Function at 0x40e5b0
Capabilities:
Get hostname
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x606eab
mov eax, dword fs:[0]
push eax
mov eax, 0x4c2c
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x4c28], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6aae14]
xor eax, esp
push eax
lea eax, [esp + 0x4c40]
mov dword fs:[0], eax
mov esi, dword [esp + 0x4c50]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
push 0x103
lea eax, [esp + 0xc21]
push ebx
push eax
mov dword [esp + 0x28], ebx
mov byte [esp + 0xc28], bl
call fcn.005dfd60
add esp, 0xc
mov dword [esp + 0x14], ebx
cmp esi, ebx
je 0x40efc7
cmp byte [esi], bl
je 0x40efc7
push ebx
push 1
push str.MySMHand
push 1
push ebx
call fcn.00507920
mov dword [esp + 0x1c], eax
cmp eax, ebx
je 0x40e66a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40e66a
lea ecx, [esp + 0x1c]
push ecx
call fcn.004dca10
lea eax, [ebx + 0xb]
jmp 0x40efcc
push 0x103
lea edx, [esp + 0xa19]
push ebx
push edx
mov byte [esp + 0xa20], bl
call fcn.005dfd60
add esp, 0xc
push esi
lea eax, [esp + 0xc20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0xc1c]
push ecx
call fcn.004e24e0
add esp, 4
push str.license.ini
lea edx, [esp + 0xc20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push ebx
push ebx
push ebx
lea eax, [esp + 0xc2c]
push ebx
push eax
call fcn.004e8950
add esp, 0x18
test eax, eax
je 0x40e6e7
lea ecx, [esp + 0x1c]
push ecx
call fcn.004dca10
mov eax, 1
jmp 0x40efcc
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor edi, edi
nop
push edi
lea edx, [esp + 0x133c]
push str.RegKey_u
push edx
xor esi, esi
call fcn.005dfb23
add esp, 0xc
lea eax, [esp + 0xc1c]
push eax
push 0x104
lea ecx, [esp + 0xa1c]
push ecx
push 0x60c81c
lea edx, [esp + 0x1348]
push edx
push str.Registration
call ebp
mov al, byte [esp + 0xa14]
cmp al, bl
je 0x40e741
mov esi, 1
cmp edi, 0xa
jl 0x40e74e
cmp esi, ebx
je 0x40e881
cmp al, bl
je 0x40e877
lea eax, [esp + 0xa14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e760
sub eax, edx
cmp eax, 0x88
jne 0x40e877
push 0x103
lea eax, [esp + 0xf2d]
push ebx
push eax
mov byte [esp + 0xf34], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x103d]
push ebx
push ecx
mov byte [esp + 0x1044], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xd3d]
push ebx
push edx
mov byte [esp + 0xd44], bl
call fcn.005dfd60
push 0x25
lea eax, [esp + 0xa3c]
push eax
lea ecx, [esp + 0xf54]
push ecx
call fcn.005e1e30
push 0x25
lea edx, [esp + 0xa6e]
push edx
lea eax, [esp + 0x1064]
push eax
mov byte [esp + 0xf89], bl
call fcn.005e1e30
push 0x3c
lea ecx, [esp + 0xaa0]
push ecx
lea edx, [esp + 0xd64]
push edx
mov byte [esp + 0x1099], bl
call fcn.005e1e30
add esp, 0x48
lea eax, [esp + 0xf28]
push 0x25
push eax
mov byte [esp + 0xd64], bl
call fcn.004093e0
add esp, 8
test eax, eax
je 0x40e877
lea ecx, [esp + 0x102c]
push 0x25
push ecx
call fcn.004093e0
add esp, 8
test eax, eax
je 0x40e877
lea edx, [esp + 0xd20]
push 0x3c
push edx
call fcn.00409440
add esp, 8
test eax, eax
je 0x40e877
push 1
push 0x2c
lea eax, [esp + 0xd28]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.004e5820
inc edi
cmp edi, 0x64
jl 0x40e6f0
cmp dword [esp + 0x14], ebx
jne 0x40e89b
lea edx, [esp + 0x1c]
push edx
call fcn.004dca10
mov eax, 4
jmp 0x40efcc
push 0x103
lea eax, [esp + 0x915]
push ebx
push eax
mov byte [esp + 0x91c], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0xb29]
push ebx
push ecx
mov byte [esp + 0xb30], bl
call fcn.005dfd60
push 0xfff
lea edx, [esp + 0x1c59]
push ebx
push edx
mov byte [esp + 0x1c60], bl
call fcn.005dfd60
push 0x3ff
lea eax, [esp + 0x1465]
push ebx
push eax
mov byte [esp + 0x146c], bl
call fcn.005dfd60
push 0x103
lea ecx, [esp + 0x1165]
push ebx
push ecx
mov byte [esp + 0x116c], bl
call fcn.005dfd60
push 0x103
lea edx, [esp + 0xe65]
push ebx
push edx
mov byte [esp + 0xe6c], bl
call fcn.005dfd60
add esp, 0x48
push 0xfff
lea eax, [esp + 0x2c41]
push ebx
push eax
mov byte [esp + 0x2c48], bl
call fcn.005dfd60
push 0xfff
lea ecx, [esp + 0x3c4d]
push ebx
push ecx
mov byte [esp + 0x3c54], bl
call fcn.005dfd60
push 0x3ff
lea edx, [esp + 0x1859]
push ebx
push edx
mov byte [esp + 0x1860], bl
call fcn.005dfd60
add esp, 0x24
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x914]
mov esi, 0x104
push ecx
mov dword [esp + 0x30], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x40e9b9
push ebx
lea edx, [esp + 0x914]
push edx
call fcn.004dc7e0
lea eax, [esp + 0xb18]
push eax
call fcn.0042e660
lea ecx, [esp + 0x1c40]
push ecx
push 1
push ebx
call fcn.0042e380
lea edx, [esp + 0x144c]
push edx
push ebx
call fcn.0040a740
add esp, 0x18
cmp byte [esp + 0x910], bl
je 0x40efa9
cmp byte [esp + 0xb18], bl
je 0x40efa9
cmp byte [esp + 0x1c3c], bl
je 0x40efa9
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x1134]
push ecx
push str.MacIDCName
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0xe28]
push eax
push str.MacIDCPU
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x2c40]
push edx
push str.MacIDOld
push str.SoftwareMicroWorldeScan_for_Windows
mov esi, 0x1000
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c40]
push ecx
push str.MacIDAct
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], esi
call fcn.004d5770
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x1840]
push eax
push str.MacIDHd
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], 0x400
call fcn.004d5770
cmp byte [esp + 0x1130], bl
je 0x40eb9b
cmp byte [esp + 0xe24], bl
je 0x40eb9b
cmp byte [esp + 0x2c3c], bl
je 0x40eb9b
cmp byte [esp + 0x183c], bl
je 0x40eb9b
lea ecx, [esp + 0x1130]
push ecx
lea edx, [esp + 0x914]
push edx
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x40eb9b
cmp byte [esp + 0xe24], bl
je 0x40eb9b
lea eax, [esp + 0x2c3c]
push eax
lea ecx, [esp + 0x1c40]
push ecx
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x40eb9b
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x3c3c]
push edx
push eax
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x40eb9b
lea ecx, [esp + 0x143c]
push ecx
lea edx, [esp + 0x1840]
push edx
call fcn.005f095a
add esp, 8
test eax, eax
jne 0x40eb9b
mov eax, dword [esp + 0x14]
push eax
call fcn.005e0865
add esp, 4
lea ecx, [esp + 0x1c]
push ecx
call fcn.004dca10
mov eax, 5
jmp 0x40efcc
push 0x2800
call fcn.005e20e4
push 0x2800
mov edi, eax
call fcn.005e20e4
mov esi, eax
push 0x5000
mov dword [esp + 0x38], esi
call fcn.005e20e4
add esp, 0xc
mov ebp, eax
cmp edi, ebx
je 0x40ef71
cmp esi, ebx
je 0x40ef68
cmp ebp, ebx
je 0x40ef68
mov byte [esi], bl
xor edx, edx
mov byte [edi], bl
lea ecx, [esp + 0x34]
mov word [ebp], dx
call fcn.0040afd0
push ebx
push 0x40c9e0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4c50], ebx
call fcn.004087a0
push 0x7d0
push 0x7d0
push 0x7d0
push 0x7d0
push 0x7d0
lea ecx, [esp + 0x48]
call fcn.004090f0
cmp byte [esp + 0x143c], bl
jne 0x40ec5f
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x1c40]
push ecx
lea edx, [esp + 0xb20]
push edx
lea eax, [esp + 0x91c]
push eax
push str._s_s_s_s
push edi
call fcn.005dfb23
add esp, 0x18
jmp 0x40ec92
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x143c]
push ecx
push edx
lea eax, [esp + 0x1c44]
push eax
lea ecx, [esp + 0xb24]
push ecx
lea edx, [esp + 0x920]
push edx
push str._s_s_s_s_s
push edi
call fcn.005dfb23
add esp, 0x1c
cmp dword [0x67b7cc], ebx
je 0x40ecb3
mov eax, edi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40eca0
sub eax, edx
push eax
push esi
push edi
call fcn.004f99d0
jmp 0x40ecbf
push 0xb00b
push esi
push edi
call fcn.004f24a0
add esp, 0xc
cmp dword [0x6acea0], ebx
je 0x40ecd9
push edi
push str._DECRPT__http:__..._strnic_s
push ebx
call fcn.004f0f30
add esp, 0xc
push esi
push str.http:__www.escanav.com_mwscnew_nicupdate.asp_strnic_s
push edi
call fcn.005dfb23
add esp, 0xc
push 0x2800
push ebp
push 0xffffffffffffffff
push edi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [esp + 0x24], ebx
lea ecx, [ecx]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x40edec
cmp dword [0x6acea4], ebx
je 0x40ed30
push str._SendLL__Calling_SendReq...
push ebx
call fcn.004f0f30
mov eax, dword [esp + 0x28]
add esp, 8
push ebx
push str.SendMACIDandCPUIDtoLicServer
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push ebx
push eax
push ebp
lea ecx, [esp + 0x68]
call fcn.0040d6c0
mov eax, dword [esp + 0x20]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [esp + 0x44]
cmp dword [0x6acea4], ebx
je 0x40ed78
mov ecx, dword [esp + 0x48]
push ecx
push esi
push str._SendLL__Finished_SendReq_with__d__LastErr___d_...
push ebx
call fcn.004f0f30
add esp, 0x10
lea edx, [esp + 0x20]
push edx
call fcn.004dca10
lea eax, [esp + 0x34]
push eax
call fcn.00408740
add esp, 4
cmp esi, 0xa
jne 0x40edf5
cmp dword [esp + 0x24], 1
jge 0x40ee0f
mov eax, dword [esp + 0x48]
cmp eax, 0x2ef1
je 0x40edbb
cmp eax, 0x2ee2
je 0x40edbb
cmp eax, 0x2efd
je 0x40edbb
cmp eax, 0x2efe
jne 0x40ee0f
push ebx
push 0x40c9e0
lea ecx, [esp + 0x3c]
call fcn.004087a0
push 0x7d0
push 0x7d0
push 0x7d0
push 0x7d0
push 0x7d0
lea ecx, [esp + 0x48]
call fcn.004090f0
inc dword [esp + 0x24]
jmp 0x40ed00
cmp esi, ebx
jne 0x40ee0f
push 4
push str.SerSent
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c48], 0xffffffff
call fcn.0040b290
push edi
call fcn.005e0865
mov ecx, dword [esp + 0x30]
push ecx
call fcn.005e0865
push ebp
call fcn.005e0865
add esp, 0xc
push esi
push str.MacIdSendStatus
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
push 0x103
lea edx, [esp + 0x1239]
push ebx
push edx
mov byte [esp + 0x1240], bl
call fcn.005dfd60
lea eax, [esp + 0x1240]
push ebx
push eax
call fcn.004f00d0
add esp, 0x14
lea ecx, [esp + 0x1234]
push ecx
push str.MacIdSendTime
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
cmp esi, ebx
jne 0x40ef4d
push ebx
call fcn.005e0ab6
add esp, 4
mov dword [esp + 0x30], edx
lea edx, [esp + 0x910]
push edx
push str.MacIdCName
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
mov edi, eax
call fcn.004e7720
lea eax, [esp + 0xb18]
push eax
push str.MacIdCPU
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
lea ecx, [esp + 0x1c3c]
push ecx
push str.MacIdOld
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
mov edx, dword [esp + 0x14]
push edx
push str.MacIdAct
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
lea eax, [esp + 0x143c]
push eax
push str.MacIDHd
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
push edi
push str.MacIdTd
push str.SoftwareMicroWorldeScan_for_Windows
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f48a0
mov ecx, dword [esp + 0x14]
push ecx
call fcn.005e0865
add esp, 4
lea edx, [esp + 0x1c]
push edx
call fcn.004dca10
mov eax, esi
jmp 0x40efcc
push edi
call fcn.005e0865
add esp, 4
cmp esi, ebx
je 0x40ef7e
push esi
call fcn.005e0865
add esp, 4
cmp ebp, ebx
je 0x40ef8b
push ebp
call fcn.005e0865
add esp, 4
mov eax, dword [esp + 0x14]
push eax
call fcn.005e0865
add esp, 4
lea ecx, [esp + 0x1c]
push ecx
call fcn.004dca10
mov eax, 6
jmp 0x40efcc
mov edx, dword [esp + 0x14]
push edx
call fcn.005e0865
add esp, 4
lea eax, [esp + 0x1c]
push eax
call fcn.004dca10
mov eax, 5
jmp 0x40efcc
mov eax, 2
mov ecx, dword [esp + 0x4c40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c28]
xor ecx, esp
call fcn.005dfbbe
add esp, 0x4c38
ret