Function at 0x140012120
Capabilities:
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x140135080]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov rdi, rdx
mov r13, rcx
mov qword [rbp + 0xc0], rdx
xor r12d, r12d
cmp byte [0x1401447f1], r12b
jne 0x1400121af
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], r12
mov r8d, 0x52
lea rdx, str.You_need_to_run_the_KeyAuthApp.init____function_before_any_other_KeyAuth_functions
lea rcx, [rbp + 0xd0]
call fcn.140004c90
lea rcx, [rbp + 0xd0]
call fcn.140013fd0
mov dword [rbp + 0xc8], 0x64
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], r12
lea rax, [rbp + 0x110]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400121f3
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xd0]
call fcn.140004c90
nop
mov dword [rsp + 0x68], 0xf6e0f9b3
mov dword [rsp + 0x6c], 0xf8f2e8fc
mov word [rsp + 0x70], 0xa0
mov byte [rsp + 0x72], 1
mov dword [rsp + 0x30], 0xf5f6f8b3
mov dword [rsp + 0x34], 0x100a7fc
mov dword [rsp + 0x78], 0xebf2e5b3
mov dword [rsp + 0x7c], 0xf2f4f3ea
mov dword [rbp - 0x80], 0xa2faf4
mov byte [rbp - 0x7c], 1
mov dword [rsp + 0x58], 0xebf2fbb3
mov dword [rsp + 0x5c], 0xf9fcfbea
mov word [rsp + 0x60], 0xa0
mov byte [rsp + 0x62], 1
mov dword [rsp + 0x38], 0xedf4e6b3
mov dword [rsp + 0x3c], 0xa1e9ffea
mov word [rsp + 0x40], 0x100
mov dword [rsp + 0x48], 0xfde7efe1
mov dword [rsp + 0x4c], 0xfbf4f6a4
mov word [rsp + 0x50], 0x100
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x90]
call fcn.1400111a0
mov rbx, rax
lea r9, [rbp + 0xd0]
mov r15, qword [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova r9, r15
mov r14, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r14
mov rsi, qword [rbp + 0xe0]
cmp rsi, rax
ja 0x14001231f
lea rax, [r14 + rsi]
mov qword [rbx + 0x10], rax
mov r12, rbx
cmp rcx, 0xf
jbe 0x140012303
mov r12, qword [rbx]
lea rcx, [r12 + r14]
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + r14]
mov byte [rax + rsi], 0
xor r12d, r12d
jmp 0x140012339
mov qword [rsp + 0x20], rsi
mov rdx, rsi
mov rcx, rbx
call fcn.140004f30
mov rbx, rax
mov r15, qword [rbp + 0xd0]
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x70]
call fcn.14000f980
nop
mov rdx, rdi
mov rcx, rax
call fcn.140019880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x50]
call fcn.140010020
nop
lea rdx, [r13 + 0x258]
mov rcx, rax
call fcn.140019880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14000f7a0
nop
mov rdx, r13
mov rcx, rax
call fcn.140019880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x10]
call fcn.14000f980
nop
lea rdx, [r13 + 0x20]
mov rcx, rax
call fcn.140019880
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm6
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140012490
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001248b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001248b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400124e7
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400124da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400124da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14001252d
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012520
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012520
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x14001257c
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001256f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001256f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400125c2
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400125b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140012611
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012604
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012604
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14001265a
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001264d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001264d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400126ac
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001269f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001269f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x1400126f8
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400126eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400126eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e71ac
movdqa xmm0, xmmword [0x14011e1d0]
movdqu xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
lea rax, [rbp - 0x30]
mov qword [rbp + 0xb0], rax
lea rdx, [r13 + 0x80]
lea rcx, [rbp - 0x30]
call fcn.140019ae0
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
lea r12, [rbp + 0xf0]
movq r14, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r12, r14
movabs rbx, 0x7fffffffffffffff
movq rsi, xmm6
cmp rsi, rbx
ja 0x140012973
cmp rsi, 0xf
ja 0x14001278f
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x78], xmm0
jmp 0x140012823
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x1400127cb
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400e6f30
mov rcx, rax
test rax, rax
je 0x140012865
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140012804
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400127e7
xor eax, eax
jmp 0x140012804
cmp rcx, 0x1000
jb 0x1400127ff
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012979
jmp 0x1400127a9
call fcn.1400e6f30
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rbx
lea r8, [rsi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x58]
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x50]
call fcn.140013940
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140012872
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001286c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001286c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400e71ac
nop
cmp r13, 0xf
jbe 0x1400128ad
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400128a4
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400128a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400e71ac
nop
mov rax, qword [rbp + 0xe8]
cmp rax, 0xf
jbe 0x1400128ef
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400128e6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400128e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400e71ac
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140012925
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140012920
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001296c
mov rcx, r8
call fcn.1400e71ac
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1400e6df0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140004920
nop
call fcn.140003a20
int3