Function at 0x14009e410
Capabilities:
Get session user name

Disassembly:
mov word [rsp + 8], cx
sub rsp, 0x128
mov dword [rsp + 0x3c], 0x6614
movzx eax, word [rsp + 0x130]
mov word [rsp + 0x34], ax
movzx eax, word [rsp + 0x34]
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
je 0x14009e44d
cmp dword [rsp + 0x50], 0x797
je 0x14009e464
jmp 0x14009e4af
mov dword [rsp + 0x48], 0xf4ea
mov byte [rsp + 0x31], 0xe8
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x40], eax
jmp 0x14009e4af
mov eax, dword [rsp + 0x3c]
add eax, 0x2f43
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x70], eax
movzx eax, byte [rsp + 0x31]
cmp eax, 9
jl 0x14009e4a2
movzx ecx, word [rsp + 0x34]
call fcn.14009ea80
nop
jmp 0x14009e4af
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x130], ax
cmp dword [rsp + 0x48], 0x5ba3
ja 0x14009e541
movzx eax, word [rsp + 0x130]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0xa93
je 0x14009e4d5
jmp 0x14009e537
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xcd
lea r9, [rsp + 0x34]
lea r8, [rsp + 0x31]
mov edx, 0xe2
mov ecx, 0x52
call qword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [rsp + 0x44], eax
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x130], ax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.USER32.dll_MessageBoxIndirectW]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x44], eax
call fcn.14009dab0
nop
jmp 0x14009e53f
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
jmp 0x14009e565
imul eax, dword [rsp + 0x3c], 0x54c9
cmp eax, dword [rsp + 0x40]
jg 0x14009e565
mov r8d, dword [rsp + 0x40]
mov rdx, qword [0x1400b8f10]
mov ecx, dword [rsp + 0x3c]
call fcn.14009f020
nop
movabs rax, 0x74b7e75b3bec61
cmp qword [0x1400b8f10], rax
je 0x14009e59a
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x39], al
movzx eax, byte [section..data]
mov byte [rsp + 0x30], al
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x38], al
jmp 0x14009e657
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.USER32.dll_IsWindow]
mov dword [rsp + 0x74], eax
movsx eax, byte [section..data]
sar eax, 1
mov byte [rsp + 0x30], al
movsx eax, byte [rsp + 0x30]
xor eax, 0x21
movsx ecx, byte [section..data]
cmp eax, ecx
jle 0x14009e5e9
movzx r9d, byte [rsp + 0x30]
mov r8, qword [0x1400b8f10]
movzx edx, byte [rsp + 0x30]
movzx ecx, byte [rsp + 0x30]
call fcn.14009cd40
nop
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x130], ax
mov qword [rsp + 0x20], 0xb7
mov r9d, 0x73
mov r8d, 0xda
mov rdx, qword [rsp + 0xa8]
lea rcx, [fcn.14009dab0]
call qword [sym.imp.USER32.dll_CallWindowProcW]
mov qword [rsp + 0xb0], rax
movzx eax, byte [rsp + 0x31]
movzx ecx, byte [rsp + 0x38]
shl eax, cl
mov byte [rsp + 0x39], al
mov r8d, 0x8c
lea rdx, [fcn.14009e410]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.USER32.dll_EnumPropsExW]
mov dword [rsp + 0x3c], eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x68], rax
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0xf4ea
je 0x14009e67f
jmp 0x14009e6fa
movzx eax, byte [rsp + 0x38]
movzx ecx, byte [rsp + 0x31]
or eax, ecx
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0x6614
je 0x14009e6a3
jmp 0x14009e6d3
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov rax, qword [0x1400b8f10]
mov qword [rsp + 0x88], rax
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x58], ax
jmp 0x14009e6f8
movsx eax, byte [rsp + 0x30]
movsx ecx, byte [section..data]
sub eax, ecx
mov rcx, qword [rsp + 0x68]
mov byte [rcx], al
movzx eax, byte [rsp + 0x38]
movzx ecx, byte [rsp + 0x39]
add eax, ecx
mov byte [rsp + 0x31], al
jmp 0x14009e777
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0x736a
je 0x14009e73b
cmp dword [rsp + 0x54], 0x9b92
je 0x14009e718
jmp 0x14009e777
movzx r9d, byte [rsp + 0x30]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x68]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x30]
call fcn.14009cd40
nop
jmp 0x14009e777
mov dword [rsp + 0x20], 0x7a
lea r9, [rsp + 0x90]
mov r8d, 0x41
lea rdx, str.adjourning_awesomeness
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.USER32.dll_DrawTextW]
mov dword [rsp + 0x3c], eax
movzx eax, word [rsp + 0x4c]
mov word [rsp + 0x130], ax
movsx eax, byte [section..data]
add rsp, 0x128
ret