Function at 0x457bf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x360
mov eax, dword [0x603024]
xor eax, ebp
mov dword [esp + 0x358], eax
xor esi, esi
dec esi
lea ecx, [esp + 0x340]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], esi
pcmpeqd xmm0, xmm0
movdqa xmmword [ecx], xmm0
push str.SeBackupPrivilege
call fcn.00574d90
lea ecx, [esp + 0x320]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], esi
pcmpeqd xmm0, xmm0
movdqa xmmword [ecx], xmm0
push str.SeRestorePrivilege
call fcn.00574d90
lea ebx, [esp + 0x110]
push 0x210
push 0xff
push ebx
call fcn.005072d0
add esp, 0xc
mov ecx, ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionProfileList
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00468710
lea esi, [esp + 0x44]
mov ecx, ebx
call fcn.004686e0
test al, al
je 0x458584
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
test eax, eax
jg 0x45810a
xor eax, eax
dec eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov ecx, esi
call fcn.00463100
mov ecx, esi
push 0xf003f
lea eax, [esp + 0x11c]
push eax
push VariantInit
call fcn.00467ef0
test eax, eax
je 0x457d4c
cmp eax, 2
jne 0x457d9d
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
test eax, eax
jle 0x457db6
lea esi, [esp + 0x68]
mov ecx, esi
push 0xffffffffffffffff
push 0x62
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0045d3f0
push 0x1d
push str.Hive_is_not_loaded_for_user__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
call fcn.0055e150
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0045d7d0
jmp 0x457db6
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
test eax, eax
jg 0x4581c7
mov eax, dword [ebp + 8]
mov ebx, dword [eax]
mov ecx, dword [ebx + 4]
call dword [section..00cfg]
push esi
lea eax, [esp + 0x11c]
push eax
push ebx
call ecx
add esp, 0xc
mov ebx, eax
mov ecx, esi
call fcn.00467f60
test bl, bl
lea ebx, [esp + 0x110]
jne 0x4583be
jmp 0x458584
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004e0f90
add esp, 4
test al, al
jne 0x458220
push 0x80
call fcn.0050397a
add esp, 4
mov ebx, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], 0x80000040
mov dword [esp + 0x3c], 0x38
push 0x70
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionProfileList
push eax
call fcn.00506d50
add esp, 0xc
mov word [ebx + 0x70], 0
lea edi, [esp + 0x38]
mov ecx, edi
push 0x5c
xor ebx, ebx
inc ebx
push ebx
call fcn.004de430
mov ecx, eax
lea eax, [esp + 0x118]
push eax
call fcn.0044afd0
cmp byte [esp + 0x43], 0
jns 0x457e1a
mov edi, dword [esp + 0x38]
mov ecx, esi
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00467ef0
test eax, eax
je 0x457ea9
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ebx, 4
push 2
call fcn.004e0f90
add esp, 4
test al, al
je 0x458394
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 2
push 0x89
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x1c
push str.Failed_opening_profile_key__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0055e0b0
jmp 0x458394
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], eax
mov ecx, esi
lea eax, [esp + 0x28]
push eax
push str.ProfileImagePath
call fcn.004682b0
test eax, eax
je 0x457ee5
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004e0f90
add esp, 4
test al, al
jne 0x4583ca
mov ecx, esi
call fcn.005634b0
movzx eax, byte [esp + 0x33]
mov edx, eax
test al, al
jns 0x457efb
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x458081
xor ecx, ecx
dec ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
lea ebx, [esp + 0x28]
test al, al
jns 0x457f1e
mov ebx, dword [esp + 0x28]
lea esi, [esp + 0x68]
mov ecx, esi
push edx
push ebx
call fcn.004dfa40
mov ecx, esi
push 0xa
push str.ntuser.dat
lea edi, [esp + 0x24]
push edi
call fcn.004e0200
mov ecx, esi
call fcn.004dfb00
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
test eax, eax
jg 0x458429
push edi
call fcn.00464280
add esp, 4
test al, al
je 0x45808b
lea ecx, [esp + 0xc]
xor esi, esi
dec esi
mov dword [ecx + 8], esi
mov dword [ecx + 4], esi
mov dword [ecx], esi
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], eax
mov dword [esp + 8], eax
call fcn.00463100
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], esi
push 0xa
lea esi, [esp + 0x60]
push esi
call fcn.0045fb20
add esp, 8
movzx eax, byte [esp + 0x67]
mov ecx, esi
test al, al
lea esi, [esp + 0x44]
jns 0x457fc0
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
push 1
push eax
push ecx
lea ebx, [esp + 0x5c]
push ebx
call fcn.00482f50
add esp, 0x10
movzx eax, byte [esp + 0x5b]
mov ecx, ebx
test al, al
jns 0x457fe4
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
push eax
push ecx
lea eax, [esp + 0x70]
push eax
call fcn.00461af0
add esp, 0xc
cmp byte [esp + 0xb], 0
jns 0x458005
push dword [esp]
call fcn.005039aa
add esp, 4
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
movq xmm0, qword [esp + 0x68]
movq qword [esp], xmm0
mov byte [esp + 0x73], 0
mov word [esp + 0x68], 0
cmp byte [esp + 0x5b], 0
jns 0x458037
push dword [esp + 0x50]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x27], 0
mov eax, edi
jns 0x458044
mov eax, dword [esp + 0x1c]
cmp byte [esp + 0xb], 0
mov ecx, esp
jns 0x458050
mov ecx, dword [esp]
push eax
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov cl, byte [esp + 0xb]
test eax, eax
je 0x458163
test cl, cl
js 0x45827b
mov word [esp], 0
mov byte [esp + 0xb], 0
jmp 0x45828b
mov ebx, 4
jmp 0x458384
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
mov ebx, 4
test eax, eax
lea esi, [esp + 0x44]
jle 0x458377
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 0xffffffffffffffff
push 0x9c
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x25
push str.Hive_file_not_found_or_inaccessible__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0055e0b0
jmp 0x458377
lea esi, [esp + 0x68]
mov ecx, esi
push 0xffffffffffffffff
push pe_nt_image_headers32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0045d3f0
push 0x30
push str.Checking_for_pre_loaded_hive_for_local_account__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
call fcn.0055e150
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0045d7d0
jmp 0x457ca3
mov eax, esp
test cl, cl
jns 0x45816c
mov eax, dword [esp]
lea ecx, [esp + 0xc]
push 0xf003f
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00467ef0
test eax, eax
je 0x4582a4
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004e0f90
add esp, 4
test al, al
je 0x4582a4
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 2
push 0x4c
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x21
push str.Failed_opening_loaded_hive_file__
jmp 0x45849b
lea esi, [esp + 0x68]
mov ecx, esi
push 0xffffffffffffffff
push 0x7c
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0045d3f0
push 0x1b
push str.Found_loaded_hive_for_sid__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
call fcn.0055e150
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0045d7d0
jmp 0x457d63
call fcn.0055df20
lea ebx, [esp + 0x68]
mov ecx, ebx
push eax
push 2
push 0x66
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x1e
push str.Failed_opening_hive_for_user__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
call fcn.0055e150
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, ebx
call fcn.0055e0b0
jmp 0x457db6
mov ecx, dword [esp]
mov word [ecx], 0
mov dword [esp + 4], 0
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004e0f90
add esp, 4
test al, al
jne 0x45847a
cmp byte [esp + 0x67], 0
jns 0x4582b7
push dword [esp + 0x5c]
call fcn.005039aa
add esp, 4
cmp dword [esp + 0xc], 0
je 0x45830c
push 0x32
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.004e0fc0
add esp, 8
test eax, eax
jg 0x4584d2
mov ebx, dword [esp + 0xc]
test ebx, ebx
lea eax, [esp + 0xc]
cmovne ebx, eax
mov eax, dword [ebp + 8]
mov esi, dword [eax]
mov ecx, dword [esi + 4]
call dword [section..00cfg]
push ebx
lea eax, [esp + 0x11c]
push eax
push esi
call ecx
add esp, 0xc
mov ebx, 2
test al, al
lea esi, [esp + 0x44]
je 0x45830e
xor ebx, ebx
lea ecx, [esp + 0xc]
call fcn.005634b0
movzx eax, byte [esp + 0xb]
mov ecx, eax
test al, al
jns 0x458326
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x45835c
mov ecx, esp
test al, al
jns 0x458333
mov ecx, dword [esp]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
test eax, eax
je 0x45835c
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 2
call fcn.004e0f90
add esp, 4
test al, al
jne 0x45852a
lea ecx, [esp + 0xc]
call fcn.00467f60
cmp byte [esp + 0xb], 0
jns 0x458377
push dword [esp]
call fcn.005039aa
add esp, 4
lea ecx, [esp + 0x1c]
call fcn.004dfb00
mov al, byte [esp + 0x33]
test al, al
jns 0x458394
push dword [esp + 0x28]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x43], 0
jns 0x4583a7
push dword [esp + 0x38]
call fcn.005039aa
add esp, 4
mov ecx, esi
call fcn.00467f60
test bl, 3
lea ebx, [esp + 0x110]
jne 0x458584
mov ecx, ebx
call fcn.004688a0
jmp 0x457c7d
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 2
push 0x91
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x2a
push str.Failed_reading_ProfileImagePath_value_of__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0055e0b0
jmp 0x457ee5
lea esi, [esp + 0x68]
mov ecx, esi
push 0xffffffffffffffff
push 0x9a
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0045d3f0
push 0x19
push str.Falling_back_to_opening__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
push edi
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
call fcn.0045d7d0
jmp 0x457f5c
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 2
push 0x43
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x1f
push str.Failed_loading_user_hive_file__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
push edi
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0055e0b0
jmp 0x4582a4
lea esi, [esp + 0x68]
mov ecx, esi
push 0xffffffffffffffff
push 0xa2
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0045d3f0
push 0x20
push str.Loaded_and_opened_hive_for_sid__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
call fcn.0055e150
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
call fcn.0045d7d0
jmp 0x4582d5
call fcn.0055df20
lea esi, [esp + 0x68]
mov ecx, esi
push eax
push 2
push 0x58
push str..._.._chrome_installer_setup_user_hive_visitor.cc
call fcn.0055e050
push 0x1f
push str.Failed_unloading_user_hive_at__
lea eax, [esp + 0x78]
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esp
push ecx
push eax
call fcn.0045dbd0
add esp, 8
push 1
push 0x5e0933
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
lea esi, [esp + 0x44]
call fcn.0055e0b0
jmp 0x45835c
lea ecx, [esp + 0x110]
call fcn.00468810
lea ecx, [esp + 0x320]
call fcn.00574e70
lea ecx, [esp + 0x340]
call fcn.00574e70
mov ecx, dword [esp + 0x358]
xor ecx, ebp
call fcn.00504b53
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret