Function at 0x4019c0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x405f68
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
mov eax, dword [0x409040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x140], edi
lea eax, [ebp - 0x140]
mov dword [ebp - 0x140], edi
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x140], 0x64
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x248]
call fcn.00402d30
mov edx, esi
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x230]
call fcn.004030a0
push 0
mov byte [ebp - 4], 1
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x144], edx
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
lea eax, [ebp - 0x16c]
push eax
push str.__a___m__d__Y___r_
lea eax, [ebp - 0x13c]
push 0xc8
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
add esp, 0x1c
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x1cc]
push eax
call fcn.00402d30
push str.time:
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 2
call fcn.00402d30
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 3
push ecx
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x1b4]
call fcn.00403b50
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1a0]
mov eax, edx
mov ecx, dword [ebp - 0x1a4]
sub eax, ecx
push 0xe
push str.__charCount:
cmp eax, 0xe
jb 0x401b1b
cmp edx, 0xf
lea esi, [ebp - 0x1b4]
lea eax, [ecx + 0xe]
cmova esi, dword [ebp - 0x1b4]
add esi, ecx
mov dword [ebp - 0x1a4], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0xe], 0
lea eax, [ebp - 0x1b4]
jmp 0x401b35
mov byte [ebp - 0x140], 0
lea ecx, [ebp - 0x1b4]
push dword [ebp - 0x140]
push 0xe
call fcn.00403980
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x218], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x208], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x19c]
call fcn.00403b50
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x188]
mov eax, edx
mov ecx, dword [ebp - 0x18c]
sub eax, ecx
push 0xd
push str.__username:
cmp eax, 0xd
jb 0x401bd0
cmp edx, 0xf
lea esi, [ebp - 0x19c]
lea eax, [ecx + 0xd]
cmova esi, dword [ebp - 0x19c]
add esi, ecx
mov dword [ebp - 0x18c], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x19c]
jmp 0x401bea
mov byte [ebp - 0x140], 0
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x140]
push 0xd
call fcn.00403980
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x200]
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x184]
call fcn.00403b50
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x170]
mov eax, edx
mov ecx, dword [ebp - 0x174]
sub eax, ecx
cmp eax, 4
jb 0x401c7b
lea eax, [ecx + 4]
cmp edx, 0xf
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x184]
cmova eax, dword [ebp - 0x184]
mov dword [eax + ecx], 0x6e5c5c7d
mov byte [eax + ecx + 4], 0
lea eax, [ebp - 0x184]
jmp 0x401c9c
push 4
push str._n
mov byte [ebp - 0x140], 0
lea ecx, [ebp - 0x184]
push dword [ebp - 0x140]
push 4
call fcn.00403980
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x170]
cmp ecx, 0xf
jbe 0x401d0b
mov edx, dword [ebp - 0x184]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401d01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp ecx, 0xf
jbe 0x401d60
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401d56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x188]
cmp ecx, 0xf
jbe 0x401d9a
mov edx, dword [ebp - 0x19c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401d90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp ecx, 0xf
jbe 0x401def
mov edx, dword [ebp - 0x218]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401de5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x1a0]
cmp ecx, 0xf
jbe 0x401e29
mov edx, dword [ebp - 0x1b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401e1f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp ecx, 0xf
jbe 0x401e7e
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401e74
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
cmp ecx, 0xf
jbe 0x401ed3
mov edx, dword [ebp - 0x1cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401ec9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp ecx, 0xf
jbe 0x401f24
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401f1a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f50
push ecx
push edx
call fcn.00405160
add esp, 8
mov ecx, dword [ebp - 0x234]
cmp ecx, 0xf
jbe 0x401f60
mov edx, dword [ebp - 0x248]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401f56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401f56
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405160
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00404bbf
mov esp, ebp
pop ebp
ret