Function at 0x41fb82
Capabilities:
Get session user name

Disassembly:
mov eax, 0x427bf7
call fcn.004268b0
sub esp, 0x534
push esi
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x14], eax
xor esi, esi
cmp eax, esi
mov dword [ebp - 4], esi
je 0x41fbb3
mov ecx, eax
call fcn.00406785
mov dword [ebp - 0x10], eax
jmp 0x41fbb6
mov dword [ebp - 0x10], esi
mov ecx, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
call fcn.004164ee
test eax, eax
jne 0x41fbf0
cmp dword [0x43a680], esi
jne 0x41fbf0
cmp dword [0x43a684], esi
jne 0x41fbe9
push esi
push dword [0x4370b0]
push 0x4382e8
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x41feb1
push ebx
push edi
lea ecx, [ebp - 0x540]
call fcn.0041a740
push dword [0x4370b0]
lea ecx, [ebp - 0x540]
mov dword [ebp - 4], 1
call fcn.0041bc2c
push str.C:DATASCZ_SCwinvncwinvncwinvnc.cpp_:_server_created_ok_n
push esi
push 0x4378c8
call fcn.004053a7
mov edi, 0x43b2e0
xor ebx, ebx
push edi
call sub.MSVCRT.dll_strlen
add esp, 0x10
test eax, eax
jbe 0x41fc5a
lea esi, [ebx + 0x43b2e0]
movsx eax, byte [esi]
push eax
call dword [sym.imp.MSVCRT.dll_tolower]
push edi
mov byte [esi], al
inc ebx
call sub.MSVCRT.dll_strlen
pop ecx
cmp ebx, eax
pop ecx
jb 0x41fc39
xor esi, esi
push edi
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe 0x41fdd1
mov edi, dword [sym.imp.MSVCRT.dll_strncmp]
lea ebx, [esi + 0x43b2e0]
cmp byte [ebx], 0x20
jle 0x41fdbd
push str._password
call sub.MSVCRT.dll_strlen
push eax
push str._password
push ebx
call edi
add esp, 0x10
test eax, eax
jne 0x41fcd8
push str._password
call sub.MSVCRT.dll_strlen
pop ecx
add eax, esi
jmp 0x41fcac
test cl, cl
je 0x41fcb7
inc eax
mov cl, byte [eax + 0x43b2e0]
cmp cl, 0x20
jle 0x41fca7
cmp byte [eax + 0x43b2e0], 0x20
mov esi, eax
jle 0x41fccc
inc esi
cmp byte [esi + 0x43b2e0], 0x20
jg 0x41fcc2
and byte [esi + 0x43b2e0], 0
jmp 0x41fdbd
push str._noregistry
call sub.MSVCRT.dll_strlen
push eax
push str._noregistry
push ebx
call edi
add esp, 0x10
test eax, eax
jne 0x41fcff
push str._noregistry
call sub.MSVCRT.dll_strlen
pop ecx
add esi, eax
mov ebx, str._notrayicon
push ebx
call sub.MSVCRT.dll_strlen
push eax
lea eax, [esi + 0x43b2e0]
push ebx
push eax
call edi
add esp, 0x10
test eax, eax
jne 0x41fd36
push str._noregistry
call sub.MSVCRT.dll_strlen
pop ecx
add esi, eax
push 1
lea ecx, [ebp - 0x540]
call fcn.0041ca52
mov ebx, str._readonly
push ebx
call sub.MSVCRT.dll_strlen
push eax
lea eax, [esi + 0x43b2e0]
push ebx
push eax
call edi
add esp, 0x10
test eax, eax
jne 0x41fd69
push ebx
call sub.MSVCRT.dll_strlen
pop ecx
add esi, eax
push 0
lea ecx, [ebp - 0x540]
call fcn.0041bcdb
mov ebx, str._username
push ebx
call sub.MSVCRT.dll_strlen
push eax
lea eax, [esi + 0x43b2e0]
push ebx
push eax
call edi
add esp, 0x10
test eax, eax
jne 0x41fdbd
push ebx
call sub.MSVCRT.dll_strlen
add esi, eax
pop ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x101
push eax
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x41fdbd
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x540]
push eax
call fcn.0041bc2c
push 0x43b2e0
inc esi
call sub.MSVCRT.dll_strlen
cmp esi, eax
pop ecx
jb 0x41fc6f
push 0x63c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x18], eax
xor edi, edi
mov byte [ebp - 4], 2
cmp eax, edi
je 0x41fdfb
lea ecx, [ebp - 0x540]
push ecx
mov ecx, eax
call fcn.00418891
mov ebx, eax
jmp 0x41fdfd
xor ebx, ebx
cmp ebx, edi
mov byte [ebp - 4], 1
jne 0x41fe1f
push str.C:DATASCZ_SCwinvncwinvncwinvnc.cpp_:_failed_to_create_tray_menu_n
push edi
push 0x4378c8
call fcn.004053a7
add esp, 0xc
push edi
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp dword [ebp + 8], edi
jbe 0x41fe37
cmp word [ebp + 0xc], di
jbe 0x41fe37
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041d487
pop ecx
pop ecx
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x41fe53
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push edi
push edi
lea eax, [ebp - 0x34]
push edi
push eax
call esi
test eax, eax
jne 0x41fe3f
push str.C:DATASCZ_SCwinvncwinvncwinvnc.cpp_:_shutting_down_server_n
push edi
push 0x4378c8
call fcn.004053a7
add esp, 0xc
cmp ebx, edi
je 0x41fe85
mov ecx, ebx
call fcn.00418ba4
push ebx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
cmp dword [ebp - 0x10], edi
pop edi
pop ebx
je 0x41fe9d
mov ecx, dword [ebp - 0x10]
call fcn.004164e0
push dword [ebp - 0x10]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
mov esi, dword [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x540]
call fcn.0041a99b
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
leave
ret