Function at 0x1000ae90
Capabilities:
Get session user name
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x191c
call fcn.10055c30
mov eax, dword [0x1009cbc0]
xor eax, esp
mov dword [esp + 0x1918], eax
push ebx
push esi
push edi
xor esi, esi
lea eax, [esp + 0x1c]
push 0x1904
push esi
push eax
mov dword [esp + 0x24], esi
call fcn.10055aa0
mov ecx, dword [0x100e2810]
add esp, 0xc
mov dword [esp + 0xc], esi
mov dword [0x1009dcac], esi
test ecx, ecx
je 0x1000b2da
call fcn.10019b00
mov ecx, dword [0x100e2810]
call fcn.1001b0a0
mov eax, dword [0x100e2810]
cmp dword [eax + 0x20], 1
jne 0x1000af29
lea eax, [esp + 0xc]
mov dword [esp + 0x18], 2
push eax
lea eax, [esp + 0xcd0]
mov dword [esp + 0x10], 0x201
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea ecx, [esp + 0x18]
call fcn.10003600
call fcn.100372c0
cmp dword [0x100e2810], esi
je 0x1000b2da
call fcn.1003ccd0
test eax, eax
je 0x1000af48
call fcn.10037c00
mov ecx, dword [0x100e2810]
cmp dword [ecx + 4], esi
jbe 0x1000af76
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
lea esp, [esp]
inc esi
cmp esi, 0x32
jge 0x1000af76
push 0x64
call edi
mov ecx, dword [0x100e2810]
cmp dword [ecx + 4], 0
ja 0x1000af60
cmp dword [ecx + 0x20], 1
mov dword [ecx], 0
jne 0x1000af8e
mov dword [ecx + 0x20], 0
call fcn.1000e230
call fcn.1000d5a0
push str.MBAE_IPC_PROTECTION_CHANNEL
call fcn.1003fce0
test eax, eax
jne 0x1000b08a
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
push 0x1000a
lea edi, [eax + 0x1e]
call fcn.1005218a
mov esi, eax
add esp, 4
test esi, esi
jne 0x1000aff7
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1918]
xor ecx, esp
call fcn.1005132c
mov esp, ebp
pop ebp
ret
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1000b051
push esi
push str.MbaeShutdown
push 1
mov edx, 0x3dc
mov byte [esi + 0xffff], 0
mov ecx, str...ApiNA.cpp
call fcn.10001cf0
add esp, 0x10
push esi
call fcn.10052152
add esp, 4
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1918]
xor ecx, esp
call fcn.1005132c
mov esp, ebp
pop ebp
ret
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1918]
xor ecx, esp
call fcn.1005132c
mov esp, ebp
pop ebp
ret
cmp dword [0x100e2818], 0
jne 0x1000b0a7
push 0x100404f0
mov dword [0x100e2818], 1
call fcn.10040500
mov esi, dword [0x100e2810]
mov eax, dword [esi + 0x426c]
test eax, eax
je 0x1000b0ca
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x426c], 0
mov eax, dword [esi + 0x628c]
test eax, eax
je 0x1000b0e7
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x628c], 0
mov eax, dword [esi + 0x4278]
test eax, eax
je 0x1000b104
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x4278], 0
mov eax, dword [esi + 0x62a0]
test eax, eax
je 0x1000b121
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x62a0], 0
mov eax, dword [esi + 0x62ac]
test eax, eax
je 0x1000b13e
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x62ac], 0
mov eax, dword [esi + 0x62c0]
test eax, eax
je 0x1000b15b
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x62c0], 0
mov eax, dword [esi + 0x4260]
test eax, eax
je 0x1000b178
push eax
call fcn.10052152
add esp, 4
mov dword [esi + 0x4260], 0
mov eax, dword [0x100e2814]
test eax, eax
je 0x1000b2b4
push 0x2710
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x10], eax
test eax, eax
je 0x1000b298
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1000a
mov dword [esp + 0x18], 0
lea ebx, [eax + 0x1e]
call fcn.1005218a
add esp, 4
mov edi, eax
push 0x2000a
call fcn.1005218a
add esp, 4
mov esi, eax
test edi, edi
je 0x1000b266
test esi, esi
je 0x1000b266
push dword [esp + 0x10]
push str.WaitForSingleObject_HotFilesThread:__d
push 0xffff
push esi
call fcn.1005211a
add esp, 0x10
test eax, eax
jle 0x1000b251
xor eax, eax
mov ecx, esi
push 0xffffffffffffffff
push esi
mov word [esi + 0x1fffe], ax
call fcn.10001b80
inc eax
push eax
lea eax, [esp + 0x20]
push edi
push eax
call fcn.10052d14
add esp, 0x14
test eax, eax
je 0x1000b234
push ebx
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.10052604
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
push edi
push str.MbaeShutdown
push 1
mov edx, 0x3f7
mov ecx, str...ApiNA.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1000b27e
push ebx
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x1000b278
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test edi, edi
je 0x1000b28b
push edi
call fcn.10052152
add esp, 4
test esi, esi
je 0x1000b298
push esi
call fcn.10052152
add esp, 4
push dword [0x100e2814]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x100e2810]
mov dword [0x100e2814], 0
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov eax, dword [0x100e2810]
test eax, eax
je 0x1000b2d0
push eax
call fcn.10052152
add esp, 4
mov dword [0x100e2810], 0
mov ecx, dword [esp + 0x1924]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1005132c
mov esp, ebp
pop ebp
ret