Function at 0x416a2a
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbec
push ebx
push esi
push edi
mov dword [ebp - 0xa5c], 0
push 0x190
push 0
lea eax, [ebp - 0x8c8]
push eax
call fcn.00409d20
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0x554]
push eax
call fcn.00409d20
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.00409d20
add esp, 0xc
mov byte [ebp - 0x738], 0
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x598], 0
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0x64], 0
push 0x40
lea eax, [ebp - 0xa4]
push eax
call fcn.0041e00e
add esp, 8
test eax, eax
jne 0x416ad9
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0041bc8d
add esp, 0xc
test eax, eax
je 0x416ad9
mov byte [ebp - 0x64], 0
movsx eax, byte [ebp - 0x64]
test eax, eax
jne 0x416b0c
push 0x40
lea eax, [ebp - 0x64]
push eax
call fcn.0041d59d
add esp, 8
test eax, eax
je 0x416b0c
push 0x432308
lea eax, [ebp - 0x64]
push eax
call fcn.0040a650
add esp, 8
push 0x432310
mov eax, dword [ebp + 0x10]
push eax
call fcn.0040cc40
add esp, 8
test eax, eax
jne 0x416b39
push 0x432318
lea eax, [ebp - 0xa4]
push eax
call fcn.0040a650
add esp, 8
mov dword [ebp - 0x72c], 0x40
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
cmp eax, 1
jne 0x416ba9
push 0x40
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00419a81
add esp, 0xc
cmp eax, 0xffffffff
jne 0x416b91
push 0x432320
lea eax, [ebp - 0x44]
push eax
call fcn.0040a650
add esp, 8
jmp 0x416ba4
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0040a650
add esp, 8
jmp 0x416bba
push str.NoName
lea eax, [ebp - 0x44]
push eax
call fcn.0040a650
add esp, 8
push 0x432330
mov eax, dword [ebp + 0xc]
and eax, 0xffff
push eax
push 0x432334
lea eax, [ebp - 0x64]
push eax
push 0x432338
lea eax, [ebp - 0xa4]
push eax
push 0x43233c
lea eax, [ebp - 0x44]
push eax
push 0x432340
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x6c]
push eax
push str._d_s_s_s_s_s_s_s_d_s
lea eax, [ebp - 0x234]
push eax
call fcn.0040ab00
add esp, 0x30
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x234]
push eax
push str.findFirstUnit
push 3
push 0x43236c
call fcn.004197fc
add esp, 0x14
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x416c44
mov ax, 0x4a
jmp 0x416ec7
mov eax, dword [ebp - 0x558]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.0040a650
add esp, 8
mov eax, dword [ebp - 0x558]
push eax
call fcn.0040ad9c
add esp, 4
lea eax, [ebp - 0x554]
push eax
call fcn.00419994
add esp, 4
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x416c94
mov ax, 0x4a
jmp 0x416ec7
mov eax, dword [ebp - 0x558]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.0040a650
add esp, 8
mov eax, dword [ebp - 0x558]
push eax
call fcn.0040ad9c
add esp, 4
lea eax, [ebp - 0x8c8]
push eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.00418b9e
add esp, 0xc
mov word [ebp - 4], ax
test dword [ebp - 4], 0xffff
je 0x416cf9
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004170dc
add esp, 8
jmp 0x416ec7
lea eax, [ebp - 0x8c8]
push eax
call fcn.004179a7
add esp, 4
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x416d24
mov ax, 0x42
jmp 0x416ec7
push 0xc
push 0
lea eax, [ebp - 0x738]
push eax
call fcn.00409d20
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0xbec]
push eax
call fcn.00409d20
add esp, 0xc
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0xbec]
push eax
lea eax, [ebp - 0xa58]
push eax
mov eax, dword [ebp - 0x558]
push eax
push 3
push 0x432370
call fcn.004177f3
add esp, 0x18
mov word [ebp - 4], ax
test dword [ebp - 4], 0xffff
je 0x416d92
mov ax, 0x42
jmp 0x416ec7
mov eax, dword [ebp - 0x558]
push eax
call fcn.0040ad9c
add esp, 4
mov word [ebp - 4], 0
push 0x432374
lea eax, [ebp - 0xa58]
push eax
call fcn.0040cc40
add esp, 8
test eax, eax
jne 0x416df1
lea eax, [ebp - 0xbec]
push eax
call fcn.0040a36a
add esp, 4
mov word [ebp - 4], ax
mov ecx, dword [ebp - 4]
and ecx, 0xffff
cmp ecx, 0x46
je 0x416df1
mov ax, word [ebp - 4]
jmp 0x416ec7
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x8c8]
push eax
push 2
push 0x43237c
call fcn.004177f3
add esp, 0x14
test eax, eax
je 0x416e26
mov ax, 0x42
jmp 0x416ec7
lea eax, [ebp - 0x3c4]
push eax
call fcn.0040a36a
add esp, 4
mov ecx, dword [ebp + 8]
mov word [ecx + 0x44], ax
mov ax, word [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov word [ecx + 0x42], ax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00416976
add esp, 8
mov eax, dword [ebp - 4]
and eax, 0xffff
cmp eax, 0x46
je 0x416ebe
mov eax, dword [ebp + 8]
movsx eax, word [eax + 0x5a]
mov dword [ebp - 0xa5c], eax
inc dword [ebp - 0xa5c]
mov eax, dword [ebp - 0xa5c]
mov ecx, dword [ebp + 8]
mov word [ecx + 0x5a], ax
lea eax, [ebp - 0x728]
push eax
call fcn.0040a36a
add esp, 4
mov ecx, dword [ebp - 0xa5c]
mov edx, dword [ebp + 8]
mov word [edx + ecx*2 + 0x46], ax
mov eax, dword [ebp + 8]
add eax, 0x64
push eax
call fcn.0040ab7a
add esp, 4
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 0x78
mov ax, word [ebp - 4]
jmp 0x416ec7
pop edi
pop esi
pop ebx
leave
ret