Function at 0x463de0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x220c
call fcn.004929f0
mov eax, dword [0x4c448c]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x220c]
push eax
lea ecx, [ebp - 0x208]
push ecx
mov dword [ebp - 0x220c], 0x101
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push 0x7fe
lea edx, [ebp - 0x1208]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x463e7b
lea eax, [ebp - 0x1208]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x463e40
sub eax, edx
sar eax, 1
dec eax
test eax, eax
jle 0x463e7b
mov ecx, 0x5c
lea esp, [esp]
cmp word [ebp + eax*2 - 0x1208], cx
je 0x463e71
dec eax
test eax, eax
jg 0x463e60
jmp 0x463e7b
xor ecx, ecx
mov word [ebp + eax*2 - 0x1208], cx
push 0xffffffffffffffff
push 0x4b2220
lea edx, [ebp - 0x1208]
push 0x800
push edx
call fcn.00474660
push 0xffffffffffffffff
lea eax, [ebp - 0x1208]
push eax
lea ecx, [ebp - 0x2208]
push 0x800
push ecx
call fcn.004740e7
push 0xffffffffffffffff
push str.processlasso.exe
lea edx, [ebp - 0x2208]
push 0x800
push edx
call fcn.00474660
add esp, 0x30
test esi, esi
jne 0x463f11
push str.Process_Lasso_Management_Console__GUI_
call fcn.0046cb00
push 1
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
push esi
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
push 1
xor edx, edx
mov ecx, str.ProcessSupervisorGUI
call fcn.0042ad70
push esi
xor edx, edx
mov ecx, str.ProcessSupervisorGUI
call fcn.0042ad70
add esp, 0x10
jmp 0x463f1a
cmp esi, 0xffffffff
je 0x46406b
mov eax, esi
dec eax
je 0x463fb7
dec eax
jne 0x46406b
cmp byte [0x4c7dca], al
jne 0x463f37
call fcn.0042de30
cmp byte [0x4c7dcb], 0
je 0x463fa9
push ebx
push str.Process_Lasso_Management_Console__GUI_
xor edx, edx
lea ecx, [ebp - 0x2208]
call fcn.0046ba60
test al, al
jne 0x463f7a
push 0x30
push str.ioloGovernor
push str.ERROR:_There_was_an_error_configuring_the_application_to_start_at_user_login_
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00474985
mov esp, ebp
pop ebp
ret
push 1
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
push 0
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
add esp, 8
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00474985
mov esp, ebp
pop ebp
ret
push 1
lea eax, [ebp - 0x2208]
push eax
jmp 0x46405e
cmp byte [0x4c7dca], 0
jne 0x463fc5
call fcn.0042de30
cmp byte [0x4c7dcb], 0
lea ecx, [ebp - 0x2208]
je 0x46405b
push ebx
push str.Process_Lasso_Management_Console__GUI_
lea edx, [ebp - 0x208]
call fcn.0046ba60
test al, al
jne 0x464010
push 0x30
push str.ioloGovernor
push str.ERROR:_The_system_Task_Scheduler__used_to_start_tasks_at_login__is_not_configured_correctly._Please_make_sure_this_service_is_enabled
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00474985
mov esp, ebp
pop ebp
ret
push 1
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
push 0
xor edx, edx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ad70
push 1
xor edx, edx
mov ecx, str.ProcessSupervisorGUI
call fcn.0042ad70
push 0
xor edx, edx
mov ecx, str.ProcessSupervisorGUI
call fcn.0042ad70
add esp, 0x10
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00474985
mov esp, ebp
pop ebp
ret
push 0
push ecx
mov ecx, str.ProcessLassoManagementConsole
call fcn.0042ab70
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov al, 1
call fcn.00474985
mov esp, ebp
pop ebp
ret