Function at 0x18000e930
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x180183c70]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov dword [rbp + 0xe0], 0x5f6d756e
mov edx, 0x73
mov word [rbp + 0xe4], dx
mov dword [rbp + 0xe5], 0x646e61
mov eax, 0x62
mov word [rbp + 0xe8], ax
mov ecx, 0x6f
mov word [rbp + 0xe9], cx
mov eax, 0x78
mov word [rbp + 0xea], ax
mov dword [rbp + 0xeb], 0x6f7232
mov eax, 0x5f
mov word [rbp + 0xee], ax
mov eax, 0x66
mov word [rbp + 0xef], ax
mov dword [rbp + 0xf0], 0x73756c
mov eax, 0x68
mov word [rbp + 0xf3], ax
mov dword [rbp + 0xf4], 0x61725f
mov eax, 0x6563
mov word [rbp + 0xf7], ax
mov byte [rbp + 0xf9], 0
mov r12d, 0x3f
mov r9d, r12d
lea r8, [0x180182b60]
xor edx, edx
xor ecx, ecx
call fcn.180072bc0
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r15b
mov dil, 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
xor edx, edx
mov r8d, 0xcc
lea rcx, [rsp + 0x60]
call fcn.1800cd3d0
test al, al
jne 0x18000eaaf
call qword [sym.imp.WINMM.dll_auxGetNumDevs]
mov ebx, eax
mov dword [rsp + 0x30], 0x104
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x130]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test rbx, rbx
je 0x18000edb0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WINMM.dll_auxOutMessage]
jmp 0x18000edb0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
call qword [sym.imp.WINMM.dll_waveOutGetNumDevs]
mov ebx, eax
movsd xmm0, qword [0x180182c08]
mulsd xmm0, qword [0x1801745a0]
addsd xmm0, qword [0x180174540]
cvttsd2si rcx, xmm0
mov dword [rsp + 0x30], ecx
lea rax, [0x180182b88]
mov qword [rsp + 0x20], rax
mov r9d, 0xd3
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1800f8130
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_StartTraceA]
mov esi, eax
movzx edi, dil
test ebx, ebx
cmove edi, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rsp + 0x40]
mov edx, 0xff
xor ecx, ecx
call fcn.1800151b0
test al, al
jne 0x18000ecd2
mov dword [rbp + 0x100], 0x736e75
mov word [rbp + 0x103], r12w
mov dword [rbp + 0x104], 0x6f7070
mov eax, 0x72
mov word [rbp + 0x107], ax
mov dword [rbp + 0x108], 0x646574
mov eax, 0x20
mov word [rbp + 0x10b], ax
mov dword [rbp + 0x10c], 0x646f6e
mov dword [rbp + 0x10f], 0x742065
mov dword [rbp + 0x112], 0x657079
mov dil, 1
movzx r14d, dil
movsd xmm0, qword [str._eclarator]
movsd qword [rbp + 0x118], xmm0
movzx eax, word [0x18016cff0]
mov word [rbp + 0x120], ax
movzx eax, byte [0x18016cff2]
mov byte [rbp + 0x122], al
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], eax
xorps xmm1, xmm1
movups xmmword [rbp + 0x70], xmm1
movups xmmword [rbp + 0x80], xmm1
movups xmmword [rbp + 0x90], xmm1
movups xmmword [rbp + 0xa0], xmm1
movups xmmword [rbp + 0xb0], xmm1
movups xmmword [rbp + 0xc0], xmm1
mov dword [rbp + 0xd0], eax
xor r8d, r8d
lea rdx, [rbp]
lea rcx, [rbp + 0x118]
call qword [sym.imp.WINMM.dll_mmioOpenA]
mov rsi, rax
xor r8d, r8d
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x100]
call qword [sym.imp.WINMM.dll_mmioOpenA]
mov rbx, rax
movzx ecx, dil
test rsi, rsi
cmove ecx, r15d
mov edi, r14d
test rax, rax
cmove edi, r15d
test cl, cl
je 0x18000ec87
mov edx, 0x10
mov rcx, rsi
call qword [sym.imp.WINMM.dll_mmioClose]
test dil, dil
je 0x18000ed5d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINMM.dll_mmioRead]
mov rcx, rbx
cmp eax, 0xffffffff
jne 0x18000ecb4
lea edx, [rax + 0x11]
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x18000ed5d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mmioWrite]
mov edx, 0x10
mov rcx, rbx
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x18000ed5d
test esi, esi
jne 0x18000ed02
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xe0]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_QueryTraceA]
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xe0]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_StopTraceA]
xor edx, edx
mov ecx, 0x32595559
mov r8d, 0x40000
call qword [sym.imp.WINMM.dll_mmioInstallIOProcA]
test dil, dil
je 0x18000ed45
mov dword [rsp + 0x30], r15d
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.WINMM.dll_waveOutGetID]
test eax, eax
je 0x18000ed45
mov r8d, 0x104
lea rdx, [rbp + 0x130]
mov ecx, eax
call qword [sym.imp.WINMM.dll_waveOutGetErrorTextW]
mov dword [rsp + 0x20], 0xd4
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800bf530
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000ed9d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ed98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ed98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18015bd10
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18000edf0
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000edeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000edeb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18015bd10
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.18015c4c0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret