Function at 0x416060
Capabilities:
Get session user name
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc9c
mov eax, dword [0x467040]
xor eax, esp
mov dword [esp + 0xc98], eax
push esi
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 9
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push str._Macro_Scanner__Running_checks_to_detect_macro_file_bypasses..._n
call fcn.00403b00
add esp, 4
push str._Macro_Scanner__Running_checks_to_detect_macro_file_modifications..._n
call fcn.00403b00
add esp, 4
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 7
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0x104
push eax
push 0x46a320
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x416585
mov dword [esp + 0x10], str._appdata_LocalBY_COMBO2
xor esi, esi
mov dword [esp + 0x14], str.C:Users_username_AppDataLocalRazerSynapse3LogRazer_Synapse_3.log
mov dword [esp + 0x18], str.C:Users_username_AppDataLocalLGHUB_settings.db
mov dword [esp + 0x1c], str.C:Users_username_AppDataLocalLGHUB_setting.db_wal
mov dword [esp + 0x20], str.C:Users_username_AppDataRoaming_steelseries_engine_3_clientSession_Storage000003.log
mov dword [esp + 0x24], str.C:Program_FilesAYAX_GamingMouse_record.ini
mov dword [esp + 0x28], str.C:Program_FilesGaming_MouseV30_record.ini
mov dword [esp + 0x2c], str._appdata_LocalBY_COMBOcurid.dct
mov dword [esp + 0x30], str._appdata_LocalBY_COMBOpro.dct
mov dword [esp + 0x34], str.C:Program_Files__x86_Bloody7Bloody7UserLogMouseTLcir_9EFF3FF4languageSettingsEnvironmentVar.ini
mov dword [esp + 0x38], str.C:ProgramDataGlorious_Coreuserdata_username_dataMacroDB.db
mov dword [esp + 0x3c], str.C:ProgramDataGlorious_Coreuserdata_username_dataDeviceDB.db
mov dword [esp + 0x40], str.C:Program_Files__x86_KROM_KOLTConfig_sequence.dat
mov dword [esp + 0x44], str.C:Program_Files__x86_SPC_Gear
mov dword [esp + 0x48], str.C:Users_username_AppDataRoamingROCCATSWARMmacromacro_list.dat
mov dword [esp + 0x4c], str.C:Users_username_AppDataRoamingROCCATSWARMmacrocustom_macro_list.dat
mov dword [esp + 0x50], str.C:Users_username_AppDataRoamingREDRAGONGamingMouse
mov dword [esp + 0x54], str.C:Users_username_AppDataRoamingREDRAGONGamingMousemacro.ini
mov dword [esp + 0x58], str.C:Users_username_AppDataRoamingREDRAGONGamingMouseconfig.ini
mov dword [esp + 0x5c], str.C:Progam_Files__x86_AJ390R_Gaming_Mousedata
mov dword [esp + 0x60], str.C:Program_Files__x86_SPC_Gear
mov dword [esp + 0x64], str.C:Program_Files__x86_Xenon200Configs
mov dword [esp + 0x68], str.C:Program_Files__x86_FANTECH_VX7_Gaming_Mouseconfig.ini
mov dword [esp + 0x6c], str.C:Users_username_AppDataLocalBY_8801_GM917_v108curid.dct
mov dword [esp + 0x70], str.C:Users_username_AppDataLocalBY_8801_GM917_v108pro.dct
nop dword [eax]
nop dword [eax + eax]
push dword [esp + esi*4 + 0x10]
lea eax, [esp + 0x7c]
push 0x4539cc
push 0x104
push eax
call fcn.00415b80
add esp, 0x10
cmp eax, 0x103
ja 0x4161ea
push ecx
lea ecx, [esp + 0x7c]
call fcn.00415bc0
add esp, 4
lea ecx, [esp + 0x78]
call fcn.00415d80
jmp 0x4161fc
push str.Failed_to_format_path
push str.Error_ocurred_while_checking_macro_files:__s_n
call fcn.00403b00
add esp, 8
inc esi
cmp esi, 0x19
jl 0x4161b0
push 0x46a320
push str.C:users_sdocumentsASUSROGROG_Armourycommonmacro
lea eax, ds:[esp + 0x480]
push 0x104
push eax
call fcn.00415b80
add esp, 0xc
lea ecx, [esp + 0x47c]
call fcn.00415bc0
add esp, 4
lea eax, [esp + 0x478]
push str..GMAC
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
lea ecx, [esp + 0x478]
mov edx, str..GMAC
call fcn.00415ea0
mov edx, str..MA32AIY
mov ecx, str.C:Blackweb_Gaming_APconfig
call fcn.00415ea0
mov edx, 0x453acc
mov ecx, str.C:ProgramDataAlienwareAlienWare_Command_Center_fxmetadata
nop
call fcn.00415ea0
mov edx, str..bin
mov ecx, str.C:Program_Files__x86_MotoSpeed_Gaming_MouseV60modules_setting
call fcn.00415ea0
mov edx, str.macro.db
mov ecx, str.C:Users_username_DocumentsM711_Gaming_Mouse
nop
call fcn.00415ea0
push 0x46a320
push str.C:Users_sAppDataLocalRazerSynapselogmacrosMacrosRazer3.txt
lea eax, ds:[esp + 0x688]
push 0x104
push eax
call fcn.00415b80
add esp, 0xc
lea ecx, [esp + 0x684]
call fcn.00415bc0
add esp, 4
mov dword [esp + 8], 0
lea eax, [esp + 0x680]
push str.r__ccsUTF_8
push eax
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
add esp, 0xc
test eax, eax
jne 0x416369
mov eax, dword [esp + 8]
test eax, eax
je 0x416369
push eax
lea eax, [esp + 0x7c]
push 0x200
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
add esp, 0xc
test eax, eax
je 0x416352
lea eax, [esp + 0x78]
push str.MacroClient:Delete
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
add esp, 8
test eax, eax
je 0x416348
lea eax, ds:[esp + 0x78]
push eax
push str.____Razer_Macro_detected_and_deleted:__ls._Ban_the_player._n
call fcn.00403b00
add esp, 8
mov eax, dword [esp + 8]
test eax, eax
jne 0x416306
jmp 0x416369
mov eax, dword [esp + 8]
test eax, eax
je 0x416369
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push str.r__ccsUTF_8
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push str.C:ProgramDataRazerSynapse3LogSynapseService.log
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
add esp, 0xc
test eax, eax
jne 0x416402
mov eax, dword [esp + 8]
test eax, eax
je 0x416402
push eax
lea eax, [esp + 0x7c]
push 0x200
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
add esp, 0xc
test eax, eax
je 0x4163f5
nop dword [eax]
lea eax, ds:[esp + 0x78]
push str.turbo:_true
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
add esp, 8
test eax, eax
je 0x4163da
push str.____Razer_macro_detected:_Found_turbo:_true_in_the_log_file._Ban_the_player._n
call fcn.00403b00
add esp, 4
push dword [esp + 8]
lea eax, [esp + 0x7c]
push 0x200
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
add esp, 0xc
test eax, eax
jne 0x4163b0
push dword [esp + 8]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push 0x46a320
push str.C:Users_sAppDataLocalLGHUB_settings.db
lea eax, [esp + 0x890]
push 0x104
push eax
call fcn.00415b80
push 0x46a320
push str.C:Users_sAppDataLocalLGHUB_settings.db_wal
lea eax, [esp + 0xaa8]
push 0x104
push eax
call fcn.00415b80
add esp, 0x20
lea ecx, [esp + 0x888]
call fcn.00415c60
lea ecx, [esp + 0xa90]
call fcn.00415c60
mov edx, str..MA32AIY
mov ecx, str.C:Blackweb_Gaming_APconfig
nop
call fcn.00415f60
mov edx, 0x453acc
mov ecx, str.C:ProgramDataAlienwareAlienWare_Command_Center_fxmetadata
call fcn.00415f60
mov edx, str..bin
mov ecx, str.C:Program_Files__x86_MotoSpeed_Gaming_MouseV60modules_setting
nop
call fcn.00415f60
mov edx, 0x453e00
mov ecx, str.C:Users_username_AppDataLocalLGHUB
call fcn.00415f60
mov edx, str..db_wal
mov ecx, str.C:Users_username_AppDataLocalLGHUB
nop
call fcn.00415f60
mov edx, str.Razer_Synapse_3.log
mov ecx, str.C:Users_username_AppDataLocalRazerSynapse3Log
call fcn.00415f60
mov edx, str.000003.log
mov ecx, str.C:Users_username_AppDataRoaming_steelseries_engine_3_clientSession_Storage
nop
call fcn.00415f60
mov edx, str.record.ini
mov ecx, str.C:Program_FilesAYAX_GamingMouse
call fcn.00415f60
mov edx, str.record.ini
mov ecx, str.C:Program_FilesGaming_MouseV30
nop
call fcn.00415f60
mov edx, str.EnvironmentVar.ini
mov ecx, str.C:Program_Files__x86_Bloody7Bloody7UserLogMouseTLcir_9EFF3FF4languageSettings
call fcn.00415f60
mov edx, str.MacroDB.db
mov ecx, str.C:ProgramDataGlorious_Coreuserdatagurudata
nop
call fcn.00415f60
mov edx, str.DevicesDB.db
mov ecx, str.C:ProgramDataGlorious_Coreuserdatagurudata
call fcn.00415f60
mov edx, str.sequence.dat
mov ecx, str.C:Program_Files__x86_KROM_KOLTConfig
nop
call fcn.00415f60
mov edx, str.macro_list.dat
mov ecx, str.C:Users_username_AppDataRoamingROCCATSWARMmacro
call fcn.00415f60
mov edx, str.custom_macro_list.dat
mov ecx, str.C:Users_username_AppDataRoamingROCCATSWARMmacro
nop
call fcn.00415f60
mov edx, str.config.ini
mov ecx, str.C:Program_Files__x86_FANTECH_VX7_Gaming_Mouse
call fcn.00415f60
mov edx, str.curid.dct
mov ecx, str.C:Users_username_AppDataLocalBY_8801_GM917_v108
nop
call fcn.00415f60
mov edx, str.pro.dct
mov ecx, str.C:Users_username_AppDataLocalBY_8801_GM917_v108
call fcn.00415f60
mov edx, str.macro.db
mov ecx, str.C:Users_username_DocumentsM711_Gaming_Mouse
nop
call fcn.00415f60
mov ecx, dword [esp + 0xc9c]
pop esi
xor ecx, esp
call fcn.00444aa0
mov esp, ebp
pop ebp
ret