Function at 0x1400040a0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov r13d, ecx
mov dword [rbp - 0x40], 0x101
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x60]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea rax, [rbp + 0x60]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140004110
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x18]
call fcn.140005770
nop
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov rax, qword [rbp - 8]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x18]
cmova rdx, qword [rbp - 0x18]
lea rcx, [rbp + 8]
call fcn.140005140
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x18]
sub rax, r15
cmp rax, 9
jb 0x1400046ba
lea r14, [rbp + 8]
mov r12, qword [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova r14, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rsi, [r15 + 9]
mov ebx, 0xf
lea rdi, [rsp + 0x60]
cmp rsi, rbx
jbe 0x14000421f
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400041e1
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140007ea0
test rax, rax
je 0x1400046c0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000421a
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004209
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000469e
jmp 0x1400041c2
test rcx, rcx
je 0x140004218
call fcn.140007ea0
mov rdi, rax
jmp 0x14000421a
xor edi, edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
movsd xmm0, qword [str.C:Users_]
movsd qword [rdi], xmm0
movzx eax, byte [0x140023d80]
mov byte [rdi + 8], al
lea rcx, [rdi + 9]
mov r8, r15
mov rdx, r14
call fcn.140019160
mov byte [rdi + rsi], 0
mov r8d, 8
lea rdx, str.Desktop
lea rcx, [rsp + 0x60]
call fcn.140004b70
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xor r14d, r14d
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400042d6
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046c6
call fcn.140007edc
movdqa xmm0, xmmword [0x140023ff0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdi, qword [rbp - 0x28]
lea rbx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rbx, qword [rbp - 0x38]
call fcn.140006f34
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.140001900
nop
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rcx, qword [rsp + 0x30]
call fcn.140007870
test eax, eax
jne 0x1400046cc
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14000437c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004377
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046e0
call fcn.140007edc
mov esi, r14d
lea rbx, [0x140023f24]
lea r15, str.get_fucked
nop dword [rax]
lea r9, [rbp + 0x52]
mov ecx, r13d
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul ecx
shr edx, 3
movzx eax, dx
shl ax, 2
lea r8d, [rax + rdx]
add r8w, r8w
sub cx, r8w
add cx, 0x30
mov word [r9], cx
mov ecx, edx
test edx, edx
jne 0x1400043a0
lea r8, [rbp + 0x52]
mov rdx, r9
lea rcx, [rbp - 0x80]
call fcn.140006060
nop
mov r8, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
sub rax, r8
cmp rax, 0xa
jb 0x140004480
lea rax, [r8 + 0xa]
mov qword [rbp - 0x70], rax
lea rdi, [rbp - 0x80]
cmp rcx, 7
cmova rdi, qword [rbp - 0x80]
cmp rbx, rdi
jbe 0x140004430
lea rax, [rdi + r8*2]
cmp r15, rax
ja 0x140004430
cmp rdi, r15
ja 0x140004425
mov rbx, r14
jmp 0x140004435
mov rbx, rdi
sub rbx, r15
sar rbx, 1
jmp 0x140004435
mov ebx, 0xa
lea rcx, [rdi + 0x14]
lea r8, [r8*2 + 2]
mov rdx, rdi
call fcn.140019160
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140019160
lea rcx, [rbx + rdi]
mov r8d, 0x14
sub r8, rbx
lea rdx, [r15 + 0x14]
add rdx, rbx
call fcn.140019160
lea rax, [rbp - 0x80]
lea rbx, [0x140023f24]
jmp 0x140004497
mov qword [rsp + 0x28], 0xa
mov edx, 0xa
lea rcx, [rbp - 0x80]
call fcn.1400067a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r14w
lea rcx, [rsp + 0x30]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 7
cmova rcx, rdx
call fcn.140007194
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x1400046a4
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140004545
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004540
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046ec
call fcn.140007edc
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140004599
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004594
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046f2
call fcn.140007edc
inc esi
cmp esi, 3
jl 0x140004390
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400045df
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046e6
call fcn.140007edc
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
cmp rax, 0xf
jbe 0x14000462c
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140004623
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046f8
mov rcx, r12
call fcn.140007edc
nop
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x140004668
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004663
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004698
call fcn.140007edc
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.140007e80
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000f0e4
nop
call fcn.140001120
nop
lea r8, [rsp + 0x30]
mov edx, dword [rsp + 0x54]
lea rcx, str.create_directory
call fcn.140002840
nop
call fcn.1400011c0
int3
call fcn.14000f0e4
nop
call fcn.14000f0e4
nop
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, str.current_path_const_path_
call fcn.140002840
nop
call fcn.14000f0e4
nop
call fcn.14000f0e4
nop
call fcn.14000f0e4
nop
call fcn.14000f0e4
nop
call fcn.14000f0e4
int3