Function at 0x43a780
Capabilities:
Get session user name
Terminate process

Disassembly:
push 0x250
mov eax, 0x4ccdcc
call fcn.004cbf06
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp + 8]
mov byte [ebp - 0x21c], al
lea ecx, [ebp - 0x25c]
push dword [ebp - 0x21c]
call fcn.0044698d
pop ecx
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 1
call fcn.00438415
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0
mov bl, al
call fcn.0043d537
test bl, bl
je 0x43a992
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0043884a
call fcn.0043a711
add esp, 0x18
mov dword [ebp - 0x21c], 0x101
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov esi, 0x104
lea eax, [ebp - 0x114]
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp + 0x1c], 0xf
lea ecx, [ebp - 0x218]
push ecx
lea eax, [ebp + 8]
cmova eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x114]
push esi
push eax
call fcn.00435356
mov byte [ebp - 0x22c], 0
lea edx, [ebp - 0x114]
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x244]
call fcn.0044649e
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x244]
add esp, 0x20
cmp dword [ebp - 0x230], 7
cmova ecx, dword [ebp - 0x244]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00437939
lea ecx, [ebp - 0x244]
sub esi, eax
call fcn.0043d537
cmp esi, 2
jae 0x43a8d4
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x421408
call fcn.00442580
lea edx, [ebp - 0x114]
mov ecx, eax
call fcn.00442580
mov edx, 0x4213c0
mov ecx, eax
call fcn.00442580
push 0x442711
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x421438
call fcn.00442580
lea edx, [ebp - 0x114]
mov ecx, eax
call fcn.00442580
mov edx, 0x421418
mov ecx, eax
call fcn.00442580
mov ebx, 0x442711
mov ecx, eax
push ebx
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor eax, eax
lea edi, [ebp - 0x228]
stosd dword es:[edi], eax
push ecx
push ecx
mov edx, esp
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x114]
mov ecx, eax
mov dword [edx], eax
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43a927
sub ecx, esi
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x228]
call fcn.00439814
pop ecx
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x224]
jne 0x43a96b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x421440
call fcn.00442580
push ebx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0043884a
lea ecx, [ebp - 0x228]
call fcn.0043a2af
add esp, 0x18
lea ecx, [ebp - 0x228]
call fcn.0043b277
lea ecx, [ebp + 8]
call fcn.0043d60d
call fcn.004cbeb5
ret