Function at 0x429f57
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45f49f
mov eax, dword fs:[0]
push eax
mov eax, 0x12f8
call fcn.00445f70
mov eax, dword [0x47b570]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
push eax
push str.ami_sExd
lea eax, [ebp - 0xb4]
push 0x50
push eax
mov esi, edx
mov dword [ebp - 0x1300], ecx
call fcn.004311bc
add esp, 0x10
lea eax, [ebp - 0x1304]
push eax
lea eax, [ebp - 0x2bc]
push eax
push 2
mov dword [ebp - 0x1304], 0x104
call dword [sym.imp.Secur32.dll_GetUserNameExW]
push ebx
push esi
push str.bitsadmin__transfer_amijob__download__priority_high__s__s
lea eax, [ebp - 0x12bc]
push 0x800
push eax
call fcn.004311bc
xor eax, eax
xor ecx, ecx
add esp, 0x14
mov dword [ebp - 0x12e0], eax
mov dword [ebp - 0x12dc], eax
mov dword [ebp - 0x12c4], 7
mov dword [ebp - 0x12c8], eax
mov word [ebp - 0x12d8], cx
lea ebx, [ebp - 0x12fc]
mov dword [ebp - 4], eax
call fcn.0042af20
xor ebx, ebx
inc ebx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x12e8], 8
mov ecx, dword [ebp - 0x12fc]
jae 0x42a03c
lea ecx, [ebp - 0x12fc]
test ecx, ecx
je 0x42a04e
lea eax, [ebp - 0x12bc]
push eax
call fcn.0042ae8d
jmp 0x42a050
xor al, al
test al, al
jne 0x42a09f
mov ecx, str.YJjy5xnTzttJ2fj5GdaaygaKPkVx5qPUpjo4FzRh8ND2JE
call fcn.00420467
push eax
call fcn.0041f822
pop ecx
push ebx
xor edi, edi
lea esi, [ebp - 0x12fc]
call fcn.00402342
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x12e0]
push eax
call fcn.00429679
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0042fd59
leave
ret
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x12e0]
push eax
call fcn.004296bf
cmp eax, ebx
jne 0x42a0d6
push ebx
push 0x191c
push 0x1946
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa6uUS2JqPRYv6gjSzs4Gl_78XMOP3E3Du64EvQ
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
pop ecx
jmp 0x42a064
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x12e0]
push eax
call fcn.004298ac
cmp eax, ebx
jne 0x42a0ff
push ebx
push 0x5802
push 0x1228
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa_uIQl5rABpj_71zFi8hPiu_5HcOHwEjZ8uUa2NSPA4GR
jmp 0x42a0c6
lea eax, [ebp - 0x12e0]
call fcn.00429952
cmp eax, ebx
jne 0x42a11b
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa_uIQl5rABpj_71zEi8xTi_L_BZeN3UOd_uUI3o_DVcO7rgS9
push ebx
call fcn.00420467
jmp 0x42a0cd
lea eax, [ebp - 0x12e0]
call fcn.004299ec
cmp eax, ebx
jne 0x42a131
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa_uIQ0oqPUpa76A7Sj9tD2frlXN6A3FKY9egZl4HJBrDP6g_cvcpUj_LoGY3Oil7z
jmp 0x42a113
push dword [ebp - 0x1300]
lea eax, [ebp - 0x12e0]
push edi
push eax
call fcn.00429b0d
cmp eax, ebx
jne 0x42a14f
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa_uIQl5rABpj_71zDnMZBnv75RpfL1yw
jmp 0x42a113
cmp dword [ebp - 0x12e8], 8
mov eax, dword [ebp - 0x12fc]
jae 0x42a164
lea eax, [ebp - 0x12fc]
push 0x46c3f8
push eax
lea eax, [ebp - 0x12e0]
push eax
call fcn.00429dd6
cmp eax, ebx
jne 0x42a18f
push ebx
push 0x2c5
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa6uUS2JqPRYv6gjSzttOnLvvE8CAw0mY_6sd1JrGSZehq1nP5A
call fcn.00420467
jmp 0x42a0cc
lea ebx, [ebp - 0x12e0]
call fcn.00429ccb
xor esi, esi
inc esi
cmp eax, esi
jne 0x42a1bc
push esi
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAa_uIQl5rABor6_RmXmsdD2e_qD9zUjwOBkQ
call fcn.00420467
push eax
call fcn.0041f822
pop ecx
pop ecx
mov ebx, esi
push esi
jmp 0x42a066
push 0x27d6
push 0x6b3b
mov ecx, str.Za36BfkjcdDne7nGfPwUKV_vlGja3dQ5jv7jjYmcFKlvrvKNadxAaq7ugf0p3cB9nP6g_cztxTmvjuD8SI2kqV4qsO0onGVY3RnTwKU
call fcn.00420467
push eax
call fcn.0041f822
add esp, 0xc
xor ebx, ebx
jmp 0x42a1b6