Function at 0x40b4f0
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, dword [esp + 0x10]
push esi
push edi
mov byte [ebp], 0
mov ecx, dword [0x430940]
xor edi, edi
cmp ecx, edi
je 0x40b540
mov eax, dword [ecx]
cmp eax, edi
je 0x40b531
xor esi, esi
push eax
call fcn.00414ba7
mov eax, dword [0x430940]
add esi, 4
add esp, 4
mov dword [esi + eax - 4], edi
mov ecx, dword [0x430940]
mov eax, dword [esi + ecx]
cmp eax, edi
jne 0x40b50f
push ecx
call fcn.00414ba7
add esp, 4
mov dword [0x430940], edi
mov esi, dword [esp + 0x1c]
push ebx
mov ebx, dword [esp + 0x24]
cmp esi, edi
je 0x40b568
cmp ebx, edi
je 0x40b568
mov eax, dword [ebx]
xor ecx, ecx
cmp eax, edi
je 0x40b56a
mov eax, ebx
mov edx, dword [eax + 4]
add eax, 4
inc ecx
cmp edx, edi
jne 0x40b55b
jmp 0x40b56a
xor ecx, ecx
add ecx, 2
push 4
push ecx
call fcn.004150a5
add esp, 8
cmp esi, edi
mov dword [0x430940], eax
je 0x40b5ae
cmp ebx, edi
je 0x40b5ae
mov eax, dword [ebx]
test eax, eax
je 0x40b5ae
xor esi, esi
push eax
call fcn.004151e2
mov ecx, dword [0x430940]
add esp, 4
inc edi
mov dword [esi + ecx], eax
lea esi, [edi*4]
mov eax, dword [esi + ebx]
test eax, eax
jne 0x40b58d
push str.lock_file
call fcn.004151e2
mov edx, dword [0x430940]
push 0x42fd34
mov dword [edx + edi*4], eax
call fcn.00401000
add esp, 8
test eax, eax
pop ebx
jne 0x40b5d7
pop edi
pop esi
pop ebp
ret
push 0x42fd34
call fcn.00402820
add esp, 4
test eax, eax
jne 0x40b5f5
push 0x42fd34
call fcn.0040b7a0
add esp, 4
mov edi, 0x423070
or ecx, 0xffffffff
xor eax, eax
push 0x42fd34
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42fd34
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42fd34
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00402820
add esp, 4
test eax, eax
jne 0x40b66a
push 0x42fd34
call fcn.0040b7a0
add esp, 4
mov al, byte [0x430944]
test al, al
jne 0x40b682
push 0x80
push 0x430944
call sub.WSOCK32.dll_gethostname
mov edi, 0x423070
or ecx, 0xffffffff
xor eax, eax
push 0x42fd34
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42fd34
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x430944
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x42fd34
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00402820
add esp, 4
test eax, eax
jne 0x40b6f8
push 0x42fd34
call fcn.0040b7a0
add esp, 4
call fcn.0040b300
test eax, eax
jne 0x40b705
pop edi
pop esi
pop ebp
ret
call fcn.0040b7b0
call fcn.0040bd00
mov eax, dword [0x43093c]
test eax, eax
jne 0x40b76a
mov edi, dword [esp + 0x14]
test edi, edi
jne 0x40b725
mov edi, 0xfde8
xor esi, esi
test edi, edi
jle 0x40b76a
push esi
push 0x42fd34
push str._s_session__d
push 0x430134
call fcn.004143bf
push 0x430134
call fcn.00402820
add esp, 0x14
test eax, eax
je 0x40b758
inc esi
cmp esi, edi
jl 0x40b72b
jmp 0x40b76a
push 0x430134
call fcn.0040b7a0
add esp, 4
call fcn.0040b410
mov edi, 0x430134
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0040b3c0
pop edi
pop esi
mov eax, 1
pop ebp
ret