Function at 0x1000e12a
Capabilities:
Get session user name

Disassembly:
mov eax, 0x10071728
call fcn.10070e38
sub esp, 0x78
push ebx
push esi
push edi
mov dword [ebp - 0x1c], 0xfffffffc
mov edi, edx
xor ebx, ebx
mov dword [ebp - 0x20], 0xf0415773
mov dword [ebp - 0x30], edi
inc ebx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0
jmp 0x1000e16a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x18], 0xfb6f65e7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1000e15c
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
imul eax, edx
test eax, eax
jne 0x1000e1a3
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
push 2
pop esi
cmp esi, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
xor edx, edx
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x1000e1d8
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor edx, edx
mov eax, 0x3b26bdde
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x20], edx
jmp 0x1000e20a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x80], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000e1fc
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0xffffffec
jl 0x1000e40c
mov eax, 0x15fb26c4
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x20], edx
jmp 0x1000e240
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x38], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1000e236
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
add edx, 5
cmp edx, eax
mov eax, dword [ebp - 0x38]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
setl cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
sub ecx, eax
mov eax, dword [ebp - 0x38]
imul eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x60], eax
jg 0x1000e3eb
mov dword [ebp - 0x20], 0x174f
cmp dword [ebp - 0x20], 0x9f2
jge 0x1000e3c6
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x100078f0
call fcn.10057e4b
add esp, 0xc
lea ecx, [ebp - 0x50]
push dword [ebp - 0x14]
call fcn.10009afa
and dword [ebp - 4], 0
xor edi, edi
mov eax, dword [ebp - 0x14]
test eax, eax
jle 0x1000e30d
mov esi, dword [ebp - 0x50]
push esi
push 0x100078ec
call fcn.10057e4b
mov eax, dword [ebp - 0x14]
inc edi
pop ecx
add esi, 4
pop ecx
cmp edi, eax
jl 0x1000e2f5
push eax
lea ecx, [ebp - 0x44]
call fcn.10009afa
mov byte [ebp - 4], bl
xor edi, edi
mov esi, dword [ebp - 0x44]
cmp dword [ebp - 0x14], edi
jle 0x1000e33c
push esi
push 0x100078ec
call fcn.10057e4b
inc edi
add esi, 4
pop ecx
pop ecx
cmp edi, dword [ebp - 0x14]
jl 0x1000e323
mov esi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 0x28], 0
sub ecx, esi
push dword [ebp - 0x28]
sar ecx, 2
push esi
push dword [ebp - 0x40]
call fcn.10016971
mov edi, dword [ebp - 0x2c]
add esp, 0xc
mov eax, dword [ebp - 0x50]
xor ecx, ecx
lea edx, [edi - 2]
mov eax, dword [eax + edi*4 - 4]
add eax, dword [esi]
mov dword [ebp - 0x20], eax
test edx, edx
js 0x1000e3a2
mov ebx, dword [ebp - 0x50]
inc ecx
cmp ecx, dword [ebp - 0x14]
jge 0x1000e39f
mov eax, dword [esi + ecx*4]
add eax, dword [ebx + edx*4]
cmp eax, dword [ebp - 0x20]
jle 0x1000e389
inc ecx
cmp ecx, dword [ebp - 0x14]
jl 0x1000e378
cmp ecx, dword [ebp - 0x14]
jge 0x1000e39f
mov eax, dword [esi + ecx*4]
add eax, dword [ebx + edx*4]
cmp eax, dword [ebp - 0x20]
jg 0x1000e39f
lea edi, [edx + 1]
dec edx
jns 0x1000e372
xor ebx, ebx
inc ebx
push edi
push 0x100078f8
call fcn.10058066
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
call fcn.1000a086
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.1000a086
push 2
pop esi
xor edx, edx
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x1000e3e6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
xor edx, edx
mov dword [ebp - 0x70], edx
jmp 0x1000e3f7
xor edx, edx
mov dword [ebp - 0x20], 0x9192
mov dword [ebp - 0x20], edx
dec dword [ebp - 0x58]
mov eax, 0x15fb26c4
cmp dword [ebp - 0x58], 0xffffffec
jge 0x1000e222
mov edi, dword [ebp - 0x30]
cmp dword [edi], edx
je 0x1000e46d
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov eax, dword [ecx]
inc dword [eax]
mov eax, dword [ecx]
cmp dword [eax], edx
jne 0x1000e453
mov edx, dword [ebp + 0x10]
cmp dword [edx], 0xfffffffc
je 0x1000e431
cmp dword [edi], 0
jne 0x1000e431
xor eax, eax
jmp 0x1000e433
mov eax, ebx
cmp eax, dword [esi]
jle 0x1000e439
mov eax, dword [edx]
mov eax, dword [edi]
mov ecx, dword [esi]
sub ecx, eax
mov eax, dword [edx]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp + 0x14]
setne dl
cmp edx, dword [eax]
jle 0x1000e453
xor edx, edx
jmp 0x1000e455
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [eax]
cmp edx, eax
sete cl
xor edx, edx
mov dword [esi], ecx
mov eax, dword [esi]
mov dword [edi], eax
cmp dword [edi], edx
jne 0x1000e46f
mov ebx, edx
mov ecx, dword [ebp - 0x24]
xor eax, eax
test ebx, ebx
pop edi
setg al
add eax, dword [ecx]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret