Function at 0x424b8a
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbec
push ebx
push esi
push edi
mov dword [ebp - 0xa5c], 0
push 0x190
push 0
lea eax, [ebp - 0x8c8]
push eax
call fcn.0042f0a0
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0x554]
push eax
call fcn.0042f0a0
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.0042f0a0
add esp, 0xc
mov byte [ebp - 0x738], 0
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x598], 0
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0x64], 0
push 0x40
lea eax, [ebp - 0xa4]
push eax
call fcn.0042c16e
add esp, 8
test eax, eax
jne 0x424c39
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00429ded
add esp, 0xc
test eax, eax
je 0x424c39
mov byte [ebp - 0x64], 0
movsx eax, byte [ebp - 0x64]
test eax, eax
jne 0x424c6c
push 0x40
lea eax, [ebp - 0x64]
push eax
call fcn.0042b6fd
add esp, 8
test eax, eax
je 0x424c6c
push 0x44d880
lea eax, [ebp - 0x64]
push eax
call fcn.0042fbf0
add esp, 8
push 0x44d888
mov eax, dword [ebp + 0x10]
push eax
call fcn.0042fd20
add esp, 8
test eax, eax
jne 0x424c99
push 0x44d890
lea eax, [ebp - 0xa4]
push eax
call fcn.0042fbf0
add esp, 8
mov dword [ebp - 0x72c], 0x40
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
cmp eax, 1
jne 0x424d09
push 0x40
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00427be1
add esp, 0xc
cmp eax, 0xffffffff
jne 0x424cf1
push 0x44d898
lea eax, [ebp - 0x44]
push eax
call fcn.0042fbf0
add esp, 8
jmp 0x424d04
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0042fbf0
add esp, 8
jmp 0x424d1a
push str.NoName
lea eax, [ebp - 0x44]
push eax
call fcn.0042fbf0
add esp, 8
push 0x44d8a8
mov eax, dword [ebp + 0xc]
and eax, 0xffff
push eax
push 0x44d8ac
lea eax, [ebp - 0x64]
push eax
push 0x44d8b0
lea eax, [ebp - 0xa4]
push eax
push 0x44d8b4
lea eax, [ebp - 0x44]
push eax
push 0x44d8b8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x6c]
push eax
push str._d_s_s_s_s_s_s_s_d_s
lea eax, [ebp - 0x234]
push eax
call fcn.0042f1df
add esp, 0x30
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x234]
push eax
push str.findFirstUnit
push 3
push 0x44d8e4
call fcn.0042795c
add esp, 0x14
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x424da4
mov ax, 0x4a
jmp 0x425027
mov eax, dword [ebp - 0x558]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.0042fbf0
add esp, 8
mov eax, dword [ebp - 0x558]
push eax
call fcn.004306be
add esp, 4
lea eax, [ebp - 0x554]
push eax
call fcn.00427af4
add esp, 4
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x424df4
mov ax, 0x4a
jmp 0x425027
mov eax, dword [ebp - 0x558]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.0042fbf0
add esp, 8
mov eax, dword [ebp - 0x558]
push eax
call fcn.004306be
add esp, 4
lea eax, [ebp - 0x8c8]
push eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x554]
push eax
call fcn.00426cfe
add esp, 0xc
mov word [ebp - 4], ax
test dword [ebp - 4], 0xffff
je 0x424e59
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.0042523c
add esp, 8
jmp 0x425027
lea eax, [ebp - 0x8c8]
push eax
call fcn.00425b07
add esp, 4
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jne 0x424e84
mov ax, 0x42
jmp 0x425027
push 0xc
push 0
lea eax, [ebp - 0x738]
push eax
call fcn.0042f0a0
add esp, 0xc
push 0x190
push 0
lea eax, [ebp - 0xbec]
push eax
call fcn.0042f0a0
add esp, 0xc
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0xbec]
push eax
lea eax, [ebp - 0xa58]
push eax
mov eax, dword [ebp - 0x558]
push eax
push 3
push 0x44d8e8
call fcn.00425953
add esp, 0x18
mov word [ebp - 4], ax
test dword [ebp - 4], 0xffff
je 0x424ef2
mov ax, 0x42
jmp 0x425027
mov eax, dword [ebp - 0x558]
push eax
call fcn.004306be
add esp, 4
mov word [ebp - 4], 0
push 0x44d8ec
lea eax, [ebp - 0xa58]
push eax
call fcn.0042fd20
add esp, 8
test eax, eax
jne 0x424f51
lea eax, [ebp - 0xbec]
push eax
call fcn.0042f6c2
add esp, 4
mov word [ebp - 4], ax
mov ecx, dword [ebp - 4]
and ecx, 0xffff
cmp ecx, 0x46
je 0x424f51
mov ax, word [ebp - 4]
jmp 0x425027
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x8c8]
push eax
push 2
push 0x44d8f4
call fcn.00425953
add esp, 0x14
test eax, eax
je 0x424f86
mov ax, 0x42
jmp 0x425027
lea eax, [ebp - 0x3c4]
push eax
call fcn.0042f6c2
add esp, 4
mov ecx, dword [ebp + 8]
mov word [ecx + 0x44], ax
mov ax, word [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov word [ecx + 0x42], ax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00424ad6
add esp, 8
mov eax, dword [ebp - 4]
and eax, 0xffff
cmp eax, 0x46
je 0x42501e
mov eax, dword [ebp + 8]
movsx eax, word [eax + 0x5a]
mov dword [ebp - 0xa5c], eax
inc dword [ebp - 0xa5c]
mov eax, dword [ebp - 0xa5c]
mov ecx, dword [ebp + 8]
mov word [ecx + 0x5a], ax
lea eax, [ebp - 0x728]
push eax
call fcn.0042f6c2
add esp, 4
mov ecx, dword [ebp - 0xa5c]
mov edx, dword [ebp + 8]
mov word [edx + ecx*2 + 0x46], ax
mov eax, dword [ebp + 8]
add eax, 0x64
push eax
call fcn.00431563
add esp, 4
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 0x78
mov ax, word [ebp - 4]
jmp 0x425027
pop edi
pop esi
pop ebx
leave
ret