 0x101cf18a
push 0x101cf162
push 0x101cf13a
push 0x101cf126
lea edx, [esp + 0x60]
push edx
mov edx, dword [eax]
mov eax, dword [esp + 0xe4]
push 0x101cf0e0
push 0x101cf078
push ecx
mov ecx, dword [esp + 0xec]
push 0x101cf010
push edi
push edx
mov edx, dword [0x101cf008]
push eax
push ebp
push ecx
push 0xd
push edx
lea eax, [esp + 0x74]
push 0x101751f0
push eax
mov byte [esp + 0xf8], 0xb
call fcn.10001360
mov eax, dword [esp + 0x84]
jmp 0x1004f919
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xa8]
call fcn.100023f0
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb4]
push ecx
mov ecx, dword [esp + 0xb4]
push edx
push ecx
mov ecx, dword [esp + 0xb0]
push 0x10167a1b
push 0x10167a1b
push ebx
mov eax, dword [eax]
lea edx, [esp + 0x58]
push edx
mov edx, dword [0x101cf9c4]
push ecx
push edx
mov edx, dword [0x101cf074]
push 0x101cf9b2
push 0x101cf98a
push 0x101cf962
push 0x101cf94e
lea ecx, [esp + 0x60]
push ecx
mov ecx, dword [esp + 0xe4]
push 0x101cf908
push 0x101cf078
push edx
mov edx, dword [esp + 0xec]
push 0x101cf010
push edi
push eax
push ecx
push ebp
push edx
push 0xd
push 9
lea eax, [esp + 0x74]
push 0x101751f0
push eax
mov byte [esp + 0xf8], 0xc
call fcn.10001360
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
add esp, 0x6c
mov byte [esp + 0x8c], 0xa
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f93e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
push 0
push eax
push 6
call fcn.1004d660
mov eax, dword [esp + 0x20]
add esp, 0xc
add esi, 0x3e8
dec eax
mov dword [esp + 0x14], eax
jne 0x1004f7a0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004f98a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add edi, 0xfffffff0
mov byte [esp + 0x8c], 6
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004f9ac
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
add ebp, 0xfffffff0
mov byte [esp + 0x8c], 5
lea eax, [ebp + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004f9cf
mov ecx, dword [ebp]
mov edx, dword [ecx]
push ebp
call dword [edx + 4]
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop ebp
jg 0x1004f9f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add ebx, 0xfffffff0
mov byte [esp + 0x88], 3
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004fa1b
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
mov byte [esp + 0x88], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004fa44
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov byte [esp + 0x88], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004fa6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov byte [esp + 0x88], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004fa96
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
mov dword [esp + 0x88], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1004fac2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x80]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x74]
pop ebx
call fcn.1010122d
add esp, 0x80
ret