Function at 0x1002af1d
Capabilities:
Get session user name

Disassembly:
push 0x254
mov eax, 0x1006d71f
call fcn.1002f984
mov esi, edx
mov edi, ecx
and dword [ebp - 0x260], 0
cmp word [0x10091410], 0
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x258], ebx
jne 0x1002b015
push 0x100
lea eax, [ebp - 0x130]
push 0
push eax
call fcn.10047f90
add esp, 0xc
mov dword [ebp - 0x25c], 0x80
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x1002b015
push str.system
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1002affe
push str.agentUser
push str.Softwareprojonepodlp_smpcache_
lea ecx, [ebp - 0x148]
call fcn.1001a25a
cmp dword [ebp - 0x138], 0
pop ecx
pop ecx
push 0x80
jne 0x1002afcd
lea eax, [ebp - 0x130]
jmp 0x1002afe1
cmp dword [ebp - 0x134], 8
lea eax, [ebp - 0x148]
cmovae eax, dword [ebp - 0x148]
push eax
push 0x10091410
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0
push 1
lea ecx, [ebp - 0x148]
call fcn.10005895
jmp 0x1002b015
push 0x80
lea eax, [ebp - 0x130]
push eax
push 0x10091410
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov al, byte [0x10091518]
test al, al
jne 0x1002b056
lea ecx, [ebp - 0x160]
call fcn.1001c429
cmp dword [eax + 0x14], 0x10
jb 0x1002b031
mov eax, dword [eax]
push 0x80
push eax
push 0x10091518
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
push 1
lea ecx, [ebp - 0x160]
call fcn.10005a50
mov al, byte [0x10091518]
cmp word [0x10091410], 0
je 0x1002b4d9
test al, al
je 0x1002b4d9
test edi, edi
je 0x1002b4d9
cmp byte [esi + 8], 7
jne 0x1002b4d9
push str.i_action
lea ecx, [ebp - 0x160]
call fcn.100055fd
and dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
push 0x1007c8e0
call fcn.100055fd
lea eax, [ebp - 0x160]
mov edx, esi
push eax
lea ecx, [ebp - 0x178]
call fcn.1001aebc
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.10005a50
push str.replace
lea ecx, [ebp - 0x178]
call fcn.100054fb
test eax, eax
je 0x1002b0f3
push str.delete
lea ecx, [ebp - 0x178]
call fcn.100054fb
test eax, eax
jne 0x1002b153
mov ebx, str.i_key_columns
mov ecx, esi
push ebx
call fcn.100244de
cmp byte [eax + 8], 4
jne 0x1002b129
lea eax, [ebp - 0x148]
mov ecx, esi
push eax
push ebx
call fcn.100244de
mov ecx, eax
call fcn.10023848
xor ecx, ecx
inc ecx
cmp dword [eax + 0x10], 0
je 0x1002b12f
xor bl, bl
jmp 0x1002b131
mov ecx, dword [ebp - 0x260]
mov bl, 1
test cl, 1
je 0x1002b145
push 0
push 1
lea ecx, [ebp - 0x148]
call fcn.10005a50
test bl, bl
jne 0x1002b4c4
mov ebx, dword [ebp - 0x258]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x258], esp
push edi
call fcn.10023301
push str.i_dt
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10023599
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x258], esp
push 0x10091518
call fcn.10023301
push str.client_unique
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10023599
mov edi, str.user_name
mov ecx, esi
push edi
call fcn.100244de
cmp byte [eax + 8], 0
jne 0x1002b333
lea ecx, [ebp - 0x254]
call fcn.1002aea1
mov byte [ebp - 4], 5
call fcn.1001c5cd
test eax, eax
je 0x1002b246
cmp dword [ebp - 0x244], 0
je 0x1002b246
sub esp, 0x18
lea eax, [ebp - 0x254]
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.1002337d
push edi
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.10023599
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x258], esp
push 1
call fcn.100232ac
push str.i_user_data
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.10023599
xor edi, edi
jmp 0x1002b2b1
push 0x10091410
lea ecx, [ebp - 0x148]
call fcn.100054a2
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10001380
sub esp, 0x10
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.1002337d
push edi
mov ecx, esi
mov byte [ebp - 4], 0xa
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.10023599
xor edi, edi
lea ecx, [ebp - 0x28]
push edi
push 1
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x148]
call fcn.10005895
push edi
push 1
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 2
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x1a8]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x1f0]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x208]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x220]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x23c]
call fcn.10005a50
push edi
push 1
lea ecx, [ebp - 0x254]
call fcn.10005a50
push str.data_time
mov ecx, esi
call fcn.100244de
cmp byte [eax + 8], 0
jne 0x1002b3d7
push 7
xor eax, eax
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x134]
push eax
movzx eax, word [ebp - 0x136]
push eax
movzx eax, word [ebp - 0x138]
push eax
movzx eax, word [ebp - 0x13a]
push eax
movzx eax, word [ebp - 0x13e]
push eax
movzx eax, word [ebp - 0x140]
push eax
push str._04d__02d__02d__02d:_02d:_02d
lea eax, [ebp - 0x30]
push 0x20
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfA]
add esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.10023301
push str.data_time
mov ecx, esi
mov byte [ebp - 4], 0xb
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10023599
test ebx, ebx
je 0x1002b4bf
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x148]
call fcn.100054a2
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10001380
sub esp, 0x10
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.1002337d
push str.attach_name
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.10023599
xor edi, edi
lea ecx, [ebp - 0x28]
push 0
inc edi
push edi
call fcn.10005a50
push 0
push edi
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 2
call fcn.10005895
push ebx
lea ecx, [ebp - 0x148]
call fcn.100054a2
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10001380
sub esp, 0x10
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.1002337d
push str.attachment
mov ecx, esi
mov byte [ebp - 4], 0x11
call fcn.100244de
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.10023599
push 0
push edi
lea ecx, [ebp - 0x28]
call fcn.10005a50
push 0
push edi
lea ecx, [ebp - 0x148]
call fcn.10005895
xor esi, esi
inc esi
jmp 0x1002b4c6
xor esi, esi
push 0
push 1
lea ecx, [ebp - 0x178]
call fcn.10005a50
mov eax, esi
jmp 0x1002b4db
xor eax, eax
call fcn.1002f93f
ret