Function at 0x43f640
Capabilities:
Get session user name

Disassembly:
sub esp, 0x530
mov dl, byte [0x481910]
push ebx
push ebp
push esi
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x2d]
mov byte [esp + 0x2c], dl
mov byte [esp + 0x338], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x339]
xor ebp, ebp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, 0x208
push 0x4672e8
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], ebp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x28], ebx
jne 0x43f6cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x47b1c4
call fcn.00446e00
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x530
ret
push 0x47b1b0
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, ebp
jne 0x43f705
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x47b14c
call fcn.00446e00
add esp, 8
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x530
ret
lea eax, [esp + 0x18]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x33c]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
push ebp
push 0x481bf0
push ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebp
call esi
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
jne 0x43f90d
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov ebx, eax
cmp ebx, 0x7a
je 0x43f763
push 0x481bf0
push 0x47b308
lea ecx, [esp + 0x34]
push 0x47b2a4
push ecx
call ebp
push ebx
jmp 0x43f79a
mov eax, dword [esp + 0x14]
add eax, 0x20
push eax
call fcn.004520a2
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x43f87b
call edi
push 0x481bf0
push 0x47b298
lea ecx, [esp + 0x34]
push 0x47b2a4
push ecx
mov esi, eax
call ebp
push esi
lea edx, [esp + 0x40]
push edx
call fcn.00446e00
add esp, 0x18
mov dl, byte [0x481910]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x131]
mov byte [esp + 0x130], dl
mov byte [esp + 0x234], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x235]
mov dword [esp + 0x24], 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x24]
lea ecx, [esp + 0x234]
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea edx, [esp + 0x234]
push 0x4695f4
push edx
call fcn.00452b10
add esp, 8
test eax, eax
jne 0x43f95d
mov esi, dword [esp + 0x548]
test esi, esi
je 0x43f934
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x43f934
cmp byte [esi], 0x2e
je 0x43f934
lea eax, [esp + 0x130]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x130]
push 0x4695f4
push ecx
call esi
lea edx, [esp + 0x234]
lea eax, [esp + 0x130]
push edx
push eax
call esi
jmp 0x43f95d
lea ecx, [esp + 0x18]
lea edx, [esp + 0x10]
push ecx
push edx
lea ecx, [esp + 0x340]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
push 0x481bf0
push 0
mov dword [esp + 0x2c], 0x208
call esi
test eax, eax
jne 0x43f8cd
call edi
mov esi, eax
push 0x481bf0
push 0x47b28c
lea eax, [esp + 0x34]
push 0x47b2a4
push eax
call ebp
lea ecx, [esp + 0x3c]
push esi
push ecx
jmp 0x43f79f
mov eax, dword [esp + 0x18]
cmp eax, 4
je 0x43f90d
cmp eax, 5
je 0x43f90d
call edi
mov edx, dword [esp + 0x18]
mov esi, eax
push edx
push 0x481bf0
push 0x47b280
lea eax, [esp + 0x38]
push 0x47b2a4
push eax
call ebp
lea ecx, [esp + 0x40]
push esi
push ecx
call fcn.00446e00
add esp, 0x1c
jmp 0x43f7a7
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x544]
push esi
push edx
call fcn.0043f550
add esp, 8
test eax, eax
je 0x43f7a7
mov dword [esp + 0x20], 1
jmp 0x43f98c
lea ecx, [esp + 0x130]
push 0x47b27c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x234]
lea eax, [esp + 0x130]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x130]
push 0x481bf0
push ecx
lea edx, [esp + 0x34]
push 0x47b248
push edx
call ebp
lea eax, [esp + 0x3c]
push 0x529
push eax
call fcn.00446e00
mov esi, dword [esp + 0x34]
add esp, 0x18
test esi, esi
je 0x43f999
push esi
call fcn.00451fb9
add esp, 4
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x530
ret