Function at 0x18006a500
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push r12
push r13
push r14
lea rbp, [rsp - 0x1258]
mov eax, 0x1358
call fcn.18006ce90
sub rsp, rax
mov r14d, dword [rbp + 0x12b0]
mov rbx, r9
mov r10, r8
mov r12, rdx
mov rsi, rcx
lea r13d, [r14 - 0x11]
cmp r14d, r13d
jbe 0x18006a8f9
mov qword [rsp + 0x1398], rdi
xor r8d, r8d
mov rdi, qword [rbp + 0x12b8]
mov qword [rsp + 0x1350], r15
lea r15d, [r14 - 0x43]
lea rdx, [0x180000000]
mov r9d, 1
cmp r15d, 0x56
ja case.0x18006a590.17
movzx eax, byte [rdx + r15 + 0x6a958]
mov ecx, dword [rdx + rax*4 + 0x6a910]
add rcx, rdx
jmp rcx
lea rcx, str.vHKFMq8dAlGL2GBtLvzlFp2jwkMCAwEAAaMTMBEwDwYDVR0TAQH_BAUwAwEB_zAN
jmp 0x18006a88e
mov ebx, 0x7d
cmp ebx, 0x7d
je 0x18006a5b6
cmp ebx, 0x100
je 0x18006a8d5
jmp 0x18006a5e5
mov eax, dword [r12]
lea rdx, [rbp + 0x670]
mov ecx, 0xfffffd83
mov dword [rbp + 0xbd8], eax
call qword [0x1800ce8f0]
movaps xmm0, xmmword [rbp + 0xa70]
mov eax, dword [rbp + 0xa80]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x10], eax
add ebx, 0x83
cmp ebx, 0x183
jb 0x18006a5a3
mov rbx, qword [rbp + 0x12a8]
xor r8d, r8d
movzx eax, word [rdi]
mov word [rbp + 0x4c8], ax
jmp case.0x18006a590.17
xor r9d, r9d
mov dword [rbp + 0x12b0], 0x200
lea r8, [rbp + 0x12b0]
mov dword [rsp + 0x20], 0x157
mov rdx, r10
lea rcx, [rbp + 0x80]
call fcn.1800108e0
xor r8d, r8d
mov qword [rbp + 0x5d2], r8
jmp case.0x18006a590.17
mov ecx, 0xffffff26
lea rdx, [rbp + 0xc60]
call qword [0x1800ce8f0]
xor eax, eax
mov dword [rbp + 0x12b0], 0x200
xor r9d, r9d
mov word [0x1800ce8f8], ax
lea r8, [rbp + 0x12b0]
mov dword [rsp + 0x20], 0x157
lea rdx, [rbp + 0xc60]
mov rcx, rbx
call fcn.1800108e0
jmp 0x18006a893
mov eax, dword [rdi]
lea r8, [rbp + 0x12b0]
mov dword [rbp + 0x11bc], eax
lea rcx, [rbp + 0xe60]
mov eax, dword [r10]
xor r9d, r9d
mov rdx, r12
mov dword [rbp + 0x11c0], eax
mov dword [rbp + 0x12b0], 0x200
mov dword [rsp + 0x20], 0x157
call fcn.1800108e0
jmp 0x18006a893
mov ecx, 0xfffffec1
lea rdx, [rbp + 0x80]
call qword [0x1800ce8f0]
jmp 0x18006a893
mov rax, qword [rdi]
lea r8, [rbp + 0x12b0]
mov word [rbp + 0x12b0], r9w
lea rdx, [rsp + 0x50]
mov r9d, 0x53
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x80]
call fcn.18002dab0
mov qword [rbp + 0x1290], 0xff
mov byte [rbp + rax - 0x80], 0
jmp 0x18006a893
movzx eax, byte [rbx]
neg al
mov dword [rbp + 0xbd0], 0x53545223
mov eax, dword [rdi]
sbb ecx, ecx
mov dword [rbp + 0xbd4], eax
and ecx, 0x504c5547
mov dword [rbp + 0xbcc], ecx
jmp case.0x18006a590.17
lea rdx, [rbp + 0x1290]
lea rcx, [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xor r8d, r8d
test eax, eax
je 0x18006a776
mov qword [rsp + 0x58], 1
jmp 0x18006a77f
mov byte [rbp - 0x80], 0
mov qword [rsp + 0x58], r8
lea rcx, [rbp - 0x80]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18006a790
mov qword [rbp + 0x1290], rax
jmp case.0x18006a590.17
mov eax, dword [r12]
mov dword [rbp + 0x5dc], eax
mov eax, dword [rbx]
mov dword [rbp + 0x5e0], eax
mov word [rbp + 0x5da], r8w
jmp case.0x18006a590.17
mov rax, qword [rsp + 0x58]
lea r9, [rbp + 0x12b0]
mov qword [rsp + 0x40], r8
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x38], r8
xor edx, edx
mov dword [rbp + 0x12b0], eax
mov rax, qword [rdi]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
xor r8d, r8d
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
jmp 0x18006a893
mov rax, qword [rbp + 0x1290]
lea r8, [rbp - 0x80]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
mov rax, qword [rdi]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x12b0]
mov word [rbp + 0x12b0], r9w
mov r9d, 0x2f
mov qword [rsp + 0x20], rax
call fcn.1800203b0
jmp 0x18006a893
lea rcx, str.e:_amigo_browser_38_amigo_3.0_src_third_partywebkit_sourceplatform_asyncmethodrunner.h
call fcn.18006ac90
lea rcx, str.com_yourkit_probes_builtin_MongoDB_1.classPK
jmp 0x18006a88e
movzx eax, word [rbp + 0x5da]
mov word [0x1800ce8f8], ax
jmp case.0x18006a590.17
lea rcx, str.e:_amigo_browser_38_amigo_3.0_srccontent_browser_frame_host_navigation_entry_screenshot_manager.cc
call fcn.18006ac90
lea rcx, str.e:_amigo_browser_38_amigo_3.0_srcchrome_service_service_main.cc
call fcn.18006ac90
xor r8d, r8d
dec r14d
dec r15d
cmp r14d, r13d
jbe 0x18006a8d5
mov r10, qword [rbp + 0x12a0]
jmp 0x18006a566
cmp qword [rdi], 0
je 0x18006a8d5
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x38]
mov qword [rdi], rax
call fcn.180072184
cmp qword [rdi], 0
jne 0x18006a8c0
mov rdi, qword [rsp + 0x1398]
mov rax, rsi
mov r15, qword [rsp + 0x1350]
add rsp, 0x1358
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret
mov rax, rsi
add rsp, 0x1358
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret