Function at 0x419470
Capabilities:
Get session user name

Disassembly:
sub esp, 0x12c
push ebx
xor eax, eax
push ebp
push esi
xor ebx, ebx
mov dword [0x456270], eax
push edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ebx
mov dword [0x456274], eax
call fcn.00419910
mov ebp, dword [esp + 0x148]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
xor edi, edi
call esi
test eax, eax
jle 0x4194cb
movsx ecx, byte [edi + ebp]
push ecx
call fcn.00430c98
add esp, 4
mov byte [edi + ebp], al
inc edi
push ebp
call esi
cmp edi, eax
jl 0x4194b3
push ebp
mov dword [esp + 0x1c], ebx
xor edi, edi
call esi
test eax, eax
jle 0x41965b
mov al, byte [edi + ebp]
lea ebx, [edi + ebp]
cmp al, 0x20
jle 0x419636
push 0x440b9c
mov dword [esp + 0x1c], 1
call esi
push eax
push 0x440b9c
push ebx
call fcn.00430c60
add esp, 0xc
test eax, eax
jne 0x41951e
mov dword [esp + 0x20], 1
push 0x440b9c
jmp 0x419632
push 0x440b88
call esi
push eax
push 0x440b88
push ebx
call fcn.00430c60
add esp, 0xc
test eax, eax
jne 0x41954a
mov dword [esp + 0x14], 1
push 0x440b88
jmp 0x419632
push 0x440b94
call esi
push eax
push 0x440b94
push ebx
call fcn.00430c60
add esp, 0xc
test eax, eax
jne 0x419576
mov dword [esp + 0x1c], 1
push 0x440b94
jmp 0x419632
push 0x440bb0
call esi
push eax
push 0x440bb0
push ebx
call fcn.00430c60
add esp, 0xc
test eax, eax
jne 0x4195ba
push 0x456270
mov dword [0x456274], 1
call fcn.00429aa0
add esp, 4
push 0x440bb0
call esi
add edi, eax
mov dword [esp + 0x18], 0
jmp 0x419636
push 0x440ba8
call esi
push eax
push 0x440ba8
push ebx
call fcn.00430c60
add esp, 0xc
test eax, eax
jne 0x419644
push 0x440ba8
mov dword [esp + 0x14], 1
call esi
add edi, eax
lea edx, [esp + 0x24]
mov cl, byte [edi + ebp]
lea eax, [edi + ebp]
cmp cl, 0x20
jne 0x419601
test cl, cl
je 0x419601
mov cl, byte [eax + 1]
inc eax
cmp cl, 0x20
je 0x4195f4
mov cl, byte [eax]
cmp cl, 0x20
je 0x419618
test cl, cl
je 0x419618
mov byte [edx], cl
mov cl, byte [eax + 1]
inc edx
inc eax
cmp cl, 0x20
jne 0x419608
mov byte [edx], 0
lea edx, [esp + 0x24]
push edx
call fcn.00430c52
add esp, 4
mov dword [0x456358], eax
lea eax, [esp + 0x24]
push eax
call esi
add edi, eax
push ebp
inc edi
call esi
cmp edi, eax
jl 0x4194dc
jmp 0x419649
call fcn.00419d80
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x419678
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x419678
xor ebx, ebx
call fcn.0041a330
test eax, eax
jne 0x41967a
call fcn.00428e50
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
xor ebx, ebx
mov ecx, dword [esp + 0x140]
mov dword [0x45626c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x456268], eax
call fcn.00428800
test eax, eax
jne 0x4196c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x44e150
call fcn.004243e0
add esp, 8
call fcn.00428e50
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
mov esi, 1
mov dword [0x456280], esi
call fcn.00428b70
mov ebp, dword [esp + 0x20]
cmp ebp, ebx
jne 0x4196ec
push ebx
call fcn.004199d0
add esp, 4
test eax, eax
je 0x419664
call fcn.00428aa0
call fcn.00423790
test eax, eax
je 0x419704
call fcn.00419cc0
mov dword [0x456370], eax
cmp dword [esp + 0x10], ebx
je 0x419711
call fcn.004289e0
jmp 0x419716
call fcn.00428930
cmp dword [esp + 0x1c], ebx
je 0x419733
call fcn.00428e50
call fcn.00424090
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
call fcn.00423790
test eax, eax
je 0x419796
call fcn.00419cc0
cmp eax, ebx
jne 0x41974b
mov dword [0x45627c], esi
cmp eax, ebx
mov dword [0x456370], eax
jne 0x419796
call fcn.00428aa0
test eax, eax
jne 0x419796
mov eax, dword [0x457304]
mov dword [0x456280], ebx
cmp eax, ebx
je 0x419785
push esi
call fcn.00428830
add esp, 4
test eax, eax
jne 0x419664
cmp dword [0x457304], ebx
jne 0x419796
push ebx
call fcn.00428830
add esp, 4
test eax, eax
jne 0x419664
cmp dword [esp + 0x14], ebx
je 0x4197ae
call fcn.00423e00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
mov edi, dword [esp + 0x18]
cmp edi, ebx
jne 0x41980c
call fcn.00423790
test eax, eax
jne 0x41980c
lea edx, [esp + 0x10]
lea eax, [esp + 0x38]
push edx
push eax
mov dword [esp + 0x18], 0x104
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [esp + 0x38]
push 0x44bf6c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x41980c
push 0x57
push 0x44e07c
call fcn.004243e0
add esp, 8
call fcn.00423b10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
cmp ebp, ebx
je 0x419822
call fcn.00423b10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
cmp edi, ebx
jne 0x419669
call fcn.00423790
test eax, eax
jne 0x4198a0
push 0x44dff4
call fcn.004244b0
mov eax, dword [0x456280]
add esp, 4
cmp eax, ebx
jne 0x419852
call fcn.00428aa0
test eax, eax
je 0x41985e
cmp dword [0x45636c], ebx
jne 0x4198f8
cmp dword [0x457304], ebx
je 0x41987f
push esi
call fcn.00428830
add esp, 4
test eax, eax
jne 0x419664
cmp dword [0x457304], ebx
jne 0x4198f8
push ebx
call fcn.00428830
add esp, 4
test eax, eax
je 0x4198f8
call fcn.00428e50
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
call fcn.00423790
test eax, eax
je 0x419669
cmp dword [0x456280], ebx
jne 0x4198be
call fcn.00428aa0
test eax, eax
je 0x4198c6
cmp dword [0x45636c], ebx
jne 0x4198f8
cmp dword [0x457304], ebx
je 0x4198e7
push esi
call fcn.00428830
add esp, 4
test eax, eax
jne 0x419664
cmp dword [0x457304], ebx
jne 0x4198f8
push ebx
call fcn.00428830
add esp, 4
test eax, eax
jne 0x419664
push ebx
call fcn.00419ec0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10