Function at 0x4615e4
Capabilities:
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x467e24
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x182c
call fcn.0043b4d0
and dword [esp + 4], 0
push ebx
push esi
push edi
push 0x3ff
lea eax, [esp + 0x35]
push 0
push eax
mov byte [esp + 0x3c], 0
call fcn.0043b2b0
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
add esp, 0xc
push edi
push 0x46f29c
call esi
test eax, eax
je 0x461a7f
push edi
push str.lang
call esi
test eax, eax
je 0x461a7f
push edi
push str.btag1
call esi
test eax, eax
jne 0x46166d
mov eax, dword [ebp + 0x14]
add eax, 0x21c
jmp 0x461a87
push edi
push str.btag2
call esi
test eax, eax
jne 0x461686
mov eax, dword [ebp + 0x14]
add eax, 0x41c
jmp 0x461a87
push edi
push str.btag3
call esi
test eax, eax
jne 0x46169f
mov eax, dword [ebp + 0x14]
add eax, 0x61c
jmp 0x461a87
push edi
push str.btag4
call esi
test eax, eax
jne 0x4616b8
mov eax, dword [ebp + 0x14]
add eax, 0x81c
jmp 0x461a87
push edi
push str.btag5
call esi
test eax, eax
jne 0x4616d1
mov eax, dword [ebp + 0x14]
add eax, 0xa1c
jmp 0x461a87
push edi
push str.btagAB
call esi
test eax, eax
jne 0x4616e8
mov eax, dword [ebp + 0x14]
add eax, 4
jmp 0x461a87
push edi
push str.region
call esi
test eax, eax
jne 0x461701
mov eax, dword [ebp + 0x14]
add eax, 0x1128
jmp 0x461a87
push edi
push str.name
call esi
test eax, eax
jne 0x461720
mov eax, dword [ebp + 0x14]
add eax, 0x9cdc
push eax
push 0x46f2e0
jmp 0x461a8d
push edi
push str.local_machinename
call esi
test eax, eax
jne 0x461748
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
jmp 0x461812
push edi
push str.local_username
call esi
test eax, eax
jne 0x461775
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [esp + 0x10]
dec eax
jmp 0x461a9b
push edi
mov ebx, 0x46f308
push ebx
call esi
test eax, eax
jne 0x4617c7
mov eax, dword [ebp + 0x14]
add eax, 0x9cdc
push eax
mov eax, str.SoftwareMGSThumperCasino
call fcn.00401969
pop ecx
push 0
push ebx
mov esi, eax
push esi
call fcn.0045fbd4
add esp, 0xc
mov edi, eax
push edi
lea eax, [esp + 0x34]
push 0x46f2e0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push edi
mov dword [esp + 0x14], eax
call fcn.0043759e
pop ecx
jmp 0x46180b
push edi
mov ebx, 0x46eba0
push ebx
call esi
test eax, eax
jne 0x46181b
mov eax, dword [ebp + 0x14]
add eax, 0x9cdc
push eax
mov eax, str.SoftwareMGSThumperCasino
call fcn.00401969
pop ecx
mov esi, eax
push ebx
push esi
xor eax, eax
call fcn.0045fa75
push eax
lea eax, [esp + 0x3c]
push 0x46db1c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov dword [esp + 0x10], eax
push esi
call fcn.0043759e
pop ecx
mov eax, dword [esp + 0x10]
jmp 0x461a9b
push edi
mov ebx, str.userguid
push ebx
call esi
test eax, eax
je 0x461a51
push edi
push 0x46f314
call esi
test eax, eax
je 0x461a51
push edi
push str.hddid
call esi
test eax, eax
je 0x4619f1
push edi
push 0x46f320
call esi
test eax, eax
je 0x4619f1
push edi
push str.casinoid
call esi
test eax, eax
je 0x4619e3
push edi
push str.serverid
call esi
test eax, eax
je 0x4619e3
push edi
push str.pcmversion
call esi
test eax, eax
jne 0x461895
mov eax, dword [ebp + 0x14]
add eax, 0x9a58
jmp 0x461715
push edi
push str.PCMGUID
call esi
test eax, eax
jne 0x4618ae
mov eax, dword [ebp + 0x14]
add eax, 0x9958
jmp 0x461715
push edi
push str.RegistryPCMGUID
call esi
test eax, eax
jne 0x4618c7
mov eax, dword [ebp + 0x14]
add eax, 0x99d8
jmp 0x461715
push edi
push str.EmbeddedPCMGUID
call esi
test eax, eax
jne 0x4618e2
mov eax, dword [0x48dfec]
add eax, 0xe1c
jmp 0x461a87
push edi
push str.SerialNumber
call esi
test eax, eax
jne 0x4618fb
mov eax, dword [ebp + 0x14]
add eax, 0x9ad8
jmp 0x461715
push edi
push str.RunNumber
call esi
test eax, eax
jne 0x461914
mov eax, dword [ebp + 0x14]
add eax, 0x9b58
jmp 0x461715
push edi
push str.bytesDownloaded
call esi
test eax, eax
jne 0x461954
push 0xffffffffffffffff
push dword [0x48dfe0]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x461949
mov esi, dword [0x48d9a4]
push dword [0x48dfe0]
shr esi, 0xa
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
push 0x46db1c
jmp 0x461a8d
push edi
push str.percentDownloaded
call esi
test eax, eax
jne 0x461982
push 0xffffffffffffffff
push dword [0x48d99c]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x461949
mov esi, dword [0x48dfd8]
push dword [0x48d99c]
jmp 0x461943
push edi
push str.PCMHardwareInfo
call esi
test eax, eax
jne 0x4619c6
xor esi, esi
lea eax, [esp + 0x14]
mov dword [esp + 0x14], esi
call fcn.0045fc47
test eax, eax
je 0x4619b5
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
call fcn.0045ec7a
add esp, 4
mov esi, eax
push dword [esp + 0x14]
call fcn.0043759e
pop ecx
mov eax, esi
jmp 0x461abc
mov eax, dword [ebp + 0x14]
lea ecx, [eax + 0x9cdc]
push ecx
add eax, 0x9ddc
call fcn.00401969
pop ecx
push 0
push edi
jmp 0x461799
mov eax, dword [ebp + 0x14]
push dword [eax + 0x9bd8]
jmp 0x46194a
mov byte [esp + 0x14], 0
xor eax, eax
lea edi, [esp + 0x15]
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea esi, [esp + 0x14]
stosb byte es:[edi], al
call fcn.00456e64
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
xor eax, eax
mov byte [esp + 0x1c], 0
lea edi, [esp + 0x1d]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
lea ebx, [esp + 0x1c]
movzx eax, byte [esp + edi + 0x14]
push eax
push str._2.2X
push ebx
call esi
add esp, 0xc
inc edi
add ebx, 2
cmp edi, 8
jl 0x461a24
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x34]
push 0x46f2e0
push eax
call esi
jmp 0x461a98
push SysReAllocStringLen
mov ecx, str.SoftwareMicrosoftMultimedia
lea eax, [esp + 0x434]
call fcn.004569ed
and dword [esp + 0x1844], 0
push ebx
mov ecx, 0x46daf8
call fcn.00456e10
jmp 0x461715
mov eax, dword [ebp + 0x14]
add eax, 0x1140
push eax
push 0x46eba8
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test eax, eax
je 0x461aba
cmp byte [esp + 0x30], 0
je 0x461aba
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x34]
call fcn.0045ec7a
add esp, 4
jmp 0x461abc
xor eax, eax
mov ecx, dword [esp + 0x183c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10