Function at 0x40111a
Capabilities:
Get hostname
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x44c014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push dword [ebp + 0x10]
xor ebx, ebx
mov dword [ebp - 0x418], eax
push ebx
push eax
call fcn.00404970
add esp, 0xc
mov dword [ebp - 0x41c], ebx
xorps xmm0, xmm0
mov dword [ebp - 0x414], ebx
mov dword [ebp - 0x420], ebx
mov dword [ebp - 0x410], ebx
movlpd qword [ebp - 0x428], xmm0
call fcn.0040d702
xor ecx, ecx
inc ecx
test eax, eax
cmovs eax, ecx
cmp eax, 0xfffffffb
jl 0x401470
mov esi, 0x401
lea eax, [ebp - 0x408]
push esi
push ebx
push eax
call fcn.00404970
add esp, 0xc
lea eax, [ebp - 0x408]
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push eax
xor eax, eax
xor eax, edx
sbb eax, esp
xor eax, esi
xor eax, eax
nop
pop eax
lea eax, [ebp - 0x408]
push 0x442240
push eax
call fcn.0040f6d5
mov ebx, eax
mov dword [ebp - 0x40c], ebx
pop ecx
pop ecx
test ebx, ebx
je 0x401425
push 2
push 0
push ebx
call fcn.0040fe06
lea eax, [ebp - 0x428]
push eax
push ebx
call fcn.0040f3a7
push 2
push 0xfffffffffffffffc
push ebx
call fcn.0040fe06
add esp, 0x20
push edi
mov edi, 0x36a5178a
add edi, eax
xor edi, eax
add edi, eax
nop
pop edi
mov ebx, dword [ebp - 0x40c]
lea eax, [ebp - 0x410]
xor esi, esi
push ebx
inc esi
push esi
push 4
push eax
call fcn.0040f96b
mov eax, dword [ebp - 0x410]
add esp, 0x10
test eax, eax
jle 0x401425
cdq
cmp edx, dword [ebp - 0x424]
jg 0x401425
jl 0x40124d
cmp eax, dword [ebp - 0x428]
ja 0x401425
call fcn.0040d702
test eax, eax
cmovs eax, esi
cmp eax, 0xfffffffb
jl 0x401476
push 0
push dword [ebp - 0x410]
push ebx
call fcn.0040fe06
push ebx
push esi
lea eax, [ebp - 0x414]
push 4
push eax
call fcn.0040f96b
mov eax, dword [ebp + 0x10]
add esp, 0x1c
cmp dword [ebp - 0x414], eax
jg 0x401425
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor eax, eax
inc eax
cmp dword [ebp + 0xc], eax
jne 0x4012c4
push ebx
push dword [ebp - 0x414]
push eax
push dword [ebp - 0x418]
call fcn.0040f96b
add esp, 0x10
push edx
mov edx, 0xa8a29e9c
add edx, esi
xor edx, esi
pop edx
jmp 0x4013cf
push eax
push dword [ebp - 0x414]
push ebx
call fcn.0040fe06
mov eax, dword [ebp - 0x414]
add esp, 0xc
add dword [ebp - 0x410], eax
push eax
xor eax, edx
mov eax, 0x39d67618
sbb eax, eax
pop eax
mov esi, dword [ebp - 0x40c]
lea eax, [ebp - 0x41c]
push esi
push 1
push 4
push eax
call fcn.0040f96b
mov eax, dword [ebp - 0x410]
add esp, 0x10
mov ecx, dword [ebp - 0x41c]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x401425
cdq
cmp edx, dword [ebp - 0x424]
jg 0x401425
jl 0x40133c
cmp eax, dword [ebp - 0x428]
ja 0x401425
cmp ecx, 0x400
jg 0x401425
cmp dword [ebp + 0xc], 2
jne 0x401351
push esi
jmp 0x4013be
push eax
mov eax, 0x20de9f62
or eax, ebp
nop
pop eax
mov ebx, dword [ebp - 0x40c]
push 1
push dword [ebp - 0x41c]
push ebx
call fcn.0040fe06
push ebx
push 1
lea eax, [ebp - 0x420]
push 4
push eax
call fcn.0040f96b
mov eax, dword [ebp - 0x410]
add esp, 0x1c
mov ecx, dword [ebp - 0x420]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x401425
cdq
cmp edx, dword [ebp - 0x424]
jg 0x401425
jl 0x4013b2
cmp eax, dword [ebp - 0x428]
ja 0x401425
cmp ecx, dword [ebp + 0x10]
jg 0x401425
cmp dword [ebp + 0xc], 3
jne 0x4013cf
push ebx
push ecx
push 1
push dword [ebp - 0x418]
call fcn.0040f96b
add esp, 0x10
lea eax, [ebp - 0x40c]
push eax
call fcn.0040250b
cmp dword [ebp + 0xc], 1
pop ecx
jne 0x4013ea
mov eax, dword [ebp - 0x414]
jmp 0x4013fb
cmp dword [ebp + 0xc], 2
mov eax, dword [ebp - 0x420]
cmove eax, dword [ebp - 0x41c]
mov dword [ebp - 0x40c], eax
push ebp
xor ebp, esp
add ebp, eax
add ebp, esp
xor ebp, eax
add ebp, esp
pop ebp
mov esi, dword [ebp - 0x40c]
push esi
push dword [ebp - 0x418]
call section..text
pop ecx
pop ecx
mov eax, esi
jmp 0x401461
lea eax, [ebp - 0x40c]
push eax
call fcn.0040250b
xor eax, eax
inc eax
pop ecx
cmp dword [ebp + 0xc], eax
jne 0x40145f
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x40
push eax
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 0x40c]
jmp 0x401461
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040342f
leave
ret
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call fcn.00402865
int3