Function at 0x4348bb
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2340
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x7d3]
push edi
mov edi, 0x3e7
xor ebx, ebx
push edi
push ebx
push eax
mov byte [ebp - 0x7d4], bl
call fcn.00626f50
push edi
lea eax, [ebp - 0x3eb]
mov byte [ebp - 0x3ec], bl
push ebx
push eax
call fcn.00626f50
push edi
lea eax, [ebp - 0xbbb]
mov byte [ebp - 0xbbc], bl
push ebx
push eax
call fcn.00626f50
add esp, 0x24
lea eax, [ebp - 0x2330]
push eax
push 0x20019
push ebx
push esi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x434954
push eax
push esi
push str.RecoverOpenVPNFromRegistry
push str._s_:_Failed_to_open_the_config_location___s___Error0x_.8x
call fcn.00449974
add esp, 0x10
jmp 0x434b07
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x2338]
push eax
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x2338], 0x1388
push eax
lea eax, [ebp - 0x233c]
push eax
push ebx
push str.auth_data
push dword [ebp - 0x2330]
call edi
test eax, eax
jne 0x434ae7
cmp dword [ebp - 0x2338], 1
jb 0x434ae7
push dword [ebp - 0x2338]
push str.RecoverOpenVPNFromRegistry
push str._s_:_Found_the_aut_data__password__of_size__d
call fcn.00449974
add esp, 0xc
mov dword [ebp - 0x2334], 0x3e8
lea eax, [ebp - 0x2334]
push eax
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0x233c]
push eax
push ebx
push str.entropy
push dword [ebp - 0x2330]
call edi
test eax, eax
jne 0x434ad8
cmp dword [ebp - 0x2334], 1
jb 0x434ad8
push dword [ebp - 0x2334]
mov esi, str.RecoverOpenVPNFromRegistry
push esi
push str._s_:_Found_the_entropy_of_size__d
call fcn.00449974
add esp, 0xc
mov dword [ebp - 0x2340], 0x3e8
lea eax, [ebp - 0x2340]
push eax
lea eax, [ebp - 0x7d4]
push eax
lea eax, [ebp - 0x233c]
push eax
push ebx
push 0x66c3c4
push dword [ebp - 0x2330]
call edi
push ebx
push ebx
mov edi, 0x3e8
lea eax, [ebp - 0x3ec]
push edi
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x7d4]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x3ec]
push eax
push esi
push str._s_:_Final_username_is__s
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x2330]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
lea eax, [ebp - 0xbbc]
push eax
push dword [ebp - 0x2334]
lea eax, [ebp - 0xfa4]
push eax
push dword [ebp - 0x2338]
lea eax, [ebp - 0x232c]
push eax
call fcn.0040c936
add esp, 0x18
cmp eax, 1
jne 0x434ad3
push 0xffffffffffffffff
mov edx, 0x66ae5d
lea eax, [ebp - 0xbbc]
push edx
push eax
lea ecx, [ebp - 0x3ec]
push ecx
push edx
push edx
push 0x2cd
push 7
call fcn.00412c85
add esp, 0x20
xor eax, eax
inc eax
jmp 0x434b09
push eax
push esi
mov esi, str.RecoverOpenVPNFromRegistry
push esi
push str._s_:_Failed_to_read_the_salt_data_at__s__Error0x_.8x
jmp 0x434af3
push eax
push esi
push str.RecoverOpenVPNFromRegistry
push str._s_:_Failed_to_read_the_authdata_password_value_at__s__Error0x_.8x
call fcn.00449974
add esp, 0x10
push dword [ebp - 0x2330]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret