Function at 0x406122
Capabilities:
Get hostname
Write file on windows

Disassembly:
push 0x90
mov eax, 0x487714
call fcn.00458e5d
mov eax, dword [ebp + 8]
mov edi, ecx
cmp dword [edi + 0x18], 8
mov dword [ebp - 0x5c], edi
mov esi, edx
mov dword [ebp - 0x58], eax
jb 0x406149
mov eax, dword [edi + 4]
jmp 0x40614c
lea eax, [edi + 4]
xor ebx, ebx
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x54], eax
cmp eax, 0xffffffff
jne 0x4061c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
lea esi, [ebp - 0x80]
mov dword [ebp - 0x54], eax
call fcn.004265b0
pop ecx
mov dword [ebp - 4], ebx
cmp dword [eax + 0x18], 0x10
jb 0x40618d
mov eax, dword [eax + 4]
jmp 0x406190
add eax, 4
push dword [ebp - 0x54]
push eax
push str.DropDDAConfigFile___create__s_failed._error_d_
push 0x4a2
call fcn.0041ef10
push eax
mov ebx, 0x800002
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
add esp, 0x14
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.0040230d
xor eax, eax
jmp 0x40637a
xor eax, eax
push 7
mov word [ebp - 0x34], ax
pop ecx
lea edi, [ebp - 0x32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x60], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push str._DTAS__r_n
lea ecx, [ebp - 0x50]
call fcn.00401efd
mov edi, str.Host
push edi
mov dword [ebp - 4], 1
call fcn.004506f0
pop ecx
push eax
push edi
lea eax, [ebp - 0x50]
call fcn.00408e97
mov edi, esi
push ebx
lea esi, [ebp - 0x80]
call fcn.004265b0
mov byte [ebp - 4], 2
mov dword [esp], str._r_nApiKey
push eax
call fcn.00407cf4
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x50]
call fcn.00401a02
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.0040230d
mov edi, dword [ebp - 0x58]
push ebx
lea esi, [ebp - 0x80]
call fcn.004265b0
mov byte [ebp - 4], 3
mov dword [esp], str._r_n_Header__r_nX_DTAS_ProtocolVersion1.3_r_nX_DTAS_ProductNameDTASSubmissionTool_r_nX_DTAS_ClientHostname
push eax
call fcn.00407cf4
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x50]
call fcn.00401a02
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.0040230d
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x80]
call fcn.004017d2
push ebx
lea edi, [ebp - 0x80]
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 4
call fcn.004265b0
mov byte [ebp - 4], 5
mov dword [esp], str._r_nX_DTAS_ClientUUIDe8f763c6_8db8_4d08_8bc5_8f41b36be046_r_nX_DTAS_Type_r_nX_DTAS_LastQueryID_r_nX_DTAS_SHA1_r_nX_DTAS_SourceID106_r_nX_DTAS_SourceNameSFC_endpoint_r_nX_DTAS_Archive_SHA1_r_nX_DTAS_Archive_Filename_r_n
push eax
call fcn.00407cf4
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x50]
call fcn.00401a02
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040230d
push ebx
push 1
mov esi, edi
mov byte [ebp - 4], 1
call fcn.004019bb
cmp dword [ebp - 0x38], 0x10
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x64], ebx
jae 0x4062eb
lea eax, [ebp - 0x4c]
push ebx
lea ecx, [ebp - 0x64]
push ecx
push dword [ebp - 0x3c]
push eax
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x406363
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [ebp - 0x5c]
push ebx
lea esi, [ebp - 0x9c]
mov dword [ebp - 0x58], eax
call fcn.004265b0
pop ecx
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 0x10
jb 0x406329
mov eax, dword [eax + 4]
jmp 0x40632c
add eax, 4
push dword [ebp - 0x58]
push eax
push str.DropDDAConfigFile___write__s_failed._error_d_
push 0x4b7
call fcn.0041ef10
push eax
mov ebx, 0x800002
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
add esp, 0x14
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040230d
xor ebx, ebx
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push 1
lea ecx, [ebp - 0x50]
call fcn.0040230d
xor eax, eax
inc eax
call fcn.00458ee0
ret 4