Function at 0x140004fd0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x3e0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov dword [rbp + 8], 0x101
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x180]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xor r15d, r15d
mov qword [rbp + 0x10], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
lea rax, [rbp + 0x180]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r15w
jne 0x140005034
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x10]
call fcn.140001360
nop
movabs rax, 0x718d259678bd7149
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rbx, 0xd0cbc2fd32acaa4
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rdi, 0x718d259678f0711f
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.140015b40
cmp rax, 0xffffffffffffffff
jne 0x140005143
movabs rax, 0x71ec25e178bd7149
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xd0cbc2fd34fcad6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.140015b40
cmp rax, 0xffffffffffffffff
jne 0x140005143
xor r14b, r14b
jmp 0x1400054b9
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x46bb1cae4d821849
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x3b3b891be313f297
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xbedda2acb9758747
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xe80503a915cc0970
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x2847fd8df5af69cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x10c38fd5c066faf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xe4fc57a75cb3b614
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xb41099d192da481e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x52b67518922d9061
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x90076251ec9314aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x2fb6b1eb31878f97
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x1c086ce2bfff61a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x5f6c1aa0fa45c28
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x7c6ed7ea89303f8d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x61136bd03531ccb2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rdx, 0x27f26b21070bbe7a
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x7a16607c72b74589
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x13eaed4dfe08c6be
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xeb9f0462164d8d33
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xdf0c431b0da23138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x904b348b15755cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x9c3abff9b822a7f2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xc93503ecc08ce47
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xce223c77c6b5318c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xcf545504d367a5b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x795a58d587c99346
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0x2590ae8a7bc8295b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x1202a783fd5c4ae0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x61136bd01b1fe2d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140001020
lea rdx, [0x140001760]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14b, 1
mov edx, 3
lea rcx, [rbp + 0xc]
call qword [sym.imp.MSVCP140D.dll_public:_void___cdecl_std::_Lockit::constructor_int____ptr64]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1400054ec
mov rax, qword [rcx + 8]
mov qword [rcx + 8], r15
test rax, rax
je 0x1400054ec
nop
mov qword [rax], r15
mov rax, qword [rax + 8]
test rax, rax
jne 0x1400054e0
lea rcx, [rbp + 0xc]
call qword [sym.imp.MSVCP140D.dll_public:_void___cdecl_std::_Lockit::destructor_void____ptr64]
mov rax, qword [rbp + 0x30]
cmp rax, 7
jbe 0x14000565d
mov rbx, qword [rbp + 0x18]
lea rdi, [rax + 1]
lea r12, [0x14001958c]
test rbx, rbx
jne 0x140005573
test rdi, rdi
je 0x140005573
lea rax, str.null_pointer_cannot_point_to_a_block_of_non_zero_size
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0x3cb
lea rdx, [0x140019590]
lea ecx, [rbx + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x14000554d
int3
mov qword [rsp + 0x20], r15
mov r9d, 0x3cb
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140019640]
lea rcx, str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
add rdi, rdi
cmp rdi, 0x1000
jb 0x140005652
add rdi, 0x2f
mov rsi, qword [rbx - 8]
movabs rax, 0xfafafafafafafafa
lea r13, str.invalid_argument
cmp qword [rbx - 0x10], rax
je 0x1400055f2
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0xa3
lea rdx, [0x140019590]
lea ecx, [r9 + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x1400055cc
int3
mov qword [rsp + 0x20], r15
mov r9d, 0xa3
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140019640]
lea rcx, str._invalid_argument_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
sub rbx, rsi
lea rax, [rbx - 0x10]
cmp rax, 0x1f
jbe 0x14000564f
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0xad
lea rdx, [0x140019590]
lea ecx, [r9 + 2]
call qword [sym.imp.ucrtbased.dll__CrtDbgReport]
cmp eax, 1
jne 0x140005629
int3
mov qword [rsp + 0x20], r15
mov r9d, 0xad
lea r8, str.E:Visual_stVCToolsMSVC14.38.33130includexmemory
lea rdx, [0x140019640]
lea rcx, str._invalid_argument_
call qword [sym.imp.ucrtbased.dll__invalid_parameter]
mov rbx, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.1400170b0
movdqa xmm0, xmmword [0x140019a70]
movdqu xmmword [rbp + 0x28], xmm0
mov word [rbp + 0x18], r15w
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x10], r15
mov edx, 0x10
call fcn.1400170b0
movzx eax, r14b
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret