Function at 0x516ff0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a3424
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x6340c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x64], ebx
mov edi, dword [0x634ba0]
mov dword [ebp - 0x58], edi
mov dword [ebp - 4], 0
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x68], edi
lea ecx, [ebp - 0x40]
call fcn.005734f0
push 0
push 0
push 0x147
mov byte [ebp - 4], 3
push dword [ebx + 0x7c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x58]
push ecx
push eax
lea ecx, [ebx + 0x7c]
call fcn.0044ea10
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov esi, eax
mov dword [ebp - 0x44], esi
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push esi
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, dword [ebx + 0x160]
lea eax, [ebp - 0x28]
lea esi, [ebx + 0x100]
push eax
mov dword [ebp - 0x60], esi
call fcn.005334e0
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
jb 0x5170da
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x517126
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x4c], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x48], eax
test eax, eax
je 0x517126
push 0
push 0
push dword [ebp - 0x4c]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x54]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x48]
cmove eax, ecx
jmp 0x517128
xor eax, eax
push eax
push str.groupName
mov ecx, esi
call fcn.00565290
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x517154
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x51719e
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x5171a0
xor eax, eax
push eax
push str.networkName
mov ecx, esi
call fcn.00565290
mov edx, dword [ebp - 0x44]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x48], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5171c0
sub ecx, dword [ebp - 0x48]
sar ecx, 1
push ecx
push edx
lea ecx, [ebx + 0x130]
call fcn.004459d0
push dword [ebp - 0x44]
call fcn.004c59d6
mov eax, dword [ebx + 0x188]
add esp, 4
sub eax, 0
je 0x517b6a
sub eax, 1
je 0x5174f8
sub eax, 1
jne 0x517d6e
push str.wwan
push str.networkMedia
mov ecx, esi
call fcn.00565290
cmp dword [ebx + 0x158], 0
je 0x517295
cmp dword [ebx + 0x15c], 8
lea eax, [ebx + 0x148]
mov dword [ebp - 0x54], eax
jb 0x51723a
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x517286
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x517286
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x54]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x517288
xor eax, eax
push eax
push str.subscriberId
mov ecx, esi
call fcn.00565290
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x51732e
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x517330
xor eax, eax
push eax
push str.wwanAccessString
mov ecx, esi
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x517415
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x5173fb
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x5173fd
xor eax, eax
push eax
push str.wwanUsername
mov ecx, esi
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x5174e2
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x5174c8
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x5174ca
xor eax, eax
push eax
push str.wwanPassword
mov ecx, esi
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push str.manual
push str.wwanConnectionMode
mov ecx, esi
call fcn.00565290
jmp 0x517d6e
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x517591
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
cmove eax, ecx
jmp 0x517593
xor eax, eax
push eax
push str.ssid
mov ecx, esi
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
mov ecx, esi
push str.wifi
push str.networkMedia
call fcn.00565290
mov esi, dword [ebp - 0x58]
cmp dword [esi - 0xc], 0
lea eax, [esi - 0xc]
push ecx
mov ecx, esp
jl 0x5175d2
mov dword [ecx], esi
lock inc dword [eax]
jmp 0x5175df
mov eax, dword [0x634ba0]
push esi
mov dword [ecx], eax
call fcn.004435e0
call fcn.005155a0
push eax
push str.associationAndEncryptionMode
lea ecx, [ebx + 0x100]
mov dword [ebp - 0x44], eax
call fcn.00565290
push str.openNoEncryption
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x517aaa
push str.wpa3Open
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x517aaa
push str.Enterprise
push dword [ebp - 0x44]
call fcn.004c8d90
add esp, 8
test eax, eax
jne 0x517a4e
push str.open1xDynamicWep
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x517a4e
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x5e4434
push dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
call fcn.004c8d90
add esp, 8
test eax, eax
jne 0x5177f8
cmp byte [ebx + 0x184], al
je 0x517747
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff8
cmp eax, 0x37
ja 0x517817
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x51773b
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, str.wpaAsciiKey
cmove ebx, ecx
jmp 0x517a34
xor ebx, ebx
mov eax, str.wpaAsciiKey
jmp 0x517a34
cmp dword [ebp - 0x54], 0x40
jne 0x517817
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x5177ec
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, str.wpaHexKey
cmove ebx, ecx
jmp 0x517a34
xor ebx, ebx
mov eax, str.wpaHexKey
jmp 0x517a34
mov eax, dword [ebp - 0x54]
cmp eax, 5
je 0x517942
cmp eax, 0xa
je 0x517942
cmp eax, 0xd
je 0x51783d
cmp eax, 0x1a
je 0x51783d
push 0x670868
lea ecx, [ebp - 0x40]
call fcn.00443fb0
push eax
push dword [ebx + 0x44]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [ebp - 0x60]
call fcn.00565280
xor ebx, ebx
jmp 0x517e3f
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp byte [ebx + 0x184], 0
push dword [ebp - 0x44]
je 0x5178ed
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x5178e1
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, str.wepAscii128Key
cmove ebx, ecx
jmp 0x517a34
xor ebx, ebx
mov eax, str.wepAscii128Key
jmp 0x517a34
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x517936
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, str.wepHex128Key
cmove ebx, ecx
jmp 0x517a34
xor ebx, ebx
mov eax, str.wepHex128Key
jmp 0x517a34
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp byte [ebx + 0x184], 0
push dword [ebp - 0x44]
je 0x5179ec
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x5179e3
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, str.wepAscii40Key
cmove ebx, ecx
jmp 0x517a34
xor ebx, ebx
mov eax, str.wepAscii40Key
jmp 0x517a34
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x517a2d
push 0
push 0
push dword [ebp - 0x48]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
cmove ebx, ecx
jmp 0x517a2f
xor ebx, ebx
mov eax, str.wepHex40Key
mov ecx, dword [ebp - 0x60]
push ebx
push eax
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
mov ebx, dword [ebp - 0x64]
add esp, 4
jmp 0x517aaa
push 0
push 0
push 0x147
push dword [ebx + 0x78]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebx + 0x78]
call fcn.0044ea10
push ecx
lea eax, [ebp - 0x5c]
mov ecx, esp
push eax
call fcn.0044e290
call fcn.00515110
push eax
push str.eapMethod
lea ecx, [ebx + 0x100]
call fcn.00565290
mov ecx, ebx
call fcn.00514a00
push eax
push str.credentialType
lea ecx, [ebx + 0x100]
call fcn.00565290
mov edi, dword [ebp - 0x5c]
push 0
push 0
push 0xf0
push dword [ebx + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 0x5dc194
test eax, eax
mov edx, 0x5dc18c
mov ecx, ebx
cmove ecx, edx
push ecx
mov ecx, dword [ebp - 0x60]
push str.hidden
call fcn.00565290
mov eax, dword [ebp - 0x64]
push 0
push 0
push 0xf0
push dword [eax + 0x88]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov ecx, ebx
mov eax, 0x5dc18c
cmove ecx, eax
push ecx
mov ecx, dword [ebp - 0x60]
push str.machConn
call fcn.00565290
mov eax, dword [ebp - 0x64]
push 0
push 0
push 0xf0
push dword [eax + 0x8c]
lea ebx, [eax + 0x118]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov ecx, 0x5dc18c
mov eax, 0x5dc194
cmove eax, ecx
mov ecx, ebx
push eax
push str.connectAuto
call fcn.00565290
mov ebx, dword [ebp - 0x64]
mov ecx, ebx
call fcn.005182c0
push eax
push str.randMac
lea ecx, [ebx + 0x100]
call fcn.00565290
jmp 0x517d71
push str.wired
push str.networkMedia
mov ecx, esi
call fcn.00565290
push 0
push 0
push 0x147
push dword [ebx + 0x7c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x634ba0]
mov dword [ebp - 0x54], edx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
push ecx
push eax
lea ecx, [ebx + 0x7c]
call fcn.0044ea10
mov esi, dword [ebp - 0x54]
cmp dword [esi - 0xc], 0
lea eax, [esi - 0xc]
push ecx
mov ecx, esp
mov dword [ebp - 0x48], eax
jl 0x517bc0
mov dword [ecx], esi
lock inc dword [eax]
jmp 0x517bcd
mov eax, dword [0x634ba0]
push esi
mov dword [ecx], eax
call fcn.004435e0
call fcn.005153f0
push eax
push str.wiredSecurityMode
lea ecx, [ebx + 0x100]
call fcn.00565290
mov ecx, dword [ebx + 0x160]
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00532e50
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00443fb0
push eax
push esi
call fcn.004d10a6
add esp, 8
mov byte [ebp - 4], 5
test eax, eax
mov eax, dword [ebp - 0x14]
setne byte [ebp - 0x4d]
cmp eax, 0x10
jb 0x517c2a
inc eax
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
cmp byte [ebp - 0x4d], 0
je 0x517d47
push 0
push 0
push 0x147
push dword [ebx + 0x78]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebx + 0x78]
call fcn.0044ea10
mov edi, dword [ebp - 0x5c]
cmp dword [edi - 0xc], 0
lea eax, [edi - 0xc]
push ecx
mov ecx, esp
jl 0x517c69
mov dword [ecx], edi
lock inc dword [eax]
jmp 0x517c76
mov eax, dword [0x634ba0]
push edi
mov dword [ecx], eax
call fcn.004435e0
call fcn.00515110
push eax
push str.eapMethod
lea ecx, [ebx + 0x100]
call fcn.00565290
mov ecx, ebx
call fcn.00514a00
push eax
push str.credentialType
lea ecx, [ebx + 0x100]
call fcn.00565290
mov ecx, dword [ebx + 0x160]
lea eax, [ebp - 0x28]
push 2
push eax
call fcn.00532e50
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.00443fb0
push eax
push esi
call fcn.004d10a6
add esp, 8
mov byte [ebp - 4], 5
test eax, eax
mov eax, dword [ebp - 0x14]
sete byte [ebp - 0x4d]
cmp eax, 0x10
jb 0x517ceb
inc eax
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
cmp byte [ebp - 0x4d], 0
je 0x517d47
push 0
push 0
push 0xf0
push dword [ebx + 0x6c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x517d1c
push str.AES_GCM_128
push str.macsecCipher
lea ecx, [ebx + 0x100]
call fcn.00565290
push 0
push 0
push 0xf0
push dword [ebx + 0x70]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x517d47
push str.AES_GCM_256
push str.macsecCipher
lea ecx, [ebx + 0x100]
call fcn.00565290
add esi, 0xfffffff4
mov byte [ebp - 4], 3
cmp esi, 0x634ba4
je 0x517d6e
mov ecx, dword [ebp - 0x48]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x517d6e
push ecx
call fcn.004c59d6
add esp, 4
mov esi, dword [ebp - 0x58]
cmp byte [ebx + 0x18c], 0
je 0x517e2f
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 8
lea edx, [ebp - 0x28]
mov ecx, dword [ebx + 0xf4]
mov ecx, dword [ecx]
call fcn.00521870
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov dword [ebp - 0x54], eax
jb 0x517dbc
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x517e01
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x517e01
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x54]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x4c]
jmp 0x517e03
xor eax, eax
push eax
push str.runScriptSpec
lea ecx, [ebx + 0x100]
call fcn.00565290
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x517e2f
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
push 1
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_EndDialog]
mov ebx, 1
lea ecx, [ebp - 0x40]
call fcn.005734b0
mov eax, dword [ebp - 0x68]
lea ecx, [eax - 0xc]
cmp ecx, 0x634ba4
je 0x517e6d
lea ecx, [eax - 0xc]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x517e6d
push ecx
call fcn.004c59d6
add esp, 4
lea eax, [edi - 0xc]
or ecx, 0xffffffff
cmp eax, 0x634ba4
je 0x517e94
add edi, 0xfffffff4
mov eax, ecx
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x517e94
push edi
call fcn.004c59d6
add esp, 4
or ecx, 0xffffffff
lea eax, [esi - 0xc]
cmp eax, 0x634ba4
je 0x517eb3
add esi, 0xfffffff4
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x517eb3
push esi
call fcn.004c59d6
add esp, 4
mov eax, ebx
lea esp, [ebp - 0x78]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c59c5
mov esp, ebp
pop ebp
ret