Function at 0x14005e4b4
Capabilities:
Get session user name

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov rax, qword [0x1400bc298]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rsi, r8
mov r14, rdx
mov rbx, rcx
xor r15d, r15d
mov dword [rbp - 0x61], r15d
lea rcx, [rbp - 0x59]
call fcn.14003b2f4
mov eax, dword [rbp - 0x61]
test eax, eax
jne 0x14005e50f
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_SetThreadToken]
mov dword [rbp - 0x61], eax
test eax, eax
jne 0x14005e567
lea edx, [rax + 0x5c]
lea rcx, str.admin_appman_appv_shareduseruserinfo.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005e52d
inc rax
jmp 0x14005e534
lea rax, str.admin_appman_appv_shareduseruserinfo.cpp
mov rdx, rax
lea rcx, [0x1400bd678]
call fcn.14000e7dc
mov rbx, rax
shl rbx, 0x34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
or rdi, rbx
movabs rax, 0x162500000000
or rdi, rax
jmp 0x14005e7d5
mov edx, 0x100
mov dword [rbp - 0x69], edx
lea rcx, [rbp - 0x49]
call fcn.14001741c
nop
lea r8, [rbp - 0x69]
mov rdx, qword [rbp - 0x49]
mov edi, SafeArrayGetDim
mov ecx, edi
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
jne 0x14005e661
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0xea
je 0x14005e5eb
lea edx, [rdi + 0x50]
lea rcx, str.admin_appman_appv_shareduseruserinfo.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005e5bf
inc rax
jmp 0x14005e5c6
lea rax, str.admin_appman_appv_shareduseruserinfo.cpp
mov rdx, rax
lea rcx, [0x1400bd678]
call fcn.14000e7dc
shl rax, 0x34
mov rdi, rbx
or rdi, rax
movabs rax, 0x172500000000
jmp 0x14005e659
mov edx, dword [rbp - 0x69]
lea rcx, [rbp - 0x49]
call fcn.1400348f4
lea r8, [rbp - 0x69]
mov rdx, qword [rbp - 0x49]
mov ecx, edi
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
jne 0x14005e661
mov edx, 0x5c
lea rcx, str.admin_appman_appv_shareduseruserinfo.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005e627
inc rax
jmp 0x14005e62e
lea rax, str.admin_appman_appv_shareduseruserinfo.cpp
mov rdx, rax
lea rcx, [0x1400bd678]
call fcn.14000e7dc
mov rbx, rax
shl rbx, 0x34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
or rdi, rbx
movabs rax, 0x182500000000
or rdi, rax
jmp 0x14005e7cb
mov qword [rbp - 0x19], r15
mov r12d, 7
mov qword [rbp - 0x11], r12
mov word [rbp - 0x29], r15w
mov rdx, qword [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.1400033fc
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rcx, qword [rbp - 0x29]
or r10, 0xffffffffffffffff
lea edx, [r12 + 0x55]
mov r9, qword [rbp - 0x19]
test r9, r9
je 0x14005e6c7
mov rax, r9
mov rbx, rcx
cmp word [rbx], dx
je 0x14005e6ba
add rbx, 2
sub rax, 1
jne 0x14005e6a8
mov rbx, r15
test rbx, rbx
je 0x14005e6c7
sub rbx, rcx
sar rbx, 1
jmp 0x14005e6ca
mov rbx, r10
cmp rbx, r10
je 0x14005e780
lea r8, [rbx + 1]
cmp r8, r9
je 0x14005e780
test rbx, rbx
je 0x14005e780
mov r9, r10
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x29]
call fcn.14003b9e4
mov rdi, rax
cmp r14, rax
je 0x14005e725
mov rcx, r14
call fcn.140003388
movups xmm0, xmmword [rdi]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [r14 + 0x10], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r12
mov word [rdi], r15w
lea rcx, [rbp - 9]
call fcn.140003388
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x29]
call fcn.14003b9e4
mov rbx, rax
cmp rsi, rax
je 0x14005e76b
mov rcx, rsi
call fcn.140003388
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsi + 0x10], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov word [rbx], r15w
lea rcx, [rbp - 9]
call fcn.140003388
movabs rdi, 0x8000000000
jmp 0x14005e7c1
lea rcx, str.admin_appman_appv_shareduseruserinfo.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005e797
inc rax
jmp 0x14005e79e
lea rax, str.admin_appman_appv_shareduseruserinfo.cpp
mov rdx, rax
lea rcx, [0x1400bd678]
call fcn.14000e7dc
mov rdi, rax
shl rdi, 0x34
movabs rax, 0x19250000000d
or rdi, rax
lea rcx, [rbp - 0x29]
call fcn.140003388
nop
lea rcx, [rbp - 0x49]
call fcn.1400174fc
nop
mov ebx, 0x29c
cmp dword [rbp - 0x61], r15d
je 0x14005e7ff
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_SetThreadToken]
test eax, eax
jne 0x14005e7ff
xor r9d, r9d
xor r8d, r8d
lea edx, [rax + 1]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov rdx, qword [rbp - 0x51]
test rdx, rdx
je 0x14005e83d
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_SetThreadToken]
mov rcx, qword [rbp - 0x51]
test eax, eax
je 0x14005e820
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14005e83d
test rcx, rcx
je 0x14005e82b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov rax, rdi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140060130
add rsp, 0xb0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret