Function at 0x63a500
Capabilities:
Get session user name

Disassembly:
push 0x294
mov eax, 0x7b975d
call fcn.00700ca1
mov dword [ebp - 0x294], ecx
mov edi, dword [ebp + 8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
mov esi, ecx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x2a0], edi
mov dword [ebp - 0x298], eax
xor eax, eax
mov dword [ebp - 0x238], esi
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov dword [ebp - 4], ecx
cmp dword [ebx + 0x10], ecx
jne 0x63a57d
lea eax, [ebp - 0x248]
mov ecx, edi
push eax
call fcn.004c2b5d
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x63a990
lea eax, [eax*2 + 2]
cmp eax, 0x1000
jmp 0x63a952
push 0x208
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.00719250
and dword [ebp - 0x220], 0
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x2a0], 0x104
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0063d1e1
pop ecx
pop ecx
cmp dword [ebp - 0x268], 0
mov byte [ebp - 4], 2
je 0x63a69b
push 0x8cf34c
lea ecx, [ebp - 0x230]
call fcn.004c3996
push 0x806ad0
lea ecx, [ebp - 0x230]
call fcn.004cc701
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
push dword [ebp - 0x268]
cmovae eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x230]
push eax
call fcn.004cc728
push dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x230]
push eax
push ebx
lea eax, [ebp - 0x260]
push eax
call fcn.0063af68
lea ecx, [ebp - 0x248]
cmp ecx, eax
je 0x63a669
mov byte [ebp - 0x29c], 0
push dword [ebp - 0x29c]
push eax
call fcn.004cc546
mov esi, dword [ebp - 0x238]
lea ecx, [ebp - 0x260]
call fcn.004c0931
test esi, esi
je 0x63a69b
lea eax, [ebp - 0x248]
mov ecx, edi
push eax
call fcn.004c2b5d
lea ecx, [ebp - 0x278]
call fcn.004c0931
mov esi, 0x1000
jmp 0x63a8d3
push 0x8cf34c
lea ecx, [ebp - 0x230]
call fcn.004c3996
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
cmp eax, 1
jne 0x63a750
push 0x8cf34c
lea ecx, [ebp - 0x230]
call fcn.004c3996
push 0x806ad0
lea ecx, [ebp - 0x230]
call fcn.004cc701
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.004cc701
push dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x230]
push eax
push ebx
lea eax, [ebp - 0x260]
push eax
call fcn.0063af68
lea ecx, [ebp - 0x248]
cmp ecx, eax
je 0x63a73d
mov byte [ebp - 0x29c], 0
push dword [ebp - 0x29c]
push eax
call fcn.004cc546
mov esi, dword [ebp - 0x238]
lea ecx, [ebp - 0x260]
call fcn.004c0931
test esi, esi
jne 0x63a678
push dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x260]
push 0x8cf34c
push ebx
push eax
call fcn.0063af68
lea ecx, [ebp - 0x248]
cmp ecx, eax
je 0x63a791
mov byte [ebp - 0x29c], 0
push dword [ebp - 0x29c]
push eax
call fcn.004cc546
mov esi, dword [ebp - 0x238]
lea ecx, [ebp - 0x260]
call fcn.004c0931
test esi, esi
jne 0x63a678
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x260]
push esi
push 0x8cf34c
push ebx
push eax
call fcn.0063af68
lea ecx, [ebp - 0x248]
cmp ecx, eax
je 0x63a7e0
mov byte [ebp - 0x29c], 0
push dword [ebp - 0x29c]
push eax
call fcn.004cc546
mov esi, dword [ebp - 0x238]
lea ecx, [ebp - 0x260]
call fcn.004c0931
test esi, esi
jne 0x63a678
and dword [ebp - 0x250], esi
lea ecx, [ebp - 0x260]
xor eax, eax
mov dword [ebp - 0x24c], 7
push 0x804d80
mov word [ebp - 0x260], ax
call fcn.004c097f
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x260]
push esi
push eax
push ebx
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 3
push eax
call fcn.0063af68
lea ecx, [ebp - 0x248]
cmp ecx, eax
je 0x63a858
mov byte [ebp - 0x29c], 0
push dword [ebp - 0x29c]
push eax
call fcn.004cc546
lea ecx, [ebp - 0x290]
call fcn.004c0931
mov eax, dword [ebp - 0x24c]
mov esi, 0x1000
cmp eax, 8
jb 0x63a8ba
mov ecx, dword [ebp - 0x260]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
cmp eax, esi
jb 0x63a8b1
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x298]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea eax, [ebp - 0x248]
mov ecx, edi
push eax
call fcn.004c2b5d
lea ecx, [ebp - 0x278]
call fcn.004c0931
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x63a925
mov ecx, dword [ebp - 0x230]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
cmp eax, esi
jb 0x63a91c
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x298]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x21c], 7
and dword [ebp - 0x220], eax
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x63a990
lea eax, [eax*2 + 2]
cmp eax, esi
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x298], eax
jb 0x63a987
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x298]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov eax, edi
call fcn.00700c4b
ret 0xc