Function at 0x43dc34
Capabilities:
Get hostname
Get session user name

Disassembly:
push 0x2e0
mov eax, 0x5a17bc
call fcn.00462cd6
mov bh, dl
mov esi, ecx
mov eax, dword [ebp + 8]
xor ecx, ecx
push 7
mov dword [ebp - 0x2d4], eax
xor eax, eax
pop edx
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x274], edx
mov word [ebp - 0x288], ax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x25c], edx
mov word [ebp - 0x270], ax
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 0x2a4], edx
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x28c], edx
mov word [ebp - 0x2a0], ax
mov byte [ebp - 4], 3
mov dword [ebp - 0x2dc], ecx
lea ecx, [ebp - 0x2ec]
push 0x5f2a30
mov dword [ebp - 0x2d8], edx
mov word [ebp - 0x2ec], ax
call fcn.004096b4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d0]
and dword [ebp - 0x2c0], 0
xor eax, eax
push str.SOFTWAREMicrosoftCryptography
mov dword [ebp - 0x2bc], 7
mov word [ebp - 0x2d0], ax
call fcn.004096b4
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 5
push eax
push 1
lea eax, [ebp - 0x2ec]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea edx, [ebp - 0x2d0]
call fcn.004383e6
lea ecx, [ebp - 0x2d0]
call fcn.0040aa69
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 3
call fcn.0040aa69
cmp dword [ebp - 0x278], 0
je 0x43df8f
lea eax, [ebp - 0x258]
mov dword [ebp - 0x258], 0x10
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x43df8f
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.004096b4
mov bl, 1
test bh, bh
jne 0x43ddd5
lea eax, [ebp - 0x258]
mov dword [ebp - 0x258], 0x101
push eax
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x43ddd3
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x270]
call fcn.004096b4
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x270]
call fcn.0043d7e1
test al, al
je 0x43ddd3
mov dword [ebp - 0x258], 0x14
jmp 0x43dde7
xor bl, bl
mov dword [ebp - 0x258], 0x14
test bl, bl
je 0x43df91
push 0xb0
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00463cc0
pop ecx
lea ecx, [ebp - 0x104]
call fcn.0040e75a
push 8
mov byte [ebp - 4], 6
lea edx, [ebp - 0x288]
pop ebx
cmp dword [ebp - 0x274], ebx
lea ecx, [ebp - 0xf4]
push dword [ebp - 0x278]
cmovae edx, dword [ebp - 0x288]
call fcn.0042d401
cmp dword [ebp - 0x25c], ebx
lea edx, [ebp - 0x270]
push dword [ebp - 0x260]
cmovae edx, dword [ebp - 0x270]
mov ecx, eax
call fcn.0042d401
cmp dword [ebp - 0x2a4], ebx
lea edx, [ebp - 0x2b8]
push dword [ebp - 0x2a8]
cmovae edx, dword [ebp - 0x2b8]
mov ecx, eax
call fcn.0042d401
cmp dword [ebp - 0x28c], ebx
lea edx, [ebp - 0x2a0]
push dword [ebp - 0x290]
cmovae edx, dword [ebp - 0x2a0]
mov ecx, eax
call fcn.0042d401
mov ecx, dword [esi + 0x10]
cmp dword [esi + 0x14], ebx
jb 0x43de9b
mov esi, dword [esi]
push ecx
mov edx, esi
mov ecx, eax
call fcn.0042d401
mov esi, str.SkyDrive
lea edi, [ebp - 0x2c4]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xec]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
call fcn.0040fdf4
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0xec]
call fcn.0040fdf4
cmp dword [ebp - 0x2d8], ebx
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2ec]
cmovae ecx, dword [ebp - 0x2ec]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x2c4]
call 0x43d8a7
lea ecx, [ebp - 0x2ec]
mov esi, eax
call fcn.0040aa69
lea ecx, [ebp - 0x2c]
call fcn.0040aa69
test esi, esi
js 0x43df2e
cmp dword [ebp - 0x258], 0x14
jne 0x43df2e
mov bl, 1
jmp 0x43df30
xor bl, bl
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 3
call fcn.0040d7ed
test bl, bl
je 0x43df91
push 0x10
pop eax
cmp dword [ebp - 0x258], eax
cmovb eax, dword [ebp - 0x258]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.00463e20
push ecx
mov edi, esp
lea esi, [ebp - 0x2c8]
lea ecx, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043db72
mov ecx, dword [ebp - 0x2d4]
push eax
call fcn.004094b8
lea ecx, [ebp - 0x2c]
call fcn.0040aa69
jmp 0x43df91
xor bl, bl
lea ecx, [ebp - 0x2a0]
call fcn.0040aa69
lea ecx, [ebp - 0x2b8]
call fcn.0040aa69
lea ecx, [ebp - 0x270]
call fcn.0040aa69
lea ecx, [ebp - 0x288]
call fcn.0040aa69
mov al, bl
call fcn.00462c80
ret 4