Function at 0x140001e30
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x14000a010]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r15d, edx
mov r14, rcx
mov qword [rbp + 0x48], rcx
xor r12d, r12d
mov dword [rbp + 0x48], 0x64
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x50]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x50]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140001ea1
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000236e
mov qword [rsp + 0x38], 0xf
cmp rbx, 0x10
jae 0x140001eec
mov qword [rsp + 0x30], rbx
mov r8, rbx
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x20], r12b
jmp 0x140001f87
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140001f21
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000513c
test rax, rax
je 0x140001f4c
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001f65
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140001f53
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002374
jmp 0x140001f06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001f62
call fcn.14000513c
mov rsi, rax
jmp 0x140001f65
mov rsi, r12
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
mov r8, rbx
lea rdx, [rbp + 0x50]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], r12b
mov edx, r15d
lea rcx, [rbp + 0x28]
call fcn.1400035e0
nop
lea rcx, [rbp + 8]
call fcn.140001c90
mov r9, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [str.time:]
mov dword [rsp + 0x40], eax
movzx eax, word [0x140007594]
mov word [rsp + 0x44], ax
movzx eax, byte [0x140007596]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], 0
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140003e40
nop
mov r8d, 0xe
lea rdx, str.__charCount:
lea rcx, [rbp - 0x58]
call fcn.1400033d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp + 0x28]
lea r8, [rbp - 0x18]
lea rcx, [rbp - 0x78]
call fcn.140003e40
nop
mov r8d, 0xd
lea rdx, str.__username:
lea rcx, [rbp - 0x78]
call fcn.1400033d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x20]
lea r8, [rbp - 0x38]
lea rcx, [rsp + 0x68]
call fcn.140003e40
nop
mov r8d, 4
lea rdx, str._n
lea rcx, [rsp + 0x68]
call fcn.1400033d0
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r14 + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140002102
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
movdqa xmm0, xmmword [0x140007630]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140002154
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000214e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000214e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140002192
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000218d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000218d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
movdqa xmm0, xmmword [0x140007630]
movdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400021e2
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400021dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140002220
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000221b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000221b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
movdqa xmm0, xmmword [0x140007630]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002272
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000226c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000226c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1400022b0
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
movdqa xmm0, xmmword [0x140007630]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140002300
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x140002340
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000233b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000233b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005498
mov rax, r14
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140004e80
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140001be0
int3
call fcn.140001b40
int3