Function at 0x411c9b
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30c
mov eax, dword [0x5c2460]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, ecx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x21c], edx
mov dword [ebp - 0x230], edi
cmp dword [0x768ca0], ebx
jg 0x411cf7
push 0
push 0xaf
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
inc ebx
call fcn.0045ce90
mov edx, str.begin_HigherSecurityRepairReg__r_n
lea ecx, [eax + 8]
call fcn.00405723
test bl, 1
je 0x411d0a
lea ecx, [ebp - 0x308]
and ebx, 0xfffffffe
call fcn.0045cee0
test esi, esi
jne 0x411d15
xor bl, bl
jmp 0x4121e2
xor ecx, ecx
mov eax, 0x20019
mov byte [ebp - 0x220], cl
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x228], ecx
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x218], ecx
cmp byte [ebp - 0x21c], cl
je 0x411d53
mov eax, 0x20119
cmp dword [ebp + 0x24], 8
mov ecx, dword [ebp + 0x10]
jae 0x411d5f
lea ecx, [ebp + 0x10]
lea edx, [ebp - 0x214]
push edx
push eax
push 0
push ecx
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x411dc1
cmp dword [0x768ca0], 0
jg 0x411da5
push 0
push 0xc7
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 2
call fcn.0045ce90
mov edx, str.RegOpenKeyEx_Read_error_r_n
lea ecx, [eax + 8]
call fcn.00405723
test bl, 2
je 0x4120f8
and ebx, 0xfffffffd
lea ecx, [ebp - 0x308]
call fcn.0045cee0
jmp 0x4120f8
mov edi, dword [sym.imp.ADVAPI32.dll_GetSecurityInfo]
lea eax, [ebp - 0x234]
push eax
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x22c]
push eax
push 1
push 4
push dword [ebp - 0x214]
call edi
test eax, eax
je 0x411e28
cmp dword [0x768ca0], 0
jg 0x411e1a
push 0
push 0xd8
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 4
call fcn.0045ce90
mov edx, str.GetSecurityInfo_OWNER_SECURITY_INFORMATION_error_
lea ecx, [eax + 8]
call fcn.00405723
test bl, 4
je 0x4120f8
and ebx, 0xfffffffb
jmp 0x411db1
xor eax, eax
push eax
push eax
push eax
push esi
push 1
push 4
push dword [ebp - 0x214]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
test eax, eax
je 0x411e83
cmp dword [0x768ca0], 0
jg 0x411e72
push 0
push 0xe8
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 8
call fcn.0045ce90
mov edx, str.SetSecurityInfo_OWNER_SECURITY_INFORMATION_error_
lea ecx, [eax + 8]
call fcn.00405723
test bl, 8
je 0x4120f8
and ebx, 0xfffffff7
jmp 0x411db1
lea eax, [ebp - 0x228]
xor ecx, ecx
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
push ecx
push ecx
push 4
push 4
push dword [ebp - 0x214]
call edi
test eax, eax
je 0x411ee7
cmp dword [0x768ca0], 0
jg 0x411ed6
push 0
push 0xf7
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 0x10
call fcn.0045ce90
mov edx, str.GetSecurityInfo_DACL_SECURITY_INFORMATION_error_
lea ecx, [eax + 8]
call fcn.00405723
test bl, 0x10
je 0x4120f8
and ebx, 0xffffffef
jmp 0x411db1
push 8
pop ecx
push 2
pop esi
xor eax, eax
lea edi, [ebp - 0x258]
rep stosd dword es:[edi], eax
push 0x206
push eax
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push eax
mov dword [ebp - 0x258], 0xf003f
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x250], 3
mov dword [ebp - 0x244], 1
call fcn.005091d0
add esp, 0xc
mov dword [ebp - 0x238], 0x104
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x210]
push eax
push esi
call dword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
je 0x411f7c
cmp word [ebp - 0x210], 0
je 0x411f7c
lea eax, [ebp - 0x210]
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x23c], eax
jmp 0x411fcf
cmp dword [0x768ca0], 0
jg 0x411fac
push 0
push 0x10c
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 0x20
call fcn.0045ce90
mov edx, str.Cannot_acquire_current_user_name
lea ecx, [eax + 8]
call fcn.00405723
test bl, 0x20
je 0x411fbf
lea ecx, [ebp - 0x308]
and ebx, 0xffffffdf
call fcn.0045cee0
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x23c], str.Authenticated_Users
lea eax, [ebp - 0x224]
push eax
push dword [ebp - 0x218]
lea eax, [ebp - 0x258]
push eax
push 1
call dword [sym.imp.ADVAPI32.dll_SetEntriesInAclW]
test eax, eax
je 0x412030
cmp dword [0x768ca0], 0
jg 0x41201f
push 0
push 0x116
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 0x40
call fcn.0045ce90
mov edx, str.SetEntriesInAcl_error
lea ecx, [eax + 8]
call fcn.00405723
test bl, 0x40
je 0x4120f8
and ebx, 0xffffffbf
jmp 0x411db1
xor eax, eax
push eax
push dword [ebp - 0x224]
push eax
push eax
push 4
push 4
push dword [ebp - 0x214]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
test eax, eax
jne 0x4120dd
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x412087
push dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x230]
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x28]
push eax
lea edx, [ebp + 0x10]
call fcn.00411b09
add esp, 0xc
neg eax
sbb al, al
inc al
mov dword [ebp - 0x220], eax
jmp 0x4120dd
cmp eax, 1
jne 0x4120ae
push dword [ebp - 0x21c]
lea eax, [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0x230]
lea edx, [ebp + 0x10]
push eax
call fcn.00411c33
add esp, 0xc
neg al
sbb al, al
jmp 0x4120d5
cmp eax, esi
jne 0x4120dd
push dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x230]
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x28]
push eax
lea edx, [ebp + 0x10]
call fcn.00411b9e
add esp, 0xc
neg eax
sbb al, al
inc al
mov byte [ebp - 0x220], al
xor eax, eax
push eax
push dword [ebp - 0x218]
push eax
push eax
push 4
push 4
push dword [ebp - 0x214]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x412170
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push 1
push 4
push dword [ebp - 0x214]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
cmp dword [0x768ca0], 0
mov esi, eax
jg 0x412161
push 0
push 0x14b
push str.e:360chrome37_srcchromeinstaller_tdsetupdefault_browser.cc
lea ecx, [ebp - 0x308]
or ebx, 0x80
call fcn.0045ce90
push esi
mov edx, str.back_up_OWNER_SECURITY_INFORMATION_dwRes_
lea ecx, [eax + 8]
call fcn.00405723
mov ecx, eax
call fcn.0040761a
mov edx, 0x53ff30
mov ecx, eax
call fcn.00405723
test bl, bl
jns 0x412170
lea ecx, [ebp - 0x308]
call fcn.0045cee0
cmp dword [ebp - 0x228], 0
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
je 0x412187
push dword [ebp - 0x228]
call esi
cmp dword [ebp - 0x234], 0
je 0x412198
push dword [ebp - 0x234]
call esi
cmp dword [ebp - 0x224], 0
je 0x4121a9
push dword [ebp - 0x224]
call esi
cmp dword [ebp - 0x218], 0
je 0x4121ba
push dword [ebp - 0x218]
call esi
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x4121c7
push eax
call esi
cmp dword [ebp - 0x214], 0
je 0x4121dc
push dword [ebp - 0x214]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x220]
push 0
push 1
lea ecx, [ebp + 0x10]
call fcn.0040536f
push 0
push 1
lea ecx, [ebp + 0x28]
call fcn.0040536f
push 0
push 1
lea ecx, [ebp + 0x40]
call fcn.0040536f
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00501d03
mov esp, ebp
pop ebp
ret