Function at 0x140001aa0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x140009010]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r15d, edx
mov r14, rcx
mov qword [rbp + 0x48], rcx
xor r12d, r12d
mov dword [rbp + 0x48], 0x64
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x50]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x50]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140001b11
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x140001fd4
mov qword [rsp + 0x38], send
cmp rbx, 0x10
jae 0x140001b5c
mov qword [rsp + 0x30], rbx
mov r8, rbx
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x20], r12b
jmp 0x140001bf7
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140001b91
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400048fc
test rax, rax
je 0x140001bbc
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001bd5
mov rdi, rax
mov ecx, socket
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140001bc3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001fda
jmp 0x140001b76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001bd2
call fcn.1400048fc
mov rsi, rax
jmp 0x140001bd5
mov rsi, r12
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
mov r8, rbx
lea rdx, [rbp + 0x50]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], r12b
mov edx, r15d
lea rcx, [rbp + 0x28]
call fcn.140002fe0
nop
lea rcx, [rbp + 8]
call fcn.140001900
mov r9, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], send
mov qword [rsp + 0x58], send
movsd xmm0, qword [str._n____time:]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140006520]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.1400039d0
nop
mov r8d, send
lea rdx, str.__charCount_:
lea rcx, [rbp - 0x58]
call fcn.140002db0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
lea r9, [rbp + 0x28]
lea r8, [rbp - 0x18]
lea rcx, [rbp - 0x78]
call fcn.1400039d0
nop
mov r8d, send
lea rdx, str.__username_:
lea rcx, [rbp - 0x78]
call fcn.140002db0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
lea r9, [rsp + 0x20]
lea r8, [rbp - 0x38]
lea rcx, [rsp + 0x68]
call fcn.1400039d0
nop
mov r8d, 5
lea rdx, [0x1400064ec]
lea rcx, [rsp + 0x68]
call fcn.140002db0
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r14 + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140001d68
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001d63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001d63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
movdqa xmm0, xmmword [0x140006640]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140001dba
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001db4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001db4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140001df8
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001df3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001df3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
movdqa xmm0, xmmword [0x140006640]
movdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140001e48
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140001e86
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
movdqa xmm0, xmmword [0x140006640]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140001ed8
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ed2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ed2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x140001f16
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
movdqa xmm0, xmmword [0x140006640]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140001f66
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x140001fa6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001fa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001fa1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004c58
mov rax, r14
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140004640
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140001850
int3
call fcn.1400017b0
int3