Function at 0x406b10
Capabilities:
Access peb ldr_data
Get hostname
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4386fc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e0
push ebx
push edi
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0xe4]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xe8]
push ecx
mov dword [esp + 0x34], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.00409960
lea edx, [esp + 0xe4]
push 0x104
push edx
call fcn.004098e0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x200]
mov ebx, eax
xor eax, 0x3679
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x1f8], eax
call fcn.00406960
xor edi, edi
push 2
lea ecx, [esp + 0xac]
mov dword [esp + 0x1f4], edi
call fcn.004097f0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1f0], 1
call fcn.00408c10
test al, al
lea ecx, [esp + 0xa8]
jne 0x406bd6
xor ebx, 0x76dd
jmp 0x406bec
call fcn.00408d70
test al, al
jne 0x406c15
xor ebx, 0x76df
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1f0], 0
call fcn.004094b0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1f0], 0xffffffff
call fcn.00406980
mov ax, bx
jmp 0x406ecc
mov ecx, dword [esp + 0x18]
push esi
lea eax, [esp + 0xac]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.004069f0
push 2
lea ecx, [esp + 0x38]
call fcn.004097f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 2
call fcn.00408cc0
test al, al
je 0x406ca5
lea esp, [esp]
lea ecx, [esp + 0x34]
call fcn.00408d70
test al, al
je 0x406e60
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x34]
push edx
push eax
lea ecx, [esp + 0x1c]
call fcn.004069f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 1
call fcn.004094b0
push 2
lea ecx, [esp + 0x38]
call fcn.004097f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 2
call fcn.00408cc0
test al, al
jne 0x406c50
cmp word [esp + 0x42], 0x11
jne 0x406e32
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x1f8], 1
call fcn.004094b0
cmp dword [esp + 0x20], edi
mov esi, 0xffff
mov dword [esp + 0x10], edi
jle 0x406dce
xor ebx, ebx
mov ecx, dword [esp + 0x1c]
lea ebp, [ebx + ecx]
push ebp
lea ecx, [esp + 0x78]
call fcn.00408b30
lea esi, [ebp + 0x18]
mov ecx, 8
lea edi, [esp + 0x8c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x38]
mov dword [esp + 0xac], edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x1fc], 3
call fcn.00408fd0
test al, al
je 0x406db4
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x88]
xor eax, esi
xor eax, 0x90217791
cmp eax, 0x80000000
mov dword [esp + 0x2c], eax
jne 0x406d54
mov ecx, dword [esp + 0x200]
push ecx
lea ecx, [esp + 0x78]
call fcn.00409580
test al, al
jne 0x406d84
lea ecx, [esp + 0x74]
mov byte [esp + 0x1f8], 1
mov esi, 2
call fcn.004094b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
inc eax
add ebx, 0x3c
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x406cd8
jmp 0x406dca
lea edx, [esp + 0x10]
push edx
push 4
push 0
lea ecx, [esp + 0x80]
call fcn.00408ec0
test al, al
je 0x406db4
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
xor eax, eax
cmp esi, ecx
sete al
dec eax
and eax, 4
mov esi, eax
jmp 0x406db9
mov esi, 3
lea ecx, [esp + 0x74]
mov byte [esp + 0x1f8], 1
call fcn.004094b0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
xor edi, edi
test eax, eax
jle 0x406dfc
xor ebp, ebp
lea ebx, [ebx]
mov edx, dword [esp + 0x1c]
lea ecx, [edx + ebp]
call fcn.00408e40
mov eax, dword [esp + 0x20]
inc edi
add ebp, 0x3c
cmp edi, eax
jl 0x406de0
mov ebx, dword [esp + 0x14]
xor esi, ebx
lea ecx, [esp + 0xb0]
xor esi, 0x76dc
mov byte [esp + 0x1f8], 0
call fcn.004094b0
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f8], 0xffffffff
call fcn.00406980
pop ebp
jmp 0x406ec8
cmp dword [esp + 0x1c], edi
jle 0x406e58
xor esi, esi
lea ebx, [ebx]
mov eax, dword [esp + 0x18]
lea ecx, [esi + eax]
call fcn.00408e40
mov eax, dword [esp + 0x1c]
inc edi
add esi, 0x3c
cmp edi, eax
jl 0x406e40
xor ebx, 0x8923
jmp 0x406e8d
cmp dword [esp + 0x1c], edi
jle 0x406e87
xor esi, esi
jmp 0x406e70
mov ecx, dword [esp + 0x18]
add ecx, esi
call fcn.00408e40
mov eax, dword [esp + 0x1c]
inc edi
add esi, 0x3c
cmp edi, eax
jl 0x406e70
xor ebx, 0x76df
lea ecx, [esp + 0x34]
mov byte [esp + 0x1f4], 1
mov esi, ebx
call fcn.004094b0
lea ecx, [esp + 0xac]
mov byte [esp + 0x1f4], 0
call fcn.004094b0
lea ecx, [esp + 0x14]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00406980
mov ax, si
pop esi
mov ecx, dword [esp + 0x1e8]
pop edi
pop ebx
mov dword fs:[0], ecx
add esp, 0x1ec
ret 4