Function at 0x442170
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0xcc]
push ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
xor eax, eax
push fcn.00442120
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], pe_nt_image_headers32
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x88]
push eax
call sub.advapi32.dll_GetUserNameA
lea eax, [ebp - 0xc0]
call fcn.00403d00
push 0
push 1
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x88]
mov cx, 0
mov edx, 0x7f
call fcn.004095b0
mov ebx, dword [ebp - 0xc4]
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [0x721600]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721600]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
lea eax, [ebp - 0xc0]
mov ecx, ebx
call fcn.00408cc0
mov edx, dword [ebp - 0xc0]
lea ecx, [ebp - 0xac]
mov eax, 0x750d50
call fcn.0042b3e0
lea ecx, [ebp - 0x8c]
lea edx, [ebp - 0xac]
mov eax, 0x750d50
call fcn.0042b350
mov dword [ebp - 0xcc], 5
lea eax, [ebp - 0xcc]
push eax
mov edx, 0x751e08
lea eax, [ebp - 0xbc]
mov ecx, 1
call fcn.0040d060
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [0x721d50]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721d50]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
call fcn.00408bc0
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [str..__fxc]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str..__fxc]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
lea eax, [eax + 4]
call fcn.00408bc0
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [str.P1tzc_pU]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.P1tzc_pU]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
lea eax, [eax + 8]
call fcn.00408bc0
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [str.__tewR]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.__tewR]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
lea eax, [eax + 0xc]
call fcn.00408bc0
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [str.U0a]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.U0a]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xbc]
lea eax, [eax + 0x10]
call fcn.00408bc0
lea eax, [ebp - 0x90]
mov edx, 0
call fcn.00408bc0
mov eax, dword [ebp - 0xbc]
call fcn.0040cf30
mov ebx, eax
mov dword [ebp - 0xb8], 0xffffffff
lea esi, [esi]
nop
mov eax, dword [ebp - 0xb8]
lea eax, [eax + 1]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xb8]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x8c]
call fcn.00409780
test eax, 0xffffffff
je 0x44241a
jmp 0x442430
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x7252c0]
or eax, edx
mov dword [ebp - 0xb4], eax
jmp 0x44243a
cmp ebx, dword [ebp - 0xb8]
jbe 0x44243a
jmp 0x4423e8
cmp dword [ebp - 0xb4], 0
sete byte [ebp - 8]
xor edx, edx
pop eax
add esp, 0xc
mov dword fs:[edx], eax
mov eax, ebp
call fcn.00442120
mov al, byte [ebp - 8]
pop ebx
mov esp, ebp
pop ebp
ret