Function at 0x1400755c0
Capabilities:
Get session information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x1401c73e8]
xor rax, rsp
mov qword [rbp + 0x168], rax
mov rdi, rcx
mov dword [rbp + 0x150], 0xffffffff
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
lea rdx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
lea rsi, vtable.std::ios_base.0
xor r14d, r14d
mov ebx, dword [rbp + 0x150]
test eax, eax
jne 0x140075716
cmp ebx, 0xffffffff
jne 0x140075716
call fcn.1400595a0
lea r8d, [r14 + 2]
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.140059480
lea rbx, str.SessionUtils.cpp
mov qword [rbp + 0x130], rbx
mov dword [rbp + 0x138], 0x4d
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x30]
call fcn.140026620
lea rdx, str.ProcessIdToSessionId_failed:
lea rcx, [rbp + 0x30]
call fcn.140026650
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.14003cd90
lea rcx, [rbp + 0xc8]
call fcn.14005be70
nop
mov qword [rbp + 0xc8], rsi
lea rcx, [rbp + 0xc8]
call fcn.1400fa82c
nop
mov qword [rbp + 0x128], r14
mov dword [rbp + 0x154], r14d
lea rax, [rbp + 0x154]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x128]
mov edx, 0xffffffff
xor ecx, ecx
lea r8d, [r14 + 4]
call qword [sym.imp.WTSAPI32.dll_WTSQuerySessionInformationW]
test eax, eax
je 0x1400757dc
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x1400757dc
cmp dword [rbp + 0x154], 4
jne 0x1400757dc
mov ebx, dword [rcx]
call qword [sym.imp.WTSAPI32.dll_WTSFreeMemory]
mov dword [rbp + 0x158], ebx
cmp ebx, 0xffffffff
jne 0x140075867
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.sess
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x138], 4
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x130], xmm0
mov r9d, eax
mov r8d, 0x9e
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.140073d00
call fcn.1400595a0
mov r8d, 1
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140059480
lea rax, str.ClientPipeCommunications.cpp
mov qword [rbp + 0x130], rax
mov dword [rbp + 0x138], 0x9f
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x38]
call fcn.140026620
lea rdx, str.Failed_to_retrieve_user_session_ID
lea rcx, [rsp + 0x38]
call fcn.140026650
lea rcx, [rbp - 0x30]
call fcn.14005be70
nop
mov qword [rbp - 0x30], rsi
lea rcx, [rbp - 0x30]
call fcn.1400fa82c
nop
xor al, al
jmp 0x140075a0b
call fcn.1400595a0
mov r8d, 1
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140059480
mov qword [rbp + 0x130], rbx
mov dword [rbp + 0x138], 0x57
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x38]
call fcn.140026620
lea rdx, str.WTSQuerySessionInformation_failed:
lea rcx, [rsp + 0x38]
call fcn.140026650
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.14003cd90
lea rcx, [rbp - 0x30]
call fcn.14005be70
nop
mov qword [rbp - 0x30], rsi
lea rcx, [rbp - 0x30]
call fcn.1400fa82c
nop
mov dword [rbp + 0x158], 0xffffffff
jmp 0x140075725
mov dword [rbp + 0x15c], r14d
mov qword [rbp + 0x160], r14
lea rax, [rbp + 0x15c]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x158]
mov rdx, qword [rdi + 0x90]
lea rcx, [rbp + 0x160]
call fcn.14007f910
nop
mov rbx, qword [rbp + 0x160]
test rbx, rbx
jne 0x140075968
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.auth_buf
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x138], 8
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x130], xmm0
mov r9d, eax
mov r8d, 0xab
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.140073d00
call fcn.1400595a0
lea r8d, [rbx + 1]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140059480
lea rax, str.ClientPipeCommunications.cpp
mov qword [rbp + 0x130], rax
mov dword [rbp + 0x138], 0xac
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x38]
call fcn.140026620
lea rdx, str.Failed_to_generate_authenticated_buffer
lea rcx, [rsp + 0x38]
call fcn.140026650
lea rcx, [rbp - 0x30]
call fcn.14005be70
nop
mov qword [rbp - 0x30], rsi
lea rcx, [rbp - 0x30]
call fcn.1400fa82c
nop
xor dil, dil
jmp 0x1400759f6
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov esi, dword [rbp + 0x15c]
lea rax, [0x14019dfb0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x140], r14
lea edx, [rsi + 0xb]
lea rcx, [rbp + 0x130]
call fcn.14007aad0
test al, al
je 0x1400759b3
mov r8d, esi
mov rdx, rbx
lea rcx, [rbp + 0x130]
call fcn.14007a920
nop
call fcn.1400fce7c
mov qword [rdi + 0x558], rax
mov dword [rdi + 0x230], 2
mov r8d, dword [rbp + 0x138]
mov rbx, qword [rbp + 0x140]
mov rdx, rbx
mov rcx, rdi
call fcn.140080b10
test al, al
setne dil
test rbx, rbx
je 0x1400759f6
mov rcx, rbx
call fcn.140122560
nop
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x140075a07
call fcn.140122560
movzx eax, dil
mov rcx, qword [rbp + 0x168]
xor rcx, rsp
call fcn.140122510
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret