Function at 0x43d46e
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13b4
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
lea eax, [ebp - 0x403]
push 0x3ff
push ebx
push eax
mov byte [ebp - 0x404], bl
call fcn.00626f50
push 0x3e7
lea eax, [ebp - 0x7eb]
mov byte [ebp - 0x7ec], bl
push ebx
push eax
mov esi, 0x20019
call fcn.00626f50
cmp dword [0x716864], ebx
mov eax, 0x20119
push str.RecoverWindowsAutologinPassword
push 0x66c4b8
cmovne esi, eax
call fcn.00449974
add esp, 0x20
mov byte [ebp - 0x13a4], bl
lea eax, [ebp - 0x13ac]
mov byte [ebp - 0xbd4], bl
mov byte [ebp - 0xfbc], bl
push eax
push esi
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x43d51f
push eax
push str._n_n_Error:_Failed_to_open_WinLogon_Registry_key._Error0x_.8x_n_n
call fcn.00449974
pop ecx
pop ecx
jmp 0x43d975
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x404]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x13b0]
push eax
push ebx
push str.AutoAdminLogon
push dword [ebp - 0x13ac]
call edi
mov ebx, eax
test ebx, ebx
jne 0x43d5b2
cmp byte [ebp - 0x404], al
je 0x43d5b2
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_AutoAdminLogon_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push 0x66c5bc
push eax
call fcn.00631370
add esp, 0x14
mov esi, 0x3e8
test eax, eax
lea eax, [ebp - 0x7ec]
jne 0x43d5ab
push str.Enabled
push esi
push eax
call fcn.006311ec
add esp, 0xc
jmp 0x43d5dc
push str.Disabled
jmp 0x43d59f
push str.Not_Configured
mov esi, 0x3e8
lea eax, [ebp - 0x7ec]
push esi
push eax
call fcn.006311ec
push ebx
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__AutoAdminLogon_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x13a8]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x404]
xor ebx, ebx
push eax
lea eax, [ebp - 0x13b0]
mov byte [ebp - 0x404], bl
push eax
push ebx
push str.DefaultUserName
push dword [ebp - 0x13ac]
call edi
test eax, eax
jne 0x43d64c
cmp byte [ebp - 0x404], bl
je 0x43d64c
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_DefaultUserName_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0xfbc]
push esi
push eax
call fcn.006311ec
add esp, 0x18
jmp 0x43d65f
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__DefaultUserName_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x13a8]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], bl
push eax
lea eax, [ebp - 0x13b0]
push eax
push ebx
push str.DefaultPassword
push dword [ebp - 0x13ac]
call edi
test eax, eax
jne 0x43d6d0
cmp byte [ebp - 0x404], bl
je 0x43d6d0
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_DefaultPassword_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0xbd4]
push esi
push eax
call fcn.006311ec
xor ebx, ebx
add esp, 0x18
inc ebx
jmp 0x43d6e3
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__DefaultPassword_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x13a8]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0
push eax
lea eax, [ebp - 0x13b0]
push eax
push 0
push str.DefaultDomainName
push dword [ebp - 0x13ac]
call edi
test eax, eax
jne 0x43d753
cmp byte [ebp - 0x404], al
je 0x43d753
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_DefaultDomainName_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x13a4]
push esi
push eax
call fcn.006311ec
add esp, 0x18
jmp 0x43d766
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__DefaultDomainName_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
test ebx, ebx
je 0x43d79c
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0xbd4]
push eax
lea eax, [ebp - 0xfbc]
push eax
lea eax, [ebp - 0x13a4]
push eax
lea eax, [ebp - 0x7ec]
push eax
push 0x1f8
push 7
call fcn.00412c85
add esp, 0x20
lea eax, [ebp - 0x13a8]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x404]
xor ebx, ebx
push eax
lea eax, [ebp - 0x13b0]
mov byte [ebp - 0x13a4], bl
push eax
push ebx
push str.AltDefaultPassword
push dword [ebp - 0x13ac]
mov byte [ebp - 0xbd4], bl
mov byte [ebp - 0xfbc], bl
mov byte [ebp - 0x404], bl
call edi
test eax, eax
jne 0x43d955
cmp byte [ebp - 0x404], bl
je 0x43d955
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_AltDefaultPassword_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0xbd4]
push esi
push eax
call fcn.006311ec
add esp, 0x18
mov dword [ebp - 0x13a8], 0x400
lea eax, [ebp - 0x13a8]
mov byte [ebp - 0x404], bl
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x13b0]
push eax
push ebx
push str.AltDefaultUserName
push dword [ebp - 0x13ac]
call edi
test eax, eax
jne 0x43d892
cmp byte [ebp - 0x404], bl
je 0x43d892
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_AltDefaultUserName_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0xfbc]
push esi
push eax
call fcn.006311ec
add esp, 0x18
jmp 0x43d8a5
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__AltDefaultUserName_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x13a8]
mov dword [ebp - 0x13a8], 0x400
push eax
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], bl
push eax
lea eax, [ebp - 0x13b0]
push eax
push ebx
push str.AltDefaultDomainName
push dword [ebp - 0x13ac]
call edi
test eax, eax
jne 0x43d913
cmp byte [ebp - 0x404], bl
je 0x43d913
lea eax, [ebp - 0x404]
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_AltDefaultDomainName_value_is_s
call fcn.00449974
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x13a4]
push esi
push eax
call fcn.006311ec
add esp, 0x18
jmp 0x43d926
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__AltDefaultDomainName_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0xbd4]
push ecx
push eax
lea eax, [ebp - 0xfbc]
push eax
lea eax, [ebp - 0x13a4]
push eax
push ecx
push 0x1f8
push 7
call fcn.00412c85
add esp, 0x20
jmp 0x43d968
push eax
push str.RecoverWindowsAutologinPassword
push str._s_:_Failed_to_find__AltDefaultPassword_registry_key__Error0x_.8x
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x13ac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret