Function at 0x410774
Capabilities:
Get hostname
Get session user name

Disassembly:
mov eax, 0x47416e
call fcn.00473e04
mov eax, 0x2c48
call fcn.00443be0
push ebx
push esi
push edi
xor ebx, ebx
lea eax, [ebp - 0x433]
push 0x3ff
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov byte [ebp - 0x434], bl
call fcn.00443c10
mov edi, dword [ebp + 8]
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push edi
push 0x48258c
call esi
test eax, eax
je 0x410ca6
push edi
push str.lang
call esi
test eax, eax
je 0x410ca6
push edi
push str.btag1
call esi
test eax, eax
jne 0x4107ed
mov eax, dword [ebp + 0x14]
add eax, 0x41c
jmp 0x410cae
push edi
push str.btag2
call esi
test eax, eax
jne 0x410806
mov eax, dword [ebp + 0x14]
add eax, 0x61c
jmp 0x410cae
push edi
push str.btag3
call esi
test eax, eax
jne 0x41081f
mov eax, dword [ebp + 0x14]
add eax, 0x81c
jmp 0x410cae
push edi
push str.btag4
call esi
test eax, eax
jne 0x410838
mov eax, dword [ebp + 0x14]
add eax, 0xa1c
jmp 0x410cae
push edi
push str.btag5
call esi
test eax, eax
jne 0x410851
mov eax, dword [ebp + 0x14]
add eax, 0xc1c
jmp 0x410cae
push edi
push 0x4825b8
call esi
test eax, eax
jne 0x41086a
mov eax, dword [ebp + 0x14]
add eax, 0x204
jmp 0x410cae
push edi
push 0x4825c0
call esi
test eax, eax
jne 0x410881
mov eax, dword [ebp + 0x14]
add eax, 4
jmp 0x410cae
push edi
push 0x4825d0
call esi
test eax, eax
jne 0x41089a
mov eax, dword [ebp + 0x14]
add eax, 0x1328
jmp 0x410cae
push edi
push str.name
call esi
test eax, eax
jne 0x4108b9
mov eax, dword [ebp + 0x14]
add eax, 0xa8de
push eax
push 0x4825e0
jmp 0x410cb4
push edi
push str.local_machinename
call esi
test eax, eax
jne 0x4108e4
mov ebx, dword [ebp + 0x10]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x434]
mov dword [ebp - 0x14], ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 0x14]
jmp 0x410cc7
push edi
push str.local_username
call esi
test eax, eax
jne 0x410910
mov ebx, dword [ebp + 0x10]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x434]
mov dword [ebp - 0x14], ebx
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [ebp - 0x14]
dec eax
jmp 0x410cc7
push edi
push 0x482608
call esi
test eax, eax
jne 0x410980
mov edx, dword [ebp + 0x14]
mov ecx, 0x481b30
lea edx, [edx + 0xa8de]
call fcn.0040da1e
push ebx
mov esi, eax
lea ecx, [ebp - 0x1844]
push SysReAllocString
push esi
call fcn.0041f1f7
push 1
push ebx
push 0x48086e
mov dword [ebp - 4], ebx
push 0x482608
call fcn.0041f528
push eax
push 0x4825e0
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 0x14], eax
push esi
call fcn.0041ed70
mov eax, dword [ebp - 0x14]
pop ecx
jmp 0x410cc4
push edi
push 0x481d70
call esi
test eax, eax
jne 0x4109ce
mov edx, dword [ebp + 0x14]
mov ecx, 0x481b30
lea edx, [edx + 0xa8de]
call fcn.0040da1e
push ebx
mov esi, eax
lea ecx, [ebp - 0x1844]
push SysReAllocString
push esi
call fcn.0041f1f7
push ecx
push ebx
push 0x481d70
mov dword [ebp - 4], 1
call fcn.0041f605
push eax
push 0x48095c
jmp 0x41095e
push edi
push 0x481d38
call esi
test eax, eax
je 0x410c72
push edi
push 0x482614
call esi
test eax, eax
je 0x410c72
push edi
push str.hddid
call esi
test eax, eax
je 0x410c1b
push edi
push 0x482620
call esi
test eax, eax
je 0x410c1b
push edi
push str.casinoid
call esi
test eax, eax
je 0x410c0d
push edi
push str.serverid
call esi
test eax, eax
je 0x410c0d
push edi
push str.pcmversion
call esi
test eax, eax
jne 0x410a47
mov eax, dword [ebp + 0x14]
add eax, 0xa458
jmp 0x4108ae
push edi
push str.PCMGUID
call esi
test eax, eax
jne 0x410a60
mov eax, dword [ebp + 0x14]
add eax, 0xa358
jmp 0x4108ae
push edi
push str.RegistryPCMGUID
call esi
test eax, eax
jne 0x410a79
mov eax, dword [ebp + 0x14]
add eax, 0xa3d8
jmp 0x4108ae
push edi
push str.EmbeddedPCMGUID
call esi
test eax, eax
jne 0x410a94
mov eax, dword [0x4ae264]
add eax, 0x101c
jmp 0x410cae
push edi
push str.SerialNumber
call esi
test eax, eax
jne 0x410aad
mov eax, dword [ebp + 0x14]
add eax, 0xa6da
jmp 0x4108ae
push edi
push str.RunNumber
call esi
test eax, eax
jne 0x410ac6
mov eax, dword [ebp + 0x14]
add eax, 0xa75a
jmp 0x4108ae
push edi
push str.operatorvaultid
call esi
test eax, eax
jne 0x410adf
mov eax, dword [ebp + 0x14]
add eax, 0x10a98
jmp 0x4108ae
push edi
push str.VaultGroup
call esi
test eax, eax
jne 0x410af8
mov eax, dword [ebp + 0x14]
add eax, 0x11397
jmp 0x4108ae
push edi
push str.VaultName
call esi
test eax, eax
jne 0x410b11
mov eax, dword [ebp + 0x14]
add eax, 0x11496
jmp 0x4108ae
push edi
push str.caps
call esi
test eax, eax
jne 0x410b2a
mov eax, dword [ebp + 0x14]
add eax, 0x11595
jmp 0x4108ae
push edi
push str.bytesDownloaded
call esi
test eax, eax
jne 0x410b68
push 0xffffffffffffffff
push dword [0x4aed30]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x410b5d
mov ebx, dword [0x4aed28]
push dword [0x4aed30]
shr ebx, 0xa
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push ebx
push 0x48095c
jmp 0x410cb4
push edi
push str.percentDownloaded
call esi
test eax, eax
jne 0x410b94
push 0xffffffffffffffff
push dword [0x4ae5cc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x410b5d
mov ebx, dword [0x4aed2c]
push dword [0x4ae5cc]
jmp 0x410b57
push edi
push str.PCMHardwareInfo
call esi
test eax, eax
jne 0x410bd0
lea ecx, [ebp + 0x14]
mov dword [ebp + 0x14], ebx
call fcn.0040e192
test eax, eax
je 0x410bc0
push dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
call fcn.004105ae
pop ecx
mov ebx, eax
push dword [ebp + 0x14]
call fcn.0041ed70
pop ecx
mov eax, ebx
jmp 0x410ce8
mov eax, dword [ebp + 0x14]
lea edx, [eax + 0xa8de]
lea ecx, [eax + 0xa9de]
call fcn.0040da1e
push ebx
mov esi, eax
lea ecx, [ebp - 0x2c54]
push SysReAllocString
push esi
call fcn.0041f1f7
push 1
push ebx
push 0x48086e
mov dword [ebp - 4], 3
push edi
jmp 0x410953
mov eax, dword [ebp + 0x14]
push dword [eax + 0xa7da]
jmp 0x410b5e
mov byte [ebp - 0x1c], bl
lea edi, [ebp - 0x1b]
xor eax, eax
lea ecx, [ebp - 0x1c]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.0041f093
mov byte [ebp - 0x30], bl
lea edi, [ebp - 0x2f]
xor eax, eax
lea esi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
movzx eax, byte [ebp + ebx - 0x1c]
push eax
push str._2.2X
push esi
call edi
add esp, 0xc
add esi, 2
inc ebx
cmp ebx, 8
jl 0x410c44
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x434]
push 0x4825e0
push eax
call edi
jmp 0x410cc1
push ebx
push SysReAllocString
push str.SoftwareMicrosoftMultimedia
lea ecx, [ebp - 0x2c54]
call fcn.0041f1f7
push 1
push ebx
push 0x48086e
push 0x481d38
mov dword [ebp - 4], 2
call fcn.0041f528
jmp 0x4108ae
mov eax, dword [ebp + 0x14]
add eax, 0x1340
push eax
push 0x481d54
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ebx, dword [ebp + 0x10]
test eax, eax
je 0x410ce6
cmp byte [ebp - 0x434], 0
je 0x410ce6
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x434]
push ebx
call fcn.004105ae
pop ecx
jmp 0x410ce8
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10