Function at 0x42f43f
Capabilities:
Get session user name
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1601c
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x2710
mov byte [ebp - 0x2760], 0
lea eax, [ebp - 0x275f]
mov dword [ebp - 0x15ff0], edi
mov ebx, ecx
lea esi, [edi - 1]
push esi
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x9c90], 0
lea eax, [ebp - 0x9c8f]
push esi
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x4e70], 0
lea eax, [ebp - 0x4e6f]
push esi
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x7580], 0
lea eax, [ebp - 0x757f]
push esi
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov dword [ebp - 0x15ff4], 0x44
xor eax, eax
xor esi, esi
mov word [ebp - 0x15fe0], ax
lea eax, [ebp - 0x15fde]
push 0x4e1e
push esi
push eax
call fcn.006390b0
add esp, 0xc
mov dword [ebp - 0x15fec], edi
lea eax, [ebp - 0x15fec]
push eax
lea eax, [ebp - 0x2760]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x16000]
push eax
lea eax, [ebp - 0x15ff0]
push eax
lea eax, [ebp - 0x9c90]
push eax
lea eax, [ebp - 0x15ff4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2760]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
test eax, eax
je 0x42f6cf
push edi
lea edx, [ebp - 0x15fe0]
lea ecx, [ebp - 0x50]
call fcn.0040525e
pop ecx
test eax, eax
je 0x42f6d5
push 0x18
lea eax, [ebp - 0x16018]
push esi
push eax
call fcn.006390b0
add esp, 0xc
lea eax, [ebp - 0x15fe8]
push eax
push 0x800
lea eax, [ebp - 0x16018]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_LsaOpenPolicy]
test eax, eax
jne 0x42f6cf
push 7
pop ecx
mov esi, str.RasDialParams_
lea edi, [ebp - 0x111c0]
rep movsd dword es:[edi], dword [esi]
push 0x4e02
lea eax, [ebp - 0x111a2]
movsw word es:[edi], word [esi]
xor esi, esi
push esi
push eax
call fcn.006390b0
add esp, 0xc
lea eax, [ebp - 0x15fe0]
mov edi, 0x2710
push eax
lea eax, [ebp - 0x111c0]
push edi
push eax
call fcn.00650f62
add esp, 0xc
lea eax, [ebp - 0x111c0]
push 0x6cbb58
push edi
push eax
call fcn.00650f62
add esp, 0xc
lea eax, [ebp - 0x111c0]
mov dword [ebp - 0x15ff8], eax
push eax
call fcn.00648cfd
add eax, eax
mov word [ebp - 0x15ffa], di
pop ecx
mov word [ebp - 0x15ffc], ax
lea eax, [ebp - 0x15fe4]
push eax
lea eax, [ebp - 0x15ffc]
mov dword [ebp - 0x15fe4], esi
push eax
push dword [ebp - 0x15fe8]
call dword [sym.imp.ADVAPI32.dll_LsaRetrievePrivateData]
test eax, eax
jne 0x42f6d5
cmp dword [ebp - 0x15fe4], esi
je 0x42f6d5
push dword [ebp - 0x15fe8]
call dword [sym.imp.ADVAPI32.dll_LsaClose]
mov ecx, dword [ebp - 0x15fe4]
lea edx, [edi - 1]
movzx eax, word [ecx]
cmp ax, dx
ja 0x42f6d5
push esi
push esi
push edi
lea edx, [ebp - 0xc3a0]
push edx
push eax
push dword [ecx + 4]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x15fe4]
push eax
movzx esi, word [eax]
call dword [sym.imp.ADVAPI32.dll_LsaFreeMemory]
push ecx
lea edx, [ebp - 0x7580]
lea ecx, [ebp - 0x4e70]
call fcn.0042f08e
pop ecx
test eax, eax
je 0x42f6d5
lea eax, [ebp - 0x4e70]
mov ecx, ebx
push eax
push esi
lea eax, [ebp - 0xc3a0]
push eax
call fcn.0042f157
lea eax, [ebp - 0x7580]
mov ecx, ebx
push eax
push esi
lea eax, [ebp - 0xc3a0]
push eax
call fcn.0042f157
xor eax, eax
inc eax
jmp 0x42f6d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret