Function at 0x100044e6
Capabilities:
Get session user name

Disassembly:
push 0x40
mov eax, 0x1009d905
call fcn.1009cc24
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], str.SERVER_SOFTWAREFrontPage_DBW
mov dword [ebp - 0x20], str.GATEWAY_INTERFACECGI_1.0
mov dword [ebp - 0x1c], str.SERVER_PROTOCOLHTTP_1.0
mov dword [ebp - 0x18], str.SERVER_NAMElocalhost
mov dword [ebp - 0x14], str.SERVER_PORT0
call dword [sym.imp.fpsrvutl.dll_Ordinal_1756]
and dword [ebp - 4], 0
xor edi, edi
mov esi, dword [sym.imp.fpsrvutl.dll_Ordinal_3454]
mov ebx, dword [sym.imp.fpsrvutl.dll_Ordinal_3409]
push dword [ebp + edi*4 - 0x24]
lea ecx, [ebp - 0x30]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2836]
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0
call ebx
inc edi
cmp edi, 5
jb 0x10004539
lea ecx, [ebp - 0x2c]
call dword [sym.imp.fpsrvutl.dll_Ordinal_4936]
mov ecx, dword [ebp - 0x38]
push 2
pop eax
mov byte [ebp - 4], al
lea eax, [ebp - 0x2c]
push eax
push 0x15
call dword [sym.imp.fpsrvutl.dll_Ordinal_4774]
mov edi, dword [sym.imp.fpsrvutl.dll_Ordinal_5679]
test al, al
je 0x100045ae
lea eax, [ebp - 0x2c]
push eax
push str.CONTENT_LENGTH
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call esi
push 2
pop edx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], dl
call ebx
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
push eax
push 0x16
call dword [sym.imp.fpsrvutl.dll_Ordinal_4774]
test al, al
je 0x100045e5
lea eax, [ebp - 0x2c]
push eax
push str.CONTENT_TYPE
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 4
call esi
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call ebx
mov ecx, dword [ebp - 0x38]
call dword [sym.imp.fpsrvutl.dll_Ordinal_4369]
push eax
push str.SCRIPT_NAME
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 5
call esi
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call ebx
mov eax, dword [ebp - 0x34]
add eax, 0x5c
push eax
push str.FRONTPAGE_DISK_WEB
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 6
call esi
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call ebx
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
push eax
push 6
call dword [sym.imp.fpsrvutl.dll_Ordinal_4774]
test al, al
je 0x1000466d
lea eax, [ebp - 0x2c]
push eax
push str.HTTP_USER_AGENT
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 7
call esi
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call ebx
mov ecx, dword [ebp - 0x34]
add ecx, 0x60
mov eax, dword [ecx]
cmp dword [eax - 4], 0
je 0x1000469c
push ecx
push str.RAW_FILE_WEB
lea eax, [ebp - 0x28]
push eax
call edi
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call esi
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call ebx
and dword [ebp - 0x3c], 0
lea eax, [ebp - 0x3c]
push eax
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
mov dword [ebp - 0x34], ecx
call dword [sym.imp.fpsrvutl.dll_Ordinal_4348]
test eax, eax
je 0x100046d6
mov ecx, dword [ebp - 0x34]
call dword [sym.imp.fpsrvutl.dll_Ordinal_5011]
jmp 0x100046e0
push dword [ebp - 0x34]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
mov edi, eax
lea eax, [ebp - 0x3c]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x1000473b
push str.REMOTE_USER
lea ecx, [ebp - 0x30]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2836]
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call dword [sym.imp.fpsrvutl.dll_Ordinal_150]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2202]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call ebx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
call esi
push 2
pop eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], al
call ebx
push edi
call fcn.1006dd95
mov eax, dword [ebp - 0x44]
xor ebx, ebx
pop ecx
push 4
inc eax
pop ecx
mul ecx
seto bl
neg ebx
or ebx, eax
call dword [sym.imp.fpsrvutl.dll_Ordinal_4348]
test eax, eax
je 0x10004768
mov ecx, ebx
call dword [sym.imp.fpsrvutl.dll_Ordinal_5011]
jmp 0x10004770
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
mov edi, eax
test edi, edi
je 0x100047d1
xor esi, esi
cmp dword [ebp - 0x44], esi
jbe 0x100047cd
push esi
lea ecx, [ebp - 0x4c]
call dword [sym.imp.fpsrvutl.dll_Ordinal_4168]
mov eax, dword [eax]
mov ebx, dword [eax - 4]
inc ebx
call dword [sym.imp.fpsrvutl.dll_Ordinal_4348]
test eax, eax
je 0x100047a1
mov ecx, ebx
call dword [sym.imp.fpsrvutl.dll_Ordinal_5011]
jmp 0x100047a9
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
push esi
lea ecx, [ebp - 0x4c]
mov dword [edi + esi*4], eax
call dword [sym.imp.fpsrvutl.dll_Ordinal_4168]
push 0xffffffffffffffff
push dword [eax]
push ebx
push dword [edi + esi*4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
inc esi
cmp esi, dword [ebp - 0x44]
jb 0x1000477d
and dword [edi + esi*4], 0
lea ecx, [ebp - 0x2c]
call dword [sym.imp.fpsrvutl.dll_Ordinal_3409]
lea ecx, [ebp - 0x4c]
call dword [sym.imp.fpsrvutl.dll_Ordinal_1853]
mov eax, edi
call fcn.1009cbd6
ret 4