Function at 0x4c9dc0
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4c9dc8
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4ca184
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4d543c]
call fcn.004042b0
mov eax, dword [0x4d5194]
call fcn.004042b0
lea edx, [ebp - 0x24]
mov eax, dword [0x4d5610]
mov eax, dword [eax]
call fcn.0045fc58
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x14]
call fcn.00409c20
mov ebx, 2
mov edx, dword [ebp - 0x14]
mov eax, 0x4ca19c
call fcn.00409bd0
mov esi, eax
lea eax, [ebp - 0x14]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.004047e4
dec ebx
jne 0x4c9e17
push 0x4ca1a8
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, 0x4ca1c0
mov eax, 0x4ca1cc
call fcn.004c923c
push 0x4ca1a8
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, 0x4ca1dc
mov eax, 0x4ca1cc
call fcn.004c923c
lea eax, [ebp - 0x10]
call fcn.004042b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov edx, 0x1e
call fcn.0048630c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov edx, 3
call fcn.0048641c
mov dword [ebp - 0xc], 0x10
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404910
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
call fcn.00404780
push eax
call sub.kernel32.dll_GetComputerNameA
test eax, eax
je 0x4c9ef9
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004047e4
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00409130
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4d543c]
call fcn.00404304
lea eax, [ebp - 0x20]
mov edx, 0x4ca1ec
call fcn.00404348
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
call fcn.00409130
cmp dword [ebp - 0x30], 0
je 0x4c9f3c
mov al, byte [0x4ca210]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, 0x4ca21c
mov eax, dword [ebp - 0x20]
call fcn.0040f0ac
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x20]
call fcn.00404348
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov edx, dword [0x4d56c8]
mov dword [edx], eax
mov eax, dword [0x4d5748]
mov dword [eax], 2
cmp dword [ebp - 0x10], 0
jne 0x4ca056
mov eax, dword [0x4d5194]
mov edx, 0x4ca230
call fcn.00404304
xor edx, edx
push ebp
push 0x4ca032
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0x38]
test al, al
je 0x4c9fa1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea eax, [ebp - 0x38]
mov edx, dword [0x4d5194]
mov edx, dword [edx]
call fcn.00404b98
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.00486390
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea eax, [ebp - 0x10]
mov edx, 0x4ca2c0
call fcn.00404348
mov eax, dword [ebp - 0x14]
push eax
push 0x4ca1a8
push 0
mov ecx, 0x4ca2cc
mov edx, 0x4ca1c0
mov eax, 0x4ca1cc
call fcn.004c9110
mov eax, dword [ebp - 0x14]
push eax
push 0x4ca1a8
push 0
mov ecx, 0x4ca21c
mov edx, 0x4ca1dc
mov eax, 0x4ca1cc
call fcn.004c9110
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ca154
cmp dword [ebp - 0x10], 0
jne 0x4ca154
mov eax, dword [0x4d5194]
mov ecx, dword [ebp - 0x20]
mov edx, 0x4ca2dc
call fcn.004045cc
xor edx, edx
push ebp
push 0x4ca130
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0x38]
test al, al
je 0x4ca0a2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea eax, [ebp - 0x3c]
mov edx, dword [0x4d5194]
mov edx, dword [edx]
call fcn.00404b98
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.00486390
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea eax, [ebp - 0x10]
mov edx, 0x4ca2c0
call fcn.00404348
mov eax, dword [ebp - 0x14]
push eax
push 0x4ca1a8
push 0
mov ecx, 0x4ca368
mov edx, 0x4ca1c0
mov eax, 0x4ca1cc
call fcn.004c9110
mov eax, dword [ebp - 0x14]
push eax
push 0x4ca1a8
push 0
mov ecx, 0x4ca21c
mov edx, 0x4ca1dc
mov eax, 0x4ca1cc
call fcn.004c9110
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ca154
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ca18b
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.004049e8
lea eax, [ebp - 0x34]
mov edx, 0xa
call fcn.004042d4
lea eax, [ebp - 8]
call fcn.004042b0
ret