Function at 0x401b30
Capabilities:
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
cmp dword [ebp + 8], 1
jne 0x401b49
mov eax, dword [0x406a30]
mov dword [ebp - 4], eax
jmp 0x401b52
mov ecx, dword [0x406a34]
mov dword [ebp - 4], ecx
cmp dword [ebp + 8], 1
jne 0x401c46
push 0x40
push 0
lea edx, [ebp - 0x8c]
push edx
call fcn.004017c0
add esp, 0xc
mov dword [ebp - 8], 0x40
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x40
push 0
lea eax, [ebp - 0xcc]
push eax
call fcn.004017c0
add esp, 0xc
mov dword [ebp - 8], 0x40
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x40
push 0
lea ecx, [ebp - 0x10c]
push ecx
call fcn.004017c0
add esp, 0xc
lea edx, [ebp - 0x10c]
push edx
call fcn.00401e50
add esp, 4
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
cmp dword [0x408c90], 1
jne 0x401c27
push str.64_Bit
lea ecx, [ebp - 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x401c36
push str.32_Bit
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x408c60
lea ecx, [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0xa
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.004017c0
add esp, 0xc
lea ecx, [ebp - 0x18]
push ecx
call fcn.00402060
add esp, 4
lea edx, [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
call fcn.004020c0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x408c00
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 4]
add ecx, dword [0x408c3c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
shl edx, 1
push edx
push 8
mov eax, dword [0x408c2c]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x408c88], eax
mov ecx, dword [0x408c88]
push ecx
lea edx, [ebp - 0x4c]
push edx
push 0x40699c
call fcn.00402230
add esp, 0xc
cmp dword [0x408c3c], 0
jbe 0x401d46
mov eax, dword [0x408c8c]
sub eax, dword [0x408c3c]
mov dword [0x408c8c], eax
mov ecx, dword [0x408c88]
push ecx
mov edx, dword [0x408c8c]
push edx
push 0x4069a4
call fcn.00402230
add esp, 0xc
mov eax, dword [0x408c3c]
push eax
push 0
mov ecx, dword [0x408c8c]
push ecx
call fcn.004017c0
add esp, 0xc
mov dword [0x408c3c], 0
push 0x408c00
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp + 8], 1
jne 0x401dbf
mov edx, dword [0x408c88]
push edx
lea eax, [ebp - 0x8c]
push eax
push 0x4069b4
call fcn.00402230
add esp, 0xc
mov ecx, dword [0x408c88]
push ecx
lea edx, [ebp - 0xcc]
push edx
push 0x4069bc
call fcn.00402230
add esp, 0xc
mov eax, dword [0x408c88]
push eax
lea ecx, [ebp - 0x10c]
push ecx
push 0x4069d4
call fcn.00402230
add esp, 0xc
mov edx, dword [0x408c88]
push edx
lea eax, [ebp - 0x24]
push eax
push 0x4069cc
call fcn.00402230
add esp, 0xc
mov ecx, dword [0x408c88]
push ecx
lea edx, [ebp - 0x18]
push edx
push 0x4069ac
call fcn.00402230
add esp, 0xc
mov eax, dword [0x408c88]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
push 0x4069c4
call fcn.00402230
add esp, 0xc
push str.Machines
push 0x408c40
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x408c88]
push edx
push 0x408c40
push 0x4069e4
call fcn.00402230
add esp, 0xc
push 0x4069dc
mov eax, dword [0x408c88]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x408510
mov ecx, dword [0x408c88]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0xc]
push edx
push 0
mov eax, dword [0x408c2c]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esp, ebp
pop ebp
ret