Function at 0x1001d9e3
Capabilities:
Get session user name

Disassembly:
push 0x21c
mov eax, 0x10037552
call fcn.10020c0a
xor esi, esi
mov dword [ebp - 0x1fc], esi
mov edi, ecx
mov dword [ebp - 0x1f8], 0x80000002
mov dword [ebp - 0x1f0], str.Softwareprojonepodlp_rptcachependings_
mov ebx, 0x80
cmp word [0x10045e58], si
jne 0x1001db07
xor eax, eax
push 0xfe
mov word [ebp - 0x1b0], ax
lea eax, [ebp - 0x1ae]
push esi
push eax
call fcn.10026140
add esp, 0xc
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1b0]
push eax
mov dword [ebp - 0x1f4], ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x1001db07
push str.system
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1001dad7
lea eax, [ebp - 0x1cc]
push eax
mov edx, str.agentUser
mov ecx, str.Softwareprojonepodlp_smpcache_
call fcn.10012acc
pop ecx
mov dword [ebp - 4], esi
cmp dword [ebp - 0x1b8], esi
jne 0x1001daa2
lea eax, [ebp - 0x1b0]
jmp 0x1001dab7
cmp dword [ebp - 0x1b4], 8
mov eax, dword [ebp - 0x1c8]
jae 0x1001dab7
lea eax, [ebp - 0x1c8]
push ebx
push eax
push 0x10045e58
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x1cc]
call fcn.10002040
xor esi, esi
jmp 0x1001db07
call fcn.10013d8f
test eax, eax
jne 0x1001daf4
mov dword [ebp - 0x1f8], 0x80000001
mov dword [ebp - 0x1f0], str.Softwareprojonepodlp_rptcachependings
push ebx
lea eax, [ebp - 0x1b0]
push eax
push 0x10045e58
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
cmp byte [0x10045f58], 0
jne 0x1001db4e
lea eax, [ebp - 0x1cc]
push eax
call fcn.1001e963
pop ecx
mov dword [ebp - 4], 1
cmp dword [eax + 0x18], 0x10
jb 0x1001db2f
mov eax, dword [eax + 4]
jmp 0x1001db32
add eax, 4
push ebx
push eax
push 0x10045f58
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1cc]
call fcn.10001fa0
cmp word [0x10045e58], si
je 0x1001dc5b
cmp byte [0x10045f58], 0
je 0x1001dc5b
cmp byte [edi + 8], 7
jne 0x1001dc5b
push str.i_action
lea ecx, [ebp - 0x1cc]
call fcn.10001f30
sub esp, 0x1c
mov dword [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x1ec], esp
push 0x1003ae37
call fcn.10001f30
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 3
push eax
lea ebx, [ebp - 0x1e8]
mov byte [ebp - 4], 2
call fcn.1001d97d
add esp, 0x20
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 5
call fcn.10001fa0
push str.replace
mov eax, ebx
call fcn.1001d31a
pop ecx
test al, al
jne 0x1001dbec
push str.delete
mov eax, ebx
call fcn.1001d31a
pop ecx
test al, al
je 0x1001dc63
mov esi, str.i_key_columns
push edi
mov edx, esi
call fcn.10017b33
cmp byte [eax + 8], 4
jne 0x1001dc2b
push edi
mov edx, esi
call fcn.10017b33
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10016e04
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0
mov dword [ebp - 0x1fc], 1
je 0x1001dc2b
xor bl, bl
jmp 0x1001dc2d
mov bl, 1
mov dword [ebp - 4], 5
test byte [ebp - 0x1fc], 1
je 0x1001dc48
lea ecx, [ebp - 0x1cc]
call fcn.10001fa0
test bl, bl
je 0x1001dc63
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e8]
call fcn.10001fa0
xor eax, eax
call fcn.10020c8d
ret
push edi
lea ebx, [ebp - 0x228]
call fcn.10016b1a
sub esp, 0x18
mov byte [ebp - 4], 7
mov esi, esp
mov dword [ebp - 0x1ec], esp
push str.t_chat_log
call fcn.10016a5d
mov eax, ebx
push eax
mov edx, str.i_dt
mov byte [ebp - 4], 8
call fcn.10017b96
mov esi, eax
mov byte [ebp - 4], 7
call fcn.10016d1b
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x1ec], esp
push 0x10045f58
call fcn.10016a5d
mov eax, ebx
push eax
mov edx, str.client_unique
mov byte [ebp - 4], 9
call fcn.10017b96
mov esi, eax
mov byte [ebp - 4], 7
call fcn.10016d1b
mov eax, ebx
mov edi, str.user_name
push eax
mov edx, edi
call fcn.10017b96
cmp byte [eax + 8], 0
jne 0x1001dd57
mov eax, 0x10045e58
lea ecx, [ebp - 0x1cc]
call fcn.10001fd0
lea eax, [ebp - 0x1cc]
push eax
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.10003e70
sub esp, 0x14
mov byte [ebp - 4], 0xb
mov edx, eax
mov esi, esp
mov dword [ebp - 0x1ec], esp
call fcn.10016ade
mov eax, ebx
push eax
mov edx, edi
mov byte [ebp - 4], 0xc
call fcn.10017b96
mov esi, eax
mov byte [ebp - 4], 0xb
call fcn.10016d1b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.10001fa0
lea esi, [ebp - 0x1cc]
mov byte [ebp - 4], 7
call fcn.10002040
lea eax, [ebp - 0x228]
push eax
mov edx, str.data_time
call fcn.10017b96
cmp byte [eax + 8], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetLocalTime]
jne 0x1001de07
push 7
xor eax, eax
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c0]
push eax
call ebx
movzx eax, word [ebp - 0x1b4]
push eax
movzx eax, word [ebp - 0x1b6]
push eax
movzx eax, word [ebp - 0x1b8]
push eax
movzx eax, word [ebp - 0x1ba]
push eax
movzx eax, word [ebp - 0x1be]
push eax
movzx eax, word [ebp - 0x1c0]
push eax
push str._04d__02d__02d__02d:_02d:_02d
lea eax, [ebp - 0x30]
push 0x20
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfA]
add esp, 0xc
lea eax, [ebp - 0x30]
mov esi, esp
mov dword [ebp - 0x1ec], esp
push eax
call fcn.10016a5d
lea eax, [ebp - 0x228]
push eax
mov edx, str.data_time
mov byte [ebp - 4], 0xd
call fcn.10017b96
mov esi, eax
mov byte [ebp - 4], 7
call fcn.10016d1b
xor eax, eax
push 0x7e
push eax
mov word [ebp - 0xb0], ax
lea eax, [ebp - 0xae]
push eax
call fcn.10026140
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
mov esi, dword [0x10045fd8]
inc dword [0x10045fd8]
call fcn.10012586
push eax
movzx eax, word [ebp - 0x200]
push esi
push eax
movzx eax, word [ebp - 0x202]
push eax
movzx eax, word [ebp - 0x204]
push eax
movzx eax, word [ebp - 0x206]
push eax
movzx eax, word [ebp - 0x20a]
push eax
movzx eax, word [ebp - 0x20c]
push eax
push str._04d__02d__02d__02d:_02d:_02d__d__08x
lea eax, [ebp - 0xb0]
push 0x40
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x2c
lea ecx, [ebp - 0x1cc]
lea edi, [ebp - 0x228]
call fcn.10017fc6
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.100011e0
pop ecx
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x18], 8
jb 0x1001deb3
mov eax, dword [eax + 4]
jmp 0x1001deb6
add eax, 4
mov ebx, dword [ebp - 0x1f0]
mov edi, dword [ebp - 0x1f8]
lea ecx, [ebp - 0xb0]
push ecx
mov esi, eax
call fcn.10012a82
lea esi, [ebp - 0x2c]
mov edi, eax
mov byte [ebp - 4], 0x17
call fcn.10002040
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 7
call fcn.10001fa0
test edi, edi
je 0x1001df2b
push str.GlobalD36B0A68_AE78_4fa2_BD9C_05FD95224F52
push 0
push 2
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [ebp - 0x1f4], eax
mov byte [ebp - 4], 0x19
test eax, eax
je 0x1001df1a
cmp eax, 0xffffffff
je 0x1001df1a
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 7
call fcn.100121ed
jmp 0x1001df4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x1f0]
push str.CachedReport_write_register_failed:__s._s__d
call fcn.10013beb
add esp, 0x10
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 5
call fcn.10016cae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e8]
call fcn.10001fa0
mov eax, edi
jmp 0x1001dc5d