Function at 0x4195b0
Capabilities:
Get session user name

Disassembly:
sub esp, 0x12c
push ebx
xor eax, eax
push ebp
push esi
xor ebx, ebx
mov dword [0x457300], eax
push edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ebx
mov dword [0x457304], eax
call fcn.00419a50
mov ebp, dword [esp + 0x148]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
xor edi, edi
call esi
test eax, eax
jle 0x41960b
movsx ecx, byte [edi + ebp]
push ecx
call fcn.004311f8
add esp, 4
mov byte [edi + ebp], al
inc edi
push ebp
call esi
cmp edi, eax
jl 0x4195f3
push ebp
mov dword [esp + 0x1c], ebx
xor edi, edi
call esi
test eax, eax
jle 0x41979b
mov al, byte [edi + ebp]
lea ebx, [edi + ebp]
cmp al, 0x20
jle 0x419776
push 0x441b9c
mov dword [esp + 0x1c], 1
call esi
push eax
push 0x441b9c
push ebx
call fcn.004311c0
add esp, 0xc
test eax, eax
jne 0x41965e
mov dword [esp + 0x20], 1
push 0x441b9c
jmp 0x419772
push 0x441b88
call esi
push eax
push 0x441b88
push ebx
call fcn.004311c0
add esp, 0xc
test eax, eax
jne 0x41968a
mov dword [esp + 0x14], 1
push 0x441b88
jmp 0x419772
push 0x441b94
call esi
push eax
push 0x441b94
push ebx
call fcn.004311c0
add esp, 0xc
test eax, eax
jne 0x4196b6
mov dword [esp + 0x1c], 1
push 0x441b94
jmp 0x419772
push 0x441bb0
call esi
push eax
push 0x441bb0
push ebx
call fcn.004311c0
add esp, 0xc
test eax, eax
jne 0x4196fa
push 0x457300
mov dword [0x457304], 1
call fcn.00429cb0
add esp, 4
push 0x441bb0
call esi
add edi, eax
mov dword [esp + 0x18], 0
jmp 0x419776
push 0x441ba8
call esi
push eax
push 0x441ba8
push ebx
call fcn.004311c0
add esp, 0xc
test eax, eax
jne 0x419784
push 0x441ba8
mov dword [esp + 0x14], 1
call esi
add edi, eax
lea edx, [esp + 0x24]
mov cl, byte [edi + ebp]
lea eax, [edi + ebp]
cmp cl, 0x20
jne 0x419741
test cl, cl
je 0x419741
mov cl, byte [eax + 1]
inc eax
cmp cl, 0x20
je 0x419734
mov cl, byte [eax]
cmp cl, 0x20
je 0x419758
test cl, cl
je 0x419758
mov byte [edx], cl
mov cl, byte [eax + 1]
inc edx
inc eax
cmp cl, 0x20
jne 0x419748
mov byte [edx], 0
lea edx, [esp + 0x24]
push edx
call fcn.004311ac
add esp, 4
mov dword [0x4573e8], eax
lea eax, [esp + 0x24]
push eax
call esi
add edi, eax
push ebp
inc edi
call esi
cmp edi, eax
jl 0x41961c
jmp 0x419789
call fcn.00419ec0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4197b8
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4197b8
xor ebx, ebx
call fcn.0041a470
test eax, eax
jne 0x4197ba
call fcn.00429050
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
xor ebx, ebx
mov ecx, dword [esp + 0x140]
mov dword [0x4572fc], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x4572f8], eax
call fcn.00428a00
test eax, eax
jne 0x419803
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x44f15c
call fcn.00424580
add esp, 8
call fcn.00429050
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
mov esi, 1
mov dword [0x457310], esi
call fcn.00428d70
mov ebp, dword [esp + 0x20]
cmp ebp, ebx
jne 0x41982c
push ebx
call fcn.00419b10
add esp, 4
test eax, eax
je 0x4197a4
call fcn.00428ca0
call fcn.00423930
test eax, eax
je 0x419844
call fcn.00419e00
mov dword [0x457400], eax
cmp dword [esp + 0x10], ebx
je 0x419851
call fcn.00428be0
jmp 0x419856
call fcn.00428b30
cmp dword [esp + 0x1c], ebx
je 0x419873
call fcn.00429050
call fcn.00424230
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
call fcn.00423930
test eax, eax
je 0x4198d6
call fcn.00419e00
cmp eax, ebx
jne 0x41988b
mov dword [0x45730c], esi
cmp eax, ebx
mov dword [0x457400], eax
jne 0x4198d6
call fcn.00428ca0
test eax, eax
jne 0x4198d6
mov eax, dword [0x458394]
mov dword [0x457310], ebx
cmp eax, ebx
je 0x4198c5
push esi
call fcn.00428a30
add esp, 4
test eax, eax
jne 0x4197a4
cmp dword [0x458394], ebx
jne 0x4198d6
push ebx
call fcn.00428a30
add esp, 4
test eax, eax
jne 0x4197a4
cmp dword [esp + 0x14], ebx
je 0x4198ee
call fcn.00423fa0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
mov edi, dword [esp + 0x18]
cmp edi, ebx
jne 0x41994c
call fcn.00423930
test eax, eax
jne 0x41994c
lea edx, [esp + 0x10]
lea eax, [esp + 0x38]
push edx
push eax
mov dword [esp + 0x18], 0x104
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [esp + 0x38]
push 0x44cf78
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x41994c
push 0x57
push 0x44f088
call fcn.00424580
add esp, 8
call fcn.00423cb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
cmp ebp, ebx
je 0x419962
call fcn.00423cb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10
cmp edi, ebx
jne 0x4197a9
call fcn.00423930
test eax, eax
jne 0x4199e0
push 0x44f000
call fcn.00424650
mov eax, dword [0x457310]
add esp, 4
cmp eax, ebx
jne 0x419992
call fcn.00428ca0
test eax, eax
je 0x41999e
cmp dword [0x4573fc], ebx
jne 0x419a38
cmp dword [0x458394], ebx
je 0x4199bf
push esi
call fcn.00428a30
add esp, 4
test eax, eax
jne 0x4197a4
cmp dword [0x458394], ebx
jne 0x419a38
push ebx
call fcn.00428a30
add esp, 4
test eax, eax
je 0x419a38
call fcn.00429050
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x12c
ret 0x10
call fcn.00423930
test eax, eax
je 0x4197a9
cmp dword [0x457310], ebx
jne 0x4199fe
call fcn.00428ca0
test eax, eax
je 0x419a06
cmp dword [0x4573fc], ebx
jne 0x419a38
cmp dword [0x458394], ebx
je 0x419a27
push esi
call fcn.00428a30
add esp, 4
test eax, eax
jne 0x4197a4
cmp dword [0x458394], ebx
jne 0x419a38
push ebx
call fcn.00428a30
add esp, 4
test eax, eax
jne 0x4197a4
push ebx
call fcn.0041a000
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret 0x10