Function at 0x401fc0
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x419a60
push 0x406270
mov eax, dword fs:[0]
push eax
sub esp, 0xac0
mov eax, dword [0x41b074]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, edx
mov byte [ebp - 0xaa9], 0
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x7e
xor esi, esi
push esi
lea ecx, [ebp - 0x9e]
push ecx
call fcn.00406a10
add esp, 0xc
mov dword [ebp - 0xab0], esi
mov dword [ebp - 0xabc], esi
mov dword [ebp - 0xac0], esi
mov dword [ebp - 0xac4], esi
mov dword [ebp - 0xab8], esi
call fcn.004019c0
mov esi, eax
test esi, esi
jne 0x40204e
xor al, al
jmp 0x402282
lea edx, [ebp - 0xacc]
push edx
push str.SeDebugPrivilege
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x402047
lea ecx, [ebp - 0xacc]
call fcn.004018b0
test eax, eax
je 0x402047
mov dword [ebp - 4], 0
push esi
push 0
push 0x2000000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0xac4], eax
test eax, eax
je 0x402270
lea ecx, [ebp - 0xab8]
push ecx
push 0x2000000
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x402270
mov edx, dword [ebp - 0xab8]
push edx
call dword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
test eax, eax
je 0x402270
mov dword [ebp - 0xac0], 1
mov edx, str.MsChapV2:Username
mov ecx, edi
call fcn.004046b0
mov esi, eax
mov dword [ebp - 0xab0], esi
test esi, esi
je 0x402251
cmp word [esi], 0
je 0x402251
mov edx, str.MsChapV2:Password
mov ecx, edi
call fcn.004046b0
mov dword [ebp - 0xabc], eax
test eax, eax
je 0x402249
cmp word [eax], 0
je 0x402249
xor esi, esi
mov dword [ebp - 0xab4], esi
jmp 0x402130
mov edi, dword [0x42a38c]
cmp esi, dword [edi]
jae 0x402270
xor eax, eax
mov word [ebp - 0x2a8], ax
push 0x206
push eax
lea ecx, [ebp - 0x2a6]
push ecx
call fcn.00406a10
add esp, 0xc
imul esi, esi, 0x214
lea eax, [esi + edi + 8]
lea esi, [ebp - 0xa0]
call fcn.00404660
lea edx, [ebp - 0x2a8]
push edx
push ebx
mov edi, esi
call fcn.00402300
add esp, 8
lea edx, [ebp - 0xaa8]
test eax, eax
jne 0x40219b
mov eax, esi
push eax
push ebx
push str.Unable_to_get_profile_guid_of__s_on_NIC__s_n
jmp 0x402225
lea ecx, [ebp - 0x2a8]
push ecx
push ebx
push str.Profile_Guid_for_Wlan__s_is__s_n
call fcn.00401000
add esp, 0xc
lea eax, [ebp - 0xaa8]
call fcn.004034f0
lea edx, [ebp - 0x2a8]
push edx
mov edx, dword [ebp - 0xabc]
mov ecx, dword [ebp - 0xab0]
call fcn.00401b30
add esp, 4
lea edx, [ebp - 0xaa8]
test eax, eax
je 0x402218
mov byte [ebp - 0xaa9], 1
lea eax, [ebp - 0xa0]
push eax
push ebx
push str.Saved_credentials_for_WLAN__s_on_NIC__s_successfully._n
call fcn.00401000
add esp, 0xc
lea eax, [ebp - 0xaa8]
call fcn.004034f0
inc dword [ebp - 0xab4]
mov esi, dword [ebp - 0xab4]
jmp 0x402130
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push str.Failed_to_save_credentials_for_WLAN__s_on_NIC__s._n
call fcn.00401000
add esp, 0xc
lea eax, [ebp - 0xaa8]
call fcn.00403510
inc dword [ebp - 0xab4]
mov esi, dword [ebp - 0xab4]
jmp 0x402130
push esi
push str.An_empty_password_for_User__s_is_invalid._n
jmp 0x402257
push ebx
push str.An_empty_username_for_WLAN__s_is_invalid._n
lea edx, [ebp - 0xaa8]
call fcn.00401000
add esp, 8
lea eax, [ebp - 0xaa8]
call fcn.00403510
mov dword [ebp - 4], 0xfffffffe
call fcn.0040229e
mov al, byte [ebp - 0xaa9]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00404b74
mov esp, ebp
pop ebp
ret