Function at 0x42f102
Capabilities:
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x350
mov eax, dword [0x4a95d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, 0x40454c
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x348]
push eax
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x128]
xor ebx, ebx
mov esi, 0x101
push eax
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x348], esi
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
jne 0x42f168
push esi
lea eax, [ebp - 0x128]
push eax
push 0x403ef8
call fcn.0041f22d
push 0x10
pop esi
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x348], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x42f1a1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
push esi
lea eax, [ebp - 0x14]
push eax
push 0x403f08
call fcn.0041f22d
lea eax, [ebp - 0x340]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x403c8c
push 0x4bf590
push 0x403a98
lea eax, [ebp - 0x330]
push 0x104
push eax
call fcn.0045caf7
mov eax, dword [0x4bf810]
add esp, 0x14
cmp dword [eax], ebx
je 0x42f1df
push 0x15
pop edi
jmp 0x42f1ee
push dword [0x4bf798]
call fcn.0041f203
mov edi, eax
add edi, edi
lea eax, [ebp - 0x14]
push eax
call fcn.0042025c
lea esi, [edi + eax]
lea eax, [ebp - 0x128]
push eax
call fcn.0042025c
add eax, 0x1a
add esi, eax
push esi
lea eax, [ebp - 0x344]
push eax
call fcn.0042023c
test eax, eax
je 0x42f3e7
mov edi, dword [ebp - 0x344]
push esi
push edi
lea eax, [ebp - 0x340]
push eax
call fcn.0043a4d0
push edi
call fcn.0042025c
lea ecx, [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x40455c
mov ecx, esi
sub ecx, eax
push 0xffffffffffffffff
push ecx
add eax, edi
push eax
call fcn.0045d4de
add esp, 0x18
push edi
call fcn.0042025c
mov ecx, dword [0x4bf810]
sub esi, eax
add eax, edi
cmp dword [ecx], ebx
je 0x42f288
push dword [ecx + 4]
push dword [ecx]
push 0x404564
push 0xffffffffffffffff
push esi
push eax
call fcn.0045d4de
add esp, 0x18
jmp 0x42f29f
push dword [0x4bf798]
push 0x40456c
push 0xffffffffffffffff
push esi
push eax
call fcn.0045d4de
add esp, 0x14
lea eax, [ebp - 0x330]
push eax
push edi
call fcn.004394ff
push edi
call fcn.0044a645
mov eax, dword [0x4bf7a4]
mov dword [ebp - 0x344], ebx
test eax, eax
je 0x42f2d4
push eax
call fcn.00439c38
mov edi, eax
cmp word [edi], 0x5c
jne 0x42f2d7
add edi, 2
jmp 0x42f2d7
lea edi, [ebp - 0x24]
push dword [0x4bf79c]
call fcn.0041f203
push 0x403cb8
mov esi, eax
call fcn.0041f203
add eax, 2
add eax, esi
mov dword [ebp - 0x350], eax
cmp eax, 0x104
jle 0x42f31c
call fcn.0043714c
test eax, eax
je 0x42f3e7
push 0x404578
call fcn.00439586
jmp 0x42f3e7
push edi
call fcn.0041f203
mov esi, eax
lea eax, [ebp - 0x14]
push eax
call fcn.0042025c
add esi, 0xd
lea ebx, [eax + esi*2]
lea eax, [ebp - 0x128]
push eax
call fcn.0042025c
mov esi, dword [ebp - 0x350]
add ebx, eax
lea eax, [esi + esi]
push eax
lea eax, [ebp - 0x34c]
push eax
call fcn.0042023c
test eax, eax
je 0x42f3e7
push 0x403cb8
push dword [0x4bf79c]
push 0x403a98
push esi
push dword [ebp - 0x34c]
call fcn.0045caf7
add esp, 0x14
push ebx
lea eax, [ebp - 0x344]
push eax
call fcn.0042023c
test eax, eax
je 0x42f3dc
mov esi, dword [ebp - 0x344]
push ebx
push esi
lea eax, [ebp - 0x340]
push eax
call fcn.0043a4d0
push esi
call fcn.0042025c
push edi
lea ecx, [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x4045c0
sub ebx, eax
push 0xffffffffffffffff
add eax, esi
push ebx
push eax
call fcn.0045d4de
add esp, 0x1c
push dword [ebp - 0x34c]
push esi
call fcn.004394ff
push esi
call fcn.0044a645
push dword [ebp - 0x34c]
call fcn.0044a645
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045cd7f
leave
ret