Function at 0x140002e90
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x360
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov dword [rbp + 8], 0x101
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xor r15d, r15d
mov qword [rbp + 0x10], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
lea rax, [rbp + 0x100]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r15w
jne 0x140002ef4
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x10]
call fcn.140001360
nop
movabs rax, 0xccc054efa3fcab73
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rbx, 0x1368ddea65ebd4c6
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rdi, 0xccc054efa3b1ab25
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.140003650
cmp rax, 0xffffffffffffffff
jne 0x140003003
movabs rax, 0xcca15498a3fcab73
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x1368ddea658ed4b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.140003650
cmp rax, 0xffffffffffffffff
jne 0x140003003
xor r14b, r14b
jmp 0x1400031c3
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xecac359ad7c3c273
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x7e06b2980c9dbaa3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xade7a6192dc00802
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xab213500a22abebb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x42d231506f4265c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x83d64c85e0024aea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x544b6d70ae19802e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xacaaf30cfeb5f0e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xc893c37d0db46667
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x8b4f5c20c64fcad8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x6140427b74915529
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xa3f827e6856a29ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x7a2c0319da70f86b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0xacaaf30cfeb5decc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140001020
lea rdx, [0x140001760]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14b, 1
mov edx, 3
lea rcx, [rbp + 0xc]
call qword [sym.imp.MSVCP140D.dll_public:_void___cdecl_std::_Lockit::constructor_int____ptr64]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1400031fc
mov rax, qword [rcx + 8]
mov qword [rcx + 8], r15
test rax, rax
je 0x1400031fc
nop dword [rax + rax]
mov qword [rax], r15
mov rax, qword [rax + 8]
test rax, rax
jne 0x1400031f0
lea rcx, [rbp + 0xc]
call qword [sym.imp.MSVCP140D.dll_public:_void___cdecl_std::_Lockit::destructor_void____ptr64]
mov rax, qword [rbp + 0x30]
cmp rax, 7
jbe 0x14000336d
mov rbx, qword [rbp + 0x18]
lea rdi, [rax + 1]
lea r12, [0x1400075ac]
test rbx, rbx
jne 0x140003283
test rdi, rdi
je 0x140003283
lea rax, str.null_pointer_cannot_point_to_a_block_of_non_zero_size
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0x3cb
lea rdx, [0x1400075b0]
lea ecx, [rbx + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x14000325d
int3
mov qword [rsp + 0x20], r15
mov r9d, 0x3cb
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140007660]
lea rcx, str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
add rdi, rdi
cmp rdi, 0x1000
jb 0x140003362
add rdi, 0x2f
mov rsi, qword [rbx - 8]
movabs rax, 0xfafafafafafafafa
lea r13, str.invalid_argument
cmp qword [rbx - 0x10], rax
je 0x140003302
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0xa3
lea rdx, [0x1400075b0]
lea ecx, [r9 + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x1400032dc
int3
mov qword [rsp + 0x20], r15
mov r9d, 0xa3
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140007660]
lea rcx, str._invalid_argument_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
sub rbx, rsi
lea rax, [rbx - 0x10]
cmp rax, 0x1f
jbe 0x14000335f
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0xad
lea rdx, [0x1400075b0]
lea ecx, [r9 + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x140003339
int3
mov qword [rsp + 0x20], r15
mov r9d, 0xad
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140007660]
lea rcx, str._invalid_argument_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
mov rbx, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140004fd0
movdqa xmm0, xmmword [0x140007aa0]
movdqu xmmword [rbp + 0x28], xmm0
mov word [rbp + 0x18], r15w
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x10], r15
mov edx, 0x10
call fcn.140004fd0
movzx eax, r14b
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret