Function at 0x481bbb
Capabilities:
Get session user name

Disassembly:
push 0x3c0
mov eax, 0x4b9c56
call fcn.004935c5
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x3cc], eax
cmp esi, 0x17
ja 0x481e76
mov eax, dword [ebp + 0x1c]
lea ecx, [eax - 1]
cmp ecx, 0x59f
ja 0x481e76
cmp dword [ebp + 0x18], eax
jg 0x481e76
xor ebx, ebx
push ebx
call fcn.00493ec8
push eax
call fcn.00497bba
pop ecx
pop ecx
lea ecx, [ebp - 0x3c0]
call fcn.00480dc6
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [ebp - 0x38c]
mov dword [ebp - 4], ebx
call fcn.0042e374
xor eax, eax
push 0x7e
mov word [ebp - 0x90], ax
lea eax, [ebp - 0x8e]
push ebx
push eax
call fcn.00492b40
push str.task
push 0x4be5b8
push str.__s_s
lea eax, [ebp - 0x90]
push 0x3f
push eax
call fcn.0049372c
add esp, 0x20
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.0042e48d
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 1
call fcn.0042e374
push ebx
push 1
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], bl
call fcn.0042e109
push 0xffffffffffffffff
push ebx
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x300]
call fcn.0042e374
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov word [ebp - 0x2dc], si
call fcn.00497bcc
cdq
push 0x3c
pop ecx
idiv ecx
mov eax, dword [ebp + 0x18]
lea esi, [ebp - 0x2e4]
lea edi, [ebp - 0x3c0]
push 0x208
push ebx
mov word [ebp - 0x2da], dx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x39c], eax
xor eax, eax
mov word [ebp - 0x29c], ax
lea eax, [ebp - 0x29a]
push eax
mov dword [ebp - 0x390], 2
call fcn.00492b40
add esp, 0xc
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x29c]
push eax
mov dword [ebp - 0x3c8], 0x105
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.0042e48d
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.0042e374
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], bl
call fcn.0042e109
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x2d4]
call fcn.0042ff28
lea eax, [ebp - 0x29c]
push eax
mov byte [ebp - 4], 3
call fcn.00493091
pop ecx
push eax
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042edb8
cmp dword [ebp - 0x2c0], 8
mov eax, dword [ebp - 0x2d4]
jae 0x481dd1
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.0042e48d
xor eax, eax
cmp byte [ebp + 0x20], bl
lea ecx, [ebp - 0x3c0]
sete al
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00481581
push ebx
push edi
lea ecx, [ebp - 0x2b8]
mov esi, eax
mov byte [ebp - 4], 3
call fcn.0042e109
cmp esi, ebx
jge 0x481e5a
cmp esi, 0x80070050
jne 0x481e20
cmp byte [ebp + 0x20], bl
je 0x481e5a
push esi
push str.Failed_sava_task:_0x_08x.
push str.kupdate::KTaskSchdSetter::AddTaskSchd
push 0x1a3
push str.S:_func_improvement_20150701_branchCoding_supportwpsupdateUpdateClientupdateutilKTaskScheduler.cpp
push ebx
call fcn.0042f683
add esp, 0x18
push ebx
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0042e109
lea ecx, [ebp - 0x3c0]
call fcn.00480862
mov eax, esi
jmp 0x481ea0
push ebx
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0042e109
lea ecx, [ebp - 0x3c0]
call fcn.00480862
xor eax, eax
jmp 0x481ea0
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push esi
push 0x4d22a8
push str.kupdate::KTaskSchdSetter::AddTaskSchd
push 0x181
push str.S:_func_improvement_20150701_branchCoding_supportwpsupdateUpdateClientupdateutilKTaskScheduler.cpp
push 0
call fcn.0042f683
add esp, 0x20
mov eax, 0x80070057
call fcn.00493648
ret