Function at 0x1400631c0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x140089040]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov r12, rcx
mov qword [rbp + 0x10], rcx
xor ebx, ebx
mov dword [rsp + 0x30], ebx
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
mov dword [rsp + 0x30], 1
mov dword [rbp + 0x20], 0x200
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
lea rax, [rbp + 0x80]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140063260
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x68]
call fcn.14000c650
mov edi, 0x20001
mov dword [rsp + 0x30], edi
mov r8, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
sub rax, r8
mov r15d, 9
cmp rax, r15
jb 0x140063335
lea rax, [r8 + 9]
mov qword [rbp - 0x58], rax
lea rsi, [rbp - 0x68]
cmp rcx, 7
cmova rsi, qword [rbp - 0x68]
lea rax, [0x14007acaa]
lea r13, str.C:Users_
cmp rax, rsi
jbe 0x1400632e7
lea rax, [rsi + r8*2]
cmp r13, rax
ja 0x1400632e7
cmp rsi, r13
ja 0x1400632dc
mov r14, rbx
jmp 0x1400632ea
mov r14, rsi
sub r14, r13
sar r14, 1
jmp 0x1400632ea
mov r14, r15
lea rcx, [rsi + 0x12]
lea r8, [r8*2 + 2]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
lea rbx, [r14 + r14]
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [r13 + 0x12]
lea rdx, [rdx + r14*2]
lea rcx, [rbx + rsi]
sub r15, r14
lea r8, [r15 + r15]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x68]
mov rsi, 0xffffffffffffffff
jmp 0x140063346
mov qword [rsp + 0x28], r15
mov rdx, r15
lea rcx, [rbp - 0x68]
call fcn.140065130
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x18], 7
xor r15d, r15d
mov qword [rax + 0x10], r15
mov word [rax], r15w
bts edi, 0x12
mov dword [rsp + 0x30], edi
mov r8d, 0x1a
lea rdx, str.AppDataLocalRobloxlogs
lea rcx, [rsp + 0x58]
call fcn.140063fa0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
bts edi, 0x13
mov dword [rsp + 0x30], edi
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140063415
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063410
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063410
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067254
movdqa xmm0, xmmword [0x14007aeb0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x140063474
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063467
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063467
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067254
movdqa xmm0, xmmword [0x14007aeb0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r15w
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova rdx, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov r8, qword [rbp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.14000c650
or edi, 0x300000
mov dword [rsp + 0x30], edi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.140064280
test eax, eax
jne 0x140063c35
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x140063519
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063514
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063514
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067254
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140063535
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x48]
mov edi, dword [rsp + 0x30]
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x30], xmm0
test rcx, rcx
je 0x14006354f
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x48]
mov edi, dword [rsp + 0x30]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
test rcx, rcx
je 0x14006358e
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14006358a
mov rbx, qword [rbp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14006358a
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov r13, qword [rbp + 0x30]
lea rbx, str..log
test r13, r13
je 0x140063b3c
lea rdx, [rbp - 0x48]
mov rcx, r13
call fcn.140062b00
mov rax, qword [rbp - 0x48]
mov edx, dword [rbp - 0x40]
test edx, edx
je 0x1400635c8
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x140063c49
cmp eax, 2
jne 0x1400638ba
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], 4
call fcn.140066b4c
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x20], xmm0
lea r8, [rbp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x38]
call fcn.140061a40
or edi, 0x60
or edi, 2
mov dword [rsp + 0x30], edi
lea r14, [r13 + 0x20]
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x140063615
mov rcx, qword [r14]
lea rsi, [r14 + 0x10]
mov rax, qword [rsi]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140061b90
cmp rax, rdx
je 0x14006366c
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14006363f
cmp cx, 0x2f
jne 0x140063648
add rax, 2
cmp rax, rdx
jne 0x140063630
cmp rax, rdx
je 0x14006366c
nop dword [rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14006366c
cmp cx, 0x2f
je 0x14006366c
mov rbx, r8
cmp rax, r8
jne 0x140063650
mov r8d, 0x3a
mov rcx, rbx
call fcn.1400669d0
cmp rbx, rax
je 0x1400636b7
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x1400636b7
cmp word [rdx], 0x2e
jne 0x14006369f
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x1400636ba
cmp word [rcx], 0x2e
jne 0x1400636ba
jmp 0x1400636b7
sub rdx, 2
cmp rbx, rdx
je 0x1400636b7
cmp word [rdx], 0x2e
je 0x1400636ba
sub rdx, 2
cmp rbx, rdx
jne 0x1400636a8
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8, rax
lea rcx, [rsp + 0x58]
call fcn.14000c650
or edi, 0x380
or edi, 4
mov dword [rsp + 0x30], edi
lea rax, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova rax, qword [rbp - 0x38]
mov qword [rbp], rax
mov rax, qword [rbp - 0x28]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x58]
call fcn.140061ed0
test eax, eax
jne 0x1400638ba
cmp qword [r14 + 0x18], 7
jbe 0x14006372f
mov r14, qword [r14]
mov rax, qword [rsi]
lea rsi, [r14 + rax*2]
mov rbx, rsi
mov rdx, rsi
mov rcx, r14
call fcn.140061b90
cmp rax, rsi
je 0x14006378b
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14006375f
cmp cx, 0x2f
jne 0x140063768
add rax, 2
cmp rax, rsi
jne 0x140063750
cmp rax, rsi
je 0x14006378b
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14006378b
cmp cx, 0x2f
je 0x14006378b
mov rbx, rdx
cmp rax, rdx
jne 0x140063770
sub rsi, rbx
sar rsi, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov r8, rsi
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14000c650
or edi, 0x1c00
or edi, 8
lea r14, [rsp + 0x38]
cmp qword [rsp + 0x50], 7
cmova r14, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
call fcn.140066b4c
mov r15d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xor edx, edx
mov qword [rbp - 0x78], rdx
mov ebx, 0xf
mov qword [rbp - 0x70], rbx
mov byte [rsp + 0x78], dl
bts edi, 0x10
mov dword [rsp + 0x30], edi
test rsi, rsi
je 0x14006387d
cmp rsi, 0x7fffffff
ja 0x140063c27
mov dword [rsp + 0x20], edx
xor r9d, r9d
mov r8d, esi
mov rdx, r14
mov ecx, eax
call fcn.140066bbc
mov rbx, rax
mov qword [rbp + 0x20], rax
shr rax, 0x20
test eax, eax
jne 0x140063c63
movsxd rdx, ebx
lea rcx, [rsp + 0x78]
call fcn.140059a00
lea r9, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r9, qword [rsp + 0x78]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r14
mov ecx, r15d
call fcn.140066bbc
mov qword [rbp + 0x20], rax
shr rax, 0x20
test eax, eax
jne 0x140063c5a
mov rbx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x78]
btr edi, 0x10
or edi, 0xe010
mov dword [rsp + 0x30], edi
lea rcx, [rsp + 0x78]
cmp rbx, 0xf
cmova rcx, qword [rsp + 0x78]
mov qword [rsp + 0x20], 6
lea r9, str.Player
call fcn.140004140
cmp rax, 0xffffffffffffffff
je 0x1400638be
mov sil, 1
jmp 0x1400638c1
mov rbx, qword [rbp - 0x70]
xor sil, sil
test dil, 0x10
je 0x14006391d
and edi, 0xffffffef
mov dword [rsp + 0x30], edi
cmp rbx, 0xf
jbe 0x140063907
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063902
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063b20
call fcn.140067254
xor r15d, r15d
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], r15b
jmp 0x140063920
xor r15d, r15d
test dil, 8
je 0x140063983
and edi, 0xfffffff7
mov dword [rsp + 0x30], edi
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14006396f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006396a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063b27
call fcn.140067254
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r15w
test dil, 4
je 0x1400639e6
and edi, 0xfffffffb
mov dword [rsp + 0x30], edi
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x1400639d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400639cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063b2e
call fcn.140067254
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
test dil, 2
je 0x140063a33
and edi, 0xfffffffd
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x140063a33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063a2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063b35
call fcn.140067254
test sil, sil
je 0x140063a70
lea r8, [r13 + 0x20]
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x140063a5b
mov rdx, r8
mov rcx, rax
call fcn.140064020
add qword [r12 + 8], 0x20
jmp 0x140063a70
mov rdx, rax
mov rcx, r12
call fcn.140064e50
nop word [rax + rax]
lea rdx, [rbp + 0x80]
mov rcx, qword [r13 + 0x40]
call fcn.140066dac
cmp eax, 0x12
je 0x140063ac4
test eax, eax
jne 0x140063c2d
cmp word [rbp + 0xac], 0x2e
jne 0x140063ab3
movzx eax, word [rbp + 0xae]
test ax, ax
je 0x140063a70
cmp ax, 0x2e
jne 0x140063ab3
cmp word [rbp + 0xb0], 0
je 0x140063a70
lea rdx, [rbp + 0x80]
mov rcx, r13
call fcn.140062ee0
jmp 0x140063b10
mov r13, r15
mov qword [rbp + 0x30], r15
mov rbx, qword [rbp + 0x38]
mov qword [rbp + 0x38], r15
test rbx, rbx
je 0x140063b10
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140063b08
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140063b08
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov r13, qword [rbp + 0x30]
mov eax, r15d
test eax, eax
jne 0x140063c2d
jmp 0x140063592
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x38]
mov rsi, 0xffffffffffffffff
test rcx, rcx
je 0x140063b7b
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140063b7b
mov rbx, qword [rbp + 0x38]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140063b7b
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140063bb1
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140063bb1
mov rbx, qword [rbp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140063bb1
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 7
jbe 0x140063bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063bef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063bef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067254
mov rax, r12
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.1400671f0
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140061710
nop
mov edx, eax
call fcn.1400629a0
nop
lea r8, [rsp + 0x38]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140062a90
nop
lea r8, [r13 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140062a90
nop
mov ecx, dword [rbp + 0x24]
call fcn.1400619f0
int3
mov ecx, dword [rbp + 0x24]
call fcn.1400619f0
int3