Function at 0x180003870
Capabilities:
Get session user name

Disassembly:
push rbp
sub rsp, 0xc0
lea rbp, [rsp + 0x80]
mov rax, qword [0x1800c7380]
xor rax, rbp
mov qword [rbp + 0x38], rax
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
sub edx, 0x61858c7a
sub edx, 1
add edx, 0x61858c7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x4a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x49], al
mov dword [rbp - 0x50], 0x33814320
mov eax, dword [rbp - 0x50]
mov dword [rbp - 0x54], eax
sub eax, 0x8ec7285a
je 0x180004795
jmp 0x1800038e5
mov eax, dword [rbp - 0x54]
sub eax, 0x9175cc34
je 0x18000443b
jmp 0x1800038f8
mov eax, dword [rbp - 0x54]
sub eax, 0x9322a731
je 0x1800043a7
jmp 0x18000390b
mov eax, dword [rbp - 0x54]
sub eax, 0x9fa56239
je 0x180004079
jmp 0x18000391e
mov eax, dword [rbp - 0x54]
sub eax, 0xa14adf6c
je 0x18000459f
jmp 0x180003931
mov eax, dword [rbp - 0x54]
sub eax, 0xa5114923
je 0x18000460c
jmp 0x180003944
mov eax, dword [rbp - 0x54]
sub eax, 0xb472bee6
je 0x1800049e3
jmp 0x180003957
mov eax, dword [rbp - 0x54]
sub eax, 0xb6691977
je 0x180004600
jmp 0x18000396a
mov eax, dword [rbp - 0x54]
sub eax, 0xb6ef701b
je 0x180004110
jmp 0x18000397d
mov eax, dword [rbp - 0x54]
sub eax, 0xb74c4fac
je 0x180004358
jmp 0x180003990
mov eax, dword [rbp - 0x54]
sub eax, 0xb7764fa6
je 0x1800044c8
jmp 0x1800039a3
mov eax, dword [rbp - 0x54]
sub eax, 0xbbb9631c
je 0x18000418a
jmp 0x1800039b6
mov eax, dword [rbp - 0x54]
sub eax, 0xbf212e5e
je 0x180004846
jmp 0x1800039c9
mov eax, dword [rbp - 0x54]
sub eax, 0xbfd85929
je 0x18000433d
jmp 0x1800039dc
mov eax, dword [rbp - 0x54]
sub eax, 0xc8680004
je 0x180004447
jmp 0x1800039ef
mov eax, dword [rbp - 0x54]
sub eax, 0xcd5854df
je 0x180003d6e
jmp 0x180003a02
mov eax, dword [rbp - 0x54]
sub eax, 0xd0797bb4
je 0x1800049a0
jmp 0x180003a15
mov eax, dword [rbp - 0x54]
sub eax, 0xd5e03b17
je 0x180004980
jmp 0x180003a28
mov eax, dword [rbp - 0x54]
sub eax, 0xd8d24d4a
je 0x1800041ef
jmp 0x180003a3b
mov eax, dword [rbp - 0x54]
sub eax, 0xdc23ad67
je 0x180004719
jmp 0x180003a4e
mov eax, dword [rbp - 0x54]
sub eax, 0xe8abb358
je 0x180004702
jmp 0x180003a61
mov eax, dword [rbp - 0x54]
sub eax, 0xfb752066
je 0x18000420c
jmp 0x180003a74
mov eax, dword [rbp - 0x54]
sub eax, 0x452b844
je 0x1800041d4
jmp 0x180003a87
mov eax, dword [rbp - 0x54]
sub eax, 0x4c7de41
je 0x180004331
jmp 0x180003a9a
mov eax, dword [rbp - 0x54]
sub eax, 0x6f6326f
je 0x180004550
jmp 0x180003aad
mov eax, dword [rbp - 0x54]
sub eax, 0x93b9901
je 0x180003c8d
jmp 0x180003ac0
mov eax, dword [rbp - 0x54]
sub eax, 0xbf5f0dd
je 0x180003e11
jmp 0x180003ad3
mov eax, dword [rbp - 0x54]
sub eax, 0x1045ebe5
je 0x180003d7a
jmp 0x180003ae6
mov eax, dword [rbp - 0x54]
sub eax, 0x15432d0c
je 0x1800049d7
jmp 0x180003af9
mov eax, dword [rbp - 0x54]
sub eax, 0x193d7e11
je 0x180004667
jmp 0x180003b0c
mov eax, dword [rbp - 0x54]
sub eax, 0x1af1737d
je 0x180004816
jmp 0x180003b1f
mov eax, dword [rbp - 0x54]
sub eax, 0x2323da0b
je 0x180004618
jmp 0x180003b32
mov eax, dword [rbp - 0x54]
sub eax, 0x265de1b2
je 0x18000428d
jmp 0x180003b45
mov eax, dword [rbp - 0x54]
sub eax, 0x2df77824
je 0x180004023
jmp 0x180003b58
mov eax, dword [rbp - 0x54]
sub eax, 0x3099aab7
je 0x18000413b
jmp 0x180003b6b
mov eax, dword [rbp - 0x54]
sub eax, 0x32961921
je 0x180004a01
jmp 0x180003b7e
mov eax, dword [rbp - 0x54]
sub eax, 0x33814320
je 0x180003c67
jmp 0x180003b91
mov eax, dword [rbp - 0x54]
sub eax, 0x3576e17f
je 0x18000483a
jmp 0x180003ba4
mov eax, dword [rbp - 0x54]
sub eax, 0x3e38e454
je 0x18000442f
jmp 0x180003bb7
mov eax, dword [rbp - 0x54]
sub eax, 0x4c384f7e
je 0x180003e92
jmp 0x180003bca
mov eax, dword [rbp - 0x54]
sub eax, 0x4c6452fc
je 0x18000411c
jmp 0x180003bdd
mov eax, dword [rbp - 0x54]
sub eax, 0x4fd77abb
je 0x180004a14
jmp 0x180003bf0
mov eax, dword [rbp - 0x54]
sub eax, 0x50128f7d
je 0x180004994
jmp 0x180003c03
mov eax, dword [rbp - 0x54]
sub eax, 0x5dac5d44
je 0x180004544
jmp 0x180003c16
mov eax, dword [rbp - 0x54]
sub eax, 0x5dffd73a
je 0x1800049c4
jmp 0x180003c29
mov eax, dword [rbp - 0x54]
sub eax, 0x641c0ed7
je 0x18000402f
jmp 0x180003c3c
mov eax, dword [rbp - 0x54]
sub eax, 0x6cfc6c5d
je 0x1800046f6
jmp 0x180003c4f
mov eax, dword [rbp - 0x54]
sub eax, 0x71b54aa4
je 0x1800046ea
jmp 0x180003c62
jmp 0x180004a1b
mov al, byte [rbp - 0x4a]
mov cl, byte [rbp - 0x49]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3576e17f
mov ecx, 0x93b9901
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov eax, 0x10
mov qword [rbp - 0x60], rax
call fcn.18008d270
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov eax, 0x30
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.18008d270
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3576e17f
mov ecx, 0xcd5854df
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x1045ebe5
jmp 0x180004a1b
mov eax, 0x10
mov qword [rbp - 0x68], rax
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
call fcn.18008d270
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
mov eax, 0x70
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp - 0x10], rcx
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp - 8], rcx
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp], rcx
call fcn.18008d270
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp + 8], rcx
call fcn.18008d270
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x50], 0xbf5f0dd
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
add edx, 0xb084709d
sub edx, 1
sub edx, 0xb084709d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf212e5e
mov ecx, 0x4c384f7e
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov eax, 0x10
call fcn.18008d270
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x18], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x70], rax
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.180004a20
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov qword [rax], rcx
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call fcn.180005520
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1800100f0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov qword [rax + 8], rcx
mov rcx, qword [rbp - 0x28]
sub rsp, 0x20
call fcn.180005a60
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1800100f0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x10], rcx
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call fcn.180005ef0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x18], rcx
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180006490
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x20], rcx
mov rax, qword [rbp - 8]
mov dword [rax], 0x64
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp]
mov qword [rax], rcx
mov rax, qword [rbp]
mov rcx, qword [rax]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov rax, qword [rbp]
mov rcx, qword [rax]
add rcx, 0x28
mov rax, qword [rbp + 0x10]
mov qword [rax], rcx
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
add edx, 0x67deeb4b
sub edx, 1
sub edx, 0x67deeb4b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbf212e5e
mov ecx, 0x2df77824
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x641c0ed7
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd5e03b17
mov ecx, 0x9fa56239
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp + 8]
mov rax, qword [rax]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov qword [rbp + 0x28], rax
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
add edx, 0x55d1f83b
sub edx, 1
sub edx, 0x55d1f83b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd5e03b17
mov ecx, 0xb6ef701b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x4c6452fc
jmp 0x180004a1b
mov rax, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x28]
cmp rax, rcx
setne al
and al, 1
mov byte [rbp + 0x35], al
mov dword [rbp - 0x50], 0x3099aab7
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
sub edx, 0x984c50ac
sub edx, 1
add edx, 0x984c50ac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x50128f7d
mov ecx, 0xbbb9631c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x50128f7d
mov ecx, 0x452b844
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dl, byte [rbp + 0x35]
mov eax, 0x2323da0b
mov ecx, 0xd8d24d4a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp + 8]
mov rax, qword [rax]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x18]
mov qword [rax], rcx
mov dword [rbp - 0x50], 0xfb752066
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
sub edx, 0xf031ae02
sub edx, 1
add edx, 0xf031ae02
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd0797bb4
mov ecx, 0x265de1b2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp + 0x18]
mov rdx, qword [rax]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.1800969c0
add rsp, 0x20
cmp eax, 0
sete al
and al, 1
mov byte [rbp + 0x36], al
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
sub edx, 0x9b82909b
sub edx, 1
add edx, 0x9b82909b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd0797bb4
mov ecx, 0x4c7de41
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xbfd85929
jmp 0x180004a1b
mov dl, byte [rbp + 0x36]
mov eax, 0xc8680004
mov ecx, 0xb74c4fac
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
sub edx, 0xb1155ff2
sub edx, 1
add edx, 0xb1155ff2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dffd73a
mov ecx, 0x9322a731
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp - 0x48]
mov byte [rax], 1
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
add edx, 0xde0df63b
sub edx, 1
sub edx, 0xde0df63b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5dffd73a
mov ecx, 0x3e38e454
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x9175cc34
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xe8abb358
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
sub edx, 0xcd68214c
sub edx, 1
add edx, 0xcd68214c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x15432d0c
mov ecx, 0xb7764fa6
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x15432d0c
mov ecx, 0x5dac5d44
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x6f6326f
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
sub edx, 0x3f305a74
sub edx, 1
add edx, 0x3f305a74
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb472bee6
mov ecx, 0xa14adf6c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
add rcx, 8
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
sub edx, 0xb52a9c7a
sub edx, 1
add edx, 0xb52a9c7a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb472bee6
mov ecx, 0xb6691977
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xa5114923
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x641c0ed7
jmp 0x180004a1b
mov eax, dword [0x1800cac7c]
mov ecx, dword [0x1800cac78]
mov edx, eax
sub edx, 0xc324c7d2
sub edx, 1
add edx, 0xc324c7d2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x32961921
mov ecx, 0x193d7e11
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov rax, qword [rbp - 0x48]
mov byte [rax], 0
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x32961921
mov ecx, 0x71b54aa4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x6cfc6c5d
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xe8abb358
jmp 0x180004a1b
mov rax, qword [rbp - 0x48]
mov al, byte [rax]
and al, 1
mov byte [rbp + 0x37], al
mov dword [rbp - 0x50], 0xdc23ad67
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4fd77abb
mov ecx, 0x8ec7285a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov ecx, dword [0x1800cac7c]
mov eax, dword [0x1800cac78]
mov edx, ecx
sub edx, 0x1cf91bd4
sub edx, 1
add edx, 0x1cf91bd4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4fd77abb
mov ecx, 0x1af1737d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x50], eax
jmp 0x180004a1b
mov al, byte [rbp + 0x37]
and al, 1
movzx eax, al
mov dword [rbp - 0x74], eax
mov rcx, qword [rbp + 0x38]
xor rcx, rbp
sub rsp, 0x20
call fcn.18008d2d0
mov eax, dword [rbp - 0x74]
lea rsp, [rbp + 0x40]
pop rbp
ret
mov dword [rbp - 0x50], 0x93b9901
jmp 0x180004a1b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x80], rax
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.180004a20
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x80]
mov qword [rax], rcx
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call fcn.180005520
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1800100f0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x80]
mov qword [rax + 8], rcx
mov rcx, qword [rbp - 0x28]
sub rsp, 0x20
call fcn.180005a60
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1800100f0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x80]
mov qword [rax + 0x10], rcx
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call fcn.180005ef0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x80]
mov qword [rax + 0x18], rcx
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180006490
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180010070
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x80]
mov qword [rax + 0x20], rcx
mov rax, qword [rbp - 8]
mov dword [rax], 0x64
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp]
mov qword [rax], rcx
mov rax, qword [rbp]
mov rcx, qword [rax]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov rax, qword [rbp]
mov rcx, qword [rax]
add rcx, 0x28
mov rax, qword [rbp + 0x10]
mov qword [rax], rcx
mov dword [rbp - 0x50], 0x4c384f7e
jmp 0x180004a1b
mov rax, qword [rbp + 8]
mov rax, qword [rbp + 0x10]
mov dword [rbp - 0x50], 0x9fa56239
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xbbb9631c
jmp 0x180004a1b
mov rax, qword [rbp + 0x18]
mov rdx, qword [rax]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.1800969c0
add rsp, 0x20
mov dword [rbp - 0x50], 0x265de1b2
jmp 0x180004a1b
mov rax, qword [rbp - 0x48]
mov byte [rax], 1
mov dword [rbp - 0x50], 0x9322a731
jmp 0x180004a1b
mov dword [rbp - 0x50], 0xb7764fa6
jmp 0x180004a1b
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
add rcx, 8
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov dword [rbp - 0x50], 0xa14adf6c
jmp 0x180004a1b
mov rax, qword [rbp - 0x48]
mov byte [rax], 0
mov dword [rbp - 0x50], 0x193d7e11
jmp 0x180004a1b
mov dword [rbp - 0x50], 0x8ec7285a
jmp 0x1800038cf