Function at 0x100084f5
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10061b44
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
xor ebx, ebx
mov dword [esp + 0x1c], edx
mov byte [esp + 4], cl
push esi
test cl, cl
je 0x10008530
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x10008876
xor eax, eax
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], ax
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], 0xfffffff6
push 3
mov dword [esp + 0x38], 1
pop esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x10], ebx
jmp 0x1000857c
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x40], 0x3fde
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1000856c
sub esp, 0xc
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x38]
push eax
push ecx
lea ecx, [esp + 0x44]
call fcn.10009da4
lea eax, [esp + 0x48]
xor dl, dl
push eax
lea ecx, [esp + 0x50]
call fcn.10008c7b
add esp, 0x14
lea eax, [esp + 0x60]
lea edx, [esp + 0x28]
push eax
push ecx
push ecx
call fcn.10009d34
mov eax, dword [0x1008d110]
add esp, 0x14
test al, 1
jne 0x100085ee
or eax, 1
mov dword [0x1008d110], eax
push 0xaf9c
mov byte [esp + 0x80], 1
call fcn.10030631
pop ecx
mov word [0x1008d0fc], ax
mov byte [esp + 0x7c], bl
mov dword [esp + 0xc], esi
xor ecx, ecx
mov dword [esp + 0x10], 0xfffffffc
inc ecx
mov dword [esp + 0x14], 0x45c17473
mov dword [esp + 0x10], ecx
mov dword [esp + 0x10], ebx
jmp 0x1000861f
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1c], 0x7b332e0c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1000860f
mov eax, dword [esp + 0xc]
sub eax, 0xa
mov dword [esp + 0x10], eax
je 0x100086d8
cmp dword [esp + 0xc], ebx
je 0x10008640
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x10], ebx
jne 0x10008666
cmp dword [esp + 0xc], ebx
jne 0x10008666
mov ecx, ebx
mov eax, dword [esp + 0x10]
xor edx, edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
cmp ecx, eax
setne dl
sub edx, dword [esp + 0xc]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
cmp eax, edx
mov eax, dword [esp + 0xc]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x10]
setg cl
sub eax, ecx
mov ecx, 0xcbd6cd53
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, dword [esp + 0xc]
jl 0x100086c7
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x10], ebx
je 0x100086d8
cmp dword [esp + 0x14], ebx
je 0x100086d8
xor ecx, ecx
inc ecx
jmp 0x100086da
mov ecx, ebx
mov eax, dword [esp + 0xc]
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0xc]
cmp edx, eax
sete cl
mov dword [esp + 0x10], ecx
mov dword [esp + 0x10], ebx
jmp 0x10008706
mov dword [esp + 0x1c], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x10
je 0x100086fe
mov eax, dword [0x1008d110]
test al, 2
jne 0x1000873b
or eax, 2
mov dword [0x1008d110], eax
push 0x8ddc
mov byte [esp + 0x80], 2
call fcn.10030631
pop ecx
mov word [0x1008d104], ax
mov byte [esp + 0x7c], bl
push 0x788f
push 0x1008d104
push 0x26b4
lea eax, [esp + 0x64]
xor dl, dl
push eax
push ebx
push 0x72fe
push 1
push 0x1008d0fc
push 0x13
lea ecx, [esp + 0x44]
call fcn.10008887
mov dword [esp + 0x34], 0xfffffffb
or esi, 0xffffffff
mov dword [esp + 0x30], esi
xor ecx, ecx
mov dword [esp + 0x5c], 0xcf415d72
add esp, 0x24
mov dword [esp + 0x38], 0x66d210ec
inc ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x38], esi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x38], 0xc946b43d
mov dword [esp + 0x38], ecx
mov dword [esp + 0x38], 0xab551fa4
mov dword [esp + 0x10], ebx
jmp 0x1000884c
mov dword [esp + 0x14], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x18], 0xa6b42be1
mov dword [esp + 0xc], ebx
jmp 0x100087e1
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x48], 0xb963ab19
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x100087d1
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], 0xa
jl 0x10008848
mov dword [esp + 0x38], 0x2121f90e
mov dword [esp + 0xc], esi
mov dword [esp + 0xc], ebx
jmp 0x10008811
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x3c], ebx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ecx
jl 0x10008805
mov eax, dword [esp + 0x38]
xor edx, edx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
cmp ecx, eax
push 1
setg dl
add edx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
dec dword [esp + 0x1c]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0xa
pop ecx
jge 0x100087f3
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffffa
jg 0x100087bb
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x58]
cmp ecx, eax
je 0x1000886a
push esi
push ebx
push eax
call fcn.1000750d
push ebx
push 1
lea ecx, [esp + 0x60]
call fcn.1000737d
mov ecx, dword [esp + 0x74]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret