Function at 0x422940
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48fe92
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ae650]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00455695
xor ecx, ecx
xor ebp, ebp
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42298b
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x24], eax
mov dword [esp + 0xa8], ebp
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4229bc
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov ebx, 1
mov byte [esp + 0xa8], bl
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4229f2
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0xa8], 2
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422a24
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0xa8], 3
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422a56
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0xa8], 4
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422a88
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
push 0x8fc
mov byte [esp + 0xac], 5
call fcn.0045d52e
cmp eax, ebp
je 0x422abd
push 0x8fc
push eax
lea ecx, [esp + 0x2c]
call fcn.00405e80
push 0x8fe
call fcn.0045d52e
cmp eax, ebp
je 0x422ada
push 0x8fe
push eax
lea ecx, [esp + 0x38]
call fcn.00405e80
push 0x900
call fcn.0045d52e
cmp eax, ebp
je 0x422af7
push 0x900
push eax
lea ecx, [esp + 0x3c]
call fcn.00405e80
push 0x8fd
call fcn.0045d52e
cmp eax, ebp
je 0x422b14
push 0x8fd
push eax
lea ecx, [esp + 0x28]
call fcn.00405e80
cmp dword [0x4b2e14], 9
jne 0x422b3a
push 0x901
call fcn.0045d52e
cmp eax, ebp
je 0x422b3a
push 0x901
push eax
lea ecx, [esp + 0x28]
call fcn.00405e80
push 0x8ff
call fcn.0045d52e
cmp eax, ebp
je 0x422b57
push 0x8ff
push eax
lea ecx, [esp + 0x24]
call fcn.00405e80
push 0x901
call fcn.0045d52e
cmp eax, ebp
je 0x422b74
push 0x901
push eax
lea ecx, [esp + 0x30]
call fcn.00405e80
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422b8e
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
mov byte [esp + 0xa8], 6
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422bc0
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0xa8], 7
call fcn.00455695
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x422bf2
push 0x80004005
call fcn.00406550
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x3c]
call fcn.0040c350
mov byte [esp + 0xa8], 9
mov eax, dword [0x4b2e08]
dec eax
cmp eax, dword [0x4afc28]
jge 0x422c38
cmp eax, ebp
jl 0x422c38
mov ecx, dword [0x4afc20]
je 0x422c3a
lea ecx, [ecx]
sub eax, ebx
mov ecx, dword [ecx]
jne 0x422c30
jmp 0x422c3a
xor ecx, ecx
lea eax, [ecx + 8]
lea esi, [esp + 0x3c]
call fcn.0040c700
lea esi, [edi + 0xdc]
lea eax, [esp + 0x3c]
call fcn.0040c700
mov ecx, dword [esp + 0x54]
mov edx, dword [edi + 0xecc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebp
push ecx
push 0xf1
push edx
call esi
mov eax, dword [esp + 0x58]
mov ecx, dword [edi + 0x1a8]
push ebp
push eax
push 0xf1
push ecx
call esi
mov ecx, edi
call fcn.004251e0
push ebp
cmp dword [esp + 0x60], ebx
jne 0x422cbf
mov edx, dword [edi + 0x1070]
push ebx
push 0xf1
push edx
mov dword [edi + 0x158c], ebx
call esi
mov eax, dword [edi + 0x101c]
push ebp
push ebp
push 0xf1
push eax
call esi
mov ecx, edi
call fcn.00425690
jmp 0x422ce4
mov ecx, dword [edi + 0x1070]
push ebp
push 0xf1
push ecx
call esi
mov edx, dword [edi + 0x101c]
push ebp
push ebx
push 0xf1
push edx
call esi
mov dword [edi + 0x158c], ebx
lea eax, [esp + 0x40]
push eax
mov ecx, eax
call fcn.00435fd0
lea ecx, [esp + 0x50]
add esp, 4
push ecx
call fcn.00435fd0
lea edx, [esp + 0x40]
add esp, 4
push edx
mov ecx, edx
call fcn.00435fd0
lea eax, [esp + 0x78]
add esp, 4
push eax
mov ecx, eax
call fcn.00435fd0
lea ecx, [esp + 0x50]
add esp, 4
push ecx
call fcn.00435660
add esp, 4
lea edx, [esp + 0x3c]
lea ecx, [edi + 0x137c]
push edx
call fcn.00405bc0
lea eax, [esp + 0x40]
lea ecx, [edi + 0x1380]
push eax
call fcn.00405bc0
lea edx, [esp + 0x3c]
lea ecx, [edi + 0x1364]
push edx
call fcn.00405bc0
lea eax, [esp + 0x4c]
lea ebx, [edi + 0x1368]
push eax
mov ecx, ebx
call fcn.00405bc0
lea edx, [esp + 0x40]
lea ecx, [edi + 0x136c]
push edx
call fcn.00405bc0
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x30]
call fcn.00405bc0
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x18]
call fcn.00405bc0
mov eax, dword [esp + 0x60]
lea edx, [eax - 1]
cmp edx, 3
ja 0x422dae
dec eax
mov dword [edi + 0x1378], eax
jmp 0x422db4
mov dword [edi + 0x1378], ebp
lea eax, [esp + 0x50]
lea ecx, [edi + 0x13d8]
push eax
call fcn.00405bc0
mov eax, dword [esp + 0x14]
mov ecx, str.NONE
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x422df6
cmp dx, bp
je 0x422df2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x422df6
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x422dd0
xor eax, eax
jmp 0x422dfb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
sete al
test al, al
je 0x422f74
mov ecx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push ecx
call esi
mov ebp, eax
sub ebp, 1
js 0x422e37
mov edx, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push edx
call esi
sub ebp, 1
jns 0x422e21
mov eax, dword [esp + 0x24]
mov ecx, dword [edi + 0x12dc]
push eax
push 0
push 0x143
push ecx
call esi
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push edx
call esi
mov eax, dword [edi + 0xfc8]
push 0
push 0
push 0x14e
push eax
call esi
mov eax, dword [esp + 0x2c]
mov ecx, str.NONE
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x422ea6
test dx, dx
je 0x422ea2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x422ea6
add eax, 4
add ecx, 4
test dx, dx
jne 0x422e80
xor eax, eax
jmp 0x422eab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
lea ecx, [edi + 0x1310]
test al, al
je 0x422f0e
push 0
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x11b0]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x1384]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x188]
call fcn.0045c0b5
push 1
call fcn.004236c0
jmp 0x42344a
push 5
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x11b0]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x1384]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x188]
call fcn.0045c0b5
mov ecx, dword [edi + 0xfc8]
push 0
push 0
push 0x14e
push ecx
call esi
push 1
call fcn.004236c0
jmp 0x42344a
lea edx, [esp + 0x14]
push 0x49bdb8
push edx
call fcn.0041f9c0
add esp, 8
test al, al
jne 0x4232f1
lea eax, [esp + 0x14]
push 0x49a6b8
push eax
call fcn.0041f9c0
add esp, 8
test al, al
jne 0x4232f1
lea ecx, [esp + 0x14]
push str.WPA_PSK_WPA2_PSK
push ecx
call fcn.0041f9c0
add esp, 8
test al, al
je 0x42306d
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push edx
call esi
mov ebp, eax
sub ebp, 1
js 0x422ff6
jmp 0x422fe0
mov eax, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push eax
call esi
sub ebp, 1
jns 0x422fe0
mov ecx, dword [esp + 0x1c]
mov edx, dword [edi + 0x12dc]
push ecx
push 0
push 0x143
push edx
call esi
mov eax, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push eax
call esi
push 5
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x188]
call fcn.0045c0b5
mov ecx, dword [edi + 0xfc8]
push 0
push 2
push 0x14e
push ecx
call esi
mov edx, dword [edi + 0x154]
push 0
push 0x40
push 0xc5
push edx
call esi
jmp 0x42344a
lea eax, [esp + 0x14]
push str.WPA_WPA2
push eax
call fcn.0041f9c0
add esp, 8
test al, al
je 0x42344a
mov ecx, dword [edi + 0x154]
push 0
push 0x80
push 0xc5
push ecx
call esi
lea edx, [esp + 0x70]
push edx
lea ecx, [esp + 0x1c]
call fcn.00405bc0
lea eax, [esp + 0x74]
lea ecx, [edi + 0xa0c]
push eax
call fcn.00405bc0
lea eax, [edi + 0x12bc]
call fcn.00428920
mov ebp, eax
mov ebx, 1
sub ebp, ebx
js 0x4230e5
mov ecx, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push ecx
call esi
sub ebp, ebx
jns 0x4230d0
mov edx, dword [esp + 0x1c]
mov eax, dword [edi + 0x12dc]
push edx
push 0
push 0x143
push eax
call esi
mov ecx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push ecx
call esi
mov edx, dword [edi + 0xfc8]
push 0
push 3
push 0x14e
push edx
call esi
cmp dword [0x4b2de4], ebx
jne 0x4231d5
lea eax, [esp + 0x18]
push str.PEAP_MSCHAPV2
push eax
call fcn.0041f9c0
add esp, 8
test al, al
je 0x4231d5
call fcn.00423cb0
push 5
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x188]
call fcn.0045c0b5
mov ecx, dword [edi + 0x8c8]
push 0
push 0
push 0x14e
push ecx
call esi
push 5
lea ecx, [edi + 0x900]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x8a8]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0xa64]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0xa10]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0xb70]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0xc7c]
call fcn.0045c0b5
jmp 0x42344a
cmp dword [0x4b2de8], ebx
jne 0x42344a
lea edx, [esp + 0x18]
push 0x49a9e8
push edx
call fcn.0041f9c0
add esp, 8
test al, al
je 0x42344a
push ecx
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0xa0], esp
push eax
call fcn.00405cd0
push ecx
mov byte [esp + 0xb0], 0xa
lea edx, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0xa0], esp
push edx
call fcn.00405cd0
push ecx
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
mov byte [esp + 0xb8], 0xb
call fcn.00405cd0
mov byte [esp + 0xb4], 9
call fcn.00453ca0
lea ebp, [edi + 0xc7c]
add esp, 0xc
mov ecx, ebp
call fcn.00405b40
push 0
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0x188]
call fcn.0045c0b5
mov ecx, dword [edi + 0x8c8]
push 0
push ebx
push 0x14e
push ecx
call esi
push 5
lea ecx, [edi + 0x900]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x8a8]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0xa64]
call fcn.0045c0b5
push 0
lea ecx, [edi + 0xa10]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0xb70]
call fcn.0045c0b5
push 5
mov ecx, ebp
call fcn.0045c0b5
jmp 0x42344a
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x146
push edx
call esi
mov ebp, eax
sub ebp, 1
js 0x423326
lea ebx, [ebx]
mov eax, dword [edi + 0x12dc]
push 0
push ebp
push 0x144
push eax
call esi
sub ebp, 1
jns 0x423310
cmp dword [esp + 0x5c], 0
jne 0x423342
mov ecx, dword [esp + 0x20]
mov edx, dword [edi + 0x12dc]
push ecx
push 0
push 0x143
push edx
jmp 0x423355
mov eax, dword [esp + 0x28]
mov ecx, dword [edi + 0x12dc]
push eax
push 0
push 0x143
push ecx
call esi
mov edx, dword [edi + 0x12dc]
push 0
push 0
push 0x14e
push edx
call esi
mov eax, dword [edi + 0xfc8]
push 0
push 1
push 0x14e
push eax
call esi
push 5
lea ecx, [edi + 0x1310]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x11b0]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x1384]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x60c]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x134]
call fcn.0045c0b5
push 5
lea ecx, [edi + 0x188]
call fcn.0045c0b5
push 1
call fcn.004236c0
mov eax, dword [ebx]
push ecx
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov ebp, esp
push eax
call fcn.00405c60
add eax, 0x10
add esp, 4
mov dword [ebp], eax
call fcn.00434ab0
add esp, 4
cmp eax, 1
jne 0x4233fe
push 0
push 0
jmp 0x423435
cmp eax, 2
jne 0x423415
mov edx, dword [edi + 0x13a4]
push 0
push 1
push 0x14e
push edx
jmp 0x423441
cmp eax, 3
jne 0x42342c
mov eax, dword [edi + 0x13a4]
push 0
push 2
push 0x14e
push eax
jmp 0x423441
cmp eax, 4
jne 0x423443
push 0
push 3
mov ecx, dword [edi + 0x13a4]
push 0x14e
push ecx
call esi
mov ecx, edi
call fcn.00428610
mov eax, dword [esp + 0x64]
mov ecx, str.5Ghz
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x423479
test dx, dx
je 0x423475
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x423479
add eax, 4
add ecx, 4
test dx, dx
jne 0x423453
xor eax, eax
jmp 0x42347e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
push 0
test al, al
je 0x423499
mov edx, dword [edi + 0xd14]
push 1
push 0x14e
push edx
jmp 0x4234a7
mov eax, dword [edi + 0xd14]
push 0
push 0x14e
push eax
call esi
mov edx, dword [edi + 0x12dc]
lea ecx, [edi + 0x1374]
push ecx
push 0
push 0
push 0x147
push edx
lea ebp, [edi + 0x12bc]
call esi
push eax
mov ecx, ebp
call fcn.00456721
mov ecx, dword [edi + 0xfc8]
lea eax, [edi + 0x1370]
push eax
push 0
push 0
push 0x147
push ecx
call esi
push eax
lea ecx, [edi + 0xfa8]
call fcn.00456721
mov eax, dword [edi + 0xd14]
lea edx, [edi + 0xd48]
push edx
push 0
push 0
push 0x147
push eax
call esi
push eax
lea ecx, [edi + 0xcf4]
call fcn.00456721
push 1
mov ecx, ebp
call fcn.0045c0f7
push 0
mov ecx, edi
call fcn.00458825
lea ecx, [esp + 0x3c]
call fcn.0040c540
mov byte [esp + 0xa8], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42355d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 6
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423585
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 5
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4235ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 4
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4235d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4235fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 2
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423625
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 1
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42364d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xa8], 0
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423675
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xa8], 0xffffffff
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4236a0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret