Function at 0x4010d2
Capabilities:
Get hostname
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x44d014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push dword [ebp + 0x10]
xor ebx, ebx
mov dword [ebp - 0x418], eax
push ebx
push eax
call fcn.004044f0
xorps xmm0, xmm0
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x414], ebx
mov dword [ebp - 0x420], ebx
mov dword [ebp - 0x410], ebx
movlpd qword [ebp - 0x428], xmm0
call fcn.0040e362
mov esi, 0x401
lea eax, [ebp - 0x408]
push esi
push ebx
push eax
call fcn.004044f0
add esp, 0x18
lea eax, [ebp - 0x408]
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push eax
mov eax, 0x85df3c9a
mov eax, 0xdf3082d6
nop
pop eax
lea eax, [ebp - 0x408]
push 0x443224
push eax
call fcn.00410335
mov ebx, eax
mov dword [ebp - 0x40c], ebx
pop ecx
pop ecx
test ebx, ebx
je 0x4013ba
push 2
push 0
push ebx
call fcn.00410a66
lea eax, [ebp - 0x428]
push eax
push ebx
call fcn.00410007
push 2
push 0xfffffffffffffffc
push ebx
call fcn.00410a66
add esp, 0x20
push eax
mov eax, 0xae1781ed
mov eax, 0xc22181e3
xor eax, edx
pop eax
mov ebx, dword [ebp - 0x40c]
lea eax, [ebp - 0x410]
push ebx
push 1
push 4
push eax
call fcn.004105cb
mov eax, dword [ebp - 0x410]
add esp, 0x10
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x4011ef
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
call fcn.0040e362
push 0
push dword [ebp - 0x410]
push ebx
call fcn.00410a66
push ebx
push 1
lea eax, [ebp - 0x414]
push 4
push eax
call fcn.004105cb
mov eax, dword [ebp + 0x10]
add esp, 0x1c
cmp dword [ebp - 0x414], eax
jg 0x4013ba
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp dword [ebp + 0xc], 1
jne 0x401258
push ebx
push dword [ebp - 0x414]
push 1
push dword [ebp - 0x418]
call fcn.004105cb
add esp, 0x10
push ebx
mov ebx, 0xd8eb0118
sbb ebx, edx
sbb ebx, edx
pop ebx
jmp 0x401364
push 1
push dword [ebp - 0x414]
push ebx
call fcn.00410a66
mov eax, dword [ebp - 0x414]
add esp, 0xc
add dword [ebp - 0x410], eax
push ebx
mov ebx, 0x1dd5904d
add ebx, edx
add ebx, esi
pop ebx
mov esi, dword [ebp - 0x40c]
lea eax, [ebp - 0x41c]
push esi
push 1
push 4
push eax
call fcn.004105cb
mov eax, dword [ebp - 0x410]
add esp, 0x10
mov ecx, dword [ebp - 0x41c]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x4012d1
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
cmp ecx, 0x400
jg 0x4013ba
cmp dword [ebp + 0xc], 2
jne 0x4012e6
push esi
jmp 0x401353
push ebx
xor ebx, esi
xor ebx, edx
sbb ebx, esi
and ebx, ebx
pop ebx
mov ebx, dword [ebp - 0x40c]
push 1
push dword [ebp - 0x41c]
push ebx
call fcn.00410a66
push ebx
push 1
lea eax, [ebp - 0x420]
push 4
push eax
call fcn.004105cb
mov eax, dword [ebp - 0x410]
add esp, 0x1c
mov ecx, dword [ebp - 0x420]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x401347
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
cmp ecx, dword [ebp + 0x10]
jg 0x4013ba
cmp dword [ebp + 0xc], 3
jne 0x401364
push ebx
push ecx
push 1
push dword [ebp - 0x418]
call fcn.004105cb
add esp, 0x10
lea eax, [ebp - 0x40c]
push eax
call fcn.00402398
cmp dword [ebp + 0xc], 1
pop ecx
jne 0x40137f
mov eax, dword [ebp - 0x414]
jmp 0x401390
cmp dword [ebp + 0xc], 2
mov eax, dword [ebp - 0x420]
cmove eax, dword [ebp - 0x41c]
mov dword [ebp - 0x40c], eax
push eax
add eax, eax
xor eax, esi
add eax, esp
add eax, edx
xor eax, eax
pop eax
mov esi, dword [ebp - 0x40c]
push esi
push dword [ebp - 0x418]
call section..text
pop ecx
pop ecx
mov eax, esi
jmp 0x4013f4
lea eax, [ebp - 0x40c]
push eax
call fcn.00402398
cmp dword [ebp + 0xc], 1
pop ecx
jne 0x4013f2
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x40
push eax
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 0x40c]
jmp 0x4013f4
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00402e85
leave
ret