Function at 0x1400a4e90
Capabilities:
Get session user name

Disassembly:
sub rsp, 0x298
mov qword [rsp + 0x30], rcx
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [0x1401fda68]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x5c], 0x101
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x5c]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x40], 0xf10b5008
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x2c], eax
sub eax, 0x82f18ca4
je 0x1400a556b
jmp 0x1400a4efa
mov eax, dword [rsp + 0x2c]
sub eax, 0x8d707c37
je 0x1400a5242
jmp 0x1400a4f0e
mov eax, dword [rsp + 0x2c]
sub eax, 0xa018e8d6
je 0x1400a51c0
jmp 0x1400a4f22
mov eax, dword [rsp + 0x2c]
sub eax, 0xb97e1bc9
je 0x1400a55ed
jmp 0x1400a4f36
mov eax, dword [rsp + 0x2c]
sub eax, 0xbb2011c9
je 0x1400a5292
jmp 0x1400a4f4a
mov eax, dword [rsp + 0x2c]
sub eax, 0xcc25db77
je 0x1400a56c6
jmp 0x1400a4f5e
mov eax, dword [rsp + 0x2c]
sub eax, 0xcd1b57ec
je 0x1400a53eb
jmp 0x1400a4f72
mov eax, dword [rsp + 0x2c]
sub eax, 0xd163f72f
je 0x1400a5530
jmp 0x1400a4f86
mov eax, dword [rsp + 0x2c]
sub eax, 0xe3b9720e
je 0x1400a5386
jmp 0x1400a4f9a
mov eax, dword [rsp + 0x2c]
sub eax, 0xf10b5008
je 0x1400a50cb
jmp 0x1400a4fae
mov eax, dword [rsp + 0x2c]
sub eax, 0xfaaf11eb
je 0x1400a56a2
jmp 0x1400a4fc2
mov eax, dword [rsp + 0x2c]
sub eax, 0x5d7be85
je 0x1400a53a0
jmp 0x1400a4fd6
mov eax, dword [rsp + 0x2c]
sub eax, 0x13b75e8a
je 0x1400a50e8
jmp 0x1400a4fea
mov eax, dword [rsp + 0x2c]
sub eax, 0x2c894e62
je 0x1400a5466
jmp 0x1400a4ffe
mov eax, dword [rsp + 0x2c]
sub eax, 0x2fbaa5af
je 0x1400a52af
jmp 0x1400a5012
mov eax, dword [rsp + 0x2c]
sub eax, 0x35afa18e
je 0x1400a5473
jmp 0x1400a5026
mov eax, dword [rsp + 0x2c]
sub eax, 0x3e2231a6
je 0x1400a5695
jmp 0x1400a503a
mov eax, dword [rsp + 0x2c]
sub eax, 0x4c2cf498
je 0x1400a5393
jmp 0x1400a504e
mov eax, dword [rsp + 0x2c]
sub eax, 0x5c6dca3c
je 0x1400a5513
jmp 0x1400a5062
mov eax, dword [rsp + 0x2c]
sub eax, 0x60e13eb1
je 0x1400a54c3
jmp 0x1400a5076
mov eax, dword [rsp + 0x2c]
sub eax, 0x6217aefe
je 0x1400a56d3
jmp 0x1400a508a
mov eax, dword [rsp + 0x2c]
sub eax, 0x6222593c
je 0x1400a532c
jmp 0x1400a509e
mov eax, dword [rsp + 0x2c]
sub eax, 0x646de50a
je 0x1400a5138
jmp 0x1400a50b2
mov eax, dword [rsp + 0x2c]
sub eax, 0x6d731bb7
je 0x1400a56af
jmp 0x1400a50c6
jmp 0x1400a5706
mov edx, dword [rsp + 0x54]
mov eax, 0x13b75e8a
mov ecx, 0x5d7be85
cmp edx, 0
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
sub edx, 0x903c0a0
sub edx, 1
add edx, 0x903c0a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd163f72f
mov ecx, 0x646de50a
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
lea rcx, str.function.cpp
lea rdx, str.YC1HL1rxWi2Q5qroMhNCDyMBRpNSsQ
call fcn.14019a010
mov rcx, qword [rsp + 0x30]
mov byte [rsp + 0x47], 0
lea rdx, [0x1401ef888]
call fcn.1400a0900
mov byte [rsp + 0x47], 1
mov al, byte [rsp + 0x47]
and al, 1
mov byte [rsp + 0x5b], al
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
add edx, 0x6b37107
sub edx, 1
sub edx, 0x6b37107
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd163f72f
mov ecx, 0xa018e8d6
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov ecx, dword [0x1401ffb80]
mov eax, dword [0x1401ffb84]
mov edx, ecx
sub edx, 0x3e9b8876
sub edx, 1
add edx, 0x3e9b8876
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfaaf11eb
mov ecx, 0x8d707c37
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
add edx, 0x9108db24
sub edx, 1
sub edx, 0x9108db24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfaaf11eb
mov ecx, 0xbb2011c9
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov dl, byte [rsp + 0x5b]
mov eax, 0x2fbaa5af
mov ecx, 0x4c2cf498
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov ecx, dword [0x1401ffb80]
mov eax, dword [0x1401ffb84]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6d731bb7
mov ecx, 0x6222593c
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov rcx, qword [rsp + 0x30]
call fcn.14009add0
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
sub edx, 0xf6852f1a
sub edx, 1
add edx, 0xf6852f1a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d731bb7
mov ecx, 0xe3b9720e
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov dword [rsp + 0x40], 0x4c2cf498
jmp 0x1400a5706
mov dword [rsp + 0x40], 0x35afa18e
jmp 0x1400a5706
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82f18ca4
mov ecx, 0xcd1b57ec
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400a0900
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
call fcn.1400a5710
lea rcx, [rsp + 0x60]
call fcn.14009add0
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
add edx, 0x279f0525
sub edx, 1
sub edx, 0x279f0525
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82f18ca4
mov ecx, 0x2c894e62
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov dword [rsp + 0x40], 0x35afa18e
jmp 0x1400a5706
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
sub edx, 0x213e9ddd
sub edx, 1
add edx, 0x213e9ddd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcc25db77
mov ecx, 0x60e13eb1
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov eax, dword [0x1401ffb80]
mov ecx, dword [0x1401ffb84]
mov edx, eax
sub edx, 0xee366c29
sub edx, 1
add edx, 0xee366c29
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcc25db77
mov ecx, 0x5c6dca3c
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.1401b19c0
mov rax, qword [rsp + 0x38]
add rsp, 0x298
ret
lea rcx, str.function.cpp
lea rdx, str.YC1HL1rxWi2Q5qroMhNCDyMBRpNSsQ
call fcn.14019a010
mov rcx, qword [rsp + 0x30]
mov byte [rsp + 0x47], 0
lea rdx, [0x1401ef888]
call fcn.1400a0900
mov byte [rsp + 0x47], 1
mov dword [rsp + 0x40], 0x646de50a
jmp 0x1400a5706
mov ecx, dword [0x1401ffb80]
mov eax, dword [0x1401ffb84]
mov edx, ecx
sub edx, 0xe8040f4f
sub edx, 1
add edx, 0xe8040f4f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6217aefe
mov ecx, 0xb97e1bc9
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400a0900
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
call fcn.1400a5710
lea rcx, [rsp + 0x60]
call fcn.14009add0
mov ecx, dword [0x1401ffb80]
mov eax, dword [0x1401ffb84]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6217aefe
mov ecx, 0x3e2231a6
test dl, 1
cmovne eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1400a5706
mov dword [rsp + 0x40], 0xcd1b57ec
jmp 0x1400a5706
mov dword [rsp + 0x40], 0x8d707c37
jmp 0x1400a5706
mov rcx, qword [rsp + 0x30]
call fcn.14009add0
mov dword [rsp + 0x40], 0x6222593c
jmp 0x1400a5706
mov dword [rsp + 0x40], 0x60e13eb1
jmp 0x1400a5706
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400a0900
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
call fcn.1400a5710
lea rcx, [rsp + 0x60]
call fcn.14009add0
mov dword [rsp + 0x40], 0xb97e1bc9
jmp 0x1400a4ee2