Function at 0x18005eb1c
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x18009a020]
xor rax, rsp
mov qword [rbp + 0xd0], rax
xorps xmm1, xmm1
mov ecx, 3
call fcn.18002f934
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
lea rdx, [rsp + 0x50]
mov ecx, 4
call fcn.18002f9ac
xorps xmm1, xmm1
mov ebx, 2
mov ecx, ebx
call fcn.18002f934
movaps xmm0, xmmword [0x18008f2b0]
movups xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
mov ecx, ebx
call fcn.18002f8d8
mov dword [rsp + 0x40], 0x101
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x40]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov rax, qword [0x18010e360]
mov dword [rax + 0x1b30], 0x42480000
mov dword [rax + 0x1b34], 0x428c0000
and dword [rax + 0x1b38], 0
and dword [rax + 0x1b3c], 0
mov ebx, 1
mov dword [rax + 0x1b24], ebx
or dword [rax + 0x1b20], 3
mov dword [rax + 0x1b40], 0x44160000
mov dword [rax + 0x1b44], 0x41a00000
mov dword [rax + 0x1b28], ebx
movabs rax, 0x805fe7355bafdcaa
mov qword [rsp + 0x50], rax
movabs rax, 0x3787eb8aa3e81ecd
mov qword [rsp + 0x58], rax
movabs rax, 0xf23e8a473edbbdfd
mov qword [rbp - 0x50], rax
movabs rax, 0x3787eb8aa3e81ea6
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x50], xmm0
xor edx, edx
lea r8d, [rbx + 0x1e]
lea rcx, [rsp + 0x50]
call fcn.180035cc4
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp - 0x40]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18005ec71
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x70]
call fcn.180020e58
nop
mov rax, qword [0x18010e360]
mov rcx, qword [rax + 0x1a80]
mov byte [rcx + 0x80], bl
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
and qword [rsp + 0x60], 0
and qword [rsp + 0x68], 0
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18005ecc6
lea rcx, [rsp + 0x50]
call fcn.180020e58
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rsp + 0x60]
sub rax, rcx
cmp rax, 0x29
jb 0x18005eeb9
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x29
lea r9, str.220kw__Last_Update__Oct_18_2023___User:
lea rcx, [rbp - 0x70]
call fcn.18002a020
nop
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rax, qword [rbp - 0x70]
movaps xmm0, xmmword [0x18008f4a0]
movq qword [rbp - 0x50], xmm0
psrldq xmm0, 8
movq qword [rbp - 0x48], xmm0
mov qword [rsp + 0x38], rax
movss xmm0, dword [0x18008f120]
movss dword [rsp + 0x30], xmm0
mov rax, qword [0x18010e368]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rbp - 0x50]
movss xmm2, dword [0x18008f178]
movd r8d, xmm2
movss xmm1, dword [0x18008f15c]
movd edx, xmm1
mov rcx, qword [0x18010eea0]
call fcn.18005e5c0
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18005eddd
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, rbx
jb 0x18005edd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005edd7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007f860
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18005ee1a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, rbx
jb 0x18005ee14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005ee14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007f860
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18005ee55
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, rbx
jb 0x18005ee50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005ee50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007f860
mov r9, qword [0x18010e360]
movsxd rax, dword [r9 + 0x1be0]
lea r8, [rax + rax*4]
mov rdx, qword [r9 + 0x1be8]
movsxd rax, dword [rdx + r8*4 - 0x14]
add rax, 0x162
add rax, rax
movups xmm0, xmmword [rdx + r8*4 - 0x10]
movdqu xmmword [r9 + rax*8], xmm0
dec dword [r9 + 0x1be0]
mov ecx, 3
call fcn.18002fa38
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.18007f4c0
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1e0
pop rbp
ret
call fcn.180012130
nop
int3