Function at 0x140044650
Capabilities:
Get session user name

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4a0
mov ebx, edx
mov rsi, rcx
mov rax, qword [0x14031d040]
xor rax, rsp
mov qword [rsp + 0x498], rax
movabs r12, 0x7fffffffffffffff
xorps xmm0, xmm0
movaps xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], 0
test dl, dl
je 0x1400448e4
cmp dword [0x14032dae8], 1
jne 0x1400448e4
call fcn.140024830
test al, al
jne 0x1400448e4
lea rdi, [rsp + 0x290]
mov r8d, 0x202
mov rcx, rdi
mov dl, 0xaa
call fcn.140235e90
lea rdx, [rsp + 0x26c]
mov dword [rdx], 0x101
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x140044e5f
lea r15, [rsp + 0x290]
mov rcx, r15
call fcn.14021cf84
mov r14, rax
movsx rax, byte [rsp + 0x287]
mov edx, 0xa
mov rdi, rax
test rax, rax
jns 0x140044732
mov rdx, qword [rsp + 0x280]
and rdx, r12
dec rdx
mov rdi, qword [rsp + 0x278]
mov rcx, rdx
sub rcx, rdi
cmp rcx, r14
jb 0x14004475b
test r14, r14
je 0x14004485b
test al, al
jns 0x1400447f5
mov r13, qword [rsp + 0x270]
jmp 0x1400447fd
mov r8, r14
add r8, rdi
sub r8, rdx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x270]
mov r9, rdi
call fcn.14004d230
jmp 0x14004485b
mov eax, edi
and al, 0x7f
mov byte [rsp + 0x287], al
jmp 0x140044853
cmp al, 0xa
je 0x1400447b2
lea rcx, [rsp + 0x270]
jmp 0x140044894
mov edx, 0xa
lea rax, [0x1402a0286]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x270]
mov r8d, 1
mov r9, rdx
call fcn.14004d230
jmp 0x1400448e4
lea r13, [rsp + 0x270]
test r14, r14
js 0x140044e5d
lea rcx, [rdi*2]
add rcx, r13
lea rax, [rcx + r14*2]
cmp rcx, r15
seta dl
cmp rax, r15
setbe al
or al, dl
je 0x140044e5d
lea r8, [r14 + r14]
lea rdx, [rsp + 0x290]
call fcn.1402357f0
add rdi, r14
cmp byte [rsp + 0x287], 0
jns 0x140044791
mov qword [rsp + 0x278], rdi
mov word [r13 + rdi*2], 0
movsx rax, byte [rsp + 0x287]
test rax, rax
jns 0x1400447a1
mov rdx, qword [rsp + 0x280]
and rdx, r12
dec rdx
mov rax, qword [rsp + 0x278]
cmp rdx, rax
je 0x1400447b7
mov rcx, qword [rsp + 0x270]
lea rdx, [rcx + rax*2]
lea r8, [rcx + rax*2]
add r8, 2
lea r9, [0x1402a0286]
cmp rdx, r9
seta r10b
cmp r8, r9
setbe r8b
or r8b, r10b
je 0x140044e5d
mov word [rdx], 0x7c
lea rdx, [rax + 1]
cmp byte [rsp + 0x287], 0
jns 0x140044970
mov qword [rsp + 0x278], rdx
mov word [rcx + rax*2 + 2], 0
lea rdi, [rsp + 0x290]
mov rcx, rdi
call fcn.140040510
movsx r15, byte [rdi + 0x17]
test r15, r15
jns 0x14004490e
mov r15, qword [rsp + 0x298]
mov rdi, qword [rsp + 0x290]
test r15, r15
sete al
test rdi, rdi
setne cl
or cl, al
je 0x140044e5d
movsx rax, byte [rsp + 0x287]
mov edx, 0xa
mov r14, rax
test rax, rax
jns 0x14004494e
and r12, qword [rsp + 0x280]
dec r12
mov r14, qword [rsp + 0x278]
mov rdx, r12
mov rcx, rdx
sub rcx, r14
cmp rcx, r15
jb 0x14004497f
test r15, r15
je 0x140044a0d
test al, al
js 0x1400449be
lea r12, [rsp + 0x270]
jmp 0x1400449c6
and dl, 0x7f
mov byte [rsp + 0x287], dl
jmp 0x1400448dd
lea r8, [r14 + r15]
sub r8, rdx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x270]
mov r9, r14
call fcn.14004d230
jmp 0x140044a0d
mov eax, r14d
and al, 0x7f
mov byte [rsp + 0x287], al
jmp 0x140044a06
mov r12, qword [rsp + 0x270]
test r15, r15
js 0x140044e5d
lea rcx, [r12 + r14*2]
cmp rcx, rdi
ja 0x1400449e5
lea rax, [rcx + r15*2]
cmp rax, rdi
ja 0x140044e5d
lea r8, [r15 + r15]
mov rdx, rdi
call fcn.1402357f0
add r14, r15
cmp byte [rsp + 0x287], 0
jns 0x1400449b0
mov qword [rsp + 0x278], r14
mov word [r12 + r14*2], 0
lea rdi, [rsp + 0x290]
mov rcx, rdi
call fcn.1401be900
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rdi + 0x10], rax
lea rax, [rsp + 0x270]
movsx rcx, byte [rax + 0x17]
test rcx, rcx
cmovs rcx, qword [rax + 8]
movaps xmm0, xmmword [0x1402825c0]
cmovs rax, qword [rax]
movaps xmmword [rdi], xmm0
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rcx
test rcx, rcx
js 0x140044e5d
sete cl
test rax, rax
setne al
or al, cl
je 0x140044e5d
lea rdi, [rsp + 0x130]
lea rdx, [rsp + 0xe0]
mov rcx, rdi
call fcn.1401b4bc0
movsx rax, byte [rdi + 0x17]
test rax, rax
jns 0x140044aaa
mov rax, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x130]
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], rax
test rax, rax
js 0x140044e5d
sete al
test rdi, rdi
setne cl
or cl, al
je 0x140044e5d
lea rdi, [rsp + 0x290]
lea rdx, [rsp + 0xf0]
mov rcx, rdi
call fcn.1400726a0
cmp byte [rsp + 0x147], 0
jns 0x140044b03
mov rcx, qword [rsp + 0x130]
call fcn.1401ef41c
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], 0
test bl, bl
jne 0x140044cce
cmp byte [rsp + 0x2a7], 0
jns 0x140044b34
mov rdi, qword [rsp + 0x290]
lea rdx, [rsp + 0xd0]
mov qword [rdx], rdi
mov qword [rdx + 8], reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x118]
call fcn.14006d720
cmp byte [rsp + 0x147], 0
jns 0x140044b6b
mov rcx, qword [rsp + 0x130]
call fcn.1401ef41c
mov rax, qword [rsp + 0x128]
lea rdi, [rsp + 0x130]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x118]
movaps xmmword [rdi], xmm0
mov edx, reloc.OLEAUT32.dll_SafeArrayAccessData
mov rcx, rdi
xor r8d, r8d
call fcn.1401ad110
lea rax, [0x14029ea18]
mov qword [rsp + 0xc0], rax
mov eax, 1
mov qword [rsp + 0xc8], rax
lea rcx, [0x14029eb50]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], rax
movsx rax, byte [rdi + 0x17]
test rax, rax
jns 0x140044be7
mov rax, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x130]
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rax
test rax, rax
js 0x140044e5d
sete al
test rdi, rdi
setne cl
or cl, al
je 0x140044e5d
lea rcx, [rsp + 0xa0]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xc0]
lea rdi, [rsp + 0x130]
mov r9, rdi
call fcn.14005d6e0
lea rax, [0x14029ea16]
mov qword [rsp + 0x90], rax
mov eax, 1
mov qword [rsp + 0x98], rax
lea rcx, [0x14029eb52]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
movsx rax, byte [rdi + 0x17]
test rax, rax
jns 0x140044c86
mov rax, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x130]
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rax
test rax, rax
js 0x140044e5d
sete al
test rdi, rdi
setne cl
or cl, al
je 0x140044e5d
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x90]
lea r9, [rsp + 0x130]
call fcn.14005d6e0
jmp 0x140044d3e
cmp byte [rsp + 0x2a7], 0
js 0x140044ce2
lea rax, [rsp + 0x290]
jmp 0x140044cea
mov rax, qword [rsp + 0x290]
lea rdx, [rsp + 0x60]
mov qword [rdx], rax
mov qword [rdx + 8], 8
lea rcx, [rsp + 0x118]
call fcn.1401b7b40
cmp byte [rsp + 0x147], 0
jns 0x140044d1e
mov rcx, qword [rsp + 0x130]
call fcn.1401ef41c
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0x118]
movaps xmmword [rsp + 0x130], xmm0
lea rax, [rsp + 0x130]
movsx rcx, byte [rax + 0x17]
test rcx, rcx
cmovs rcx, qword [rax + 8]
cmovs rax, qword [rax]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
test rcx, rcx
js 0x140044e5d
sete cl
test rax, rax
setne al
or al, cl
je 0x140044e5d
lea rdi, [rsp + 0x118]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.1401b5a90
movsx rax, byte [rdi + 0x17]
test rax, rax
jns 0x140044daa
mov rax, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x118]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rax
test rax, rax
js 0x140044e5d
sete al
test rdi, rdi
setne cl
or cl, al
je 0x140044e5d
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14005d320
cmp byte [rsp + 0x12f], 0
jns 0x140044df2
mov rcx, qword [rsp + 0x118]
call fcn.1401ef41c
cmp byte [rsp + 0x147], 0
jns 0x140044e09
mov rcx, qword [rsp + 0x130]
call fcn.1401ef41c
cmp byte [rsp + 0x2a7], 0
jns 0x140044e20
mov rcx, qword [rsp + 0x290]
call fcn.1401ef41c
cmp byte [rsp + 0x287], 0
jns 0x140044e37
mov rcx, qword [rsp + 0x270]
call fcn.1401ef41c
mov rcx, qword [rsp + 0x498]
xor rcx, rsp
call fcn.1401f08b0
mov rax, rsi
add rsp, 0x4a0
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
mov ecx, 2
call fcn.1401bd3c0
test al, al
je 0x140044f10
lea rdx, str.....update_notifier_thirdpartywinsparkle_srcupdatedownloader.cc
lea rcx, [rsp + 0x130]
mov r8d, 0x31c
mov r9d, 2
call fcn.140064570
lea rdi, [rsp + 0x140]
xorps xmm0, xmm0
lea r8, [rsp + 0x100]
movaps xmmword [r8], xmm0
mov qword [r8 + 0x10], 0
lea rdx, str.GetUserName
lea rbx, [rsp + 0x118]
mov rcx, rbx
call fcn.1400420d0
movsx r8, byte [rbx + 0x17]
test r8, r8
jns 0x140044ee1
mov r8, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
mov rcx, rdi
mov rdx, rbx
call fcn.14019aea0
cmp byte [rsp + 0x12f], 0
jns 0x140044f03
mov rcx, qword [rsp + 0x118]
call fcn.1401ef41c
lea rcx, [rsp + 0x130]
call fcn.140064b40
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
jmp 0x140044e20