Function at 0x480ee0
Capabilities:
Get session user name

Disassembly:
sub esp, 0xa9c
push ebx
xor ebx, ebx
push ebp
push esi
mov esi, dword [esp + 0xaac]
push edi
cmp esi, ebx
jne 0x480f08
mov ax, 0x10
pop edi
pop esi
pop ebp
pop ebx
sub esp, 0xfffff564
ret 4
mov eax, dword [esi + 0x54]
mov ecx, dword [0x50000c]
push ecx
push eax
call fcn.004815c0
add esp, 8
mov ebp, eax
cmp ebp, ebx
jne 0x480f32
pop edi
pop esi
mov ax, 2
pop ebp
pop ebx
add esp, 0xa9c
ret 4
cmp word [ebp + 0x44], bx
jne 0x480f49
pop edi
mov ax, 0x47
pop esi
pop ebp
pop ebx
add esp, 0xa9c
ret 4
cmp dword [ebp + 0x1b0], 0x18
jne 0x480f63
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa9c
mov ax, 0x48
ret 4
lea edi, [esp + 0x1cc]
mov byte [esp + 0x24], bl
mov ecx, 0x64
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [esp + 0x4ec]
mov ecx, 0x64
rep stosd dword es:[edi], eax
mov byte [esp + 0x18], bl
lea edi, [esp + 0x35c]
mov ecx, 0x64
mov byte [esp + 0x5c], bl
mov byte [esp + 0x74], bl
mov byte [esp + 0xe0], bl
mov byte [esp + 0x18c], bl
mov byte [esp + 0xa0], bl
mov byte [esp + 0x14c], bl
mov byte [esp + 0x10c], bl
mov byte [esp + 0x30], bl
mov byte [esp + 0x80], bl
mov byte [esp + 0x50], bl
rep stosd dword es:[edi], eax
movsx edx, word [ebp + 0x5a]
lea ecx, [esp + 0x24]
mov ax, word [ebp + edx*2 + 0x46]
push eax
push 0x4eb20c
push ecx
call fcn.004a778b
lea eax, [esp + 0x68]
xor edx, edx
mov dx, word [ebp + 0x42]
push edx
push 0x4eb20c
push eax
call fcn.004a778b
xor ecx, ecx
lea edx, [esp + 0x30]
mov cx, word [ebp + 0x44]
push ecx
push 0x4eb20c
push edx
call fcn.004a778b
lea ecx, [esp + 0x11c]
mov eax, dword [0x4fd0e8]
push eax
push 0x4eb208
push ecx
call fcn.004a778b
lea eax, [esp + 0xbc]
mov edx, dword [ebp + 0x1a8]
push edx
push 0x4eb208
push eax
call fcn.004a778b
push 0x294
lea ecx, [esp + 0x12c]
push 0x4eb20c
push ecx
call fcn.004a778b
add esp, 0x48
lea edx, [esp + 0x80]
push ebx
push 0x4eb20c
push edx
call fcn.004a778b
push ebx
lea eax, [esp + 0x60]
push 0x4eb20c
push eax
call fcn.004a778b
sub esp, 0xffffffe8
cmp word [ebp + 0x1ac], bx
jne 0x4810b9
push ebx
lea ecx, [esp + 0xfc]
push 0x4eb208
push ecx
call fcn.004a778b
push ebx
lea edx, [esp + 0x9c]
push 0x4eb208
push edx
call fcn.004a778b
sub esp, 0xffffffe8
cmp word [ebp + 0x1ac], 1
jne 0x4810e2
cmp word [ebp + 0x1ae], bx
jne 0x4810e2
push ebx
lea eax, [esp + 0x90]
push 0x4eb208
push eax
call fcn.004a778b
add esp, 0xc
lea ecx, [esp + 0x18c]
push 0x40
push ecx
push esi
mov dword [ebp + 0x5c], ebx
mov word [ebp + 0x44], bx
call fcn.0047e670
cmp ax, bx
jne 0x4814cd
lea edx, [esp + 0x10c]
push 0x40
push edx
call fcn.0047bb60
add esp, 8
or eax, eax
jne 0x481138
lea eax, [esp + 0x30]
push ebx
lea ecx, [esp + 0x110]
push eax
push ecx
call fcn.0047b040
sub esp, 0xfffffff4
test eax, eax
je 0x481138
mov byte [esp + 0x30], bl
jmp 0x48113e
cmp byte [esp + 0x30], bl
jne 0x481170
lea edx, [esp + 0x30]
push 0x40
push edx
call fcn.0047b4c0
add esp, 8
or eax, eax
je 0x481170
mov cx, word [0x4eb214]
mov eax, dword [str.NoName]
mov dl, byte [0x4eb216]
mov dword [esp + 0x30], eax
mov word [esp + 0x34], cx
mov byte [esp + 0x36], dl
lea eax, [esp + 0x18c]
push str.RNBO_SPN_LOCAL
push eax
call fcn.004b1f1c
sub esp, 0xfffffff8
or eax, eax
jne 0x4811cb
mov eax, dword [0x4ea2a8]
mov edx, dword [0x4ea2a4]
mov ecx, dword [str.RNBO_SPN_LOCAL]
mov dword [esp + 0x10c], ecx
mov cx, word [0x4ea2ac]
mov dword [esp + 0x110], edx
mov dl, byte [0x4ea2ae]
mov dword [esp + 0x114], eax
mov word [esp + 0x118], cx
mov byte [esp + 0x11a], dl
lea ecx, [esp + 0xa0]
lea eax, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x1c], 0x40
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
cmp eax, 1
jne 0x481237
lea edx, [esp + 0x14c]
push 0x40
lea eax, [esp + 0xa4]
push edx
push eax
call fcn.00489f70
add esp, 0xc
cmp eax, 0xffffffff
je 0x481237
or ecx, 0xffffffff
not ecx
lea edx, [esp + 0xa0]
xor eax, eax
lea edi, [esp + 0x14c]
repne scasb al, byte es:[edi]
mov eax, ecx
sub edi, ecx
shr ecx, 2
mov esi, edi
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x48125f
mov esi, dword [str.NoName]
mov dx, word [0x4eb214]
mov al, byte [0x4eb216]
mov dword [esp + 0xa0], esi
mov word [esp + 0xa4], dx
mov byte [esp + 0xa6], al
mov ecx, dword [ebp + 0x6c]
lea edx, [esp + 0x74]
push ecx
push 0x4eb208
push edx
call fcn.004a778b
lea eax, [esp + 0x5c]
lea esi, [esp + 0xf8]
push esi
lea esi, [esp + 0x90]
push eax
lea ecx, [esp + 0xa0]
push esi
lea edx, [esp + 0x110]
push ecx
lea ecx, [esp + 0x4c]
push edx
lea edx, [esp + 0x12c]
push ecx
lea esi, [esp + 0xc4]
push edx
lea ecx, [esp + 0x9c]
push esi
lea eax, [esp + 0x88]
push ecx
lea ecx, [esp + 0x48]
push eax
lea edx, [esp + 0x58]
push ecx
push edx
push 0xc
push 0x4eb204
call fcn.0048ad40
mov edx, eax
add esp, 0x44
cmp edx, ebx
jne 0x4812e3
push ebp
push 0x4a
jmp 0x4814c5
mov edi, edx
lea esi, [esp + 0x4ec]
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x10], esi
repne scasb al, byte es:[edi]
not ecx
mov eax, ecx
sub edi, ecx
shr ecx, 2
mov esi, edi
mov edi, dword [esp + 0x10]
rep movsd dword es:[edi], dword [esi]
push edx
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004a7a46
lea edx, [esp + 0x4f0]
lea ecx, [esp + 0xe4]
push ecx
push edx
push str.findNextUnitEx2
push 3
push 0x4eb0f4
call fcn.0048ad40
mov edx, eax
sub esp, 0xffffffe8
cmp edx, ebx
jne 0x481347
push ebp
push 0x4a
jmp 0x4814c5
or ecx, 0xffffffff
xor eax, eax
not ecx
mov edi, edx
repne scasb al, byte es:[edi]
lea eax, [esp + 0x35c]
mov dword [esp + 0x10], eax
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x10]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
call fcn.004a7a46
lea ecx, [esp + 0x360]
push ecx
call fcn.0048ae20
add esp, 8
mov edx, eax
cmp edx, ebx
jne 0x481397
push ebp
push 0x4a
jmp 0x4814c5
mov edi, edx
lea esi, [esp + 0x35c]
or ecx, 0xffffffff
not ecx
mov dword [esp + 0x10], esi
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, ecx
sub edi, ecx
mov esi, edi
shr ecx, 2
mov edi, dword [esp + 0x10]
push edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004a7a46
lea edx, [esp + 0x360]
lea ecx, [esp + 0x1d0]
push ecx
push ebp
push edx
call fcn.004884c0
add esp, 0x10
cmp ax, bx
je 0x4813fe
push ebp
push eax
call fcn.0047ec10
sub esp, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa9c
ret 4
lea eax, [esp + 0x1cc]
push eax
call fcn.0048ab10
add esp, 4
mov esi, eax
cmp esi, ebx
jne 0x48141c
push ebp
push 0x42
jmp 0x4814c5
lea ecx, [esp + 0x1cc]
lea edx, [esp + 0x80c]
push ecx
lea eax, [esp + 0x680]
push edx
push eax
push esi
push 3
push 0x4eb0f4
call fcn.0048a970
push esi
mov edi, eax
mov dword [esp + 0x2c], edi
call fcn.004a7a46
add esp, 0x1c
cmp di, bx
je 0x48145a
push ebp
push 0x42
jmp 0x4814c5
mov byte [esp + 0x80b], bl
lea esi, [esp + 0x67c]
mov edi, str.error
mov byte [esp + 0x99b], bl
mov dl, byte [edi]
mov cl, byte [esi]
cmp cl, dl
mov al, cl
jne 0x48149c
cmp al, bl
je 0x481498
mov cl, byte [edi + 1]
mov dl, byte [esi + 1]
cmp dl, cl
mov al, dl
jne 0x48149c
sub esi, 0xfffffffe
add edi, 2
cmp al, bl
jne 0x481474
xor eax, eax
jmp 0x4814a1
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4814da
lea eax, [esp + 0x80c]
push eax
call fcn.004b0ee6
mov esi, eax
add esp, 4
cmp si, 0x46
je 0x4814de
cmp si, 0x50
je 0x4814de
push ebp
push esi
call fcn.0047ecf0
sub esp, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa9c
ret 4
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x68]
lea edx, [esp + 0x24]
push eax
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x1d4]
push eax
push ecx
push 3
push 0x4eb204
call fcn.0048a970
add esp, 0x18
or eax, eax
je 0x48150d
push ebp
push 0x42
jmp 0x4814c5
mov byte [esp + 0x73], bl
movsx edi, word [ebp + 0x5a]
cmp edi, 9
jge 0x481521
inc edi
mov word [ebp + 0x5a], di
jmp 0x481527
xor edi, edi
mov word [ebp + 0x5a], bx
lea edx, [esp + 0x18]
push edx
call fcn.004b0ee6
mov word [ebp + 0x44], ax
lea eax, [esp + 0x28]
push eax
call fcn.004b0ee6
lea ecx, [esp + 0x70]
mov word [ebp + edi*2 + 0x46], ax
push ecx
call fcn.004b0ee6
mov word [ebp + 0x1a4], ax
sub esp, 0xfffffff4
cmp si, bx
jne 0x48159d
lea edx, [ebp + 0x64]
push edx
call fcn.004beed4
mov eax, dword [ebp + 0x60]
mov esi, dword [esp + 0xab4]
add esp, 4
mov dword [ebp + 0x68], 0x78
push eax
push esi
call fcn.00483070
lea ecx, [esp + 0x99c]
push pe_nt_image_headers32
push ecx
push ebx
push ebx
push ebx
push esi
call fcn.004837f0
mov esi, eax
mov dword [esp + 0x10], eax
cmp si, 0x50
jne 0x4814c3
pop edi
mov ax, 0x46
pop esi
pop ebp
pop ebx
add esp, 0xa9c
ret 4