Function at 0x6cc564
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3c
push 0
push 0
dec ecx
jne 0x6cc56c
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x44]
mov edx, dword [0x6c866c]
call fcn.0040b154
lea eax, [ebp - 0x74]
mov edx, dword [0x6c866c]
call fcn.0040b154
xor eax, eax
push ebp
push 0x6cdbb7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x7733c0]
cmp dword [eax], 6
jge 0x6cc611
lea eax, [ebp - 8]
call fcn.006ce6d4
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
call fcn.00423714
mov edx, dword [ebp - 0xb0]
mov eax, 0x6cdbd4
call fcn.0042bfd4
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040ace8
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 8]
call fcn.006ce370
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 8]
call fcn.0040a174
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.006ce954
mov eax, dword [0x7733c0]
cmp dword [eax], 6
jl 0x6cc67e
lea eax, [ebp - 8]
call fcn.006ce71c
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 8]
call fcn.00423714
mov edx, dword [ebp - 0xb8]
mov eax, 0x6cdbd4
call fcn.0042bfd4
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040ace8
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.006ce370
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 8]
call fcn.0040a174
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.006ce954
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x6cdbec
call fcn.00424dd4
mov edx, eax
inc edx
mov ecx, 0x7fffffff
mov eax, dword [ebp - 8]
call fcn.0040ace8
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00423714
mov edx, dword [ebp - 0xc0]
mov eax, 0x6cdbd4
call fcn.0042bfd4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040ace8
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
call fcn.00423714
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 4]
call fcn.0040a174
mov dl, 1
mov eax, dword [0x5f8248]
call fcn.005fe700
mov ebx, eax
lea edx, [ebp - 0xcc]
mov eax, dword [0x7733c0]
mov eax, dword [eax]
call fcn.004241bc
push dword [ebp - 0xcc]
push 0x6cdbfc
lea edx, [ebp - 0xd0]
mov eax, dword [0x773af0]
mov eax, dword [eax]
call fcn.004241bc
push dword [ebp - 0xd0]
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.0040ac00
mov eax, dword [ebp - 0xc8]
push eax
mov ecx, 0x6cdc0c
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
mov ecx, dword [0x773790]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7d60]
call fcn.005fe230
push eax
mov ecx, 0x6cdc28
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd64c
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xd4]
call fcn.006cbe20
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, 0x6cdc40
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xd8]
call fcn.006cbf68
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, 0x6cdc54
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xdc]
call fcn.006cc438
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, 0x6cdc68
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xe0]
call fcn.006cb9b8
mov eax, dword [ebp - 0xe0]
push eax
mov ecx, 0x6cdc80
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xe4]
call fcn.006cba14
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, 0x6cdc94
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
lea eax, [ebp - 0xe8]
call fcn.006cbdec
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, 0x6cdcac
mov dl, 1
mov eax, dword [0x5f7440]
call fcn.005fd6a0
mov edx, eax
mov eax, ebx
call fcn.005fe940
mov dl, 1
mov eax, dword [0x5f8248]
call fcn.005fe700
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x10]
mov eax, 0x6cdcc4
call fcn.0042dc64
cmp dword [ebp - 0x10], 0
jne 0x6cc8c7
lea edx, [ebp - 0x10]
mov eax, 0x6cdce8
call fcn.0042dc64
mov ecx, dword [0x773d10]
mov ecx, dword [ecx]
mov edx, 0x6cdd10
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov eax, dword [0x773d6c]
cmp byte [eax], 0
jne 0x6cc908
mov ecx, 0x56
mov dl, 1
mov eax, dword [0x5f7d60]
call fcn.005fe230
mov ecx, eax
mov edx, 0x6cdd24
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
jmp 0x6cc928
mov ecx, 0x40
mov dl, 1
mov eax, dword [0x5f7d60]
call fcn.005fe230
mov ecx, eax
mov edx, 0x6cdd24
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
lea eax, [ebp - 0xec]
call fcn.006cb948
mov ecx, dword [ebp - 0xec]
mov edx, 0x6cdd50
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
lea edx, [ebp - 0xf4]
xor eax, eax
call fcn.00406e50
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.00424fbc
mov ecx, dword [ebp - 0xf0]
mov edx, 0x6cdd74
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov ecx, dword [0x773790]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7d60]
call fcn.005fe230
mov ecx, eax
mov edx, 0x6cdd98
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
mov ecx, dword [0x773d90]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7d60]
call fcn.005fe230
mov ecx, eax
mov edx, 0x6cddb4
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
movzx eax, byte [0x6cddd8]
push eax
lea eax, [ebp - 0xf8]
push eax
mov ecx, 0x6cdde8
mov edx, 0x6cdbec
mov eax, dword [ebp - 8]
call fcn.0042c1c4
mov ecx, dword [ebp - 0xf8]
mov edx, 0x6cde00
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
cmp dword [ebp - 0x24], 0
je 0x6cca09
mov ecx, dword [ebp - 0x24]
mov edx, 0x6cde2c
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
jmp 0x6cca1b
mov ecx, 0x6cde5c
mov edx, 0x6cde2c
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
cmp dword [ebp - 0x40], 0
je 0x6cca7f
lea ecx, [ebp - 0x100]
mov edx, 0x6cde6c
mov eax, 0x6cde84
call fcn.006cf174
push dword [ebp - 0x100]
lea ecx, [ebp - 0x104]
mov edx, 0x6cde98
mov eax, 0x6cdeb0
call fcn.006cf174
push dword [ebp - 0x104]
push 0x6cdec4
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.0040ac00
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
jmp 0x6ccacf
lea ecx, [ebp - 0x108]
mov edx, 0x6cdedc
mov eax, 0x6cdef4
call fcn.006cf174
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x10c]
mov edx, 0x6cdf0c
mov eax, 0x6cdf28
call fcn.006cf174
mov edx, dword [ebp - 0x10c]
pop eax
call fcn.0040ab20
mov edx, dword [ebp - 0x108]
mov ecx, 0x6cde5c
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
lea edx, [ebp - 0x110]
mov eax, 0x6cdf30
call fcn.006ce5c4
mov ecx, dword [ebp - 0x110]
mov edx, 0x6cdf44
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov dword [ebp - 0x8c], 0x101
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x8c]
call fcn.0040aaa0
push 0
push 0
call sub.user32.dll_GetWindowLongW
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xc]
call fcn.0040a2cc
push eax
call sub.advapi32.dll_GetUserNameW
mov edx, dword [ebp - 0x8c]
dec edx
lea eax, [ebp - 0xc]
call fcn.0040aaa0
mov ecx, dword [ebp - 0xc]
mov edx, 0x6cdf60
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov ecx, dword [ebp - 0x10]
mov edx, 0x6cdf80
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov ecx, ebx
mov edx, 0x6cdd10
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
call fcn.006cbfc0
mov ecx, eax
mov edx, 0x6cdf9c
mov eax, dword [ebp - 0x7c]
call fcn.005fe984
lea eax, [ebp - 0x114]
call fcn.006cbaa8
mov ecx, dword [ebp - 0x114]
mov edx, 0x6cdfb0
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
lea eax, [ebp - 0x118]
call fcn.006cbde0
mov ecx, dword [ebp - 0x118]
mov edx, 0x6cdfc4
mov eax, dword [ebp - 0x7c]
call fcn.005fe9c0
mov dl, 1
mov eax, dword [0x5f8fec]
call fcn.005ffb60
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov dl, 1
mov eax, dword [0x6c7780]
call fcn.006c7e1c
mov dword [ebp - 0x90], eax
mov dl, 1
mov eax, dword [0x490a80]
call fcn.004b40e4
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov byte [eax + 0x39], 0
mov dl, 1
mov eax, dword [0x490a80]
call fcn.004b40e4
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x39], 0
mov ecx, 0xf003f
mov dl, 1
mov eax, dword [0x50493c]
call fcn.00505acc
mov dword [ebp - 0xa4], eax
xor eax, eax
push ebp
push 0x6ccdd8
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000000
mov eax, dword [ebp - 0xa4]
call fcn.00505b70
mov edx, 0x6cdfd8
mov eax, dword [ebp - 0xa4]
call fcn.00505dfc
mov dl, 1
mov eax, dword [0x490a80]
call fcn.004b40e4
mov dword [ebp - 0xa8], eax
xor eax, eax
push ebp
push 0x6ccdb8
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
call fcn.00506240
mov eax, dword [ebp - 0xa4]
call fcn.00505b40
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x6ccdaa
inc ebx
xor esi, esi
cmp dword [ebp - 0xac], 0
jne 0x6ccccf
mov dl, 1
mov eax, dword [0x5f8fec]
call fcn.005ffb60
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x120]
mov edx, esi
mov eax, dword [ebp - 0xa8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0x11c]
mov edx, 0x6ce00c
call fcn.0040ab78
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xa4]
call fcn.00505dfc
test al, al
je 0x6ccd97
lea ecx, [ebp - 0x124]
mov edx, 0x6ce040
mov eax, dword [ebp - 0xa4]
call fcn.00506688
cmp dword [ebp - 0x124], 0
je 0x6ccd97
lea ecx, [ebp - 0x12c]
mov edx, 0x6ce040
mov eax, dword [ebp - 0xa4]
call fcn.00506688
mov eax, dword [ebp - 0x12c]
lea edx, [ebp - 0x128]
call fcn.00423490
mov edx, dword [ebp - 0x128]
mov ecx, 1
mov eax, 0x6ce064
call fcn.0040aef8
test eax, eax
jne 0x6ccd97
lea ecx, [ebp - 0x130]
mov edx, 0x6ce040
mov eax, dword [ebp - 0xa4]
call fcn.00506688
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0xac]
call fcn.005ffe80
mov eax, dword [ebp - 0xa4]
call fcn.00505b40
inc esi
dec ebx
jne 0x6cccb4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ccdbf
ret