Function at 0x405ea5
Capabilities:
Get session user name

Disassembly:
push 0x834
mov eax, 0x444584
call fcn.0043d11b
mov ebx, ecx
lea ecx, [ebp - 0x814]
call dword [0x474bb4]
xor edi, edi
push str.SoftwareMicrosoftProtected_Storage_System_Provider_
lea ecx, [ebp - 0x82c]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
push str.e161255a_37c3_11d2_bcaa_00c04fd929db
lea ecx, [ebp - 0x824]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
lea esi, [ebx + 0x154]
mov ecx, esi
mov byte [ebp - 4], 2
call dword [sym.imp.K9PCUhelper.dll_public:_bool___thiscall_COSVersionInfo::IsWin2K_void_const]
test al, al
jne 0x405f6f
mov ecx, esi
call dword [sym.imp.K9PCUhelper.dll_public:_bool___thiscall_COSVersionInfo::IsWinNT4OrGreater_void_const]
test al, al
jne 0x405f6f
lea eax, [ebp - 0x818]
push eax
lea eax, [ebp - 0x810]
push eax
mov dword [ebp - 0x818], 0x400
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push dword [ebp - 0x824]
lea eax, [ebp - 0x810]
push eax
push dword [ebp - 0x82c]
lea eax, [ebp - 0x814]
push str._s_sData_s
push eax
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0x14
push 0xff
push dword [ebp - 0x814]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00405289
jmp 0x4060fd
lea ecx, [ebp - 0x820]
call dword [0x474bb4]
lea eax, [ebp - 0x81c]
mov byte [ebp - 4], 3
push eax
mov dword [ebp - 0x828], edi
mov dword [ebp - 0x81c], edi
call fcn.004059c6
test eax, eax
je 0x4060d5
mov ecx, dword [ebp - 0x81c]
lea edx, [ebp - 0x810]
call fcn.00405a97
lea eax, [ebp - 0x810]
push eax
push dword [ebp - 0x82c]
lea eax, [ebp - 0x814]
push str._s_s
push eax
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0x10
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x820]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_2]
push dword [ebp - 0x820]
lea esi, [ebp - 0x818]
call fcn.00405b3f
mov ecx, dword [ebp - 0x81c]
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x840]
push eax
call fcn.00405bd1
mov esi, SysReAllocString
test eax, eax
je 0x406090
push edi
lea eax, [ebp - 0x840]
push eax
push dword [ebp - 0x814]
mov ecx, ebx
push esi
call fcn.00405d9a
push str.Data
lea ecx, [ebp - 0x814]
call dword [0x474948]
push edi
lea eax, [ebp - 0x840]
push eax
push dword [ebp - 0x814]
mov ecx, ebx
push esi
call fcn.00405d9a
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x814]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
push 1
lea eax, [ebp - 0x840]
push eax
push dword [ebp - 0x814]
mov ecx, ebx
push esi
call fcn.00405d9a
push 0xff
push dword [ebp - 0x814]
push esi
call fcn.00405289
cmp dword [ebp - 0x828], edi
je 0x4060ac
push dword [ebp - 0x828]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x818], edi
je 0x4060d5
push edi
push dword [ebp - 0x818]
mov ecx, ebx
push dword [ebp - 0x820]
push esi
call fcn.00405d9a
push dword [ebp - 0x818]
call sub.mfc90u.dll_delete
pop ecx
cmp dword [ebp - 0x81c], edi
je 0x4060f1
push dword [ebp - 0x81c]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [ebp - 0x820]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [ebx + 0x280]
add dword [eax], 1
lea ecx, [ebp - 0x824]
adc dword [eax + 4], edi
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x82c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x814]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
call fcn.0043d19e
ret