Function at 0x419ad0
Capabilities:
Get session user name

Disassembly:
sub esp, 0x350
mov eax, dword [0x45426c]
xor eax, esp
mov dword [esp + 0x34c], eax
mov eax, dword [esp + 0x354]
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea edi, [esi + 0xe00]
mov dword [esi], eax
mov ebx, dword [edi + 0x10]
cmp dword [edi + 0xc], ebx
jbe 0x419b06
call fcn.0042f06c
mov ebp, dword [edi + 0xc]
mov ecx, dword [edi]
mov dword [esp + 0x14], ecx
cmp ebp, dword [edi + 0x10]
jbe 0x419b19
call fcn.0042f06c
mov edx, dword [esp + 0x14]
mov eax, dword [edi]
push ebx
push edx
push ebp
push eax
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.004189b0
push 0x444eec
lea edi, [esi + 5]
push 0xff
push edi
call fcn.0042e687
lea ecx, [esi + 0x104]
push ecx
push 0xff
push edi
call fcn.0042e687
xor ebx, ebx
add esp, 0x18
mov ecx, esi
mov byte [esi + 4], 1
mov byte [esi + 0xdfc], 1
mov byte [esi + 0xdfd], bl
mov byte [esi + 0xdfe], bl
mov byte [esi + 0xdff], bl
call fcn.00419360
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x260]
push eax
mov dword [esp + 0x18], 0xff
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ebp, [esi + 0x401]
xor edi, edi
mov eax, ebp
mov ecx, 5
jmp 0x419bb0
mov byte [eax], bl
add eax, 0x1ff
sub ecx, 1
jne 0x419bb0
lea ecx, [esp + 0x25c]
push ecx
push str.C:Users_sMusic
lea edx, [esp + 0x164]
push 0xff
push edx
call fcn.0042e3b2
add esp, 0x10
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x160]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
cmp eax, 0xffffffff
je 0x419c2f
push eax
call ebx
lea edx, [esp + 0x15c]
push edx
lea eax, [esi + 0x402]
push 0xff
push eax
mov byte [ebp], 1
call fcn.0042e687
push str.My_Music
push 0xff
lea ecx, [esi + 0x501]
push ecx
jmp 0x419c9a
lea edx, [esp + 0x25c]
push edx
push str.C:Documents_and_Settings_sMy_Music
lea eax, [esp + 0x164]
push 0xff
push eax
call fcn.0042e3b2
add esp, 0x10
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x160]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x419ca7
push eax
call ebx
lea eax, [esp + 0x15c]
push eax
lea ecx, [esi + 0x402]
push 0xff
push ecx
mov byte [ebp], 1
call fcn.0042e687
push str.My_Documents
push 0xff
lea edx, [esi + 0x501]
push edx
call fcn.0042e687
mov edi, 1
add esp, 0x18
lea eax, [esp + 0x25c]
push eax
push str.C:Users_sDocuments
lea ecx, [esp + 0x164]
push 0xff
push ecx
call fcn.0042e3b2
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
add esp, 0x10
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x160]
push eax
call ebp
cmp eax, 0xffffffff
jne 0x419d19
lea eax, [esp + 0x25c]
push eax
push str.C:Documents_and_Settings_sMy_Documents
lea ecx, [esp + 0x164]
push 0xff
push ecx
call fcn.0042e3b2
add esp, 0x10
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x160]
push eax
call ebp
cmp eax, 0xffffffff
je 0x419d5d
push eax
call ebx
imul edi, edi, 0x1ff
lea ecx, [esp + 0x15c]
push ecx
add esi, edi
lea edx, [esi + 0x402]
push 0xff
push edx
mov byte [esi + 0x401], 1
call fcn.0042e687
push str.My_Documents
push 0xff
add esi, 0x501
push esi
call fcn.0042e687
add esp, 0x18
mov ecx, dword [esp + 0x35c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0042e3d0
add esp, 0x350
ret 4