Function at 0x1003f1ab
Capabilities:
Get session user name

Disassembly:
mov eax, 0x1007e6ed
call fcn.1007d070
sub esp, 0x84
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x2c], 0xf6af1124
push 2
lea ecx, [ebp - 0x4c]
call fcn.10015a80
push 0x1dd5
push 0xd3d
lea eax, [ebp - 0x84]
xor ebx, ebx
push eax
push ebx
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], ebx
push eax
push 0x68d1
push 0x2085
push 0x102c
push 0x7ef0
push 0x37ef
push 0xe6d
push 0x44c3
call fcn.1003f548
mov byte [ebp - 0x19], bl
add esp, 0x30
cmp byte [ebp - 0x19], bl
je 0x1003f226
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x4c]
push eax
push 0x49d4
push 0x3ce4
push ebx
push 0x73d6
push 0x6b4
lea eax, [ebp - 0x2c]
push 0x631e
push eax
call fcn.100438fc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
add esp, 0x20
call fcn.10015b02
cmp dword [esi], ebx
je 0x1003f4fd
push edi
push dword [esi]
push ebx
push dword [esi + 4]
call fcn.10023958
push dword [esi + 4]
call fcn.10066032
add esp, 0x10
lea ecx, [ebp - 0x58]
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x18], edi
push 3
call fcn.10015a80
push edi
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], edi
call fcn.10015a80
mov byte [ebp - 4], 2
mov eax, 0x7504ed09
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov eax, 0xaa7054f8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x20]
push ebx
push 0x378f
push eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x14], edi
push eax
mov dword [ebp - 0x14], ebx
push 0x6ea7
call fcn.10041c36
add esp, 0x14
mov dword [ebp - 0x20], ebx
jmp 0x1003f304
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
mov dword [eax + ecx*4], 0x6986d6d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003f2f4
mov eax, dword [ebp - 0x10]
add eax, 6
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 5
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x91a8
setl al
xor ecx, ecx
cmp eax, 0xdd71
setl cl
mov dword [ebp - 0x7c], ecx
cmp ecx, dword [ebp - 0x10]
jne 0x1003f387
push 0x593c
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], 0xda5659cd
push eax
push 0x26e9
push ebx
call fcn.10041fc4
add esp, 0x10
jmp 0x1003f444
mov dword [ebp - 0x14], 0x3d38
mov dword [ebp - 0x14], 0xb7228d
mov dword [ebp - 0x14], 0xa2560131
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x14], 0x9b6e
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1003f3d3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 0x4807c1f4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003f3c2
mov dword [ebp - 0x10], ebx
jmp 0x1003f3ec
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x24], 0xc580b0b8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1003f3de
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 0x11
jge 0x1003f444
mov eax, 0x33ecb407
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x14], 9
push ebx
mov dword [ebp - 0x28], 0xe577
dec dword [ebp - 0x24]
push eax
call fcn.1003f6e5
inc dword [ebp - 0x10]
mov eax, 0x33ecb407
cmp dword [ebp - 0x10], 0x11
pop ecx
pop ecx
jl 0x1003f3ff
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f454
push ebx
call fcn.1004240b
pop ecx
lea ecx, [ebp - 0x64]
call fcn.10015b02
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10015b02
push 3
lea ecx, [ebp - 0x70]
mov dword [esi + 4], ebx
call fcn.10015a80
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x10], 8
push eax
mov dword [ebp - 0x18], edi
push ebx
call fcn.1004333f
add esp, 0xc
mov dword [ebp - 0x10], ebx
jmp 0x1003f4e1
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x14], 0xfffffff8
or dword [eax + 8], 0xffffffff
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
setne cl
mov dword [ebp - 0x14], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x1003f49f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.10015b02
push esi
push ebx
call fcn.10042bee
pop ecx
pop ecx
pop edi
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret