Function at 0x42e980
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x56d0
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 6
pop ecx
push 0x3d0
xor ebx, ebx
lea eax, [ebp - 0x23dc]
mov esi, str.SECURITYPolicySecrets
lea edi, [ebp - 0x23f4]
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00626f50
mov esi, str.RecoverLSASecrets
push esi
push str._s_:_Entered
call fcn.00449974
add esp, 0x14
lea eax, [ebp - 0x56cc]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x23f4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x42ea11
push eax
lea eax, [ebp - 0x23f4]
push eax
push esi
push str._s_:_Failed_to_open_LSA_Secrets_location_s__Error0x_.8x
call fcn.00449974
add esp, 0x10
xor eax, eax
jmp 0x42f151
lea eax, [ebp - 0x23f4]
push eax
push esi
push str._s_:_Enumerating_key_within__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x56c4]
mov edi, 0x3e8
mov dword [ebp - 0x56c4], edi
push ebx
push ebx
push ebx
push ebx
push eax
lea eax, [ebp - 0x89c]
push eax
push ebx
push dword [ebp - 0x56cc]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x42f133
mov esi, ebx
lea eax, [esi + 1]
mov esi, str.RecoverLSASecrets
lea ecx, [ebp - 0x89c]
mov dword [ebp - 0x56c8], eax
push ecx
push eax
push esi
push str._n_n_s_:__d___Found_LSA_secret__s
call fcn.00449974
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x23f4]
push eax
push str._s_sCurrVal
lea eax, [ebp - 0x56bc]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x56c0]
mov dword [ebp - 0x56c0], 0x2710
push eax
lea eax, [ebp - 0x52d4]
push eax
lea eax, [ebp - 0x56bc]
push eax
lea eax, [ebp - 0x89c]
push eax
call fcn.004c5eba
add esp, 0x34
test eax, eax
jne 0x42eae7
lea eax, [ebp - 0x89c]
push eax
push esi
push str._s_:_Failed_to_read_decrypt_LSA_secret__s
call fcn.00449974
add esp, 0xc
jmp 0x42f0fb
mov edx, dword [ebp - 0x56c0]
mov ecx, dword [ebp - 0x52d4]
lea eax, [edx - 1]
cmp eax, 0x3dd
ja 0x42f6fd
lea eax, [ecx - 1]
cmp eax, 0x3dd
ja 0x42f6fd
lea eax, [edx - 0x10]
cmp ecx, eax
ja 0x42f6fd
push ecx
push esi
push str._s_:_Final_LSA_secret_value__size_d
call fcn.00449974
lea eax, [ebp - 0x89c]
push str.DPAPI_SYSTEM
push eax
call fcn.00631435
add esp, 0x14
test eax, eax
jne 0x42ec0b
cmp dword [ebp - 0x56c0], 0x3c
jae 0x42eb66
push 0x3c
push dword [ebp - 0x56c0]
push esi
push str._s_Error:_Decrypted_DPAPI_SYSTEM_value___d__is_less_than_minimum_size___d_
call fcn.00449974
add esp, 0x10
jmp 0x42f0fb
push 0x64
lea eax, [ebp - 0x450]
push eax
push 0x14
pop esi
lea eax, [ebp - 0x52c0]
push esi
push eax
call fcn.0044969e
push 0x64
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x52ac]
push esi
push eax
call fcn.0044969e
lea eax, [ebp - 0x450]
push eax
push esi
push str.DPAPI_SYSTEM_Machine_Key___d__s
call fcn.00449974
lea eax, [ebp - 0x4b4]
push eax
push esi
push str.DPAPI_SYSTEM_User_Key___d__s
call fcn.00449974
push 0xffffffffffffffff
mov esi, 0x66ae5d
lea eax, [ebp - 0x450]
push esi
push eax
push str.Machine_Key
push str.DPAPI_SYSTEM
push esi
push 0x1fe
push 0xc
call fcn.00412c85
add esp, 0x58
lea eax, [ebp - 0x4b4]
push 0xffffffffffffffff
push esi
push eax
push str.User_Key
push str.DPAPI_SYSTEM
push esi
push 0x1fe
push 0xc
call fcn.00412c85
add esp, 0x20
jmp 0x42f0fb
lea eax, [ebp - 0x89c]
push str.NL_KM
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x42ec79
push edi
lea eax, [ebp - 0x3ec]
push eax
push dword [ebp - 0x52d4]
lea eax, [ebp - 0x52c4]
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
push dword [ebp - 0x52d4]
push str.NL_KM_Value___d____s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
push str.Encryption_Key
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x1ff
jmp 0x42f6ee
lea eax, [ebp - 0x89c]
push str.DefaultPassword
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x42ed24
push ebx
push ebx
push edi
lea eax, [ebp - 0x3ec]
push eax
mov eax, dword [ebp - 0x52d4]
shr eax, 1
push eax
lea eax, [ebp - 0x52c4]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x52d4]
shr eax, 1
cmp eax, edi
jae 0x42f70a
mov byte [ebp + eax - 0x3ec], bl
lea eax, [ebp - 0xc84]
push edi
push eax
call fcn.00448adf
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0xc84]
push eax
push str.LSA_DefaultUsername_s__DefaultPassword_s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x200
push 0xc
call fcn.00412c85
add esp, 0x34
jmp 0x42f0fb
mov esi, str._SC_
push esi
call fcn.00631510
push eax
lea eax, [ebp - 0x89c]
push esi
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42ee21
lea eax, [ebp - 0x898]
push eax
push str._Found_Service_account___s
call fcn.00449974
lea eax, [ebp - 0x898]
push eax
lea eax, [ebp - 0x27dc]
push edi
push eax
call fcn.006311ec
movsx eax, byte [ebp - 0x27dc]
push eax
call fcn.006307f2
mov byte [ebp - 0x27dc], al
lea eax, [ebp - 0xc84]
push edi
push eax
lea eax, [ebp - 0x27dc]
push eax
call fcn.00449400
add esp, 0x24
lea eax, [ebp - 0x3ec]
push ebx
push ebx
push edi
push eax
mov eax, dword [ebp - 0x52d4]
shr eax, 1
push eax
lea eax, [ebp - 0x52c4]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x52d4]
shr eax, 1
cmp eax, edi
jae 0x42f70a
mov byte [ebp + eax - 0x3ec], bl
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x27dc]
push eax
push str.Service_Logon_Account___Service_s__Username_s__Password_s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x27dc]
push eax
push ecx
push 0x201
push 0xc
call fcn.00412c85
add esp, 0x30
jmp 0x42f0fb
mov esi, str.ASPNET_WP_PASSWORD
push esi
call fcn.00631510
push eax
lea eax, [ebp - 0x89c]
push esi
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42eebb
push ebx
push ebx
push edi
lea eax, [ebp - 0x3ec]
push eax
mov eax, dword [ebp - 0x52d4]
shr eax, 1
push eax
lea eax, [ebp - 0x52c4]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x52d4]
shr eax, 1
cmp eax, edi
jae 0x42f70a
mov byte [ebp + eax - 0x3ec], bl
lea eax, [ebp - 0x3ec]
push eax
push str.LSA_ASPNET_WP_PASSWORD____UserASPNET__password_s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
push str.ASPNET
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x202
push 0xc
call fcn.00412c85
add esp, 0x28
jmp 0x42f0fb
mov esi, str.RasDialParams
push esi
call fcn.00631510
push eax
lea eax, [ebp - 0x89c]
push esi
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42f160
push str._Found_RAS__Dialup_VPN__Passwords
call fcn.00449974
pop ecx
push ebx
push ebx
push edi
lea eax, [ebp - 0x3ec]
push eax
mov eax, dword [ebp - 0x52d4]
shr eax, 1
push eax
lea eax, [ebp - 0x52c4]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x52d4]
shr eax, 1
cmp eax, edi
jae 0x42f70a
push eax
push str.RSA_Data_length_d
mov byte [ebp + eax - 0x3ec], bl
call fcn.00449974
mov eax, dword [ebp - 0x52d4]
xor esi, esi
pop ecx
pop ecx
shr eax, 1
sub eax, 1
mov byte [ebp - 0x1454], 0
push esi
mov dword [ebp - 0x56d0], eax
mov byte [ebp - 0x106c], 0
mov byte [ebp - 0xc84], 0
pop edi
je 0x42f0f4
mov al, byte [ebp + edi - 0x3ec]
test al, al
je 0x42ef78
mov byte [ebp + esi - 0x1454], al
inc esi
jmp 0x42f090
inc ebx
mov eax, ebx
sub eax, 1
je 0x42effd
sub eax, 5
je 0x42efcf
sub eax, 1
jne 0x42f024
cmp esi, 0x3e8
jae 0x42f70a
mov byte [ebp + esi - 0x1454], al
lea eax, [ebp - 0x1454]
push eax
push str.RAS_Password___s
call fcn.00449974
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x106c]
push 0x3e8
push eax
call fcn.006311ec
add esp, 0x14
jmp 0x42f024
mov ecx, 0x3e8
cmp esi, ecx
jae 0x42f70a
lea eax, [ebp - 0x1454]
mov byte [ebp + esi - 0x1454], 0
push eax
push ecx
lea eax, [ebp - 0xc84]
push eax
call fcn.006311ec
add esp, 0xc
jmp 0x42f024
cmp esi, 0x3e8
jae 0x42f70a
lea eax, [ebp - 0x1454]
mov byte [ebp + esi - 0x1454], 0
push eax
push str.RAS_UID___s
call fcn.00449974
pop ecx
pop ecx
xor esi, esi
mov byte [ebp - 0x1454], 0
cmp ebx, 9
jne 0x42f090
lea eax, [ebp - 0x106c]
xor ebx, ebx
push eax
lea eax, [ebp - 0xc84]
push eax
push str.__Found_VPN_Dialup_Entry__Login_s__Password_s
call fcn.00449974
push edi
push str._n_n__Reached_End_of_RAS_Entry_at__pos_d_...Loooking_for_Next_one_now
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x106c]
push ecx
push eax
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x203
push 0xc
call fcn.00412c85
add esp, 0x34
mov byte [ebp - 0x106c], bl
mov byte [ebp - 0xc84], bl
inc edi
cmp edi, dword [ebp - 0x56d0]
jb 0x42ef60
cmp byte [ebp - 0xc84], 0
je 0x42f0f4
cmp byte [ebp - 0x106c], 0
je 0x42f0f4
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0xc84]
push eax
push str.__Found_VPN_Dialup_Entry__Login_s__Password_s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x106c]
push ecx
push eax
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x203
push 0xc
call fcn.00412c85
add esp, 0x2c
mov edi, 0x3e8
xor ebx, ebx
mov esi, dword [ebp - 0x56c8]
lea eax, [ebp - 0x56c4]
push ebx
push ebx
push ebx
push ebx
push eax
lea eax, [ebp - 0x89c]
mov dword [ebp - 0x56c4], edi
push eax
push esi
push dword [ebp - 0x56cc]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x42ea5a
mov esi, str.RecoverLSASecrets
push eax
push esi
push str._s_:_Finished_enumerating_all_LSA_secrets__status__0x_.8x
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x56cc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
lea eax, [ebp - 0x89c]
push str._MACHINE.ACC
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x42f324
push str._Found_Domain_Account__MACHINE.ACC
call fcn.00449974
push edi
lea eax, [ebp - 0x183c]
push eax
push edi
lea eax, [ebp - 0xc84]
push eax
push 1
call fcn.004486db
add esp, 0x18
test eax, eax
je 0x42f1e9
lea eax, [ebp - 0x183c]
push eax
call fcn.00631510
test eax, eax
lea eax, [ebp - 0xc84]
pop ecx
push eax
je 0x42f1d9
lea eax, [ebp - 0x183c]
push eax
push 0x686214
lea eax, [ebp - 0x200c]
push edi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x42f1e9
lea eax, [ebp - 0x200c]
push edi
push eax
call fcn.006311ec
add esp, 0xc
push edi
lea eax, [ebp - 0x2bc4]
push eax
push dword [ebp - 0x52d4]
lea eax, [ebp - 0x52c4]
push eax
push 0x8002
call fcn.004c63d4
add esp, 0x14
test eax, eax
je 0x42f283
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x2bc4]
push 0x10
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
push str.NTLM_Hash_of__MACHINE.ACC___s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push str._NTLM_HASH_
push str._s__s
lea eax, [ebp - 0x106c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
mov esi, 0x66ae5d
lea eax, [ebp - 0x106c]
push esi
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x89c]
push eax
push esi
push 0x204
push 0xc
call fcn.00412c85
add esp, 0x4c
jmp 0x42f288
mov esi, 0x66ae5d
push edi
lea eax, [ebp - 0x2bc4]
push eax
push dword [ebp - 0x52d4]
lea eax, [ebp - 0x52c4]
push eax
push 0x8004
call fcn.004c63d4
add esp, 0x14
test eax, eax
je 0x42f0fb
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x2bc4]
push 0x14
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
push str.SHA1_Hash_of__MACHINE.ACC___s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push str._SHA1_HASH_
push str._s__s
lea eax, [ebp - 0x106c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x89c]
push eax
push esi
push 0x204
push 0xc
call fcn.00412c85
add esp, 0x4c
jmp 0x42f0fb
mov esi, str.M__MSV1_0_TBAL_PRIMARY_
push esi
call fcn.00631510
push eax
lea eax, [ebp - 0x89c]
push esi
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42f614
push str.TBAL_for_Local_Account__offline__found
call fcn.00449974
mov ax, word [ebp - 0x5260]
mov byte [ebp - 0x183c], bl
mov byte [ebp - 0xc84], bl
pop ecx
test ax, ax
je 0x42f3ab
push ebx
push ebx
push edi
movzx eax, ax
lea ecx, [ebp - 0xc84]
push ecx
shr eax, 1
lea ecx, [ebp - 0x52c4]
push eax
mov eax, dword [ebp - 0x5264]
lea eax, [ecx + eax*2]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movzx eax, word [ebp - 0x5260]
shr eax, 1
cmp eax, edi
jae 0x42f70a
mov byte [ebp + eax - 0xc84], bl
mov ax, word [ebp - 0x5268]
test ax, ax
je 0x42f41c
push ebx
push ebx
push edi
movzx eax, ax
lea ecx, [ebp - 0x183c]
push ecx
shr eax, 1
lea ecx, [ebp - 0x52c4]
push eax
mov eax, dword [ebp - 0x526c]
lea eax, [ecx + eax*2]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movzx eax, word [ebp - 0x5268]
shr eax, 1
cmp eax, edi
jae 0x42f70a
mov byte [ebp + eax - 0x183c], bl
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x183c]
push eax
push 0x66c218
lea eax, [ebp - 0x200c]
push edi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x42f433
lea eax, [ebp - 0xc84]
push eax
lea eax, [ebp - 0x200c]
push edi
push eax
call fcn.006311ec
add esp, 0xc
lea eax, [ebp - 0x200c]
push eax
push str.TBAL_Username_s
call fcn.00449974
mov eax, dword [ebp - 0x52bc]
pop ecx
pop ecx
test al, 1
je 0x42f4d5
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x52b4]
push 0x10
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x200c]
push eax
push str.TBAL_Secret:_User_s__NTLM_Hash_s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push str._NTLM_HASH_
push str._s__s
lea eax, [ebp - 0x106c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
mov esi, 0x66ae5d
lea eax, [ebp - 0x106c]
push esi
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x89c]
push eax
push esi
push 0x205
push 0xc
call fcn.00412c85
mov eax, dword [ebp - 0x52bc]
add esp, 0x50
jmp 0x42f4da
mov esi, 0x66ae5d
test al, 2
je 0x42f558
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x52a4]
push 0x10
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x200c]
push eax
push str.TBAL_Secret:_User_s__LM_Hash_s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push str._LM_HASH_
push str._s__s
lea eax, [ebp - 0x106c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x89c]
push eax
push esi
push 0x205
push 0xc
call fcn.00412c85
mov eax, dword [ebp - 0x52bc]
add esp, 0x50
test al, 4
je 0x42f5d6
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x5294]
push 0x14
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x200c]
push eax
push str.TBAL_Secret:_User_s__SHA1_Hash_s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push str._SHA1_HASH_
push str._s__s
lea eax, [ebp - 0x106c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x89c]
push eax
push esi
push 0x205
push 0xc
call fcn.00412c85
mov eax, dword [ebp - 0x52bc]
add esp, 0x50
test al, 8
je 0x42f0fb
push edi
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x5280]
push 0x10
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x200c]
push eax
push str.TBAL_Secret:_User_s__DPAPI_Protected_s
call fcn.00449974
add esp, 0x1c
jmp 0x42f0fb
mov esi, str.M__CLOUDAP_TBAL_
push esi
call fcn.00631510
push eax
lea eax, [ebp - 0x89c]
push esi
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42f69f
push str.TBAL_for_Microsoft_Account_found
call fcn.00449974
push edi
lea eax, [ebp - 0x3ec]
push eax
push dword [ebp - 0x52d4]
lea eax, [ebp - 0x52c4]
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
push dword [ebp - 0x52d4]
push str.TBAL_Secret__M__Account_:_DPAPI_Encryption_Key___d___s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
push str.Encryption_Key
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x206
push 0xc
call fcn.00412c85
add esp, 0x40
jmp 0x42f0fb
push edi
lea eax, [ebp - 0x3ec]
push eax
push dword [ebp - 0x52d4]
lea eax, [ebp - 0x52c4]
push eax
call fcn.0044969e
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x89c]
push eax
push str._Unknown_LSA_secret_found___s____s
call fcn.00449974
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ecx
push eax
push ecx
lea eax, [ebp - 0x89c]
push eax
push ecx
push 0x1fd
push 0xc
call fcn.00412c85
add esp, 0x3c
jmp 0x42f0fb
push ecx
push edx
push esi
push str._s_:_Invalid_LSA_secret_size...Total_size_d___Secret_size_d
jmp 0x42eb59
call fcn.005fe87a
int3