Function at 0x405e80
Capabilities:
Get hostname
Get session user name

Disassembly:
push 0x6c4
mov eax, 0x446631
call fcn.0042c1aa
xor ebx, ebx
xor eax, eax
mov esi, 0x206
mov dword [ebp - 0x630], ebx
push esi
mov word [ebp - 0x62c], ax
lea eax, [ebp - 0x62a]
push ebx
push eax
call fcn.0042d4e0
add esp, 0xc
xor eax, eax
push esi
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
mov edi, 0x104
push eax
mov dword [ebp - 0x644], edi
call fcn.0042d4e0
add esp, 0xc
xor eax, eax
push esi
mov word [ebp - 0x424], ax
lea eax, [ebp - 0x422]
push ebx
push eax
mov dword [ebp - 0x63c], edi
call fcn.0042d4e0
add esp, 0xc
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x62c]
push eax
mov dword [ebp - 0x638], edi
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea ecx, [ebp - 0x63c]
push ecx
xor eax, eax
lea ecx, [ebp - 0x21c]
inc eax
push ecx
push eax
mov dword [ebp - 0x634], eax
call sub.Secur32.dll_GetUserNameExW
test al, al
jne 0x405f5f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x54b
jne 0x405f5f
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x424]
push eax
push 6
mov dword [ebp - 0x634], ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
push ebx
push ebx
lea eax, [ebp - 0x67c]
call fcn.00413bef
lea eax, [ebp - 0x62c]
push eax
lea esi, [ebp - 0x660]
mov dword [ebp - 4], 2
call fcn.0040160a
mov eax, esi
push eax
lea eax, [ebp - 0x698]
push eax
mov byte [ebp - 4], 3
call fcn.004020c8
sub esp, 0x10
mov byte [ebp - 4], 4
mov edx, eax
mov esi, esp
mov dword [ebp - 0x640], esp
call fcn.00412d82
lea eax, [ebp - 0x67c]
push eax
mov edx, str.user
mov byte [ebp - 4], 5
call fcn.00413e8d
mov edi, eax
mov byte [ebp - 4], 4
call fcn.00412fd5
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x698]
call fcn.004017a5
push ebx
push edi
lea esi, [ebp - 0x660]
mov byte [ebp - 4], 2
call fcn.0040189d
cmp dword [ebp - 0x634], ebx
je 0x406037
lea eax, [ebp - 0x21c]
push eax
lea esi, [ebp - 0x698]
call fcn.0040160a
mov eax, esi
push eax
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 6
push eax
mov dword [ebp - 0x630], edi
call fcn.004020c8
pop ecx
pop ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x630], 3
jmp 0x40607c
lea eax, [ebp - 0x424]
push eax
lea esi, [ebp - 0x660]
call fcn.0040160a
mov eax, esi
push eax
lea eax, [ebp - 0x6b4]
mov dword [ebp - 4], 8
push eax
mov dword [ebp - 0x630], 4
call fcn.004020c8
pop ecx
pop ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x630], 0xc
sub esp, 0x18
mov edx, eax
mov esi, esp
mov dword [ebp - 0x640], esp
call fcn.00412d82
lea eax, [ebp - 0x67c]
push eax
mov edx, 0x44b314
mov dword [ebp - 4], 0xa
call fcn.00413e8d
mov edi, eax
mov byte [ebp - 4], 9
call fcn.00412fd5
test byte [ebp - 0x630], 8
je 0x4060cf
and dword [ebp - 0x630], 0xfffffff7
push ebx
push 1
lea ecx, [ebp - 0x6b4]
call fcn.004017a5
test byte [ebp - 0x630], 4
je 0x4060ed
and dword [ebp - 0x630], 0xfffffffb
push ebx
push 1
lea esi, [ebp - 0x660]
call fcn.0040189d
test byte [ebp - 0x630], 2
je 0x40610b
and dword [ebp - 0x630], 0xfffffffd
push ebx
push 1
lea ecx, [ebp - 0x6d0]
call fcn.004017a5
mov dword [ebp - 4], 2
test byte [ebp - 0x630], 1
je 0x406129
push ebx
push 1
lea esi, [ebp - 0x698]
call fcn.0040189d
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x6b4]
call fcn.004142b1
push eax
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0xb
call fcn.004011c2
cmp dword [eax + 0x18], 8
pop ecx
jb 0x406157
mov eax, dword [eax + 4]
jmp 0x40615a
add eax, 4
mov esi, eax
mov ebx, str.adDomainUser
mov edi, str.Softwareprojonepodlp_smpcache_
call fcn.0040ced4
push 0
push 1
lea esi, [ebp - 0x6d0]
call fcn.0040189d
push 0
push 1
lea ecx, [ebp - 0x6b4]
call fcn.004017a5
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
neg edi
sbb edi, edi
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x67c]
neg edi
call fcn.00412f52
mov eax, edi
call fcn.0042c22d
ret