Function at 0x516180
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a33b0
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x6340c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x64], ebx
mov esi, dword [0x634ba0]
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x68], esi
mov edi, esi
mov dword [ebp - 4], 0
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x6c], esi
lea ecx, [ebp - 0x40]
call fcn.005734f0
push 0
push 0xffffffffffffffff
push 0xc1
mov byte [ebp - 4], 3
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, dword [ebx + 0x160]
lea eax, [ebx + 0x118]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x28]
push eax
call fcn.005334e0
push eax
push str.groupName
lea ecx, [ebx + 0x118]
mov byte [ebp - 4], 4
call fcn.00565590
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x516272
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
cmp dword [ebx + 0x180], 8
lea ecx, [ebx + 0x16c]
mov eax, ecx
mov dword [ebp - 0x58], ecx
jb 0x51628b
mov eax, dword [ecx]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x5162d7
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x54], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x48], eax
test eax, eax
je 0x5162d7
push 0
push 0
push dword [ebp - 0x54]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x58]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x48]
cmove eax, ecx
jmp 0x5162d9
xor eax, eax
push eax
push str.networkName
lea ecx, [ebx + 0x118]
call fcn.00565290
mov edx, dword [ebp - 0x44]
lea ecx, [ebx + 0x16c]
call fcn.00474f70
test al, al
je 0x516359
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x54], eax
test eax, eax
je 0x516346
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x54]
cmove eax, ecx
jmp 0x516348
xor eax, eax
push eax
push str.newNetworkName
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
mov eax, dword [ebx + 0x188]
add esp, 4
sub eax, 0
je 0x516c90
sub eax, 1
je 0x51660d
sub eax, 1
jne 0x516e86
push str.wwan
push str.networkMedia
lea ecx, [ebx + 0x118]
call fcn.00565290
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x54], eax
test eax, eax
je 0x516433
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x54]
cmove eax, ecx
jmp 0x516435
xor eax, eax
push eax
push str.wwanAccessString
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x516522
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x54], eax
test eax, eax
je 0x516504
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x54]
cmove eax, ecx
jmp 0x516506
xor eax, eax
push eax
push str.wwanUsername
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x5165f3
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x54], eax
test eax, eax
je 0x5165d5
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x54]
cmove eax, ecx
jmp 0x5165d7
xor eax, eax
push eax
push str.wwanPassword
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
push str.manual
push str.wwanConnectionMode
lea ecx, [ebx + 0x118]
call fcn.00565290
jmp 0x516e86
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov esi, eax
mov dword [ebp - 0x58], esi
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push esi
push dword [ebx + 0x30]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov esi, esp
test esi, esi
je 0x51669e
push 0
push 0
push dword [ebp - 0x48]
mov byte [esi], 0
push esi
push 0xffffffffffffffff
push dword [ebp - 0x58]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x5166a0
xor esi, esi
push esi
push str.ssid
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x58]
call fcn.004c59d6
add esp, 4
push 0
push 0
push 0x147
push dword [ebx + 0x7c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebx + 0x7c]
call fcn.0044ea10
mov esi, dword [ebp - 0x68]
cmp dword [esi - 0xc], 0
lea eax, [esi - 0xc]
push ecx
mov ecx, esp
jl 0x5166f1
mov dword [ecx], esi
lock inc dword [eax]
jmp 0x5166fe
mov eax, dword [0x634ba0]
push esi
mov dword [ecx], eax
call fcn.004435e0
call fcn.005155a0
push eax
push str.associationAndEncryptionMode
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x44], eax
call fcn.00565290
push str.openNoEncryption
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x516bda
push str.wpa3Open
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x516bda
push str.Enterprise
push dword [ebp - 0x44]
call fcn.004c8d90
add esp, 8
test eax, eax
jne 0x516b7e
push str.open1xDynamicWep
push dword [ebp - 0x44]
call fcn.004d88a0
add esp, 8
test eax, eax
je 0x516b7e
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [ebx + 0x185], 1
mov dword [ebp - 0x48], eax
jne 0x516bda
push 0x5e4434
push dword [ebp - 0x44]
call fcn.004c8d90
add esp, 8
test eax, eax
jne 0x51690d
cmp byte [ebx + 0x184], 0
mov eax, dword [ebx + 0x34]
push 0
push 0xffffffffffffffff
push 0xc1
push eax
je 0x51686c
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x516860
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
mov ecx, str.wpaAsciiKey
jmp 0x516b64
xor eax, eax
mov ecx, str.wpaAsciiKey
jmp 0x516b64
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x516901
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
mov ecx, str.wpaHexKey
jmp 0x516b64
xor eax, eax
mov ecx, str.wpaHexKey
jmp 0x516b64
mov eax, dword [ebp - 0x48]
cmp eax, 5
je 0x516a66
cmp eax, 0xa
je 0x516a66
cmp eax, 0xd
je 0x516955
cmp eax, 0x1a
je 0x516955
push 0x670868
lea ecx, [ebp - 0x40]
call fcn.00443fb0
push eax
push dword [ebx + 0x44]
call dword [sym.imp.USER32.dll_SetWindowTextW]
lea ecx, [ebx + 0x118]
call fcn.00565280
xor ebx, ebx
jmp 0x516f54
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp byte [ebx + 0x184], 0
push dword [ebp - 0x44]
je 0x516a0b
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x5169ff
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
mov ecx, str.wepAscii128Key
jmp 0x516b64
xor eax, eax
mov ecx, str.wepAscii128Key
jmp 0x516b64
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x516a5a
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
mov ecx, str.wepHex128Key
jmp 0x516b64
xor eax, eax
mov ecx, str.wepHex128Key
jmp 0x516b64
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c5d8d
add esp, 4
mov dword [ebp - 0x44], eax
push 0
push 0xffffffffffffffff
push 0xc1
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
push eax
push dword [ebp - 0x44]
push dword [ebx + 0x34]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp byte [ebx + 0x184], 0
push dword [ebp - 0x44]
je 0x516b16
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x516b0d
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
mov ecx, str.wepAscii40Key
jmp 0x516b64
xor eax, eax
mov ecx, str.wepAscii40Key
jmp 0x516b64
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x50], eax
test eax, eax
je 0x516b5d
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x44]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x50]
cmove eax, ecx
jmp 0x516b5f
xor eax, eax
mov ecx, str.wepHex40Key
push eax
push ecx
lea ecx, [ebx + 0x118]
call fcn.00565290
push dword [ebp - 0x44]
call fcn.004c59d6
add esp, 4
jmp 0x516bda
push 0
push 0
push 0x147
push dword [ebx + 0x78]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebx + 0x78]
call fcn.0044ea10
push ecx
lea eax, [ebp - 0x5c]
mov ecx, esp
push eax
call fcn.0044e290
call fcn.00515110
push eax
push str.eapMethod
lea ecx, [ebx + 0x118]
call fcn.00565290
mov ecx, ebx
call fcn.00514a00
push eax
push str.credentialType
lea ecx, [ebx + 0x118]
call fcn.00565290
mov edi, dword [ebp - 0x5c]
push 0
push 0
push 0xf0
push dword [ebx + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 0x5dc194
test eax, eax
mov edx, 0x5dc18c
mov ecx, ebx
cmove ecx, edx
push ecx
mov ecx, dword [ebp - 0x60]
push str.hidden
call fcn.00565290
mov eax, dword [ebp - 0x64]
push 0
push 0
push 0xf0
push dword [eax + 0x88]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
mov ecx, ebx
mov eax, 0x5dc18c
cmove ecx, eax
push ecx
mov ecx, dword [ebp - 0x60]
push str.machConn
call fcn.00565290
mov eax, dword [ebp - 0x64]
push 0
push 0
push 0xf0
push dword [eax + 0x8c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x60]
test eax, eax
mov eax, 0x5dc18c
cmove ebx, eax
push ebx
push str.connectAuto
call fcn.00565290
mov ebx, dword [ebp - 0x64]
mov ecx, ebx
call fcn.005182c0
push eax
push str.randMac
lea ecx, [ebx + 0x118]
call fcn.00565290
jmp 0x516e86
push 0
push 0
push 0x147
push dword [ebx + 0x7c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x634ba0]
mov dword [ebp - 0x58], edx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
push ecx
push eax
lea ecx, [ebx + 0x7c]
call fcn.0044ea10
mov esi, dword [ebp - 0x58]
cmp dword [esi - 0xc], 0
lea eax, [esi - 0xc]
push ecx
mov ecx, esp
mov dword [ebp - 0x48], eax
jl 0x516cd5
mov dword [ecx], esi
lock inc dword [eax]
jmp 0x516ce2
mov eax, dword [0x634ba0]
push esi
mov dword [ecx], eax
call fcn.004435e0
call fcn.005153f0
push eax
push str.wiredSecurityMode
lea ecx, [ebx + 0x118]
call fcn.00565290
mov ecx, dword [ebx + 0x160]
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00532e50
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00443fb0
push eax
push esi
call fcn.004d10a6
add esp, 8
mov byte [ebp - 4], 5
test eax, eax
mov eax, dword [ebp - 0x14]
setne byte [ebp - 0x49]
cmp eax, 0x10
jb 0x516d3f
inc eax
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
cmp byte [ebp - 0x49], 0
je 0x516e5c
push 0
push 0
push 0x147
push dword [ebx + 0x78]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebx + 0x78]
call fcn.0044ea10
mov edi, dword [ebp - 0x5c]
cmp dword [edi - 0xc], 0
lea eax, [edi - 0xc]
push ecx
mov ecx, esp
jl 0x516d7e
mov dword [ecx], edi
lock inc dword [eax]
jmp 0x516d8b
mov eax, dword [0x634ba0]
push edi
mov dword [ecx], eax
call fcn.004435e0
call fcn.00515110
push eax
push str.eapMethod
lea ecx, [ebx + 0x118]
call fcn.00565290
mov ecx, ebx
call fcn.00514a00
push eax
push str.credentialType
lea ecx, [ebx + 0x118]
call fcn.00565290
mov ecx, dword [ebx + 0x160]
lea eax, [ebp - 0x28]
push 2
push eax
call fcn.00532e50
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.00443fb0
push eax
push esi
call fcn.004d10a6
add esp, 8
mov byte [ebp - 4], 5
test eax, eax
mov eax, dword [ebp - 0x14]
sete byte [ebp - 0x49]
cmp eax, 0x10
jb 0x516e00
inc eax
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
cmp byte [ebp - 0x49], 0
je 0x516e5c
push 0
push 0
push 0xf0
push dword [ebx + 0x6c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x516e31
push str.AES_GCM_128
push str.macsecCipher
lea ecx, [ebx + 0x118]
call fcn.00565290
push 0
push 0
push 0xf0
push dword [ebx + 0x70]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x516e5c
push str.AES_GCM_256
push str.macsecCipher
lea ecx, [ebx + 0x118]
call fcn.00565290
add esi, 0xfffffff4
mov byte [ebp - 4], 3
cmp esi, 0x634ba4
je 0x516e83
mov ecx, dword [ebp - 0x48]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x516e83
push ecx
call fcn.004c59d6
add esp, 4
mov esi, dword [ebp - 0x50]
cmp byte [ebx + 0x18c], 0
je 0x516f44
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 8
lea edx, [ebp - 0x28]
mov ecx, dword [ebx + 0xf4]
mov ecx, dword [ecx]
call fcn.00521870
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov dword [ebp - 0x58], eax
jb 0x516ed1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x516f16
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x48], eax
call fcn.004c6740
mov eax, esp
mov dword [ebp - 0x54], eax
test eax, eax
je 0x516f16
push 0
push 0
push dword [ebp - 0x48]
mov byte [eax], 0
push eax
push 0xffffffffffffffff
push dword [ebp - 0x58]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x54]
jmp 0x516f18
xor eax, eax
push eax
push str.runScriptSpec
lea ecx, [ebx + 0x118]
call fcn.00565290
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x516f44
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
push 1
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_EndDialog]
mov ebx, 1
lea ecx, [ebp - 0x40]
call fcn.005734b0
mov eax, dword [ebp - 0x6c]
lea ecx, [eax - 0xc]
cmp ecx, 0x634ba4
je 0x516f82
lea ecx, [eax - 0xc]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x516f82
push ecx
call fcn.004c59d6
add esp, 4
lea eax, [edi - 0xc]
or ecx, 0xffffffff
cmp eax, 0x634ba4
je 0x516fa9
add edi, 0xfffffff4
mov eax, ecx
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x516fa9
push edi
call fcn.004c59d6
add esp, 4
or ecx, 0xffffffff
lea eax, [esi - 0xc]
cmp eax, 0x634ba4
je 0x516fc8
add esi, 0xfffffff4
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x516fc8
push esi
call fcn.004c59d6
add esp, 4
mov eax, ebx
lea esp, [ebp - 0x80]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c59c5
mov esp, ebp
pop ebp
ret