Function at 0x43507f
Capabilities:
Get session user name
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fd0
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
push esi
mov edi, edx
mov dword [ebp - 0x1fc8], ecx
mov dword [ebp - 0x1fb8], 0x3e8
mov byte [ebx], 0
call fcn.00643470
lea edx, [ebp - 0x17e4]
mov ecx, esi
call fcn.004020b3
mov esi, eax
pop ecx
test esi, esi
je 0x4351e0
cmp edi, 0x33
jl 0x4350ee
sub esi, 0x20
cmp esi, 0x3e8
jae 0x435345
mov byte [ebp + esi - 0x17e4], 0
cmp esi, 1
jl 0x4351e0
push 0x3e7
lea eax, [ebp - 0x45b]
mov dword [ebp - 0x1fc0], 0x3e8
push 0
push eax
mov byte [ebp - 0x45c], 0
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x1014], 0
lea eax, [ebp - 0x1013]
push 0x3e7
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x844], 0
lea eax, [ebp - 0x843]
push 0x3e7
push 0
push eax
call fcn.006390b0
add esp, 0xc
mov dword [ebp - 0x1fc4], 0x44
xor eax, eax
mov word [ebp - 0x1fb4], ax
push 0x7ce
push eax
lea eax, [ebp - 0x1fb2]
push eax
call fcn.006390b0
add esp, 0xc
cmp edi, 0x33
jl 0x43522a
lea eax, [ebp - 0x1fbc]
mov dword [ebp - 0x1fbc], 0x3e8
push eax
lea eax, [ebp - 0x45c]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x1fcc]
push eax
lea eax, [ebp - 0x1fc0]
push eax
lea eax, [ebp - 0x1014]
push eax
lea eax, [ebp - 0x1fc4]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x45c]
push eax
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
test eax, eax
jne 0x4351f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret
push 0x3e8
lea edx, [ebp - 0x1fb4]
lea ecx, [ebp - 0x74]
call fcn.0040525e
pop ecx
test eax, eax
je 0x4351e0
xor ecx, ecx
lea eax, [ebp - 0x844]
push ecx
push ecx
push 0x3e8
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x1fb4]
push eax
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x28], 0x35986e30
mov dword [ebp - 0x24], 0xd29192de
mov dword [ebp - 0x20], 0xb228bb27
mov dword [ebp - 0x1c], 0x33ca2df7
mov dword [ebp - 0x18], 0x7e9b2dba
mov dword [ebp - 0x14], 0xd173ca9c
mov dword [ebp - 0x10], 0x7267b252
mov dword [ebp - 0xc], 0x5ef52d66
cmp edi, 0x33
jge 0x435293
cmp dword [ebp - 0x1fc8], 0x15d
lea ecx, [ebp - 0x28]
push 0x10
pop edi
lea eax, [ebp - 0x18]
cmove eax, ecx
push edi
push eax
lea eax, [ebp - 0x13fc]
push eax
call fcn.00638b30
add esp, 0xc
jmp 0x435320
je 0x4352c3
cmp edi, 0x34
je 0x4352c3
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x45c]
push eax
push str._s_s
lea eax, [ebp - 0xc2c]
push 0x3e8
push eax
call fcn.00402e0a
add esp, 0x14
jmp 0x4352e3
lea eax, [ebp - 0x844]
push eax
push 0x6c7474
lea eax, [ebp - 0xc2c]
push 0x3e8
push eax
call fcn.00402e0a
add esp, 0x10
lea eax, [ebp - 0x1fb8]
push eax
lea eax, [ebp - 0x13fc]
push eax
lea eax, [ebp - 0xc2c]
push eax
call fcn.00643470
pop ecx
push eax
lea edx, [ebp - 0xc2c]
mov ecx, 0x800c
call fcn.0040a733
add esp, 0xc
test eax, eax
je 0x4351e0
mov edi, dword [ebp - 0x1fb8]
push ecx
push ebx
lea eax, [ebp - 0x13fc]
mov edx, esi
push edi
push eax
lea ecx, [ebp - 0x17e4]
call fcn.00404c24
add esp, 0x10
neg eax
sbb eax, eax
neg eax
jmp 0x4351e2
call fcn.00612782
int3