Function at 0x4224b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48e9f2
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ad650]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00454183
xor ecx, ecx
xor ebp, ebp
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4224fb
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov dword [esp + 0xa8], ebp
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42252c
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov ebx, 1
mov byte [esp + 0xa8], bl
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422562
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0xa8], 2
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422594
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0xa8], 3
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4225c6
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0xa8], 4
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4225f8
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
push 0x8fc
mov byte [esp + 0xac], 5
call fcn.0045bffd
cmp eax, ebp
je 0x42262d
push 0x8fc
push eax
lea ecx, [esp + 0x28]
call fcn.00405e60
push 0x8fe
call fcn.0045bffd
cmp eax, ebp
je 0x42264a
push 0x8fe
push eax
lea ecx, [esp + 0x38]
call fcn.00405e60
push 0x900
call fcn.0045bffd
cmp eax, ebp
je 0x422667
push 0x900
push eax
lea ecx, [esp + 0x3c]
call fcn.00405e60
push 0x8fd
call fcn.0045bffd
cmp eax, ebp
je 0x422684
push 0x8fd
push eax
lea ecx, [esp + 0x2c]
call fcn.00405e60
push 0x8ff
call fcn.0045bffd
cmp eax, ebp
je 0x4226a1
push 0x8ff
push eax
lea ecx, [esp + 0x24]
call fcn.00405e60
push 0x901
call fcn.0045bffd
cmp eax, ebp
je 0x4226be
push 0x901
push eax
lea ecx, [esp + 0x30]
call fcn.00405e60
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4226d8
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
mov byte [esp + 0xa8], 6
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42270a
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0xa8], 7
call fcn.00454183
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42273c
push 0x80004005
call fcn.00406520
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x3c]
call fcn.0040c2c0
mov byte [esp + 0xa8], 9
mov eax, dword [0x4b1e04]
dec eax
cmp eax, dword [0x4aec28]
jge 0x42277f
cmp eax, ebp
jl 0x42277f
mov ecx, dword [0x4aec20]
je 0x422781
sub eax, ebx
mov ecx, dword [ecx]
jne 0x422777
jmp 0x422781
xor ecx, ecx
lea eax, [ecx + 8]
lea esi, [esp + 0x3c]
call fcn.0040c670
lea esi, [edi + 0xdc]
lea eax, [esp + 0x3c]
call fcn.0040c670
mov ecx, dword [esp + 0x54]
mov edx, dword [edi + 0xecc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebp
push ecx
push 0xf1
push edx
call esi
mov eax, dword [esp + 0x58]
mov ecx, dword [edi + 0x1a8]
push ebp
push eax
push 0xf1
push ecx
call esi
mov ecx, edi
call fcn.00424ce0
push ebp
cmp dword [esp + 0x60], ebx
jne 0x422806
mov edx, dword [edi + 0x1070]
push ebx
push 0xf1
push edx
mov dword [edi + 0x158c], ebx
call esi
mov eax, dword [edi + 0x101c]
push ebp
push ebp
push 0xf1
push eax
call esi
mov ecx, edi
call fcn.00425190
jmp 0x42282b
mov ecx, dword [edi + 0x1070]
push ebp
push 0xf1
push ecx
call esi
mov edx, dword [edi + 0x101c]
push ebp
push ebx
push 0xf1
push edx
call esi
mov dword [edi + 0x158c], ebx
lea eax, [esp + 0x40]
push eax
mov ecx, eax
call fcn.00435210
lea ecx, [esp + 0x50]
add esp, 4
push ecx
call fcn.00435210
lea edx, [esp + 0x40]
add esp, 4
push edx
mov ecx, edx
call fcn.00435210
lea eax, [esp + 0x78]
add esp, 4
push eax
mov ecx, eax
call fcn.00435210
lea ecx, [esp + 0x50]
add esp, 4
push ecx
call fcn.004348f0
add esp, 4
lea edx, [esp + 0x3c]
lea ecx, [edi + 0x137c]
push edx
call fcn.00405ba0
lea eax, [esp + 0x40]
lea ecx, [edi + 0x1380]
push eax
call fcn.00405ba0
lea edx, [esp + 0x3c]
lea ecx, [edi + 0x1364]
push edx
call fcn.00405ba0
lea eax, [esp + 0x4c]
lea ebx, [edi + 0x1368]
push eax
mov ecx, ebx
call fcn.00405ba0
lea edx, [esp + 0x40]
lea ecx, [edi + 0x136c]
push edx
call fcn.00405ba0
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x30]
call fcn.00405ba0
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x18]
call fcn.00405ba0
mov eax, dword [esp + 0x60]
lea edx, [eax - 1]
cmp edx, 3
ja 0x4228f5
dec eax
mov dword [edi + 0x1378], eax
jmp 0x4228fb
mov dword [edi + 0x1378], ebp
lea eax, [esp + 0x50]
lea ecx, [edi + 0x13d8]
push eax
call fcn.00405ba0
mov eax, dword [esp + 0x14]
mov ecx, str.NONE
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42293a
cmp dx, bp
je 0x422936
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42293a
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x422914
xor eax, eax
jmp 0x42293f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
sete al
test al, al
je 0x422ab4
mov ecx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push ecx
call esi
mov ebp, eax
sub ebp, 1
js 0x42297b
mov edx, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push edx
call esi
sub ebp, 1
jns 0x422965
mov eax, dword [esp + 0x20]
mov ecx, dword [edi + 0x12dc]
push eax
push 0
push 0x143
push ecx
call esi
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push edx
call esi
mov eax, dword [edi + 0xfc8]
push 0
push 0
push 0x14e
push eax
call esi
mov eax, dword [esp + 0x2c]
mov ecx, str.NONE
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4229e6
test dx, dx
je 0x4229e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4229e6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4229c0
xor eax, eax
jmp 0x4229eb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
lea ecx, [edi + 0x1310]
test al, al
je 0x422a4e
push 0
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x11b0]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x1384]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x188]
call fcn.0045ab7a
push 1
call fcn.00423200
jmp 0x422f8a
push 5
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x11b0]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x1384]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x188]
call fcn.0045ab7a
mov ecx, dword [edi + 0xfc8]
push 0
push 0
push 0x14e
push ecx
call esi
push 1
call fcn.00423200
jmp 0x422f8a
lea edx, [esp + 0x14]
push 0x49ad80
push edx
call fcn.0041f550
add esp, 8
test al, al
jne 0x422e31
lea eax, [esp + 0x14]
push 0x499698
push eax
call fcn.0041f550
add esp, 8
test al, al
jne 0x422e31
lea ecx, [esp + 0x14]
push str.WPA_PSK_WPA2_PSK
push ecx
call fcn.0041f550
add esp, 8
test al, al
je 0x422bad
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push edx
call esi
mov ebp, eax
sub ebp, 1
js 0x422b36
jmp 0x422b20
mov eax, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push eax
call esi
sub ebp, 1
jns 0x422b20
mov ecx, dword [esp + 0x1c]
mov edx, dword [edi + 0x12dc]
push ecx
push 0
push 0x143
push edx
call esi
mov eax, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push eax
call esi
push 5
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x188]
call fcn.0045ab7a
mov ecx, dword [edi + 0xfc8]
push 0
push 2
push 0x14e
push ecx
call esi
mov edx, dword [edi + 0x154]
push 0
push 0x40
push 0xc5
push edx
call esi
jmp 0x422f8a
lea eax, [esp + 0x14]
push str.WPA_WPA2
push eax
call fcn.0041f550
add esp, 8
test al, al
je 0x422f8a
mov ecx, dword [edi + 0x154]
push 0
push 0x80
push 0xc5
push ecx
call esi
lea edx, [esp + 0x70]
push edx
lea ecx, [esp + 0x1c]
call fcn.00405ba0
lea eax, [esp + 0x74]
lea ecx, [edi + 0xa0c]
push eax
call fcn.00405ba0
lea eax, [edi + 0x12bc]
call fcn.00428400
mov ebp, eax
mov ebx, 1
sub ebp, ebx
js 0x422c25
mov ecx, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push ecx
call esi
sub ebp, ebx
jns 0x422c10
mov edx, dword [esp + 0x1c]
mov eax, dword [edi + 0x12dc]
push edx
push 0
push 0x143
push eax
call esi
mov ecx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push ecx
call esi
mov edx, dword [edi + 0xfc8]
push 0
push 3
push 0x14e
push edx
call esi
cmp dword [0x4b1de4], ebx
jne 0x422d15
lea eax, [esp + 0x18]
push str.PEAP_MSCHAPV2
push eax
call fcn.0041f550
add esp, 8
test al, al
je 0x422d15
call fcn.004237f0
push 5
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x188]
call fcn.0045ab7a
mov ecx, dword [edi + 0x8c8]
push 0
push 0
push 0x14e
push ecx
call esi
push 5
lea ecx, [edi + 0x900]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x8a8]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0xa64]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0xa10]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0xb70]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0xc7c]
call fcn.0045ab7a
jmp 0x422f8a
cmp dword [0x4b1de8], ebx
jne 0x422f8a
lea edx, [esp + 0x18]
push 0x4999c8
push edx
call fcn.0041f550
add esp, 8
test al, al
je 0x422f8a
push ecx
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0xa0], esp
push eax
call fcn.00405cb0
push ecx
mov byte [esp + 0xb0], 0xa
lea edx, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0xa0], esp
push edx
call fcn.00405cb0
push ecx
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
mov byte [esp + 0xb8], 0xb
call fcn.00405cb0
mov byte [esp + 0xb4], 9
call fcn.004527a0
lea ebp, [edi + 0xc7c]
add esp, 0xc
mov ecx, ebp
call fcn.00405b20
push 0
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0x188]
call fcn.0045ab7a
mov ecx, dword [edi + 0x8c8]
push 0
push ebx
push 0x14e
push ecx
call esi
push 5
lea ecx, [edi + 0x900]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x8a8]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0xa64]
call fcn.0045ab7a
push 0
lea ecx, [edi + 0xa10]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0xb70]
call fcn.0045ab7a
push 5
mov ecx, ebp
call fcn.0045ab7a
jmp 0x422f8a
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push edx
call esi
mov ebp, eax
sub ebp, 1
js 0x422e66
lea ebx, [ebx]
mov eax, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push eax
call esi
sub ebp, 1
jns 0x422e50
cmp dword [esp + 0x5c], 0
jne 0x422e82
mov ecx, dword [esp + 0x24]
mov edx, dword [edi + 0x12dc]
push ecx
push 0
push 0x143
push edx
jmp 0x422e95
mov eax, dword [esp + 0x28]
mov ecx, dword [edi + 0x12dc]
push eax
push 0
push 0x143
push ecx
call esi
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push edx
call esi
mov eax, dword [edi + 0xfc8]
push 0
push 1
push 0x14e
push eax
call esi
push 5
lea ecx, [edi + 0x1310]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x11b0]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x1384]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x60c]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x134]
call fcn.0045ab7a
push 5
lea ecx, [edi + 0x188]
call fcn.0045ab7a
push 1
call fcn.00423200
mov eax, dword [ebx]
push ecx
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov ebp, esp
push eax
call fcn.00405c40
add eax, 0x10
add esp, 4
mov dword [ebp], eax
call fcn.004344b0
add esp, 4
cmp eax, 1
jne 0x422f3e
push 0
push 0
jmp 0x422f75
cmp eax, 2
jne 0x422f55
mov edx, dword [edi + 0x13a4]
push 0
push 1
push 0x14e
push edx
jmp 0x422f81
cmp eax, 3
jne 0x422f6c
mov eax, dword [edi + 0x13a4]
push 0
push 2
push 0x14e
push eax
jmp 0x422f81
cmp eax, 4
jne 0x422f83
push 0
push 3
mov ecx, dword [edi + 0x13a4]
push 0x14e
push ecx
call esi
mov ecx, edi
call fcn.004280f0
mov eax, dword [esp + 0x64]
mov ecx, str.5Ghz
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x422fb9
test dx, dx
je 0x422fb5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x422fb9
add eax, 4
add ecx, 4
test dx, dx
jne 0x422f93
xor eax, eax
jmp 0x422fbe
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
push 0
test al, al
je 0x422fd9
mov edx, dword [edi + 0xd14]
push 1
push 0x14e
push edx
jmp 0x422fe7
mov eax, dword [edi + 0xd14]
push 0
push 0x14e
push eax
call esi
mov edx, dword [edi + 0x12dc]
lea ecx, [edi + 0x1374]
push ecx
push 0
push 0
push 0x147
push edx
lea ebp, [edi + 0x12bc]
call esi
push eax
mov ecx, ebp
call fcn.00455220
mov ecx, dword [edi + 0xfc8]
lea eax, [edi + 0x1370]
push eax
push 0
push 0
push 0x147
push ecx
call esi
push eax
lea ecx, [edi + 0xfa8]
call fcn.00455220
mov eax, dword [edi + 0xd14]
lea edx, [edi + 0xd48]
push edx
push 0
push 0
push 0x147
push eax
call esi
push eax
lea ecx, [edi + 0xcf4]
call fcn.00455220
push 1
mov ecx, ebp
call fcn.0045abbc
push 0
mov ecx, edi
call fcn.00457327
lea ecx, [esp + 0x3c]
call fcn.0040c4b0
mov byte [esp + 0xa8], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42309d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 6
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4230c5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 5
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4230ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 4
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423115
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42313d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 2
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423165
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 1
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42318d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 0
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4231b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xa8], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4231e0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret