Function at 0x1400023f0
Capabilities:
Get session user name

Disassembly:
push rbp
sub rsp, 0x190
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov rax, qword [0x1400d7840]
xor rax, rbp
mov qword [rbp + 0x108], rax
mov dword [rbp - 0x54], 0x991d0b77
mov eax, dword [rbp - 0x54]
mov dword [rbp - 0x6c], eax
sub eax, 0x85475d3b
je 0x140002a8d
jmp 0x140002436
mov eax, dword [rbp - 0x6c]
sub eax, 0x8fd4ac3b
je 0x140002703
jmp 0x140002449
mov eax, dword [rbp - 0x6c]
sub eax, 0x991d0b77
je 0x140002629
jmp 0x14000245c
mov eax, dword [rbp - 0x6c]
sub eax, 0x9b150fa6
je 0x140002808
jmp 0x14000246f
mov eax, dword [rbp - 0x6c]
sub eax, 0xa2db4b9b
je 0x140002d1a
jmp 0x140002482
mov eax, dword [rbp - 0x6c]
sub eax, 0xa57333c2
je 0x140002752
jmp 0x140002495
mov eax, dword [rbp - 0x6c]
sub eax, 0xa71d9441
je 0x140002cb7
jmp 0x1400024a8
mov eax, dword [rbp - 0x6c]
sub eax, 0xbc3485f4
je 0x140002c36
jmp 0x1400024bb
mov eax, dword [rbp - 0x6c]
sub eax, 0xd66ca759
je 0x140002d37
jmp 0x1400024ce
mov eax, dword [rbp - 0x6c]
sub eax, 0xdf851011
je 0x140002b2d
jmp 0x1400024e1
mov eax, dword [rbp - 0x6c]
sub eax, 0xdfbf7b46
je 0x14000283e
jmp 0x1400024f4
mov eax, dword [rbp - 0x6c]
sub eax, 0xe1264d40
je 0x140002cd7
jmp 0x140002507
mov eax, dword [rbp - 0x6c]
sub eax, 0xf0a95df8
je 0x1400029a2
jmp 0x14000251a
mov eax, dword [rbp - 0x6c]
sub eax, 0xf0efa2e4
je 0x140002910
jmp 0x14000252d
mov eax, dword [rbp - 0x6c]
sub eax, 0xfa8c4b6f
je 0x140002a70
jmp 0x140002540
mov eax, dword [rbp - 0x6c]
sub eax, 0x1266387
je 0x140002ba9
jmp 0x140002553
mov eax, dword [rbp - 0x6c]
sub eax, 0x1adce57
je 0x1400028c6
jmp 0x140002566
mov eax, dword [rbp - 0x6c]
sub eax, 0x5c84f46
je 0x1400029ae
jmp 0x140002579
mov eax, dword [rbp - 0x6c]
sub eax, 0x12f3b0a2
je 0x140002bb5
jmp 0x14000258c
mov eax, dword [rbp - 0x6c]
sub eax, 0x24a927bd
je 0x1400029ba
jmp 0x14000259f
mov eax, dword [rbp - 0x6c]
sub eax, 0x24bcac0f
je 0x140002d43
jmp 0x1400025b2
mov eax, dword [rbp - 0x6c]
sub eax, 0x25babab3
je 0x140002ae3
jmp 0x1400025c5
mov eax, dword [rbp - 0x6c]
sub eax, 0x32828174
je 0x140002649
jmp 0x1400025d8
mov eax, dword [rbp - 0x6c]
sub eax, 0x350ab9e2
je 0x140002cfd
jmp 0x1400025eb
mov eax, dword [rbp - 0x6c]
sub eax, 0x4610adf2
je 0x1400027fc
jmp 0x1400025fe
mov eax, dword [rbp - 0x6c]
sub eax, 0x59475ba5
je 0x140002a04
jmp 0x140002611
mov eax, dword [rbp - 0x6c]
sub eax, 0x6fb2c706
je 0x140002a64
jmp 0x140002624
jmp 0x140002d4a
mov eax, 0x10
call fcn.1400a2340
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x54], 0x32828174
jmp 0x140002d4a
mov eax, 0x100
call fcn.1400a2340
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
mov eax, 0x20
call fcn.1400a2340
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.1400a2340
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.1400a2340
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
mov qword [rbp - 0x28], rcx
call fcn.1400a2340
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
call fcn.1400a2340
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x48]
mov dword [rax], 0x101
mov rcx, rbp
mov rdx, qword [rbp - 0x48]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
add rsp, 0x20
mov edx, eax
mov eax, 0x85475d3b
mov ecx, 0x8fd4ac3b
cmp edx, 0
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov eax, dword [0x1400dac28]
mov ecx, dword [0x1400dac24]
mov edx, eax
add edx, 0x1e24a96a
sub edx, 1
sub edx, 0x1e24a96a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe1264d40
mov ecx, 0xa57333c2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov rcx, qword [rbp - 0x40]
mov edx, 1
sub rsp, 0x20
call fcn.140008a90
add rsp, 0x20
mov rax, qword [rbp - 0x40]
add rax, 0x10
mov qword [rbp - 0x10], rax
mov rax, rbp
mov qword [rbp - 8], rax
mov ecx, dword [0x1400dac28]
mov eax, dword [0x1400dac24]
mov edx, ecx
sub edx, 0xc3312915
sub edx, 1
add edx, 0xc3312915
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe1264d40
mov ecx, 0x4610adf2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov dword [rbp - 0x54], 0x9b150fa6
jmp 0x140002d4a
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
sub rsp, 0x20
call fcn.1400091a0
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.14000beb0
add rsp, 0x20
mov dword [rbp - 0x54], 0xdfbf7b46
jmp 0x140002d4a
mov rax, qword [rbp - 0x30]
mov byte [rax], 0
mov rcx, qword [rbp - 0x28]
sub rsp, 0x20
call fcn.14000c140
add rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x20]
sub rsp, 0x20
call fcn.14000c1c0
add rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.14000c3c0
mov rcx, qword [rbp - 0x68]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x20]
mov r8, qword [rax]
mov r9, qword [rbp - 0x28]
sub rsp, 0x20
call fcn.14000c5b0
add rsp, 0x20
mov rax, qword [rbp - 0x30]
mov byte [rax], 1
mov rdx, qword [rbp - 0x30]
mov eax, 0x1adce57
mov ecx, 0x24a927bd
test byte [rdx], 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov eax, dword [0x1400dac28]
mov ecx, dword [0x1400dac24]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x350ab9e2
mov ecx, 0xf0efa2e4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov rcx, qword [rbp - 0x68]
sub rsp, 0x20
call fcn.14000ccf0
add rsp, 0x20
mov ecx, dword [0x1400dac28]
mov eax, dword [0x1400dac24]
mov edx, ecx
sub edx, 0xe0f8ed8d
sub edx, 1
add edx, 0xe0f8ed8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x350ab9e2
mov ecx, 0xf0a95df8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov dword [rbp - 0x54], 0x5c84f46
jmp 0x140002d4a
mov dword [rbp - 0x54], 0x24a927bd
jmp 0x140002d4a
mov eax, dword [0x1400dac28]
mov ecx, dword [0x1400dac24]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2db4b9b
mov ecx, 0x59475ba5
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.14000d050
add rsp, 0x20
mov eax, dword [0x1400dac28]
mov ecx, dword [0x1400dac24]
mov edx, eax
sub edx, 0xc567594f
sub edx, 1
add edx, 0xc567594f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2db4b9b
mov ecx, 0x6fb2c706
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov dword [rbp - 0x54], 0xfa8c4b6f
jmp 0x140002d4a
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
call fcn.14000d1f0
add rsp, 0x20
mov dword [rbp - 0x54], 0x12f3b0a2
jmp 0x140002d4a
lea rcx, [0x1400d8c30]
lea rdx, str.Error:_Unable_to_retrieve_username.
sub rsp, 0x20
call fcn.140005000
add rsp, 0x20
mov rcx, rax
lea rdx, [0x140007920]
sub rsp, 0x20
call fcn.1400074a0
mov rcx, qword [rbp - 0x68]
add rsp, 0x20
lea rdx, [0x1400c655e]
sub rsp, 0x20
call fcn.14000d410
add rsp, 0x20
mov dword [rbp - 0x54], 0x25babab3
jmp 0x140002d4a
mov eax, dword [0x1400dac28]
mov ecx, dword [0x1400dac24]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd66ca759
mov ecx, 0xdf851011
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov ecx, dword [0x1400dac28]
mov eax, dword [0x1400dac24]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd66ca759
mov ecx, 0x1266387
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov dword [rbp - 0x54], 0x12f3b0a2
jmp 0x140002d4a
mov ecx, dword [0x1400dac28]
mov eax, dword [0x1400dac24]
mov edx, ecx
add edx, 0x7a34e2d9
sub edx, 1
sub edx, 0x7a34e2d9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24bcac0f
mov ecx, 0xbc3485f4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov ecx, dword [0x1400dac28]
mov eax, dword [0x1400dac24]
mov edx, ecx
sub edx, 0x534d790b
sub edx, 1
add edx, 0x534d790b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24bcac0f
mov ecx, 0xa71d9441
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x54], eax
jmp 0x140002d4a
mov rcx, qword [rbp + 0x108]
xor rcx, rbp
sub rsp, 0x20
call fcn.1400a23a0
mov rax, qword [rbp - 0x60]
lea rsp, [rbp + 0x110]
pop rbp
ret
mov rcx, qword [rbp - 0x40]
mov edx, 1
sub rsp, 0x20
call fcn.140008a90
add rsp, 0x20
mov rax, qword [rbp - 0x40]
mov dword [rbp - 0x54], 0xa57333c2
jmp 0x140002d4a
mov rcx, qword [rbp - 0x68]
sub rsp, 0x20
call fcn.14000ccf0
add rsp, 0x20
mov dword [rbp - 0x54], 0xf0efa2e4
jmp 0x140002d4a
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.14000d050
add rsp, 0x20
mov dword [rbp - 0x54], 0x59475ba5
jmp 0x140002d4a
mov dword [rbp - 0x54], 0xdf851011
jmp 0x140002d4a
mov dword [rbp - 0x54], 0xbc3485f4
jmp 0x140002420