Function at 0x1400016e0
Capabilities:
Get session user name

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x358
movaps xmmword [rsp + 0x340], xmm6
mov r14, rcx
lea rcx, [rsp + 0x118]
call fcn.140002120
mov qword [rsp + 0xa0], 1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], 1
movdqu xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], 1
movdqu xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], 1
movdqu xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], 8
movdqu xmmword [rsp + 0x108], xmm0
lea rsi, [rsp + 0x220]
mov rcx, rsi
call fcn.140118c20
mov rcx, rsi
call fcn.140118ee0
lea rcx, [rsp + 0x30]
call fcn.140119050
movzx eax, byte [0x140230ff1]
mov ecx, 7
mov edx, 1
call fcn.140001410
test rax, rax
je 0x140001edc
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x14000180d
movups xmm6, xmmword [rsp + 0x38]
mov edx, 7
mov r8d, 1
mov rcx, rax
call fcn.140001420
mov rdx, qword [rsp + 0xa8]
test rdx, rdx
je 0x140001808
mov rcx, qword [rsp + 0xa0]
mov r8d, 1
call fcn.140001420
mov rax, rsi
jmp 0x140001814
movaps xmm6, xmmword [0x14016a820]
lea rdi, [rsp + 0xe8]
mov qword [rsp + 0xa0], rax
movups xmmword [rsp + 0xa8], xmm6
lea rcx, [rsp + 0x30]
call fcn.140001f20
mov rdx, qword [rsp + 0xf0]
test rdx, rdx
je 0x140001856
mov rcx, qword [rsp + 0xe8]
mov r8d, 1
call fcn.140001420
lea rsi, [rsp + 0xb8]
mov rax, qword [rsp + 0x40]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
lea rcx, [rsp + 0x30]
call fcn.140115720
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
je 0x140001899
mov rcx, qword [rsp + 0xb8]
mov r8d, 1
call fcn.140001420
mov rax, qword [rsp + 0x40]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x30]
movdqu xmmword [rsi], xmm0
mov dword [rsp + 0x28], 0
lea r8, [rsp + 0x28]
mov ecx, 3
xor edx, edx
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
jne 0x140001f03
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
mov qword [rsp + 0x78], r14
jne 0x140001918
mov edi, dword [rsp + 0x28]
test rdi, rdi
je 0x140001924
lea rsi, [rdi + rdi]
movzx eax, byte [0x140230ff1]
mov edx, 2
mov rcx, rsi
call fcn.140001410
mov rbx, rax
test rax, rax
jne 0x140001929
mov ecx, 2
mov rdx, rsi
call fcn.1401688d0
ud2
lea rcx, [rsp + 0x30]
call fcn.140115750
jmp 0x140001972
mov ebx, 2
mov dword [rsp + 0x2c], edi
lea r8, [rsp + 0x2c]
mov ecx, 3
mov rdx, rbx
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
je 0x140001e81
mov r8d, dword [rsp + 0x2c]
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.140132930
test edi, edi
je 0x140001972
add rdi, rdi
mov r8d, 2
mov rcx, rbx
mov rdx, rdi
call fcn.140001420
lea rsi, [rsp + 0xd0]
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x30]
call fcn.1401155d0
mov rdx, qword [rsp + 0xd8]
test rdx, rdx
je 0x1400019a9
mov rcx, qword [rsp + 0xd0]
mov r8d, 1
call fcn.140001420
mov rax, qword [rsp + 0x70]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x60]
movdqu xmmword [rsi], xmm0
lea rcx, [rsp + 0x220]
call fcn.140118f30
mov rbx, qword [rax + 0x18]
test rbx, rbx
je 0x140001c88
mov rbp, qword [rax]
lea r15, [rbp + 0x10]
movdqa xmm0, xmmword [rbp]
pmovmskb r14d, xmm0
not r14d
jmp 0x140001a51
mov rax, qword [rsp + 0x100]
shl rdx, 6
mov rcx, qword [rsp + 0x98]
mov qword [rax + rdx], rcx
lea ecx, [r14 - 1]
mov r8, qword [rsp + 0x90]
mov qword [rax + rdx + 8], r8
mov qword [rax + rdx + 0x10], r8
mov qword [rax + rdx + 0x18], rdi
mov qword [rax + rdx + 0x20], r13
mov qword [rax + rdx + 0x28], r13
mov qword [rax + rdx + 0x30], rsi
mov dword [rax + rdx + 0x38], r12d
inc qword [rsp + 0x110]
and ecx, r14d
dec rbx
mov r14d, ecx
test rbx, rbx
je 0x140001c88
test r14w, r14w
jne 0x140001a81
nop word [rax + rax]
movdqa xmm0, xmmword [r15]
pmovmskb r14d, xmm0
add rbp, 0xffffffffffffea80
add r15, 0x10
cmp r14d, 0xffff
je 0x140001a60
not r14d
tzcnt eax, r14d
neg rax
imul rax, rax, 0x158
lea rdi, [rax + rbp]
add rdi, 0xfffffffffffffeb0
mov rcx, qword [rbp + rax - 0x158]
call fcn.14008cc10
mov r12d, eax
mov rcx, rdi
call fcn.140119090
mov rsi, rax
mov r13, rdx
test rdx, rdx
je 0x140001af0
js 0x140001eed
movzx eax, byte [0x140230ff1]
mov edx, 1
mov rcx, r13
call fcn.140001410
test rax, rax
jne 0x140001af5
jmp 0x140001ef4
mov eax, 1
mov qword [rsp + 0x98], rax
mov rcx, rax
mov rdx, rsi
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [0x140230ff1]
mov ecx, 7
mov edx, 1
call fcn.140001410
test rax, rax
je 0x140001edc
mov rsi, rax
mov qword [rsp + 0x90], r13
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov rcx, rdi
call fcn.1401190c0
mov qword [rsp + 0x58], rax
mov rcx, rdi
call fcn.1401190a0
test rax, rax
je 0x140001bd0
mov r8, rdx
mov dword [rsp + 0x54], r12d
mov qword [rsp + 0x88], rbx
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.14013c200
mov r12, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
test r12, r12
mov rbx, r12
cmove rbx, rax
mov r13, qword [rsp + 0x40]
test r13, r13
mov qword [rsp + 0x80], rax
je 0x140001c00
js 0x140001eed
movzx eax, byte [0x140230ff1]
mov edx, 1
mov rcx, r13
call fcn.140001410
mov rdi, rax
test rax, rax
jne 0x140001c05
jmp 0x140001ef4
mov r13d, 7
mov rdi, rsi
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x110]
cmp rdx, qword [rsp + 0x108]
jne 0x1400019f0
jmp 0x140001c6e
mov edi, 1
mov rcx, rdi
mov rdx, rbx
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov edx, 7
mov r8d, 1
mov rcx, rsi
call fcn.140001420
test r12, r12
mov rdx, qword [rsp + 0x80]
je 0x140001c46
test rdx, rdx
je 0x140001c46
mov r8d, 1
mov rcx, r12
call fcn.140001420
mov rbx, qword [rsp + 0x88]
mov r12d, dword [rsp + 0x54]
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x110]
cmp rdx, qword [rsp + 0x108]
jne 0x1400019f0
lea rcx, [rsp + 0x100]
call fcn.1400028a0
mov rdx, qword [rsp + 0x110]
jmp 0x1400019f0
lea rdx, [rsp + 0xa0]
mov r8d, 0x180
mov r13, qword [rsp + 0x78]
mov rcx, r13
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x260]
call fcn.140002b90
mov rdx, qword [rsp + 0x2b8]
test rdx, rdx
je 0x140001cd0
mov rcx, qword [rsp + 0x2b0]
mov r8d, 1
call fcn.140001420
mov rcx, qword [rsp + 0x2f8]
test rcx, rcx
je 0x140001cf5
mov rdx, qword [rsp + 0x300]
test rdx, rdx
je 0x140001cf5
mov r8d, 1
call fcn.140001420
mov rdx, qword [rsp + 0x2d0]
test rdx, rdx
je 0x140001d15
mov rcx, qword [rsp + 0x2c8]
mov r8d, 1
call fcn.140001420
mov rdx, qword [rsp + 0x2e8]
test rdx, rdx
je 0x140001d35
mov rcx, qword [rsp + 0x2e0]
mov r8d, 1
call fcn.140001420
lea rcx, [rsp + 0x320]
call fcn.140002e60
mov rax, qword [rsp + 0x328]
test rax, rax
je 0x140001d66
mov rcx, qword [rsp + 0x320]
imul rdx, rax, 0x70
mov r8d, 8
call fcn.140001420
cmp qword [rsp + 0x220], 0
je 0x140001e62
lea rcx, [rsp + 0x220]
call fcn.140119130
mov rdi, qword [rsp + 0x228]
test rdi, rdi
je 0x140001e62
mov rbx, qword [rsp + 0x220]
mov rsi, qword [rsp + 0x238]
test rsi, rsi
je 0x140001e3a
movdqa xmm0, xmmword [rbx]
pmovmskb r15d, xmm0
not r15d
lea r14, [rbx + 0x10]
mov r12, rbx
jmp 0x140001de2
dec rsi
lea eax, [r15 - 1]
and eax, r15d
mov r15d, eax
test rsi, rsi
je 0x140001e3a
test r15w, r15w
jne 0x140001e11
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r15d, xmm0
add r12, 0xfffffffffffffe00
add r14, 0x10
cmp r15d, 0xffff
je 0x140001df0
not r15d
tzcnt ecx, r15d
shl rcx, 5
mov rax, r12
sub rax, rcx
mov rdx, qword [rax - 0x18]
test rdx, rdx
je 0x140001dd0
mov rcx, qword [rax - 0x20]
mov r8d, 1
call fcn.140001420
jmp 0x140001dd0
mov rax, rdi
shl rax, 5
add rdi, rax
add rdi, 0x31
je 0x140001e62
sub rbx, rax
add rbx, 0xffffffffffffffe0
mov r8d, 0x10
mov rcx, rbx
mov rdx, rdi
call fcn.140001420
mov rax, r13
movaps xmm6, xmmword [rsp + 0x340]
add rsp, 0x358
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x140230ff1]
mov ecx, 7
mov edx, 1
call fcn.140001410
test rax, rax
je 0x140001edc
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x70], 7
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x60]
call fcn.14013bec0
test edi, edi
jne 0x14000195e
jmp 0x140001972
mov ecx, 1
mov edx, 7
call fcn.1401688d0
ud2
call fcn.14014e2b0
ud2
mov ecx, 1
mov rdx, r13
call fcn.1401688d0
ud2
lea rcx, str.assertion_failed:_successC:UsersEge.cargo_registry_srcindex.crates.io_6f17d22bba15001fwhoami_1.4.1_srcwindows.rs
lea r8, [0x14016a968]
mov edx, 0x19
call fcn.140168bc0
ud2