Function at 0x180007760
Capabilities:
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
mov rcx, qword [0x1801689f0]
movaps xmm0, xmmword [0x1800cdfb0]
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
mov rax, qword [rcx + 0x3ea0]
movups xmmword [rsp + 0x50], xmm0
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rsp + 0x50]
movss xmm1, dword [0x1801680e8]
movss xmm0, dword [0x1801680ec]
movsd xmm7, qword [rax + 0x18]
mov rsi, qword [rax + 0x288]
addss xmm1, xmm7
movsd qword [rbp + 0x160], xmm7
movss xmm9, dword [rbp + 0x164]
addss xmm0, xmm9
movss dword [rbp + 0x158], xmm1
movss dword [rbp + 0x15c], xmm0
call fcn.18000caf0
xorps xmm8, xmm8
lea r8, [rbp + 0x158]
xor r14d, r14d
lea rdx, [rbp + 0x160]
mov dword [rsp + 0x28], r14d
mov r9d, eax
mov rcx, rsi
movss dword [rsp + 0x20], xmm8
call fcn.180024e80
movaps xmm0, xmmword [0x1800cdfd0]
lea rcx, [rsp + 0x50]
movss xmm1, dword [0x1801680e8]
movaps xmm6, xmm7
movss xmm10, dword [0x1800cde24]
addss xmm1, xmm7
movups xmmword [rsp + 0x50], xmm0
movss xmm0, dword [0x1801680ec]
addss xmm6, xmm10
addss xmm0, xmm9
movss dword [rbp + 0x164], xmm9
movss dword [rbp + 0x158], xmm1
movss dword [rbp + 0x160], xmm6
movss dword [rbp + 0x15c], xmm0
call fcn.18000caf0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x160]
movss dword [rsp + 0x20], xmm8
lea r8, [rbp + 0x158]
mov rcx, rsi
call fcn.180024e80
movaps xmm0, xmmword [0x1800cdfe0]
lea rcx, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
movss xmm0, dword [0x1801680ec]
movaps xmm1, xmm7
addss xmm1, dword [0x1800cde2c]
addss xmm0, xmm9
movss dword [rbp + 0x160], xmm6
movss dword [rbp + 0x164], xmm9
movss dword [rbp + 0x158], xmm1
movss dword [rbp + 0x15c], xmm0
call fcn.18000caf0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x160]
movss dword [rsp + 0x20], xmm8
lea r8, [rbp + 0x158]
mov rcx, rsi
call fcn.180024e80
movss xmm1, dword [0x1801680ec]
movaps xmm0, xmmword [0x1800cdfe0]
addss xmm1, xmm9
movups xmmword [rsp + 0x50], xmm0
movss dword [rbp + 0x158], xmm6
movaps xmm0, xmm1
subss xmm0, dword [0x1800cddfc]
movss dword [rbp + 0x15c], xmm0
subss xmm1, dword [0x1800cde00]
lea rcx, [rsp + 0x50]
movss dword [rbp + 0x160], xmm7
movss dword [rbp + 0x164], xmm1
call fcn.18000caf0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x160]
movss dword [rsp + 0x20], xmm8
lea r8, [rbp + 0x158]
mov rcx, rsi
call fcn.180024e80
movss xmm6, dword [0x1800cddd4]
lea rax, [rbp - 0x60]
mov rdi, qword [0x180168820]
lea rdx, [rbp + 0x158]
movabs r15, 0x7e7f660ad5b31ab6
mov qword [rsp + 0x30], r14
mov qword [rbp - 0x58], r15
movabs r12, 0x1328b690ab004a45
mov qword [rbp - 0x60], r12
movabs r13, 0x764cdfe3cf612f01
movdqa xmm0, xmmword [rbp - 0x60]
movaps xmm2, xmm6
mov qword [rsp + 0x28], rax
mov rcx, rdi
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r15
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x60], xmm0
movss dword [rsp + 0x20], xmm8
call fcn.180027af0
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r15
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [0x1800ce040]
movups xmmword [rsp + 0x50], xmm0
call fcn.18000caf0
lea rbx, [r14 - 1]
movaps xmm0, xmm7
mov r8d, eax
subss xmm10, dword [rbp + 0x158]
addss xmm0, dword [0x1800cdd90]
addss xmm9, dword [0x1800cdde8]
mulss xmm10, dword [0x1800cdd24]
movss dword [rbp + 0x15c], xmm9
addss xmm0, xmm10
movss dword [rbp + 0x158], xmm0
test eax, 0xff000000
je 0x180007b3a
lea rcx, [rsp + 0x60]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180007ac0
lea rcx, [rsp + 0x60]
add rcx, rax
lea rax, [rsp + 0x60]
cmp rax, rcx
je 0x180007b3a
test rdi, rdi
jne 0x180007ae8
mov rax, qword [rsi + 0x38]
mov rdi, qword [rax + 8]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [rsp + 0x60]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x158]
mov qword [rsp + 0x38], rcx
movaps xmm2, xmm6
mov qword [rsp + 0x30], rax
mov rdx, rsi
lea rax, [rsp + 0x50]
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x50], xmm0
call fcn.180027d20
mov rdi, qword [0x180168820]
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r15
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r15
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movaps xmm0, xmmword [0x1800ce0d0]
movups xmmword [rsp + 0x50], xmm0
call fcn.18000caf0
movss dword [rbp + 0x15c], xmm9
mov r8d, eax
addss xmm7, dword [0x1800cdd94]
addss xmm7, xmm10
movss dword [rbp + 0x158], xmm7
test eax, 0xff000000
je 0x180007c18
lea rcx, [rsp + 0x70]
mov rax, rbx
inc rax
cmp byte [rcx + rax], r14b
jne 0x180007ba5
lea rcx, [rsp + 0x70]
add rcx, rax
lea rax, [rsp + 0x70]
cmp rax, rcx
je 0x180007c18
test rdi, rdi
jne 0x180007bcd
mov rax, qword [rsi + 0x38]
mov rdi, qword [rax + 8]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [rsp + 0x70]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x158]
mov qword [rsp + 0x38], rcx
movaps xmm2, xmm6
mov qword [rsp + 0x30], rax
mov rdx, rsi
lea rax, [rsp + 0x50]
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x50], xmm0
call fcn.180027d20
lea rdx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x101
lea rcx, [rbp - 0x50]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
lea rax, [rbp - 0x50]
movups xmmword [rbp - 0x80], xmm0
nop
inc rbx
cmp byte [rax + rbx], r14b
jne 0x180007c40
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x180007dc9
cmp rbx, 0xf
ja 0x180007c88
mov r8, rbx
mov qword [rbp - 0x70], rbx
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x80], r14b
jmp 0x180007d1d
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x180007cc1
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18003b870
test rax, rax
je 0x180007d89
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180007cfe
mov ecx, 0x16
cmp rax, rcx
cmovb rax, rcx
mov rsi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x180007cec
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180007dcf
jmp 0x180007ca2
test rcx, rcx
je 0x180007cfb
call fcn.18003b870
mov rdi, rax
jmp 0x180007cfe
mov rdi, r14
mov r8, rbx
mov qword [rbp - 0x80], rdi
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x70], rbx
mov rcx, rdi
mov qword [rbp - 0x68], rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], r14b
cmp qword [rbp - 0x68], 0xf
lea rax, [rbp - 0x80]
movss xmm2, dword [0x1800cddc0]
lea rdx, [rbp + 0x158]
cmova rax, qword [rbp - 0x80]
mov rcx, qword [0x180168828]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
call fcn.180027af0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x180007d95
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007d90
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180007d90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003bc24
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180001210
int3
call fcn.180001170
int3