Function at 0x180067500
Capabilities:
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x268]
sub rsp, 0x360
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x18011b1c0]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r14d, r14d
mov dword [rsp + 0x40], 0x101
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
lea rax, [rbp + 0x30]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], r14w
jne 0x180067570
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x10]
call fcn.180002ab0
nop
lea r8, [rbp - 0x10]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x10]
call fcn.180066c40
nop
lea r8, str.AppDataLocalPackagesStudioWildcard.4558480580BB9_1w2mm55455e38TempState_
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180066a80
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x1800675f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800675ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067aae
call fcn.180070538
movdqa xmm6, xmmword [0x1800a97e0]
movdqu xmmword [rbp + 0x20], xmm6
mov word [rbp + 0x10], r14w
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rdx, qword [rsp + 0x70]
mov rax, qword [rbp - 0x80]
lea rdi, [rdx + rax*2]
lea rbx, [rsp + 0x70]
cmova rbx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
cmp rbx, rdi
jne 0x180067656
mov byte [rsp + 0x50], 0
jmp 0x180067742
sub rdi, rbx
sar rdi, 1
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x180067ab4
cmp rdi, 0xf
jbe 0x1800676f9
mov rax, rdi
or rax, 0xf
cmp rax, rsi
jbe 0x1800676b5
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800704fc
mov rcx, rax
test rax, rax
je 0x180067aba
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800676ef
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x1800676d2
mov rax, r14
jmp 0x1800676ef
cmp rcx, 0x1000
jb 0x1800676ea
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180067aa8
jmp 0x180067693
call fcn.1800704fc
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r8, qword [rsp + 0x50]
mov rcx, r8
mov rdx, rdi
test rdi, rdi
je 0x180067733
nop
movzx eax, byte [rbx]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rbx, [rbx + 2]
sub rdx, 1
jne 0x180067720
mov qword [rsp + 0x60], rdi
mov byte [r8 + rdi], 0
mov qword [rsp + 0x48], r14
mov rdx, qword [0x18011f310]
cmp rdx, 0xf
jbe 0x180067783
inc rdx
mov rcx, qword [0x18011f2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006777e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067ac0
call fcn.180070538
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [0x18011f2f8], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [0x18011f308], xmm1
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8d, 0x10
lea rdx, str.OffsetDumper.txt
lea rcx, [rbp - 0x70]
call fcn.180002ab0
nop
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x30]
call fcn.180066af0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x18006783a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067ac6
call fcn.180070538
movdqu xmmword [rbp - 0x60], xmm6
mov word [rbp - 0x70], r14w
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0xd
lea rdx, str.ClassDump.txt
lea rcx, [rsp + 0x50]
call fcn.180002ab0
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x50]
call fcn.180066af0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1800678c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800678be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067acc
call fcn.180070538
movdqu xmmword [rsp + 0x60], xmm6
mov word [rsp + 0x50], r14w
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 7
cmova rcx, qword [rbp - 0x30]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18011f290], rax
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova rcx, qword [rbp - 0x50]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x18011f298], rax
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x18006798b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067986
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067ad2
call fcn.180070538
movdqu xmmword [rbp - 0x40], xmm6
mov word [rbp - 0x50], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x1800679d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800679d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067ad8
call fcn.180070538
movdqu xmmword [rbp - 0x20], xmm6
mov word [rbp - 0x30], r14w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x180067a20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067a1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067ade
call fcn.180070538
movdqu xmmword [rbp - 0x80], xmm6
mov word [rsp + 0x70], r14w
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x180067a67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067a62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180067aa2
call fcn.180070538
movdqu xmmword [rbp], xmm6
mov word [rbp - 0x10], r14w
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.180070b40
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
call fcn.1800768f4
nop
call fcn.180019580
nop
call fcn.1800768f4
int3
call fcn.1800196c0
int3
call fcn.1800768f4
nop
call fcn.1800768f4
nop
call fcn.1800768f4
nop
call fcn.1800768f4
nop
call fcn.1800768f4
nop
call fcn.1800768f4
nop
call fcn.1800768f4
int3