Function at 0x140004ead
Capabilities:
Get session user name

Disassembly:
jmp 0x1401a7450
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x408
mov rax, qword [0x14039ae00]
xor rax, rsp
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x338], 0x64
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x380]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x340]
call fcn.14000457a
nop
lea rdx, [0x1402a0990]
lea rcx, [rsp + 0x188]
call fcn.14000707c
mov qword [rsp + 0x108], rax
lea rdx, [0x1402a099c]
lea rcx, [rsp + 0x160]
call fcn.140007216
mov qword [rsp + 0xd0], rax
lea rdx, [0x1402a09a8]
lea rcx, [rsp + 0x1a8]
call fcn.1400050d3
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x78], rax
lea rdx, [0x1402a09b8]
lea rcx, [rsp + 0x198]
call fcn.14000707c
mov qword [rsp + 0x20], rax
lea rdx, str.pcuser
lea rcx, [rsp + 0x168]
call fcn.1400072f7
mov qword [rsp + 0x28], rax
lea rdx, str.typelog
lea rcx, [rsp + 0x178]
call fcn.1400072f7
mov qword [rsp + 0x30], rax
mov r8, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2b8]
call fcn.1400062ee
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x340]
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x298]
call fcn.140003887
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
mov r8, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x278]
call fcn.1400046ec
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x1b8]
call fcn.140003887
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x410]
add rax, 0x238
mov qword [rsp + 0xb0], rax
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x258]
call fcn.140003bd4
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb0]
mov r8, rax
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x238]
call fcn.140003887
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0xe8], rax
mov r8, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x218]
call fcn.14000166d
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xe8]
mov r8, rax
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0x1f8]
call fcn.140003887
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x410]
add rax, 0x20
mov qword [rsp + 0x120], rax
mov r8, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x110]
lea rcx, [rsp + 0x1d8]
call fcn.1400046ec
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x120]
mov r8, rax
mov rdx, qword [rsp + 0x128]
lea rcx, [rsp + 0x360]
call fcn.140003887
nop
lea rcx, [rsp + 0x1d8]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x1f8]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x218]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x238]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x258]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x1b8]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x278]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x298]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x2b8]
call fcn.1400025d1
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x410]
add rax, 0x80
mov rdx, rax
mov rcx, qword [rsp + 0x130]
call fcn.140001fbe
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x158], rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0x148], rax
lea rdx, [rsp + 0x360]
mov rcx, qword [rsp + 0x148]
call fcn.140001fbe
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x90], rax
mov r8, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x2d8]
call fcn.140003fcb
lea rcx, [rsp + 0x2d8]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x360]
call fcn.1400025d1
nop
lea rcx, [rsp + 0x340]
call fcn.1400025d1
nop
mov rcx, qword [rsp + 0x418]
call fcn.1400025d1
mov rcx, qword [rsp + 0x3f0]
xor rcx, rsp
call fcn.1400048e5
add rsp, 0x408
ret