Function at 0x180188130
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
lea rbp, [rsp - 0x128]
sub rsp, 0x228
lea rdx, [rbp + 0x140]
mov dword [rbp + 0x140], 0x101
lea rcx, [rbp]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
lea rax, [rbp]
movups xmmword [rsp + 0x30], xmm0
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x180188174
mov qword [rsp + 0x248], rsi
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], r12
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x218], r14
cmp rbx, rax
ja 0x1801884e8
mov ecx, 0x16
lea edi, [rcx - 7]
cmp rbx, 0x10
jae 0x1801881f7
mov r8, rbx
mov qword [rsp + 0x40], rbx
lea rdx, [rbp]
mov qword [rsp + 0x48], rdi
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x30], 0
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x30]
jmp 0x18018823d
mov rsi, rbx
or rsi, rdi
cmp rsi, rax
jbe 0x180188207
mov rsi, rax
jmp 0x18018820e
cmp rsi, rcx
cmovb rsi, rcx
lea rdx, [rsi + 1]
call fcn.1801887d0
mov r8, rbx
mov qword [rsp + 0x30], rax
lea rdx, [rbp]
mov qword [rsp + 0x40], rbx
mov rcx, rax
mov qword [rsp + 0x48], rsi
mov r14, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
movzx r13d, word [0x18017a878]
xorps xmm0, xmm0
mov r12d, dword [0x18017a874]
movabs rax, 0x7ffffffffffffff9
movups xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x20], r12d
mov word [rbp - 0x1c], r13w
cmp rbx, rax
ja 0x1801884e8
cmp rsi, 0x10
mov qword [rsp + 0x210], r15
lea r15, [rsp + 0x30]
xorps xmm1, xmm1
cmovae r15, r14
lea rsi, [rsp + 0x50]
lea r14, [rbx + 6]
movups xmmword [rsp + 0x50], xmm0
movdqu xmmword [rsp + 0x60], xmm1
cmp r14, rdi
jbe 0x180188329
mov rdi, r14
movabs rax, 0x7fffffffffffffff
or rdi, 0xf
cmp rdi, rax
jbe 0x1801882ea
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18028ae74
test rax, rax
je 0x1801884a2
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180188324
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180188313
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1801884ee
jmp 0x1801882cb
test rcx, rcx
je 0x180188322
call fcn.18028ae74
mov rsi, rax
jmp 0x180188324
xor esi, esi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], r14
lea rcx, [rsi + 6]
mov qword [rsp + 0x68], rdi
mov r8, rbx
mov dword [rsi], r12d
mov rdx, r15
mov word [rsi + 4], r13w
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
mov byte [rsi + r14], 0
cmp qword [rsp + 0x68], 0x10
lea rax, [rsp + 0x50]
movups xmmword [rsp + 0x70], xmm0
cmovae rax, qword [rsp + 0x50]
xor ecx, ecx
mov qword [rsp + 0x78], rax
lea rax, [0x18017a880]
mov qword [rsp + 0x70], rax
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp - 0x80], rax
lea rcx, [0x1802caf20]
lea rax, [0x18017a890]
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x1801883c6
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov r8d, dword [0x1802c68a8]
lea rcx, [0x1802eb608]
lea eax, [r8 + 1]
mov dword [0x1802c68a8], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.18018d2f0
mov qword [0x1802eb600], rax
lea rcx, [0x1802caf20]
mov eax, 1
xchg byte [0x1802caf1f], al
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [0x1802eb198]
test rcx, rcx
je 0x180188422
add rcx, 0x58
call qword [sym.imp.MSVCP140.dll__Cnd_broadcast]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18018845b
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180188456
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801884a2
call fcn.18028b230
mov rdx, qword [rsp + 0x48]
movdqa xmm0, xmmword [0x1801831d0]
mov byte [rsp + 0x50], 0
movdqu xmmword [rsp + 0x60], xmm0
cmp rdx, 0x10
jb 0x1801884ae
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801884a9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801884a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18028b230
mov r15, qword [rsp + 0x210]
mov r14, qword [rsp + 0x218]
mov r13, qword [rsp + 0x220]
mov r12, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x248]
add rsp, 0x228
pop rbx
pop rbp
ret
call fcn.180188110
int3
call fcn.180188050
int3