Function at 0x406ef0
Capabilities:
Access peb ldr_data
Get hostname
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x43873c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e0
push ebx
push edi
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0xe4]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xe8]
push ecx
mov dword [esp + 0x34], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.00409960
lea edx, [esp + 0xe4]
push 0x104
push edx
call fcn.004098e0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x200]
mov ebx, eax
xor eax, 0x3679
add esp, 8
lea ecx, [esp + 0xc]
mov dword [esp + 8], ebx
mov dword [esp + 0x1f8], eax
call fcn.00406960
xor edi, edi
push 2
lea ecx, [esp + 0xac]
mov dword [esp + 0x1f4], edi
call fcn.004097f0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1f0], 1
call fcn.00408c10
test al, al
lea ecx, [esp + 0xa8]
jne 0x406fb6
xor ebx, 0x76dd
jmp 0x406fcc
call fcn.00408d70
test al, al
jne 0x406ff5
xor ebx, 0x76df
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1f0], 0
call fcn.004094b0
lea ecx, [esp + 0xc]
mov dword [esp + 0x1f0], 0xffffffff
call fcn.00406980
mov ax, bx
jmp 0x40729d
mov ecx, dword [esp + 0x14]
push esi
lea eax, [esp + 0xac]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.004069f0
push 2
lea ecx, [esp + 0x38]
call fcn.004097f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 2
call fcn.00408cc0
test al, al
je 0x407085
lea esp, [esp]
lea ecx, [esp + 0x34]
call fcn.00408d70
test al, al
je 0x40722f
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x34]
push edx
push eax
lea ecx, [esp + 0x18]
call fcn.004069f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 1
call fcn.004094b0
push 2
lea ecx, [esp + 0x38]
call fcn.004097f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 2
call fcn.00408cc0
test al, al
jne 0x407030
cmp word [esp + 0x42], 0x11
jne 0x407202
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x1f8], 1
call fcn.004094b0
cmp dword [esp + 0x1c], edi
mov esi, 0xffff
mov dword [esp + 0x2c], edi
jle 0x40719d
xor ebx, ebx
mov ecx, dword [esp + 0x18]
lea ebp, [ebx + ecx]
push ebp
lea ecx, [esp + 0x78]
call fcn.00408b30
lea esi, [ebp + 0x18]
mov ecx, 8
lea edi, [esp + 0x8c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x38]
mov dword [esp + 0xac], edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x1fc], 3
call fcn.00408fd0
test al, al
je 0x407160
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x88]
xor eax, esi
xor eax, 0x90217791
cmp eax, 0x80000000
mov dword [esp + 0x28], eax
jne 0x407130
mov ecx, dword [esp + 0x200]
push ecx
lea ecx, [esp + 0x78]
call fcn.00409580
test al, al
jne 0x407167
lea ecx, [esp + 0x74]
mov byte [esp + 0x1f8], 1
mov esi, 2
call fcn.004094b0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
inc eax
add ebx, 0x3c
cmp eax, ecx
mov dword [esp + 0x2c], eax
jl 0x4070b8
jmp 0x407199
mov esi, 3
jmp 0x407188
lea edx, [esp + 0x30]
push edx
push 4
push 0
lea ecx, [esp + 0x80]
call fcn.00408f40
neg al
sbb eax, eax
and eax, 0xfffffffd
add eax, 3
mov esi, eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x1f8], 1
call fcn.004094b0
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
xor edi, edi
test eax, eax
jle 0x4071cc
xor ebp, ebp
lea esp, [esp]
mov eax, dword [esp + 0x18]
lea ecx, [eax + ebp]
call fcn.00408e40
mov eax, dword [esp + 0x1c]
inc edi
add ebp, 0x3c
cmp edi, eax
jl 0x4071b0
mov ebx, dword [esp + 0x10]
xor esi, ebx
lea ecx, [esp + 0xb0]
xor esi, 0x76dc
mov byte [esp + 0x1f8], 0
call fcn.004094b0
lea ecx, [esp + 0x14]
mov dword [esp + 0x1f8], 0xffffffff
call fcn.00406980
pop ebp
jmp 0x407299
cmp dword [esp + 0x18], edi
jle 0x407227
xor esi, esi
lea ebx, [ebx]
mov ecx, dword [esp + 0x14]
add ecx, esi
call fcn.00408e40
mov eax, dword [esp + 0x18]
inc edi
add esi, 0x3c
cmp edi, eax
jl 0x407210
xor ebx, 0x8923
jmp 0x40725e
cmp dword [esp + 0x18], edi
jle 0x407258
xor esi, esi
jmp 0x407240
mov edx, dword [esp + 0x14]
lea ecx, [esi + edx]
call fcn.00408e40
mov eax, dword [esp + 0x18]
inc edi
add esi, 0x3c
cmp edi, eax
jl 0x407240
xor ebx, 0x76df
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 1
mov esi, ebx
call fcn.004094b0
lea ecx, [esp + 0xac]
mov byte [esp + 0x1f4], 0
call fcn.004094b0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00406980
mov ax, si
pop esi
mov ecx, dword [esp + 0x1e8]
pop edi
pop ebx
mov dword fs:[0], ecx
add esp, 0x1ec
ret 4