Function at 0x462330
Capabilities:
Get hostname
Get session user name

Disassembly:
mov eax, 0x46943d
call fcn.0046897c
mov eax, 0x2c48
call fcn.0043b1f0
and dword [ebp - 0x14], 0
push ebx
push esi
push edi
push 0x3ff
lea eax, [ebp - 0x433]
push 0
push eax
mov byte [ebp - 0x434], 0
call fcn.0043afd0
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
add esp, 0xc
push edi
push 0x47032c
call esi
test eax, eax
je 0x462890
push edi
push str.lang
call esi
test eax, eax
je 0x462890
push edi
push str.btag1
call esi
test eax, eax
jne 0x4623aa
mov eax, dword [ebp + 0x14]
add eax, 0x41c
jmp 0x462898
push edi
push str.btag2
call esi
test eax, eax
jne 0x4623c3
mov eax, dword [ebp + 0x14]
add eax, 0x61c
jmp 0x462898
push edi
push str.btag3
call esi
test eax, eax
jne 0x4623dc
mov eax, dword [ebp + 0x14]
add eax, 0x81c
jmp 0x462898
push edi
push str.btag4
call esi
test eax, eax
jne 0x4623f5
mov eax, dword [ebp + 0x14]
add eax, 0xa1c
jmp 0x462898
push edi
push str.btag5
call esi
test eax, eax
jne 0x46240e
mov eax, dword [ebp + 0x14]
add eax, 0xc1c
jmp 0x462898
push edi
push 0x470358
call esi
test eax, eax
jne 0x462427
mov eax, dword [ebp + 0x14]
add eax, 0x204
jmp 0x462898
push edi
push 0x470360
call esi
test eax, eax
jne 0x46243e
mov eax, dword [ebp + 0x14]
add eax, 4
jmp 0x462898
push edi
push 0x470370
call esi
test eax, eax
jne 0x462457
mov eax, dword [ebp + 0x14]
add eax, 0x1328
jmp 0x462898
push edi
push str.name
call esi
test eax, eax
jne 0x462476
mov eax, dword [ebp + 0x14]
add eax, 0xa6dc
push eax
push 0x470380
jmp 0x46289e
push edi
push str.local_machinename
call esi
test eax, eax
jne 0x46249e
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
jmp 0x462594
push edi
push str.local_username
call esi
test eax, eax
jne 0x4624ca
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [ebp - 0x14]
dec eax
jmp 0x4628ae
push edi
mov ebx, 0x4703a8
push ebx
call esi
test eax, eax
jne 0x46252d
mov eax, dword [ebp + 0x14]
add eax, 0xa6dc
push eax
mov eax, str.SoftwareMGSThumperCasino
call fcn.004017fd
pop ecx
xor esi, esi
mov edi, eax
push esi
push SysReAllocStringLen
mov ecx, edi
lea eax, [ebp - 0x1844]
call fcn.00457d9a
push esi
xor edx, edx
push ebx
inc edx
mov ecx, 0x46eaf4
mov dword [ebp - 4], esi
call fcn.004582b6
push eax
lea eax, [ebp - 0x434]
push 0x470380
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push edi
jmp 0x46258b
push edi
mov ebx, 0x46fba4
push ebx
call esi
test eax, eax
jne 0x46259c
mov eax, dword [ebp + 0x14]
add eax, 0xa6dc
push eax
mov eax, str.SoftwareMGSThumperCasino
call fcn.004017fd
pop ecx
mov esi, eax
push 0
push SysReAllocStringLen
mov ecx, esi
lea eax, [ebp - 0x1844]
call fcn.00457d9a
push ebx
push eax
xor eax, eax
mov dword [ebp - 4], 1
call fcn.00458288
push eax
push 0x46eb18
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
mov dword [ebp - 0x14], eax
call fcn.00436c4e
pop ecx
mov eax, dword [ebp - 0x14]
jmp 0x4628ae
push edi
mov ebx, 0x46fb6c
push ebx
call esi
test eax, eax
je 0x46285d
push edi
push 0x4703b4
call esi
test eax, eax
je 0x46285d
push edi
push str.hddid
call esi
test eax, eax
je 0x462802
push edi
push 0x4703c0
call esi
test eax, eax
je 0x462802
push edi
push str.casinoid
call esi
test eax, eax
je 0x4627f4
push edi
push str.serverid
call esi
test eax, eax
je 0x4627f4
push edi
push str.pcmversion
call esi
test eax, eax
jne 0x462616
mov eax, dword [ebp + 0x14]
add eax, 0xa458
jmp 0x46246b
push edi
push str.PCMGUID
call esi
test eax, eax
jne 0x46262f
mov eax, dword [ebp + 0x14]
add eax, 0xa358
jmp 0x46246b
push edi
push str.RegistryPCMGUID
call esi
test eax, eax
jne 0x462648
mov eax, dword [ebp + 0x14]
add eax, 0xa3d8
jmp 0x46246b
push edi
push str.EmbeddedPCMGUID
call esi
test eax, eax
jne 0x462663
mov eax, dword [0x490f2c]
add eax, 0x101c
jmp 0x462898
push edi
push str.SerialNumber
call esi
test eax, eax
jne 0x46267c
mov eax, dword [ebp + 0x14]
add eax, 0xa4d8
jmp 0x46246b
push edi
push str.RunNumber
call esi
test eax, eax
jne 0x462695
mov eax, dword [ebp + 0x14]
add eax, 0xa558
jmp 0x46246b
push edi
push str.operatorvaultid
call esi
test eax, eax
jne 0x4626ae
mov eax, dword [ebp + 0x14]
add eax, 0x1080a
jmp 0x46246b
push edi
push str.VaultGroup
call esi
test eax, eax
jne 0x4626c7
mov eax, dword [ebp + 0x14]
add eax, 0x11109
jmp 0x46246b
push edi
push str.VaultName
call esi
test eax, eax
jne 0x4626e0
mov eax, dword [ebp + 0x14]
add eax, 0x11208
jmp 0x46246b
push edi
push str.caps
call esi
test eax, eax
jne 0x4626f9
mov eax, dword [ebp + 0x14]
add eax, 0x11307
jmp 0x46246b
push edi
push str.bytesDownloaded
call esi
test eax, eax
jne 0x462739
push 0xffffffffffffffff
push dword [0x490f20]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x46272e
mov esi, dword [0x4908e4]
push dword [0x490f20]
shr esi, 0xa
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
push 0x46eb18
jmp 0x46289e
push edi
push str.percentDownloaded
call esi
test eax, eax
jne 0x462767
push 0xffffffffffffffff
push dword [0x4908dc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x46272e
mov esi, dword [0x490f18]
push dword [0x4908dc]
jmp 0x462728
push edi
push str.PCMHardwareInfo
call esi
test eax, eax
jne 0x4627a7
xor esi, esi
lea ecx, [ebp + 0x14]
mov dword [ebp + 0x14], esi
call fcn.00461210
test eax, eax
je 0x462797
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x14]
call fcn.0045fa09
add esp, 4
mov esi, eax
push dword [ebp + 0x14]
call fcn.00436c4e
pop ecx
mov eax, esi
jmp 0x4628d3
mov eax, dword [ebp + 0x14]
lea ecx, [eax + 0xa6dc]
push ecx
add eax, 0xa7dc
call fcn.004017fd
pop ecx
mov esi, eax
push 0
push SysReAllocStringLen
mov ecx, esi
lea eax, [ebp - 0x2c54]
call fcn.00457d9a
push 0
xor edx, edx
push edi
inc edx
mov ecx, 0x46eaf4
mov dword [ebp - 4], 3
call fcn.004582b6
push eax
push 0x470380
jmp 0x46257a
mov eax, dword [ebp + 0x14]
push dword [eax + 0xa5d8]
jmp 0x46272f
mov byte [ebp - 0x1c], 0
xor eax, eax
lea edi, [ebp - 0x1b]
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea esi, [ebp - 0x1c]
stosb byte es:[edi], al
call fcn.00458393
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
xor eax, eax
mov byte [ebp - 0x30], 0
lea edi, [ebp - 0x2f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
lea ebx, [ebp - 0x30]
movzx eax, byte [ebp + edi - 0x1c]
push eax
push str._2.2X
push ebx
call esi
add esp, 0xc
inc edi
add ebx, 2
cmp edi, 8
jl 0x46282f
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x434]
push 0x470380
push eax
call esi
jmp 0x4628ab
push 0
push SysReAllocStringLen
mov ecx, str.SoftwareMicrosoftMultimedia
lea eax, [ebp - 0x2c54]
call fcn.00457d9a
push 0
xor edx, edx
push ebx
inc edx
mov ecx, 0x46eaf4
mov dword [ebp - 4], 2
call fcn.004582b6
jmp 0x46246b
mov eax, dword [ebp + 0x14]
add eax, 0x1340
push eax
push 0x46fb88
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test eax, eax
je 0x4628d1
cmp byte [ebp - 0x434], 0
je 0x4628d1
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x434]
call fcn.0045fa09
add esp, 4
jmp 0x4628d3
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10