Function at 0x7a4d4c
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x39
push 0
push 0
dec ecx
jne 0x7a4d54
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x44]
mov edx, dword [0x79e2ac]
call fcn.0040b054
lea eax, [ebp - 0x74]
mov edx, dword [0x79e2ac]
call fcn.0040b054
xor eax, eax
push ebp
push 0x7a61da
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x7cc35c]
cmp dword [eax], 6
jge 0x7a4df9
lea eax, [ebp - 8]
call fcn.007a7578
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
call fcn.004228f8
mov edx, dword [ebp - 0xb0]
mov eax, 0x7a61f4
call fcn.0042b064
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040abe8
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 8]
call fcn.007a7214
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 8]
call fcn.0040a014
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.007a77f8
mov eax, dword [0x7cc35c]
cmp dword [eax], 6
jl 0x7a4e66
lea eax, [ebp - 8]
call fcn.007a75c0
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 8]
call fcn.004228f8
mov edx, dword [ebp - 0xb8]
mov eax, 0x7a620c
call fcn.0042b064
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040abe8
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.007a7214
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 8]
call fcn.0040a014
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.007a77f8
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x7a6224
call fcn.00423fb8
mov edx, eax
inc edx
mov ecx, 0x7fffffff
mov eax, dword [ebp - 8]
call fcn.0040abe8
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.004228f8
mov edx, dword [ebp - 0xc0]
mov eax, 0x7a6234
call fcn.0042b064
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040abe8
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
call fcn.004228f8
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 4]
call fcn.0040a014
mov dl, 1
mov eax, dword [0x60fec8]
call fcn.006168dc
mov ebx, eax
lea edx, [ebp - 0xcc]
mov eax, dword [0x7cc35c]
mov eax, dword [eax]
call fcn.004233a0
push dword [ebp - 0xcc]
push 0x7a624c
lea edx, [ebp - 0xd0]
mov eax, dword [0x7cca88]
mov eax, dword [eax]
call fcn.004233a0
push dword [ebp - 0xd0]
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.0040ab00
mov eax, dword [ebp - 0xc8]
push eax
mov ecx, 0x7a625c
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
mov ecx, dword [0x7cc73c]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x60f9e0]
call fcn.0061640c
push eax
mov ecx, 0x7a6278
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.00615808
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xd4]
call fcn.007a4608
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, 0x7a6290
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xd8]
call fcn.007a4750
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, 0x7a62a4
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xdc]
call fcn.007a4c20
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, 0x7a62b8
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xe0]
call fcn.007a41a0
mov eax, dword [ebp - 0xe0]
push eax
mov ecx, 0x7a62d0
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xe4]
call fcn.007a41fc
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, 0x7a62e4
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
lea eax, [ebp - 0xe8]
call fcn.007a45d4
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, 0x7a62fc
mov dl, 1
mov eax, dword [0x60f0c0]
call fcn.0061585c
mov edx, eax
mov eax, ebx
call fcn.00616af8
mov dl, 1
mov eax, dword [0x60fec8]
call fcn.006168dc
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x10]
mov eax, 0x7a6314
call fcn.0042ce44
cmp dword [ebp - 0x10], 0
jne 0x7a50af
lea edx, [ebp - 0x10]
mov eax, 0x7a6338
call fcn.0042ce44
mov ecx, dword [0x7ccca8]
mov ecx, dword [ecx]
mov edx, 0x7a6360
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov eax, dword [0x7ccd00]
cmp byte [eax], 0
jne 0x7a50f0
mov ecx, 0x56
mov dl, 1
mov eax, dword [0x60f9e0]
call fcn.0061640c
mov ecx, eax
mov edx, 0x7a6374
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
jmp 0x7a5110
mov ecx, 0x40
mov dl, 1
mov eax, dword [0x60f9e0]
call fcn.0061640c
mov ecx, eax
mov edx, 0x7a63a0
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
lea eax, [ebp - 0xec]
call fcn.007a4130
mov ecx, dword [ebp - 0xec]
mov edx, 0x7a63cc
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
lea edx, [ebp - 0xf4]
xor eax, eax
call fcn.00406d34
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.004241b4
mov ecx, dword [ebp - 0xf0]
mov edx, 0x7a63f0
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov ecx, dword [0x7cc73c]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x60f9e0]
call fcn.0061640c
mov ecx, eax
mov edx, 0x7a6414
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
mov ecx, dword [0x7ccd24]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x60f9e0]
call fcn.0061640c
mov ecx, eax
mov edx, 0x7a6430
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
movzx eax, byte [0x7a6454]
push eax
lea eax, [ebp - 0xf8]
push eax
mov ecx, 0x7a6464
mov edx, 0x7a647c
mov eax, dword [ebp - 8]
call fcn.0042b254
mov ecx, dword [ebp - 0xf8]
mov edx, 0x7a648c
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
cmp dword [ebp - 0x24], 0
je 0x7a51f1
mov ecx, dword [ebp - 0x24]
mov edx, 0x7a64b8
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
jmp 0x7a5203
mov ecx, 0x7a64e8
mov edx, 0x7a64f8
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
cmp dword [ebp - 0x40], 0
je 0x7a5267
lea ecx, [ebp - 0x100]
mov edx, 0x7a6528
mov eax, 0x7a6540
call fcn.007a8228
push dword [ebp - 0x100]
lea ecx, [ebp - 0x104]
mov edx, 0x7a6554
mov eax, 0x7a656c
call fcn.007a8228
push dword [ebp - 0x104]
push 0x7a6580
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.0040ab00
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
jmp 0x7a52b7
lea ecx, [ebp - 0x108]
mov edx, 0x7a6598
mov eax, 0x7a65b0
call fcn.007a8228
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x10c]
mov edx, 0x7a65c8
mov eax, 0x7a65e4
call fcn.007a8228
mov edx, dword [ebp - 0x10c]
pop eax
call fcn.0040aa20
mov edx, dword [ebp - 0x108]
mov ecx, 0x7a65f8
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
lea edx, [ebp - 0x110]
mov eax, 0x7a65fc
call fcn.007a7468
mov ecx, dword [ebp - 0x110]
mov edx, 0x7a6610
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov dword [ebp - 0x8c], 0x101
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x8c]
call fcn.0040a9a0
push 0
push 0
call sub.user32.dll_GetWindowLongW
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xc]
call fcn.0040a16c
push eax
call sub.advapi32.dll_GetUserNameW
mov edx, dword [ebp - 0x8c]
dec edx
lea eax, [ebp - 0xc]
call fcn.0040a9a0
mov ecx, dword [ebp - 0xc]
mov edx, 0x7a662c
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov ecx, dword [ebp - 0x10]
mov edx, 0x7a664c
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov ecx, ebx
mov edx, 0x7a6668
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
call fcn.007a47a8
mov ecx, eax
mov edx, 0x7a667c
mov eax, dword [ebp - 0x7c]
call fcn.00616b3c
lea eax, [ebp - 0x114]
call fcn.007a4290
mov ecx, dword [ebp - 0x114]
mov edx, 0x7a6690
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
lea eax, [ebp - 0x118]
call fcn.007a45c8
mov ecx, dword [ebp - 0x118]
mov edx, 0x7a66a4
mov eax, dword [ebp - 0x7c]
call fcn.00616b78
mov dl, 1
mov eax, dword [0x610c6c]
call fcn.00617c98
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov dl, 1
mov eax, dword [0x79d3c8]
call fcn.0079da6c
mov dword [ebp - 0x90], eax
mov dl, 1
mov eax, dword [0x494104]
call fcn.004b7be8
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov byte [eax + 0x39], 0
mov dl, 1
mov eax, dword [0x494104]
call fcn.004b7be8
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x39], 0
call fcn.007a1c54
test al, al
je 0x7a5b23
mov ecx, 0xf023f
mov dl, 1
mov eax, dword [0x513a3c]
call fcn.00514bcc
mov dword [ebp - 0xa4], eax
xor eax, eax
push ebp
push 0x7a55cd
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [ebp - 0xa4]
call fcn.00514c70
mov edx, 0x7a66b8
mov eax, dword [ebp - 0xa4]
call fcn.00514efc
mov dl, 1
mov eax, dword [0x494104]
call fcn.004b7be8
mov dword [ebp - 0xa8], eax
xor eax, eax
push ebp
push 0x7a55ad
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
call fcn.00515360
mov eax, dword [ebp - 0xa4]
call fcn.00514c40
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x7a559f
inc esi
xor ebx, ebx
cmp dword [ebp - 0xac], 0
jne 0x7a54c4
mov dl, 1
mov eax, dword [0x610c6c]
call fcn.00617c98
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x120]
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0x11c]
mov edx, 0x7a672c
call fcn.0040aa78
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xa4]
call fcn.00514efc
test al, al
je 0x7a558c
lea ecx, [ebp - 0x124]
mov edx, 0x7a67a4
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
cmp dword [ebp - 0x124], 0
je 0x7a558c
lea ecx, [ebp - 0x12c]
mov edx, 0x7a67c8
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
mov eax, dword [ebp - 0x12c]
lea edx, [ebp - 0x128]
call fcn.00422674
mov edx, dword [ebp - 0x128]
mov ecx, 1
mov eax, 0x7a67e8
call fcn.0040adf8
test eax, eax
jne 0x7a558c
lea ecx, [ebp - 0x130]
mov edx, 0x7a6808
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0xac]
call fcn.00617f54
mov eax, dword [ebp - 0xa4]
call fcn.00514c40
inc ebx
dec esi
jne 0x7a54a9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x7a55b4
ret
mov ecx, 0xf003f
mov dl, 1
mov eax, dword [0x513a3c]
call fcn.00514bcc
mov dword [ebp - 0xa4], eax
xor eax, eax
push ebp
push 0x7a5ce1
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [ebp - 0xa4]
call fcn.00514c70
mov edx, 0x7a6c88
mov eax, dword [ebp - 0xa4]
call fcn.00514efc
mov dl, 1
mov eax, dword [0x494104]
call fcn.004b7be8
mov dword [ebp - 0xa8], eax
xor eax, eax
push ebp
push 0x7a5cc1
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
call fcn.00515360
mov eax, dword [ebp - 0xa4]
call fcn.00514c40
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x7a5cb3
inc esi
xor ebx, ebx
cmp dword [ebp - 0xac], 0
jne 0x7a5bd8
mov dl, 1
mov eax, dword [0x610c6c]
call fcn.00617c98
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x180]
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x180]
lea eax, [ebp - 0x17c]
mov edx, 0x7a6cfc
call fcn.0040aa78
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0xa4]
call fcn.00514efc
test al, al
je 0x7a5ca0
lea ecx, [ebp - 0x184]
mov edx, 0x7a6d74
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
cmp dword [ebp - 0x184], 0
je 0x7a5ca0
lea ecx, [ebp - 0x18c]
mov edx, 0x7a6d98
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
mov eax, dword [ebp - 0x18c]
lea edx, [ebp - 0x188]
call fcn.00422674
mov edx, dword [ebp - 0x188]
mov ecx, 1
mov eax, 0x7a6db8
call fcn.0040adf8
test eax, eax
jne 0x7a5ca0
lea ecx, [ebp - 0x190]
mov edx, 0x7a6dd8
mov eax, dword [ebp - 0xa4]
call fcn.005157a4
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0xac]
call fcn.00617f54
mov eax, dword [ebp - 0xa4]
call fcn.00514c40
inc ebx
dec esi
jne 0x7a5bbd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x7a5cc8
ret