Function at 0x4a03d0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b6cf9
mov eax, dword fs:[0]
push eax
sub esp, 0xeb4
mov eax, dword [0x64786c]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe98], ecx
mov ecx, dword [ebp - 0xe98]
add ecx, 0x144
call fcn.004032f0
push eax
lea ecx, [ebp - 0x430]
call fcn.00415e40
mov dword [ebp - 4], 0
push 0xc
call fcn.005971c5
add esp, 4
mov dword [ebp - 0xa44], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0xa44], 0
je 0x4a0480
lea ecx, [ebp - 0x430]
call fcn.00415eb0
push eax
lea ecx, [ebp - 0x430]
call fcn.00403d90
push eax
lea ecx, [ebp - 0x430]
call fcn.00403da0
mov ecx, eax
call fcn.004032f0
push eax
mov ecx, dword [ebp - 0xa44]
call fcn.00416000
mov dword [ebp - 0xe9c], eax
jmp 0x4a048a
mov dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0xa40], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0
jne 0x4a04d0
mov dword [ebp - 0xa48], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.00404240
mov eax, dword [ebp - 0xa48]
jmp 0x4a0fa6
mov edx, dword [ebp - 0xe98]
xor eax, eax
cmp dword [edx + 0x60], 0x8f
setne al
mov dword [ebp - 0x434], eax
lea ecx, [ebp - 0x468]
call fcn.004969f0
mov byte [ebp - 4], 2
mov byte [ebp - 0x41c], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x41b]
push ecx
call fcn.00597130
add esp, 0xc
push 0
push str.app_key
push 0x5bf704
lea ecx, [ebp - 0x468]
call fcn.00403f60
mov dword [ebp - 0x14], eax
push 0
push str.tray
push 0x5bf714
lea ecx, [ebp - 0x468]
call fcn.00403f10
mov dword [ebp - 0x43c], eax
mov edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
and edx, 3
push edx
push 0x400
lea eax, [ebp - 0x41c]
push eax
call fcn.004075e0
add esp, 0xc
push 0
push 0x5bf71c
push 0x5bf720
lea ecx, [ebp - 0x468]
call fcn.00403f10
cmp eax, 1
jne 0x4a068d
mov ecx, 0x7c
mov word [ebp - 0x56c], cx
push 0xfe
push 0
lea edx, [ebp - 0x56a]
push edx
call fcn.00597130
add esp, 0xc
mov dword [ebp - 0x570], 0x7f
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x56a]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x4a068d
push 0x5bf728
lea edx, [ebp - 0x56a]
push edx
call fcn.0059943e
add esp, 8
test eax, eax
je 0x4a068d
lea eax, [ebp - 0x56c]
push eax
lea ecx, [ebp - 0xa50]
call fcn.00496850
mov dword [ebp - 0xea0], eax
mov ecx, dword [ebp - 0xea0]
mov dword [ebp - 0xea4], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xea4]
call fcn.00415eb0
push eax
lea edx, [ebp - 0x41c]
push edx
call fcn.00597ab0
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa50]
call fcn.00401c80
mov byte [ebp - 0x580], 0x7c
xor eax, eax
mov dword [ebp - 0x57f], eax
mov dword [ebp - 0x57b], eax
mov dword [ebp - 0x577], eax
mov word [ebp - 0x573], ax
mov byte [ebp - 0x571], al
lea ecx, [ebp - 0x57f]
push ecx
call fcn.004a87d0
add esp, 4
lea edx, [ebp - 0x580]
push edx
lea eax, [ebp - 0x41c]
push eax
call fcn.00597ab0
add esp, 8
cmp dword [0x653730], 1
jg 0x4a06b6
lea ecx, [ebp - 0x413]
push ecx
push 0x5bf738
push 0x57f
push 0x5bf73c
push 1
call fcn.00401320
add esp, 0x14
mov edx, dword [ebp - 0xe98]
mov byte [edx + 0x12e], 0
cmp dword [ebp - 0x14], 0
je 0x4a08b3
mov dword [ebp - 0x58c], 0
push 0x100
lea ecx, [ebp - 0x588]
call fcn.00402e40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x584]
call fcn.00404b50
mov byte [ebp - 4], 5
push 0
push 1
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0xc54]
call fcn.004a8c50
mov ecx, eax
call fcn.004a8c90
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
push str._custom_appkey_verify.12x_key_stray_dsn_s
lea eax, [ebp - 0x588]
push eax
call fcn.004aadd0
add esp, 0x14
push 0
push 0xb9
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.0049fb90
mov ecx, 1
test ecx, ecx
je 0x4a0886
mov dword [ebp - 0x594], 0x2710
mov dword [ebp - 0x590], 0xffffffff
lea edx, [ebp - 0x584]
push edx
lea ecx, [ebp - 0x588]
call fcn.004032f0
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.004a0fc0
add esp, 0xc
test eax, eax
jne 0x4a082c
lea ecx, [ebp - 0x584]
call fcn.004032f0
push eax
lea ecx, [ebp - 0x5a8]
call fcn.00405120
mov byte [ebp - 4], 6
push 0xfffffffffffffffe
push 0x5bf77c
lea ecx, [ebp - 0x5a8]
call fcn.00405290
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0
jne 0x4a07e6
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5a8]
call fcn.00405190
jmp 0x4a0886
cmp dword [ebp - 0x590], 0xffffffff
jne 0x4a0803
mov ecx, dword [ebp - 0x58c]
add ecx, 0x3e8
mov dword [ebp - 0x58c], ecx
jmp 0x4a081b
push 0
push str.delay
lea ecx, [ebp - 0x5a8]
call fcn.00405290
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5a8]
call fcn.00405190
jmp 0x4a083e
mov edx, dword [ebp - 0x58c]
add edx, 0x3e8
mov dword [ebp - 0x58c], edx
mov eax, dword [ebp - 0x590]
push eax
push 0xb8
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.0049fb90
cmp dword [ebp - 0x58c], 0xea60
jbe 0x4a086e
mov dword [ebp - 0x58c], 0xea60
mov ecx, dword [ebp - 0x594]
add ecx, dword [ebp - 0x58c]
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4a074c
mov edx, dword [ebp - 0xe98]
mov byte [edx + 0x12e], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x584]
call fcn.00402ea0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x588]
call fcn.00402ea0
jmp 0x4a08f2
cmp dword [ebp - 0x43c], 2
jne 0x4a08f2
mov dword [ebp - 0xc58], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x468]
call fcn.00496ae0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.00404240
mov eax, dword [ebp - 0xc58]
jmp 0x4a0fa6
mov ecx, dword [ebp - 0xe98]
add ecx, 0x80
call fcn.00401060
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0xc5c]
push ecx
call fcn.004ccdc0
add esp, 8
mov dword [ebp - 0xea8], eax
mov edx, dword [ebp - 0xea8]
mov dword [ebp - 0xeac], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0xeac]
push eax
mov ecx, dword [ebp - 0xe98]
add ecx, 0x6c
call fcn.00404b60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc5c]
call fcn.00402ea0
mov ecx, dword [ebp - 0xe98]
add ecx, 0x80
call fcn.00401070
push 0
push 0x5bf788
push 0x5bf78c
lea ecx, [ebp - 0x468]
call fcn.00403f10
mov dword [0x65483c], eax
cmp dword [0x65483c], 0
je 0x4a09ab
cmp dword [0x653730], 2
jg 0x4a09ab
push str.Screen_Dx_is_disabled_
push 0x5af
push 0x5bf7ac
push 2
call fcn.00401320
add esp, 0x10
cmp dword [ebp - 0x434], 0
je 0x4a0a2b
push 0
push 0x5bf7bc
push 0x5bf7c4
lea ecx, [ebp - 0x468]
call fcn.00403f60
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0
je 0x4a0a2b
mov ecx, dword [ebp - 0xe98]
add ecx, 0x80
call fcn.00401060
mov ecx, dword [ebp - 0x438]
push ecx
mov ecx, dword [ebp - 0xe98]
add ecx, 0x64
call fcn.00403950
mov ecx, dword [ebp - 0xe98]
add ecx, 0x80
call fcn.00401070
lea edx, [ebp - 0x468]
push edx
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.004a0030
jmp 0x4a0f1f
push 0
push 0x81
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.0049fb90
mov eax, 1
test eax, eax
je 0x4a0f1f
push 0x100
lea ecx, [ebp - 0x5b0]
call fcn.00402e40
mov byte [ebp - 4], 8
push str._reg.12x_sn
lea ecx, [ebp - 0x5b0]
call fcn.00403950
push 0
push 1
lea ecx, [ebp - 0x41c]
push ecx
lea ecx, [ebp - 0xe60]
call fcn.004a8c50
mov ecx, eax
call fcn.004a8c90
push eax
lea ecx, [ebp - 0x5b0]
call fcn.00406010
push 0x100
lea ecx, [ebp - 0x5ac]
call fcn.00402e40
mov byte [ebp - 4], 9
lea edx, [ebp - 0x5ac]
push edx
lea ecx, [ebp - 0x5b0]
call fcn.004032f0
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.004a0fc0
add esp, 0xc
test eax, eax
jne 0x4a0dd5
lea ecx, [ebp - 0x5ac]
call fcn.004032f0
push eax
lea ecx, [ebp - 0x5c8]
call fcn.00405120
mov byte [ebp - 4], 0xa
push 0
push 0x5bf7dc
lea ecx, [ebp - 0x5c8]
call fcn.00405250
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0
je 0x4a0dc1
mov ecx, dword [ebp - 0x5b4]
movsx edx, byte [ecx]
test edx, edx
je 0x4a0dc1
push 0
push 0x5bf7e0
push 0x5bf7e8
lea ecx, [ebp - 0x468]
call fcn.00403f60
test eax, eax
jne 0x4a0d4f
push 0x50
lea ecx, [ebp - 0xa3c]
call fcn.00404310
mov byte [ebp - 4], 0xb
push str.def.gotohttp.com
push 0x5bf804
lea ecx, [ebp - 0x5c8]
call fcn.00405460
push eax
lea ecx, [ebp - 0xa3c]
call fcn.004048a0
mov dword [ebp - 0x5cc], eax
lea ecx, [ebp - 0x430]
call fcn.00403da0
mov ecx, eax
call fcn.004032f0
test eax, eax
je 0x4a0d40
cmp dword [ebp - 0x5cc], 0
je 0x4a0d40
mov eax, dword [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x430]
call fcn.00403da0
mov ecx, eax
call fcn.004032f0
push eax
call fcn.0059744d
add esp, 8
test eax, eax
je 0x4a0d40
push 0x5bf80c
mov ecx, dword [ebp - 0xe98]
add ecx, 0x144
call fcn.00403950
mov ecx, dword [ebp - 0x5cc]
push ecx
mov ecx, dword [ebp - 0xe98]
add ecx, 0x144
call fcn.00406010
mov ecx, dword [ebp - 0xe98]
add ecx, 0x144
call fcn.004032f0
push eax
push 0x5bf818
push 0x5bf820
lea ecx, [ebp - 0x468]
call fcn.00496890
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xe68], edx
mov eax, dword [ebp - 0xe68]
mov dword [ebp - 0xe64], eax
cmp dword [ebp - 0xe64], 0
je 0x4a0c5d
push 1
mov ecx, dword [ebp - 0xe64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe64]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xeb0], eax
jmp 0x4a0c67
mov dword [ebp - 0xeb0], 0
push 0xc
call fcn.005971c5
add esp, 4
mov dword [ebp - 0xe70], eax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xe70], 0
je 0x4a0ca5
push 1
push 0x1bb
mov ecx, dword [ebp - 0x5cc]
push ecx
mov ecx, dword [ebp - 0xe70]
call fcn.00416000
mov dword [ebp - 0xeb4], eax
jmp 0x4a0caf
mov dword [ebp - 0xeb4], 0
mov edx, dword [ebp - 0xeb4]
mov dword [ebp - 0xe6c], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4a0d40
mov dword [ebp - 0xe74], 0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa3c]
call fcn.004044e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c8]
call fcn.00405190
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5ac]
call fcn.00402ea0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5b0]
call fcn.00402ea0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x468]
call fcn.00496ae0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.00404240
mov eax, dword [ebp - 0xe74]
jmp 0x4a0fa6
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa3c]
call fcn.004044e0
lea ecx, [ebp - 0x41c]
push ecx
mov edx, dword [ebp - 0x5b4]
push edx
lea eax, [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.004a10d0
test eax, eax
jne 0x4a0dc1
lea edx, [ebp - 0x468]
push edx
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.004a0030
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c8]
call fcn.00405190
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5ac]
call fcn.00402ea0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5b0]
call fcn.00402ea0
jmp 0x4a0f1f
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c8]
call fcn.00405190
jmp 0x4a0ef1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe7c], eax
mov ecx, dword [ebp - 0xe7c]
mov dword [ebp - 0xe78], ecx
cmp dword [ebp - 0xe78], 0
je 0x4a0e0f
push 1
mov edx, dword [ebp - 0xe78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xe78]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xeb8], eax
jmp 0x4a0e19
mov dword [ebp - 0xeb8], 0
push 0xc
call fcn.005971c5
add esp, 4
mov dword [ebp - 0xe84], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0xe84], 0
je 0x4a0e74
lea ecx, [ebp - 0x430]
call fcn.00415eb0
push eax
lea ecx, [ebp - 0x430]
call fcn.00403d90
push eax
lea ecx, [ebp - 0x430]
call fcn.00403da0
mov ecx, eax
call fcn.004032f0
push eax
mov ecx, dword [ebp - 0xe84]
call fcn.00416000
mov dword [ebp - 0xebc], eax
jmp 0x4a0e7e
mov dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0xe80], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xe80]
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0
jne 0x4a0ef1
mov dword [ebp - 0xe88], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5ac]
call fcn.00402ea0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5b0]
call fcn.00402ea0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x468]
call fcn.00496ae0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.00404240
mov eax, dword [ebp - 0xe88]
jmp 0x4a0fa6
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5ac]
call fcn.00402ea0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5b0]
call fcn.00402ea0
jmp 0x4a0a40
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0xe98]
sub ecx, 0x48
call fcn.004a1340
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe90], eax
mov ecx, dword [ebp - 0xe90]
mov dword [ebp - 0xe8c], ecx
cmp dword [ebp - 0xe8c], 0
je 0x4a0f6b
push 1
mov edx, dword [ebp - 0xe8c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xe8c]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xec0], eax
jmp 0x4a0f75
mov dword [ebp - 0xec0], 0
mov dword [ebp - 0xe94], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x468]
call fcn.00496ae0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.00404240
mov eax, dword [ebp - 0xe94]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0059709c
mov esp, ebp
pop ebp
ret