Function at 0x46c620
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4933d6
mov eax, dword fs:[0]
push eax
mov eax, 0x1458
call fcn.00474750
push ebx
push esi
push edi
lea edi, [ebp - 0x1464]
mov ecx, 0x516
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x4abc14]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
push str.ami_sExd
push 0x50
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0047724f
add esp, 0x10
mov dword [ebp - 0x2d0], 0x104
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
push 2
call sub.Secur32.dll_GetUserNameExW
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push str.bitsadmin__transfer_amijob__download__priority_high__s__s
push 0x800
lea edx, [ebp - 0x12d8]
push edx
call fcn.0047724f
add esp, 0x14
lea ecx, [ebp - 0x1304]
call fcn.0046af10
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1328]
push eax
call fcn.0046e9f0
add esp, 4
mov byte [ebp - 4], 1
push str.amijob
lea eax, [ebp - 0x12d8]
push eax
lea ecx, [ebp - 0x1328]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x1304]
call fcn.0046e8b0
movzx ecx, al
test ecx, ecx
jne 0x46c76d
push 0x428a
push 0x3e0a
push str.sugni9Nh1P0hx9V3keg6gpZ2l_snl8IlgOg9jJZjneUrxrw
push 0x394d
push 0x754e
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 4
mov dword [ebp - 0x1460], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1460]
jmp 0x46cb55
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x1304]
call fcn.0046b050
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46c7f0
mov eax, dword [ebp - 0x1334]
push eax
push 0x692a
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZGlecgiMIll_srhsJg1OhuidNy1P0vlN0_1Kw27Q
push 0x492e
push 0x2fbd
call fcn.004565f0
add esp, 0x10
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1454], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1454]
jmp 0x46cb55
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x1304]
call fcn.0046b570
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46c878
mov eax, dword [ebp - 0x1334]
push eax
push 0x5251
push 0x634f
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZDleAix8Jq1Ogqg5Z3ke4nlMJ3lf0niNglnecoiIwl0fFE
push 0x15bf
push 0x1214
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1448], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1448]
jmp 0x46cb55
lea ecx, [ebp - 0x1304]
call fcn.0046b720
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46c8f9
mov eax, dword [ebp - 0x1334]
push eax
push 0x2dda
push 0x60a8
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZDleAix8Jq1Ogqg5Z2keo7ld9xjaktldNhkec6jtdph7Nuws4P
push 0x716e
push 0x464b
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x143c], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x143c]
jmp 0x46cb55
lea ecx, [ebp - 0x1304]
call fcn.0046b8e0
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46c97a
mov eax, dword [ebp - 0x1334]
push eax
push 0x6b5e
push 0x72d
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZDleAigtIlgOZuhMRglf0rx9dr1OAglMJkmuorx9lj1MAahsVupw8kd9mkbNuws4P
push 0x5b05
push 0x4b78
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1430], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1430]
jmp 0x46cb55
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
lea ecx, [ebp - 0x1304]
call fcn.0046bbb0
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46c9fe
mov eax, dword [ebp - 0x1334]
push eax
push 0x1ee0
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZDleAix8Jq1Ogqg5ZxhuApgNN3zqlrn7w
push 0x6d91
push 0x107
call fcn.004565f0
add esp, 0x10
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1424], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1424]
jmp 0x46cb55
push 0x495bdc
lea ecx, [ebp - 0x1328]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x1304]
call fcn.0046c290
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46ca86
mov eax, dword [ebp - 0x1334]
push eax
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZGlecgiMIll_srhsJg1P0mgpZhm_4gi9lkkKkvhMJsmd0x5N9_g
push 0xb6a
push 0xc81
call fcn.004565f0
add esp, 0xc
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1418], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1418]
jmp 0x46cb55
lea ecx, [ebp - 0x1304]
call fcn.0046bfb0
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 1
jne 0x46caff
mov eax, dword [ebp - 0x1334]
push eax
push 0x77be
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZDleAix8Jq1PovkdMlgOErx8JkhJ0x5N9_g
push 0x6247
push 0x25c5
call fcn.004565f0
add esp, 0x10
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x140c], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x140c]
jmp 0x46cb55
push 0x65a6
push str.t90vlN1WlErg8NpkcEvidJpkft03fV3keg6gvJqgciiNdhoOg9jJZWgeotgsV21akahsVu1Po7hNVgh_ooktppjak8gtFsh_0rldNh2oM
push 0x35b1
push 0x53d5
call fcn.004565f0
add esp, 0x10
push eax
call fcn.00454e30
add esp, 4
mov dword [ebp - 0x1400], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1328]
call fcn.00403970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1304]
call fcn.0046af70
mov eax, dword [ebp - 0x1400]
push edx
mov ecx, ebp
push eax
lea edx, [0x46cb90]
call fcn.004744f5
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004744c3
add esp, 0x1464
cmp ebp, esp
call fcn.004744d2
mov esp, ebp
pop ebp
ret