Function at 0x4255da
Capabilities:
Get session user name
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16014
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x2710
lea eax, [ebp - 0x2757]
xor ebx, ebx
mov dword [ebp - 0x15fec], edi
mov byte [ebp - 0x2758], bl
lea esi, [edi - 1]
push esi
push ebx
push eax
mov dword [ebp - 0x15ff0], esi
call fcn.00626f50
push esi
lea eax, [ebp - 0x9c87]
mov byte [ebp - 0x9c88], bl
push ebx
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x4e67]
mov byte [ebp - 0x4e68], bl
push ebx
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x7577]
mov byte [ebp - 0x7578], bl
push ebx
push eax
call fcn.00626f50
xor eax, eax
mov dword [ebp - 0x15fe0], 0x44
push 0x4e1e
mov word [ebp - 0x15fd8], ax
lea eax, [ebp - 0x15fd6]
push ebx
push eax
call fcn.00626f50
mov ebx, str.RecoverDialupVPNPasswords
push ebx
push str._n_n_s_entered
call fcn.00449974
add esp, 0x44
mov dword [ebp - 0x15fe8], edi
lea eax, [ebp - 0x15fe8]
push eax
lea eax, [ebp - 0x2758]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x2758]
push eax
push ebx
push str._n_s_Found_current_user__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x15ffc]
xor esi, esi
push eax
lea eax, [ebp - 0x15fec]
push eax
lea eax, [ebp - 0x9c88]
push eax
lea eax, [ebp - 0x15fe0]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2758]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
test eax, eax
jne 0x425716
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x2758]
push eax
push ebx
push str._n_n_s_Failed_to_get_SID_value_of_current_user__s__Error0x_.8x
call fcn.00449974
add esp, 0x10
jmp 0x42596b
lea eax, [ebp - 0x2758]
push eax
push dword [ebp - 0x15fe0]
push ebx
push str._n_s_Found_SID_of_size__d_for_current_user__s
call fcn.00449974
push edi
lea eax, [ebp - 0x15fd8]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00449d42
add esp, 0x1c
test eax, eax
jne 0x425758
lea eax, [ebp - 0x2758]
push eax
push ebx
push str._n_n_s_Failed_to_get_SID_value_of_current_user__s
jmp 0x425963
lea eax, [ebp - 0x15fd8]
push eax
push ebx
push str._n_s_Current_user_SID_is__S
call fcn.00449974
push 0x18
lea eax, [ebp - 0x16014]
push esi
push eax
call fcn.00626f50
add esp, 0x18
lea eax, [ebp - 0x15fe4]
push eax
push 0x800
lea eax, [ebp - 0x16014]
push eax
push esi
call sub.ADVAPI32.dll_LsaOpenPolicy
test eax, eax
je 0x4257ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._n__s_LsaOpenPolicy_failed__Error0x_.8x
jmp 0x425963
push 7
pop ecx
mov esi, str.RasDialParams_
lea edi, [ebp - 0x111b8]
rep movsd dword es:[edi], dword [esi]
push 0x4e02
lea eax, [ebp - 0x1119a]
movsw word es:[edi], word [esi]
xor esi, esi
push esi
push eax
call fcn.00626f50
lea eax, [ebp - 0x15fd8]
mov edi, 0x2710
push eax
lea eax, [ebp - 0x111b8]
push edi
push eax
call fcn.006308d2
push 0x66e0a0
lea eax, [ebp - 0x111b8]
push edi
push eax
call fcn.006308d2
lea eax, [ebp - 0x111b8]
push eax
mov dword [ebp - 0x15ff4], eax
call fcn.00630ba0
add eax, eax
mov word [ebp - 0x15ff6], di
mov word [ebp - 0x15ff8], ax
lea eax, [ebp - 0x111b8]
push eax
push ebx
push str._n_s_Getting_Lsa_private_data_for_key__S
mov dword [ebp - 0x15fdc], esi
call fcn.00449974
add esp, 0x34
lea eax, [ebp - 0x15fdc]
push eax
lea eax, [ebp - 0x15ff8]
push eax
push dword [ebp - 0x15fe4]
call sub.ADVAPI32.dll_LsaRetrievePrivateData
test eax, eax
jne 0x42595c
cmp dword [ebp - 0x15fdc], esi
je 0x42595c
push dword [ebp - 0x15fe4]
call sub.ADVAPI32.dll_LsaClose
mov eax, dword [ebp - 0x15fdc]
movzx eax, word [eax]
push eax
push ebx
push str._n_s_Found_LSA_secret_data_of_size__d
call fcn.00449974
mov edx, dword [ebp - 0x15fdc]
add esp, 0xc
movzx eax, word [edx]
mov ecx, eax
cmp ax, word [ebp - 0x15ff0]
jbe 0x4258a9
push ecx
push ebx
push str._n__s_LSA_secret_data_size_is_too_large___d__...returning_now
jmp 0x425963
push esi
push esi
push edi
lea eax, [ebp - 0xc398]
push eax
push ecx
push dword [edx + 4]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0x15fdc]
push eax
push ebx
push str._n_s_LSA_secret_data_written_size_is___d___n
movzx esi, word [ecx]
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x15fdc]
call sub.ADVAPI32.dll_LsaFreeMemory
push ebx
push str._n_s_Getting_Phonebook_Locations_now
call fcn.00449974
push edi
lea eax, [ebp - 0x7578]
push eax
lea eax, [ebp - 0x4e68]
push eax
call fcn.00411ce3
add esp, 0x14
push ebx
test eax, eax
jne 0x425917
push str._n_s_Failed_to_get_phone_book_locations
call fcn.00449974
pop ecx
pop ecx
jmp 0x42596b
push str._n_s_enumerate_all_dialup_entries_for_current_user...
call fcn.00449974
lea eax, [ebp - 0x4e68]
push eax
lea eax, [ebp - 0xc398]
push esi
push eax
call fcn.0040f35b
push ebx
push str._n_s_enumerate_all_dialup_entries_for_all_users...
call fcn.00449974
lea eax, [ebp - 0x7578]
push eax
lea eax, [ebp - 0xc398]
push esi
push eax
call fcn.0040f35b
xor eax, eax
add esp, 0x28
inc eax
jmp 0x42596d
push eax
push ebx
push str._n__s_LsaRetrievePrivateData_failed__Error0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret