Function at 0x140073da0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x14038b780]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r14, rdx
mov r12, rcx
mov qword [rbp + 0xa8], rdx
xor r13d, r13d
call fcn.1400661c0
mov dword [rbp + 0xb0], 0x64
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
lea rax, [rbp + 0x100]
mov rcx, 0xffffffffffffffff
mov rbx, rcx
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140073e30
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x1400745bf
mov eax, socket
cmp rbx, 0x10
jae 0x140073e9e
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov r8, rbx
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0xb8]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0xb8], 0
mov rdi, qword [rbp + 0xd0]
mov rbx, qword [rbp + 0xc8]
mov r15, qword [rbp + 0xb8]
jmp 0x140073efc
mov rdi, rbx
or rdi, 0xf
cmp rdi, rsi
jbe 0x140073eaf
mov rdi, rsi
jmp 0x140073eb6
cmp rdi, rax
cmovb rdi, rax
mov rdx, rdi
add rdx, 1
cmovb rdx, rcx
lea rcx, [rbp + 0xb8]
call fcn.140063b10
mov r15, rax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], rdi
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rbx], 0
mov dword [rsp + 0x58], 0xf7eff8b0
mov dword [rsp + 0x5c], 0xf9f5e9ff
mov word [rsp + 0x60], 0xa3
mov byte [rsp + 0x62], 1
mov dword [rsp + 0x20], 0xf4f9f9b0
mov dword [rsp + 0x24], 0x100a6ff
mov dword [rsp + 0x68], 0xeafde4b0
mov dword [rsp + 0x6c], 0xf3f3f2e9
mov dword [rsp + 0x70], 0x9dfbf7
mov byte [rsp + 0x74], 1
mov dword [rsp + 0x48], 0xeafdfab0
mov dword [rsp + 0x4c], 0xf8fbfae9
mov word [rsp + 0x50], 0xa3
mov byte [rsp + 0x52], 1
mov dword [rsp + 0x28], 0xecfbe7b0
mov dword [rsp + 0x2c], 0xa0eefee9
mov word [rsp + 0x30], 0x100
mov dword [rsp + 0x38], 0xfce8eee2
mov dword [rsp + 0x3c], 0xfaf3f7a7
mov word [rsp + 0x40], 0x100
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x78]
call fcn.1400594b0
nop
lea rdx, [rbp + 0xb8]
cmp rdi, 0x10
cmovae rdx, r15
mov r8, rbx
mov rcx, rax
call fcn.14001f9c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x58]
call fcn.1400595d0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140073ffb
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.14001f9c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x38]
call fcn.140059790
nop
lea rdx, [r12 + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14007404e
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14001f9c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 8]
call fcn.1400593d0
nop
mov rdx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x140074096
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
mov rcx, rax
call fcn.14001f9c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x28]
call fcn.1400595d0
nop
lea rdx, [r12 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400740e9
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14001f9c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x140074153
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007414e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007414e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
movdqa xmm0, xmmword [0x1402a3b30]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1400741a4
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007419e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007419e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1400741e2
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400741dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400741dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
movdqa xmm0, xmmword [0x1402a3b30]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x140074232
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007422c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007422c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x140074270
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007426b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007426b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
movdqa xmm0, xmmword [0x1402a3b30]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1400742c0
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400742ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400742ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x1400742fe
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400742f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400742f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
movdqa xmm0, xmmword [0x1402a3b30]
movdqu xmmword [rbp + 0x68], xmm0
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x14007434e
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074348
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074348
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x14007438f
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007438a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007438a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
movdqa xmm0, xmmword [0x1402a3b30]
movdqu xmmword [rbp + 0x88], xmm0
mov byte [rbp + 0x78], 0
lea rax, [rbp - 0x48]
mov qword [rbp + 0x98], rax
lea rdx, [r12 + 0x60]
lea rcx, [rbp - 0x48]
call fcn.14001d5c0
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
lea r15, [rbp + 0xd8]
mov rdi, qword [rbp + 0xd8]
mov r13, qword [rbp + 0xf0]
cmp r13, 0x10
cmovae r15, rdi
mov rbx, qword [rbp + 0xe8]
cmp rbx, rsi
ja 0x1400745b9
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
cmp rbx, 0x10
jae 0x140074419
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x78], xmm0
jmp 0x14007446e
mov rax, rbx
or rax, 0xf
cmp rax, rsi
ja 0x140074435
mov rsi, rax
cmp rax, 0x16
mov eax, socket
cmovb rsi, rax
mov rdx, rsi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140063b10
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rsi
lea r8, [rbx + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r8, r12
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.140075cb0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1400744be
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400744b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400744b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
cmp r13, 0x10
jb 0x1400744f9
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400744f0
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400744f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140100c6c
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x14007453e
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074538
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074538
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100c6c
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140074574
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14007456f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400745b2
mov rcx, r8
call fcn.140100c6c
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140100c10
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x280
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001f9a0
nop
call fcn.14001f9a0
int3