Function at 0x4010d2
Capabilities:
Get hostname
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x44d014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push dword [ebp + 0x10]
xor ebx, ebx
mov dword [ebp - 0x418], eax
push ebx
push eax
call fcn.004044f0
xorps xmm0, xmm0
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x414], ebx
mov dword [ebp - 0x420], ebx
mov dword [ebp - 0x410], ebx
movlpd qword [ebp - 0x428], xmm0
call fcn.0040e3b2
mov esi, 0x401
lea eax, [ebp - 0x408]
push esi
push ebx
push eax
call fcn.004044f0
add esp, 0x18
lea eax, [ebp - 0x408]
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebp
mov ebp, 0x8c40f5ad
sbb ebp, esi
and ebp, edi
and ebp, edi
pop ebp
lea eax, [ebp - 0x408]
push 0x443224
push eax
call fcn.00410385
mov ebx, eax
mov dword [ebp - 0x40c], ebx
pop ecx
pop ecx
test ebx, ebx
je 0x4013ba
push 2
push 0
push ebx
call fcn.00410ab6
lea eax, [ebp - 0x428]
push eax
push ebx
call fcn.00410057
push 2
push 0xfffffffffffffffc
push ebx
call fcn.00410ab6
add esp, 0x20
push eax
xor eax, esp
sbb eax, eax
xor eax, esp
xor eax, eax
sbb eax, esp
xor eax, eax
pop eax
mov ebx, dword [ebp - 0x40c]
lea eax, [ebp - 0x410]
push ebx
push 1
push 4
push eax
call fcn.0041061b
mov eax, dword [ebp - 0x410]
add esp, 0x10
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x4011ef
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
call fcn.0040e3b2
push 0
push dword [ebp - 0x410]
push ebx
call fcn.00410ab6
push ebx
push 1
lea eax, [ebp - 0x414]
push 4
push eax
call fcn.0041061b
mov eax, dword [ebp + 0x10]
add esp, 0x1c
cmp dword [ebp - 0x414], eax
jg 0x4013ba
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp dword [ebp + 0xc], 1
jne 0x401258
push ebx
push dword [ebp - 0x414]
push 1
push dword [ebp - 0x418]
call fcn.0041061b
add esp, 0x10
push edx
add edx, eax
sbb edx, esi
sbb edx, esp
add edx, edx
nop
pop edx
jmp 0x401364
push 1
push dword [ebp - 0x414]
push ebx
call fcn.00410ab6
mov eax, dword [ebp - 0x414]
add esp, 0xc
add dword [ebp - 0x410], eax
push ecx
mov ecx, 0xee4aa786
xor ecx, eax
xor ecx, esi
pop ecx
mov esi, dword [ebp - 0x40c]
lea eax, [ebp - 0x41c]
push esi
push 1
push 4
push eax
call fcn.0041061b
mov eax, dword [ebp - 0x410]
add esp, 0x10
mov ecx, dword [ebp - 0x41c]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x4012d1
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
cmp ecx, 0x400
jg 0x4013ba
cmp dword [ebp + 0xc], 2
jne 0x4012e6
push esi
jmp 0x401353
push ecx
sbb ecx, eax
sbb ecx, esi
add ecx, esp
sbb ecx, edx
pop ecx
mov ebx, dword [ebp - 0x40c]
push 1
push dword [ebp - 0x41c]
push ebx
call fcn.00410ab6
push ebx
push 1
lea eax, [ebp - 0x420]
push 4
push eax
call fcn.0041061b
mov eax, dword [ebp - 0x410]
add esp, 0x1c
mov ecx, dword [ebp - 0x420]
add eax, ecx
mov dword [ebp - 0x410], eax
test eax, eax
jle 0x4013ba
cdq
cmp edx, dword [ebp - 0x424]
jg 0x4013ba
jl 0x401347
cmp eax, dword [ebp - 0x428]
ja 0x4013ba
cmp ecx, dword [ebp + 0x10]
jg 0x4013ba
cmp dword [ebp + 0xc], 3
jne 0x401364
push ebx
push ecx
push 1
push dword [ebp - 0x418]
call fcn.0041061b
add esp, 0x10
lea eax, [ebp - 0x40c]
push eax
call fcn.00402392
cmp dword [ebp + 0xc], 1
pop ecx
jne 0x40137f
mov eax, dword [ebp - 0x414]
jmp 0x401390
cmp dword [ebp + 0xc], 2
mov eax, dword [ebp - 0x420]
cmove eax, dword [ebp - 0x41c]
mov dword [ebp - 0x40c], eax
push edx
mov edx, 0xc536a81d
mov edx, 0xb11880ea
pop edx
mov esi, dword [ebp - 0x40c]
push esi
push dword [ebp - 0x418]
call section..text
pop ecx
pop ecx
mov eax, esi
jmp 0x4013f4
lea eax, [ebp - 0x40c]
push eax
call fcn.00402392
cmp dword [ebp + 0xc], 1
pop ecx
jne 0x4013f2
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x40
push eax
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 0x40c]
jmp 0x4013f4
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00402e7f
leave
ret