Function at 0x7546d69b
Capabilities:
Get hostname
Get session user name

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x254
mov eax, dword [0x75479168]
mov edx, dword [ebp + 0x18]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x1c]
test eax, eax
push esi
mov esi, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x240], 0x101
mov dword [ebp - 0x24c], 0x10
jne 0x7546d6f8
and dword [ebp - 0x22c], eax
jmp 0x7546d700
mov eax, dword [eax]
mov dword [ebp - 0x22c], eax
and word [ebp - 0x228], 0
xor eax, eax
and word [ebp - 0x24], ax
mov ecx, 0x80
lea edi, [ebp - 0x226]
rep stosd dword es:[edi], eax
push 7
pop ecx
lea edi, [ebp - 0x22]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor edi, edi
cmp esi, edi
je 0x7546d9d0
cmp edx, edi
je 0x7546d9d0
cmp dword [esi + 0x34], edi
jne 0x7546d9d0
cmp dword [esi + 0x30], edi
jne 0x7546d9d0
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x7546d770
mov dword [ebp - 0x22c], 0x18fc
jmp 0x7546d8f6
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x7546d7a9
mov dword [ebp - 0x22c], 0x18fd
jmp 0x7546d8f6
call edi
mov edi, eax
and edi, 0xffff
or edi, 0x80070000
jmp 0x7546d994
cmp ebx, edi
jne 0x7546d7c3
cmp dword [ebp - 0x230], edi
jne 0x7546d806
lea eax, [ebp - 0x228]
mov dword [ebp - 0x238], eax
mov ebx, eax
cmp dword [ebp - 0x230], edi
jne 0x7546d7d4
lea eax, [ebp - 0x24]
mov dword [ebp - 0x230], eax
cmp ebx, edi
je 0x7546d806
lea eax, [ebp - 0x228]
push eax
push ebx
call fcn.7547186d
test eax, eax
pop ecx
pop ecx
jne 0x7546d806
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x230]
call fcn.7547186d
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x234], edi
je 0x7546d810
mov dword [ebp - 0x234], 1
mov edi, dword [ebp + 0x10]
test edi, edi
jne 0x7546d82a
mov edi, dword [ebp - 0x234]
neg edi
sbb edi, edi
mov eax, 0x10000
and edi, eax
add edi, eax
test ebx, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
je 0x7546d86a
push dword [ebp - 0x238]
call ebx
lea eax, [eax + eax + 2]
push eax
call fcn.75467434
test eax, eax
mov dword [esi + 0x34], eax
jne 0x7546d85c
mov dword [ebp - 0x22c], 0x1878
jmp 0x7546d98f
push dword [ebp - 0x238]
push eax
call fcn.75471841
pop ecx
pop ecx
push dword [ebp - 0x230]
call ebx
lea eax, [eax + eax + 2]
push eax
call fcn.75467434
xor ebx, ebx
cmp eax, ebx
mov dword [esi + 0x30], eax
je 0x7546d84d
push dword [ebp - 0x230]
push eax
call fcn.75471841
mov eax, dword [ebp - 0x234]
cmp eax, 1
pop ecx
pop ecx
mov dword [esi + 0xd4], eax
mov dword [esi + 0x38], edi
jne 0x7546d969
xor eax, eax
cmp dword [ebp - 0x238], ebx
mov dword [ebp - 0x248], 8
setne al
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x234], ebx
mov edi, eax
lea eax, [ebp - 0x234]
push eax
push dword [ebp - 0x230]
push ebx
push ebx
call fcn.75471e99
test eax, eax
jne 0x7546d90f
mov dword [ebp - 0x22c], 0x1878
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
test eax, eax
jg 0x7546d794
call edi
mov edi, eax
jmp 0x7546d994
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x248]
push eax
push ebx
push dword [ebp - 0x238]
push edi
push dword [ebp - 0x234]
call int.75472dd5
mov edi, eax
cmp edi, ebx
je 0x7546d942
mov dword [ebp - 0x22c], 0x185e
jmp 0x7546d994
mov eax, dword [ebp - 0x244]
dec eax
dec eax
je 0x7546d953
mov edi, 0x8000ffff
jmp 0x7546d994
push 0xc
call fcn.7547182b
cmp eax, ebx
pop ecx
je 0x7546d97f
push esi
mov ecx, eax
call fcn.7546d468
jmp 0x7546d981
push 0xc
call fcn.7547182b
cmp eax, ebx
pop ecx
je 0x7546d97f
push esi
mov ecx, eax
call fcn.7546d383
jmp 0x7546d981
xor eax, eax
mov ecx, dword [ebp - 0x23c]
mov dword [ecx], eax
mov eax, ecx
cmp dword [eax], ebx
jne 0x7546d9ca
mov edi, 0x8007000e
mov eax, dword [esi + 0x30]
test eax, eax
je 0x7546d9a1
push eax
call sym.CRYPTUI.dll_WizardFree
mov eax, dword [esi + 0x34]
test eax, eax
je 0x7546d9ae
push eax
call sym.CRYPTUI.dll_WizardFree
mov eax, dword [ebp - 0x250]
and dword [esi + 0x30], 0
and dword [esi + 0x34], 0
test eax, eax
je 0x7546d9cc
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
jmp 0x7546d9cc
xor edi, edi
mov eax, edi
jmp 0x7546d9d5
mov eax, 0x80070057
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.75431a20
leave
ret 0x18