Function at 0x428a00
Capabilities:
Get hostname
Terminate process

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x2a8
push ebx
mov dword [0x4f5e74], 0x1b0
mov dword [0x4f5e78], 0x1c0
mov ecx, dword [eax]
push esi
push edi
mov dword [0x517424], ecx
call fcn.00485220
call fcn.004bf4b0
xor ebx, ebx
push ebx
call fcn.004b6b2f
lea edx, [esp + 0x14]
push edx
push 0x5106a8
mov dword [0x5106a8], eax
call fcn.004807c0
mov esi, dword [esp + 0x3c]
xor eax, eax
cmp esi, ebx
setne al
mov ecx, dword [eax*4 + 0x50e38c]
push ecx
push 0x5111dc
call fcn.00489da6
add esp, 0x14
push 0x1fc
push 0x5109f8
call sub.WSOCK32.dll_gethostname
test eax, eax
jge 0x428a94
push str.mysql
push 0x5109f8
call fcn.00489da6
add esp, 8
push 0x5109f8
push 0x511358
call fcn.00489da6
add esp, 8
push str..pid
push 0x2e
push 0x511358
call fcn.00489c8b
add esp, 8
push eax
call fcn.00489da6
add esp, 8
push 0x50f0d4
push str.3.23.49
call fcn.00489c3e
add esp, 4
push eax
call fcn.00489da6
lea edx, [esp + 0x2c4]
push edx
lea eax, [esp + 0x2c4]
push eax
push 0x4e9a20
push 0x4ec290
call fcn.004856d0
mov ecx, dword [esp + 0x2d4]
push str.TMPDIR
mov dword [0x511164], ecx
call fcn.004b7122
add esp, 0x1c
cmp eax, ebx
mov dword [0x511aa4], eax
jne 0x428b49
push str.TEMP
call fcn.004b7122
add esp, 4
cmp eax, ebx
mov dword [0x511aa4], eax
jne 0x428b49
push 0x4ec27c
call fcn.004b7122
add esp, 4
cmp eax, ebx
mov dword [0x511aa4], eax
je 0x428b4d
cmp byte [eax], bl
jne 0x428b57
mov dword [0x511aa4], 0x4ec278
call fcn.00429e80
mov edx, dword [esp + 0x2bc]
mov eax, dword [esp + 0x2b8]
push edx
push eax
call fcn.00429f30
mov eax, dword [0x511114]
add esp, 8
cmp eax, ebx
jne 0x428b95
cmp dword [0x510ff8], ebx
jne 0x428b95
cmp dword [0x510fd8], ebx
jne 0x428b95
cmp dword [0x511580], ebx
je 0x428bb3
mov dl, byte [0x4ec274]
or ecx, 0xffffffff
xor eax, eax
mov edi, str.3.23.49
repne scasb al, byte es:[edi]
mov ecx, dword [str._log]
dec edi
mov dword [edi], ecx
mov byte [edi + 4], dl
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x511118
call esi
push 0x511148
call esi
push 0x510c84
call esi
push 0x510c30
call esi
push 0x5119c8
call esi
push 0x5111a4
call esi
push 0x510c68
call esi
push 0x510c48
call esi
push 0x510c18
call esi
push 0x510748
call esi
push 0x5109c4
call esi
push 0x517364
call esi
push 0x5116a8
call esi
push 0x51118c
call esi
push 0x511588
call esi
push 0x5173d4
call esi
push 0x51072c
call esi
push 0x510fdc
call esi
push 0x511168
call esi
push 0x510bf8
call esi
push ebx
push 0x510c60
call fcn.00480600
push ebx
push 0x511234
call fcn.00480600
push ebx
push 0x510714
call fcn.00480600
push ebx
push 0x51070c
call fcn.00480600
push ebx
push 0x51737c
call fcn.00480600
push ebx
push 0x511348
call fcn.00480600
push ebx
push 0x51098c
call fcn.00480600
push ebx
push 0x5106fc
call fcn.00480600
add esp, 0x40
call fcn.00429530
push 0x10
push 0x5115a8
call fcn.00487010
add esp, 8
test al, al
mov edi, 1
je 0x428cc6
push edi
call fcn.004282b0
add esp, 4
push 3
call fcn.00487040
mov dword [0x5109b4], eax
mov al, byte [0x4e995c]
add esp, 4
test al, al
js 0x428ced
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push 0x510980
call fcn.00480780
push ebx
call fcn.00486540
mov eax, dword [0x511108]
push eax
push 0x510980
call fcn.004807a0
mov al, byte [0x4e995c]
add esp, 0x10
test al, al
js 0x428d27
push ebx
push 0x510980
call fcn.004807b0
add esp, 8
mov ecx, dword [0x4e995c]
push ecx
call fcn.00410ed0
add esp, 4
call fcn.00401120
call fcn.00446de0
call fcn.00410fd0
mov byte [0x51f8c4], bl
call fcn.00491cc0
call fcn.00480930
mov edx, dword [eax + 0x2c]
cmp dword [0x511aac], ebx
mov dword [0x511560], edx
mov dword [0x510704], edi
je 0x428d8c
push edi
push 0x400
push 0x5106d8
call fcn.00486170
add esp, 0xc
test al, al
je 0x428d8c
push edi
call fcn.004282b0
add esp, 4
mov eax, dword [0x4f5e74]
not eax
and eax, 0x1b6
push eax
call fcn.004c4800
push 0x10
push 0x510778
call fcn.00486440
add esp, 0xc
test eax, eax
je 0x428dba
push edi
call fcn.004282b0
add esp, 4
mov byte [0x511578], 0x2e
mov byte [0x511579], bl
call fcn.00429310
call fcn.0043d5f0
call fcn.00410980
call fcn.004415a0
mov eax, dword [0x5106a8]
mov ecx, eax
shr ecx, 1
push ecx
push eax
push 0x510fc0
call fcn.00431670
add esp, 0xc
call fcn.00483920
mov eax, dword [0x510708]
mov edx, 0x100000
mul edx
mov ecx, bind
cmp edx, ecx
ja 0x428e21
jb 0x428e14
cmp eax, 0xffffffff
jae 0x428e21
mov dword [0x509988], eax
mov dword [0x50998c], edx
jmp 0x428e31
mov dword [0x509988], 0xffffffff
mov dword [0x50998c], ecx
mov eax, dword [0x510fa4]
mov edx, 0x100000
mul edx
cmp edx, ecx
ja 0x428e55
jb 0x428e48
cmp eax, 0xffffffff
jae 0x428e55
mov dword [0x509980], eax
mov dword [0x509984], edx
jmp 0x428e65
mov dword [0x509980], 0xffffffff
mov dword [0x509984], ecx
cmp dword [0x511114], ebx
je 0x428e8b
mov eax, dword [0x5119f0]
push edi
push str..log
push eax
push 0x5109f8
push 0x50fcb0
call fcn.00429600
add esp, 0x14
cmp dword [0x510ff8], ebx
je 0x428eb9
mov ecx, dword [0x5119f4]
push 2
push 0x50f0d4
push ecx
push 0x5109f8
push 0x5101a8
call fcn.00429600
add esp, 0x14
mov dword [0x5117c4], edi
cmp dword [0x511a2c], ebx
je 0x428f18
cmp dword [0x511a70], ebx
jne 0x428f18
mov edx, dword [str.master.info]
push 0x34
push 0x50f0d4
push 0x511578
push edx
lea eax, [esp + 0x44]
push eax
call fcn.00480410
push ebx
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.00483890
add esp, 0x20
test eax, eax
je 0x428f18
push 0x511b28
call fcn.00432d30
add esp, 4
test eax, eax
jne 0x428f18
mov dword [0x511a70], 0x511d90
cmp dword [0x511580], ebx
je 0x428fe0
cmp dword [0x511a2c], ebx
jne 0x428f51
mov esi, dword [0x511a70]
xor eax, eax
cmp esi, ebx
setne al
inc eax
mov dword [0x511a2c], eax
sub eax, 2
jne 0x428f51
push str.Warning:_You_should_set_server_id_to_a_non_0_value_if_master_host_is_set._nThe_server_will_not_act_as_a_slave.
call fcn.004247f0
add esp, 4
cmp dword [0x511580], ebx
je 0x428fe0
cmp dword [0x511a9c], ebx
jne 0x428faa
push 0x1fb
lea eax, [esp + 0x38]
push 0x5109f8
push eax
call fcn.00489d2e
add esp, 0xc
push str._bin
lea ecx, [esp + 0x38]
push 0x2e
push ecx
call fcn.00489c8b
add esp, 8
push eax
call fcn.00489da6
lea edx, [esp + 0x3c]
push 0x10
push edx
call fcn.004800e0
add esp, 0x10
mov dword [0x511a9c], eax
mov eax, dword [0x5119f8]
push eax
mov ecx, 0x50f7b8
call fcn.00422920
mov ecx, dword [0x511a9c]
push 3
push str._bin
push ecx
push 0x5109f8
push 0x50f7b8
call fcn.00429600
add esp, 0x14
mov dword [0x5117c4], edi
cmp dword [0x510fd8], ebx
je 0x429007
mov edx, dword [0x5119fc]
push edi
push str._slow.log
push edx
push 0x5109f8
push 0x50f2c0
call fcn.00429600
add esp, 0x14
cmp dword [0x5119e0], ebx
jne 0x42903a
push 0x50b4e0
push 0x4ec1dc
push str.mysql.err
call fcn.004b75a4
push 0x50b500
push 0x4ec1dc
push str.mysql.err
call fcn.004b75a4
add esp, 0x18
call fcn.00473c00
test eax, eax
je 0x429056
push str.Cant_init_databases
call fcn.004247f0
add esp, 4
push edi
call fcn.004b544d
call fcn.004108b0
cmp dword [0x511a0c], ebx
mov dword [0x511138], ebx
je 0x429072
push edi
call fcn.004a9500
add esp, 4
push 0x5099d8
call fcn.004a93f0
mov eax, dword [0x5119e0]
add esp, 4
cmp eax, ebx
jne 0x42908e
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push ebx
mov dword [fcn.00483190], 0x429590
call fcn.00486540
add esp, 4
test eax, eax
jne 0x4292f3
push ebx
call fcn.00486540
add esp, 4
test eax, eax
jne 0x4292f3
push ebx
call fcn.00486540
add esp, 4
test eax, eax
jne 0x4292f3
call fcn.004957f0
mov eax, dword [0x511140]
push eax
call fcn.00435300
add esp, 4
test eax, eax
je 0x4290f7
push ebx
mov dword [0x510704], ebx
call fcn.00486540
add esp, 4
push edi
call fcn.004b544d
cmp dword [0x511140], ebx
jne 0x429104
call fcn.00438980
cmp dword [0x511a94], ebx
je 0x429111
call fcn.00449db0
cmp dword [0x511a04], ebx
je 0x42913a
push 0x50b4c0
call fcn.00429870
mov esi, eax
call fcn.00485210
xor ecx, ecx
cmp esi, ebx
setne cl
push ecx
call fcn.004282b0
add esp, 8
mov eax, dword [0x510fb8]
cmp eax, ebx
je 0x42915e
push eax
call fcn.00429990
add esp, 4
test eax, eax
je 0x42915e
call fcn.00485210
push edi
call fcn.004282b0
add esp, 4
push ebx
call fcn.00486540
add esp, 4
push str.MySqlShutdown
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push ebx
push 0x4286b0
lea edx, [esp + 0x14]
push 0x510980
push edx
mov dword [0x511334], eax
call fcn.004855e0
add esp, 0x10
test eax, eax
je 0x4291a3
push str.Warning:_Cant_create_thread_to_handle_shutdown_requests
call fcn.004247f0
add esp, 4
mov eax, dword [0x511334]
mov dword [0x510f7c], eax
mov eax, dword [0x511568]
cmp eax, ebx
je 0x4291e4
cmp eax, 0xffffffff
je 0x4291e4
push ebx
push 0x449c00
lea ecx, [esp + 0x14]
push 0x510980
push ecx
call fcn.004855e0
add esp, 0x10
test eax, eax
je 0x4291e4
push str.Warning:_Cant_create_thread_to_manage_maintenance
call fcn.004247f0
add esp, 4
cmp dword [0x511a70], ebx
je 0x429231
cmp dword [0x5119ec], ebx
jne 0x429224
push ebx
push 0x4338e0
lea edx, [esp + 0x14]
push 0x510980
push edx
call fcn.004855e0
add esp, 0x10
test eax, eax
je 0x42921c
push str.Warning:_Cant_create_thread_to_handle_slave
call fcn.004247f0
jmp 0x42922e
cmp dword [0x5119ec], ebx
je 0x429231
push 0x511b28
call fcn.00432d30
add esp, 4
mov eax, dword [0x517424]
mov ecx, dword [0x511184]
mov edx, dword [ecx + 0x130]
push 0x50f0d4
push str.3.23.49
push eax
push edx
call fcn.004b7563
push 0x50b4e0
call fcn.004b6eab
push ebx
call fcn.004299d0
add esp, 0x18
push 0x5119c8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x51120c], ebx
jne 0x42929b
lea esp, [esp]
push 0x5119c8
push 0x510c60
call fcn.00480650
mov eax, dword [0x51120c]
add esp, 8
cmp eax, ebx
je 0x429280
push 0x5119c8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x510eb0], ebx
je 0x4292c2
cmp dword [0x5119e4], ebx
je 0x4292c2
mov ecx, 0x510eb0
call fcn.0042c6a0
jmp 0x4292d8
mov eax, dword [0x511334]
cmp eax, ebx
mov dword [0x510f7c], ebx
je 0x4292d8
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x5109b0]
neg eax
sbb eax, eax
and eax, 3
push eax
call fcn.00485330
add esp, 4
push ebx
call fcn.004b544d
push str.Cant_create_thread_keys
call fcn.004247f0
add esp, 4
push edi
call fcn.004b544d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop