Function at 0x100083b0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004b15d
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x100691d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2ac], esi
mov edi, 7
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], edi
mov word [ebp - 0x248], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], edi
mov word [ebp - 0x260], ax
push 0x208
push eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 1
push eax
call fcn.1002fe40
add esp, 0xc
mov dword [ebp - 0x2b0], 0x104
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push dword [ebp - 0x2b0]
xor eax, eax
mov dword [ebp - 0x280], 0
mov word [ebp - 0x290], ax
lea ecx, [ebp - 0x290]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x27c], edi
push eax
call fcn.100039c0
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 2
push eax
call fcn.10007230
add esp, 4
cmp byte [esi + 0x98], 0
mov byte [ebp - 4], 3
jne 0x1000859c
cmp dword [ebp - 0x294], 8
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x290]
cmovae ecx, dword [ebp - 0x2a8]
cmp dword [ebp - 0x27c], 8
push ecx
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.10006bd0
add esp, 8
test al, al
je 0x1000859c
push 0
lea eax, [ebp - 0x278]
push 0x1a
push eax
call fcn.10006070
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x248]
cmp eax, esi
je 0x10008531
mov ecx, eax
call fcn.10003730
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x248], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x14], edi
movq qword [ebp - 0x238], xmm0
mov edi, dword [ebp - 0x234]
mov dword [esi + 0x10], 0
mov word [esi], ax
lea ecx, [ebp - 0x278]
call fcn.10003730
push 0
lea eax, [ebp - 0x278]
push 0x1c
push eax
call fcn.10006070
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x260]
cmp eax, esi
je 0x1000858c
mov ecx, eax
call fcn.10003730
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x250], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x278]
call fcn.10003730
jmp 0x10008761
lea eax, [ebp - 0x230]
push eax
call fcn.100073f0
add esp, 4
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.10003840
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push str.AppData
cmovae eax, dword [ebp - 0x230]
push eax
lea eax, [ebp - 0x278]
push VariantInit
push eax
call fcn.100061f0
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0x248]
cmp eax, esi
je 0x10008632
mov ecx, eax
call fcn.10003730
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x248], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x238], xmm0
mov edi, dword [ebp - 0x234]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x10008672
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008668
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008ba1
push edx
push ecx
call fcn.10018a63
add esp, 8
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push str.Local_AppData
cmovae eax, dword [ebp - 0x230]
push eax
lea eax, [ebp - 0x278]
push VariantInit
push eax
call fcn.100061f0
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0x260]
cmp eax, esi
je 0x100086dd
mov ecx, eax
call fcn.10003730
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x250], xmm0
mov word [esi], ax
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x1000871d
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008713
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008ba6
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x10008761
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008757
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bab
push edx
push ecx
call fcn.10018a63
add esp, 8
mov eax, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x248]
lea esi, [eax + 0x50]
cmp esi, ecx
je 0x10008794
push dword [ebp - 0x238]
mov eax, ecx
cmp edi, 8
mov ecx, esi
cmovae eax, dword [ebp - 0x248]
push eax
call fcn.100039c0
mov eax, dword [ebp - 0x2ac]
lea edi, [eax + 0x68]
lea eax, [ebp - 0x260]
cmp edi, eax
je 0x100087bd
cmp dword [ebp - 0x24c], 8
mov ecx, edi
push dword [ebp - 0x250]
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.100039c0
push esi
call fcn.10006b90
add esp, 4
test eax, eax
jne 0x100087d8
push 1
push 0x10051f04
mov ecx, esi
call fcn.10003840
push edi
call fcn.10006b90
add esp, 4
test eax, eax
jne 0x100087f3
push 1
push 0x10051f04
mov ecx, edi
call fcn.10003840
lea eax, [ebp - 0x278]
push str.SOFT_NAME_EN
push eax
call fcn.1000cd10
add esp, 8
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 5
jb 0x10008813
mov eax, dword [eax]
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x1000881d
mov ecx, dword [esi]
push eax
push ecx
lea eax, [ebp - 0x230]
push str._s_s_
push eax
call fcn.10006790
mov edi, dword [ebp - 0x2ac]
add esp, 0x10
add edi, 0x20
mov dword [ebp - 0x2b4], eax
cmp edi, eax
je 0x10008876
mov ecx, edi
call fcn.10003730
mov eax, dword [ebp - 0x2b4]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x100088b6
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100088ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bb0
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x10008917
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000890d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bb5
push edx
push ecx
call fcn.10018a63
add esp, 8
cmp dword [edi + 0x14], 8
jb 0x1000891f
mov edi, dword [edi]
push edi
call fcn.10005e10
lea eax, [ebp - 0x278]
push str.APPDATA_RETAIN_FOLDER
push eax
call fcn.1000cd10
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 6
jb 0x10008945
mov eax, dword [eax]
cmp dword [esi + 0x14], 8
jb 0x1000894d
mov esi, dword [esi]
push eax
push esi
lea eax, [ebp - 0x230]
push str._s_s_
push eax
call fcn.10006790
mov esi, dword [ebp - 0x2ac]
mov edi, eax
add esi, 0x38
add esp, 0x10
cmp esi, edi
je 0x1000899c
mov ecx, esi
call fcn.10003730
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x100089dc
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100089d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bba
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x10008a3d
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008a33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bbf
push edx
push ecx
call fcn.10018a63
add esp, 8
cmp dword [esi + 0x14], 8
jb 0x10008a45
mov esi, dword [esi]
push esi
call fcn.10005e10
mov edx, dword [ebp - 0x294]
add esp, 4
cmp edx, 8
jb 0x10008a8e
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008a84
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bc4
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x27c]
xor eax, eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
cmp edx, 8
jb 0x10008aeb
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008ae1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bc9
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x24c]
xor eax, eax
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
cmp edx, 8
jb 0x10008b48
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008b3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bce
push edx
push ecx
call fcn.10018a63
add esp, 8
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x10008b84
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10008b7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008bd3
push edx
push ecx
call fcn.10018a63
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10018ad7
mov esp, ebp
pop ebp
ret
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
call fcn.10034149
int3