Function at 0x14004f0e0
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x140134040]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov r12, rcx
mov qword [rbp], rcx
xor esi, esi
mov dword [rsp + 0x30], esi
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], rsi
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], rsi
mov dword [rsp + 0x30], 1
mov dword [rbp + 0x30], 0x100
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov r13, 0xffffffffffffffff
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x78], xmm0
movdqu xmmword [rbp - 0x78], xmm1
test eax, eax
je 0x14004f186
lea rax, [rbp + 0x70]
mov r8, r13
inc r8
cmp word [rax + r8*2], 0
jne 0x14004f175
lea rdx, [rbp + 0x70]
jmp 0x14004f190
xor r8d, r8d
lea rdx, [0x14011eb78]
lea rcx, [rsp + 0x78]
call fcn.140051cb0
mov r15d, 0x4001
mov dword [rsp + 0x30], r15d
mov r8, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
sub rax, r8
mov r14d, 9
cmp rax, r14
jb 0x14004f25a
lea rax, [r8 + 9]
mov qword [rbp - 0x78], rax
lea rdi, [rsp + 0x78]
cmp rcx, 7
cmova rdi, qword [rsp + 0x78]
lea rax, [0x14011ebca]
lea rcx, str.C:Users_
cmp rax, rdi
jbe 0x14004f205
lea rax, [rdi + r8*2]
cmp rcx, rax
ja 0x14004f205
cmp rdi, rcx
jbe 0x14004f208
mov rsi, rdi
sub rsi, rcx
sar rsi, 1
jmp 0x14004f208
mov rsi, r14
lea rcx, [rdi + 0x12]
lea r8, [r8*2 + 2]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, str.C:Users_
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:Users_
lea rdx, [rdx + 0x12]
lea rdx, [rdx + rsi*2]
lea rcx, [rbx + rdi]
sub r14, rsi
lea r8, [r14 + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x78]
xor esi, esi
jmp 0x14004f26c
mov qword [rsp + 0x28], r14
mov rdx, r14
lea rcx, [rsp + 0x78]
call fcn.1400527e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], rsi
mov word [rax], si
bts r15d, 0xf
mov dword [rsp + 0x30], r15d
mov r8d, 0x1a
lea rdx, str.AppDataLocalRobloxlogs
lea rcx, [rsp + 0x58]
call fcn.140050fc0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts r15d, 0x10
mov dword [rsp + 0x30], r15d
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004f33a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f335
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004f335
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005ad48
movdqa xmm0, xmmword [0x14011f530]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], si
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x14004f399
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f38c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004f38c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005ad48
movdqa xmm0, xmmword [0x14011f530]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], si
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 7
cmova rdx, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov r8, qword [rbp + 0x50]
lea rcx, [rsp + 0x38]
call fcn.140051cb0
or r15d, 0x60000
mov dword [rsp + 0x30], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x20]
call fcn.140051470
test eax, eax
jne 0x14004fb03
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14004f440
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f43b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004f43b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005ad48
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14004f45d
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x28]
mov r15d, dword [rsp + 0x30]
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
test rcx, rcx
je 0x14004f478
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x28]
mov r15d, dword [rsp + 0x30]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
test rcx, rcx
je 0x14004f4ba
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14004f4b5
mov rbx, qword [rbp + 0x28]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004f4b5
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
mov r14, qword [rbp + 0x10]
nop
test r14, r14
je 0x14004fa01
lea rdx, [rbp - 0x68]
mov rcx, r14
call fcn.14004ea70
mov rax, qword [rbp - 0x68]
mov edx, dword [rbp - 0x60]
test edx, edx
je 0x14004f4ef
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x14004faea
cmp eax, 2
jne 0x14004f7ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov r8d, 4
lea rdx, str..log
lea rcx, [rsp + 0x58]
call fcn.140051cb0
or r15d, 0x60
or r15d, 2
mov dword [rsp + 0x30], r15d
lea rsi, [r14 + 0x20]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14004f53f
mov rcx, qword [rsi]
lea rdi, [rsi + 0x10]
mov rax, qword [rdi]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.14004da90
cmp rax, rdx
je 0x14004f59c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14004f566
cmp cx, 0x2f
jne 0x14004f56f
add rax, 2
cmp rax, rdx
jne 0x14004f557
cmp rax, rdx
je 0x14004f59c
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14004f59c
cmp cx, 0x2f
je 0x14004f59c
mov rbx, r8
cmp rax, r8
jne 0x14004f580
mov r8d, 0x3a
mov rcx, rbx
call fcn.14005a690
cmp rbx, rax
je 0x14004f5e7
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x14004f5e7
cmp word [rdx], 0x2e
jne 0x14004f5cf
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x14004f5ea
cmp word [rcx], 0x2e
jne 0x14004f5ea
jmp 0x14004f5e7
sub rdx, 2
cmp rbx, rdx
je 0x14004f5e7
cmp word [rdx], 0x2e
je 0x14004f5ea
sub rdx, 2
cmp rbx, rdx
jne 0x14004f5d8
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rcx
mov r8, rax
lea rcx, [rsp + 0x38]
call fcn.140051cb0
or r15d, 0x380
or r15d, 4
mov dword [rsp + 0x30], r15d
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rax, qword [rsp + 0x58]
mov qword [rbp - 0x10], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.14004ddd0
test eax, eax
jne 0x14004f7ab
cmp qword [rsi + 0x18], 7
jbe 0x14004f668
mov rsi, qword [rsi]
mov rax, qword [rdi]
lea rdi, [rsi + rax*2]
mov rbx, rdi
mov rdx, rdi
mov rcx, rsi
call fcn.14004da90
cmp rax, rdi
je 0x14004f6bb
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14004f691
cmp cx, 0x2f
jne 0x14004f69a
add rax, 2
cmp rax, rdi
jne 0x14004f682
cmp rax, rdi
je 0x14004f6bb
nop
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14004f6bb
cmp cx, 0x2f
je 0x14004f6bb
mov rbx, rdx
cmp rax, rdx
jne 0x14004f6a0
sub rdi, rbx
sar rdi, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xor esi, esi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.140051cb0
or r15d, 0x1c00
or r15d, 8
mov dword [rsp + 0x30], r15d
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x58]
call fcn.140051040
or r15d, 0x2010
mov dword [rsp + 0x30], r15d
lea rbx, [rbp - 0x58]
mov r11, qword [rbp - 0x40]
cmp r11, 7
cmova rbx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x48]
cmp rax, 6
jb 0x14004f7b1
add rax, 0xfffffffffffffffb
lea r10, [rbx + rax*2]
mov rax, rbx
lea rdi, str.Player
nop dword [rax + rax]
mov rcx, r10
sub rcx, rax
sar rcx, 1
mov rdx, rsi
je 0x14004f76a
cmp word [rax], 0x50
je 0x14004f767
cmp rcx, 1
je 0x14004f76a
dec rcx
add rax, 2
cmp word [rax], 0x50
jne 0x14004f754
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14004f7b1
mov r8d, 6
mov rdx, rdi
mov r9, rax
sub r9, rdi
movzx ecx, word [rdx + r9]
cmp cx, word [rdx]
jne 0x14004f7a5
add rdx, 2
sub r8, 1
jne 0x14004f781
sub rax, rbx
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14004f7b1
mov bl, 1
jmp 0x14004f7b3
add rax, 2
jmp 0x14004f740
xor esi, esi
mov r11, qword [rbp - 0x40]
xor bl, bl
test r15b, 0x10
je 0x14004f7ff
and r15d, 0xffffffef
mov dword [rsp + 0x30], r15d
cmp r11, 7
jbe 0x14004f7ff
lea rdx, [r11*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f7f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f9e5
call fcn.14005ad48
nop
test r15b, 8
je 0x14004f84f
and r15d, 0xfffffff7
mov dword [rsp + 0x30], r15d
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x14004f84f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f849
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f9ec
call fcn.14005ad48
nop
test r15b, 4
je 0x14004f8b3
and r15d, 0xfffffffb
mov dword [rsp + 0x30], r15d
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14004f8a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f89b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f9f3
call fcn.14005ad48
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], si
test r15b, 2
je 0x14004f904
and r15d, 0xfffffffd
mov dword [rsp + 0x30], r15d
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004f904
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f8ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f9fa
call fcn.14005ad48
test bl, bl
je 0x14004f940
lea r8, [r14 + 0x20]
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x14004f92b
mov rdx, r8
mov rcx, rax
call fcn.140051040
add qword [r12 + 8], 0x20
jmp 0x14004f940
mov rdx, rax
mov rcx, r12
call fcn.140052500
nop word [rax + rax]
lea rdx, [rbp + 0x70]
mov rcx, qword [r14 + 0x40]
call fcn.14005a8c8
cmp eax, 0x12
je 0x14004f98e
test eax, eax
jne 0x14004fafb
cmp word [rbp + 0x9c], 0x2e
jne 0x14004f980
movzx eax, word [rbp + 0x9e]
test ax, ax
je 0x14004f940
cmp ax, 0x2e
jne 0x14004f980
cmp word [rbp + 0xa0], 0
je 0x14004f940
lea rdx, [rbp + 0x70]
mov rcx, r14
call fcn.14004ee50
jmp 0x14004f9d6
mov r14, rsi
mov qword [rbp + 0x10], rsi
mov rbx, qword [rbp + 0x18]
mov qword [rbp + 0x18], rsi
test rbx, rbx
je 0x14004f9d6
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004f9cd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004f9cd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
mov r14, qword [rbp + 0x10]
mov eax, esi
test eax, eax
jne 0x14004fafb
jmp 0x14004f4c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x14004fa3b
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14004fa3b
mov rbx, qword [rbp + 0x18]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004fa3b
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14004fa74
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14004fa74
mov rbx, qword [rbp + 0x28]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r13d
cmp r13d, 1
jne 0x14004fa74
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x14004fab7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004fab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004fab2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005ad48
mov rax, r12
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14005ad20
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.14004ea00
int3
mov edx, eax
call fcn.14004e910
nop
lea r8, [rsp + 0x38]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.14004ea00
int3