Function at 0x4022b0
Capabilities:
Get hostname
Get session user name

Disassembly:
sub esp, 0xc1c
mov eax, dword [0x414044]
xor eax, esp
mov dword [esp + 0xc18], eax
push ebp
mov ebp, dword [esp + 0xc24]
push esi
movzx esi, word [0x415b18]
push edi
xor eax, eax
mov edi, ecx
push 0x206
push eax
lea ecx, [esp + 0x1e]
push ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], 0
mov word [esp + 0x20], ax
call fcn.00407050
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x232]
push eax
mov word [esp + 0x234], dx
call fcn.00407050
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [esp + 0x446]
push edx
mov word [esp + 0x448], cx
call fcn.00407050
add esp, 0x24
test ebp, ebp
jne 0x402362
push str.The_parameter_pszInfoBug_is_null
call fcn.00401ae0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
test edi, edi
jne 0x40238d
push str.The_parameter_pulInfoBugLen_is_null
call fcn.00401ae0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
push ecx
push 1
mov dword [esp + 0x18], 0x208
call sub.Secur32.dll_GetUserNameExW
test al, al
jne 0x4023d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.get_full_domain_name_failed__errorcode:_d_n
call fcn.00401ae0
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
lea ecx, [esp + 0x14]
call fcn.00402270
lea edx, [esp + 0x14]
push 0x412468
push edx
call fcn.0040399b
mov edi, eax
add esp, 8
test edi, edi
jne 0x402420
push str.Domain_name_invalid_
call fcn.00401ae0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x220]
push ecx
push 1
mov dword [esp + 0x18], 0x208
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
jne 0x40246f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.get_computer_name_failed__errorcode:_d_n
call fcn.00401ae0
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
xor edx, edx
cmp dx, si
jne 0x40248a
push str.ADWATCHER0
push 0x400
lea eax, [esp + 0x42c]
push eax
jmp 0x40249c
push str.ADWATCHER1
push 0x400
lea ecx, [esp + 0x42c]
push ecx
call fcn.0040340a
add esp, 0xc
push 0x415d78
lea edx, [esp + 0x43e]
push 0x3f5
push edx
call fcn.0040340a
mov eax, 0x415d78
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4024c6
sub eax, edx
sar eax, 1
lea esi, [eax + 0xb]
mov eax, 0x400
push 0x412520
sub eax, esi
push eax
lea ecx, [esp + esi*2 + 0x42c]
push ecx
call fcn.0040340a
inc esi
mov edx, 0x400
push edi
sub edx, esi
push edx
lea eax, [esp + esi*2 + 0x438]
push eax
call fcn.0040340a
mov eax, edi
add esp, 0x18
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x402511
sub eax, edx
sar eax, 1
add esi, eax
mov ecx, 0x400
push 0x412520
sub ecx, esi
push ecx
lea edx, [esp + esi*2 + 0x42c]
push edx
call fcn.0040340a
inc esi
lea eax, [esp + 0x228]
push eax
mov ecx, 0x400
sub ecx, esi
push ecx
lea edx, [esp + esi*2 + 0x438]
push edx
call fcn.0040340a
lea eax, [esp + 0x234]
add esp, 0x18
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x402567
mov edi, dword [esp + 0x10]
mov ecx, dword [edi]
sub eax, edx
sar eax, 1
lea eax, [eax + esi + 1]
cmp ecx, eax
jae 0x4025ab
push str.Size_of_the_computer_info_buffer_too_small
call fcn.00401ae0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xc18]
xor ecx, esp
call fcn.00403084
add esp, 0xc1c
ret
push 0
push 0
push ecx
push ebp
push 0xffffffffffffffff
lea ecx, [esp + 0x438]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, ebp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4025d0
mov ecx, dword [esp + 0xc24]
sub eax, edx
inc eax
mov dword [edi], eax
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 1
call fcn.00403084
add esp, 0xc1c
ret