Function at 0x1004dd00
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1468
call fcn.1001a2d0
mov eax, dword [0x10086ba0]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
lea ecx, [ebp - 4]
call fcn.10001af0
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x724], 0
xor eax, eax
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], eax
push 0x41
push 0
lea ecx, [ebp - 0x1420]
push ecx
call fcn.100139b0
add esp, 0xc
push 0x640
lea ecx, [ebp - 4]
call fcn.100015a0
push 0x100766b8
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076718
lea ecx, [ebp - 4]
call fcn.10003530
mov byte [ebp - 0x671], 0
mov byte [ebp - 0x751], 0
call fcn.1003b3c0
movzx edx, al
test edx, edx
je 0x1004dde3
call sym.RtlLib.dll_RT_ACM_SoftAP_GetStatus
mov dword [ebp - 0x1424], eax
cmp dword [ebp - 0x1424], 2
jne 0x1004ddd6
mov byte [ebp - 0x751], 1
call sym.RtlLib.dll_RT_AP_GetIsAPMode
mov byte [ebp - 0x671], al
jmp 0x1004ddf1
mov byte [ebp - 0x671], 0
mov byte [ebp - 0x751], 0
call sym.RtlLib.dll_RT_ACM_SoftAP_GetStatus
mov dword [ebp - 0x66c], eax
push 0x10076720
lea ecx, [ebp - 4]
call fcn.10003530
movzx eax, byte [ebp - 0x751]
test eax, eax
je 0x1004de23
push 0x1007672c
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004de2f
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076744
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076748
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076750
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076760
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076768
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076770
lea ecx, [ebp - 4]
call fcn.10003530
mov edx, dword [ebp + 8]
add edx, 0x32
push edx
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007677c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076780
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076788
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
shr ecx, 3
and ecx, 1
je 0x1004dedb
movzx edx, byte [ebp - 0x671]
test edx, edx
jne 0x1004dedb
push 0x10076790
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004dee8
push 0x100767b4
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100767d8
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100767e8
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
shr ecx, 3
and ecx, 1
jne 0x1004df1b
movzx edx, byte [ebp - 0x751]
test edx, edx
je 0x1004df2a
push 0x100767fc
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004df37
push 0x10076800
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076808
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007681c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076830
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076838
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007684c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007685c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076864
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076874
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007687c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076888
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007689c
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
shr ecx, 1
and ecx, 3
cmp ecx, 3
jne 0x1004dfe5
push 0x100768b0
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e030
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
shr eax, 1
and eax, 3
cmp eax, 2
jne 0x1004e004
push 0x100768b8
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e030
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5c]
shr edx, 1
and edx, 3
cmp edx, 1
jne 0x1004e023
push 0x100768c0
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e030
push 0x100768c8
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100768d0
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100768e4
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
shr ecx, 0xa
and ecx, 3
cmp ecx, 3
jne 0x1004e06a
push 0x100768f4
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e0b7
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
shr eax, 0xa
and eax, 3
cmp eax, 2
jne 0x1004e08a
push 0x100768f8
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e0b7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5c]
shr edx, 0xa
and edx, 3
cmp edx, 1
jne 0x1004e0aa
push 0x10076900
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e0b7
push 0x10076904
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007690c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007691c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076928
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076930
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007693c
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
and ecx, 1
je 0x1004e2ea
push 0x10076950
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007695c
lea ecx, [ebp - 4]
call fcn.10003530
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
shr eax, 0xa
and eax, 3
cmp eax, 1
jne 0x1004e141
push 0x10076968
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e169
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1bc], 0x40
jne 0x1004e15c
push 0x10076974
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e169
push 0x10076980
lea ecx, [ebp - 4]
call fcn.10003530
push 0x1007698c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076998
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100769b8
lea ecx, [ebp - 4]
call fcn.10003530
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
shr eax, 0xa
and eax, 3
cmp eax, 1
jne 0x1004e20d
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 0x62]
mov eax, dword [ebp + 8]
movzx ecx, word [eax + edx*2 + 0x64]
mov dword [ebp - 0x1428], ecx
push 0x1e
push 0
lea edx, [ebp - 0x74c]
push edx
call fcn.100139b0
add esp, 0xc
push 1
mov eax, dword [ebp - 0x1428]
shl eax, 1
push eax
lea ecx, [ebp - 0x74c]
push ecx
mov edx, dword [ebp - 0x1428]
push edx
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 0x62]
shl ecx, 4
mov edx, dword [ebp + 8]
lea eax, [edx + ecx + 0x6c]
push eax
call fcn.10064bd0
add esp, 0x14
lea ecx, [ebp - 0x74c]
push ecx
lea ecx, [ebp - 4]
call fcn.10003530
jmp 0x1004e239
push 0x100769c8
lea ecx, [ebp - 4]
call fcn.10003530
mov edx, dword [ebp + 8]
add edx, 0xbc
push edx
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100769d4
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100769d8
lea ecx, [ebp - 4]
call fcn.10003530
push 0x100769e8
lea ecx, [ebp - 4]
call fcn.10003530
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
shr ecx, 0xa
and ecx, 3
cmp ecx, 1
jne 0x1004e2ea
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x62]
test eax, eax
je 0x1004e2ea
push 0x100769f8
lea ecx, [ebp - 4]
call fcn.10003530
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62]
mov dword [ebp - 0x1468], edx
cmp dword [ebp - 0x1468], 3
ja case.default.0x1004e29c
mov eax, dword [ebp - 0x1468]
jmp dword [eax*4 + 0x1004e654]
push 0x10076a04
lea ecx, [ebp - 4]
call fcn.10003530
jmp case.default.0x1004e29c
push 0x10076a08
lea ecx, [ebp - 4]
call fcn.10003530
jmp case.default.0x1004e29c
push 0x10076a0c
lea ecx, [ebp - 4]
call fcn.10003530
jmp case.default.0x1004e29c
push 0x10076a10
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a14
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a20
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a2c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a34
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a3c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a48
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a5c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a6c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a7c
lea ecx, [ebp - 4]
call fcn.10003530
push 0x10076a84
lea ecx, [ebp - 4]
call fcn.10003530
push 0x640
push 0
lea ecx, [ebp - 0x668]
push ecx
call fcn.100139b0
add esp, 0xc
push 0x640
lea ecx, [ebp - 4]
call fcn.10001ae0
push eax
lea edx, [ebp - 0x668]
push edx
call fcn.10013640
add esp, 0xc
lea eax, [ebp - 0x668]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x20], eax
push 0x640
push 0
lea edx, [ebp - 0x13d8]
push edx
call fcn.100139b0
add esp, 0xc
mov dword [ebp - 0x670], 0
jmp 0x1004e3e3
mov eax, dword [ebp - 0x670]
add eax, 1
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x670]
cmp ecx, dword [ebp - 0x728]
jge 0x1004e410
mov edx, dword [ebp - 0x670]
movsx ax, byte [ebp + edx - 0x668]
mov ecx, dword [ebp - 0x670]
mov word [ebp + ecx*2 - 0x13d8], ax
jmp 0x1004e3d4
push 0x42
push 0
lea edx, [ebp - 0x700]
push edx
call fcn.100139b0
add esp, 0xc
mov dword [ebp - 0x670], 0
jmp 0x1004e43e
mov eax, dword [ebp - 0x670]
add eax, 1
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x670]
cmp ecx, dword [ebp - 0x20]
jge 0x1004e466
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0x670]
movsx ax, byte [edx]
mov ecx, dword [ebp - 0x670]
mov word [ebp + ecx*2 - 0x700], ax
jmp 0x1004e42f
mov dword [ebp - 0x1c], 1
lea edx, [ebp - 0x13d8]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x720]
push eax
call fcn.10013640
add esp, 0xc
lea ecx, [ebp - 0x724]
mov dword [ebp - 0x14], ecx
cmp dword [ebp + 0x14], 0
jne 0x1004e4b8
mov dword [ebp - 0xc], 2
jmp 0x1004e4de
cmp dword [ebp + 0x14], 1
jne 0x1004e4c7
mov dword [ebp - 0xc], 1
jmp 0x1004e4de
mov dword [ebp - 0x758], 0x57
lea ecx, [ebp - 4]
call fcn.10001850
jmp 0x1004e642
mov dword [ebp - 0x10], 0
mov dword [ebp - 8], 0
movzx edx, byte [ebp - 0x671]
test edx, edx
jne 0x1004e58d
mov dword [ebp - 0x143c], 0x1e
mov dword [ebp - 0x1438], 0
mov eax, dword [ebp - 0x143c]
sub eax, 1
mov dword [ebp - 0x143c], eax
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xa
push 0
lea ecx, [ebp - 0x1434]
push ecx
call fcn.100139b0
add esp, 0xc
push 4
lea edx, [ebp - 0x1434]
push edx
push 0xff0101bd
push 0
call sub.RtlIhvOid.dll_Ordinal_2
add esp, 0x10
mov dword [ebp - 0x1438], eax
cmp dword [ebp - 0x1438], 0
je 0x1004e572
mov eax, dword [ebp - 0x1434]
shr eax, 8
mov dword [ebp - 0x1434], eax
cmp dword [ebp - 0x1434], 1
jne 0x1004e58d
cmp dword [ebp - 0x1438], 0
je 0x1004e58d
cmp dword [ebp - 0x143c], 0
jne 0x1004e50f
lea ecx, [ebp - 0x1c]
push ecx
call sub.RtlIhvOid.dll_Ordinal_18
add esp, 4
mov dword [ebp - 0x758], eax
lea ecx, [ebp - 0x750]
call fcn.10001af0
mov edx, dword [ebp - 0x758]
push edx
push 0x10076a94
lea eax, [ebp - 0x750]
push eax
call fcn.100025d0
add esp, 0xc
lea ecx, [ebp - 0x750]
call fcn.10001ae0
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
movzx ecx, byte [ebp - 0x671]
test ecx, ecx
je 0x1004e62f
push 0x20
mov edx, dword [ebp + 8]
add edx, 0x32
push edx
lea eax, [ebp - 0x145c]
push eax
call fcn.10013640
add esp, 0xc
mov dword [ebp - 0x1460], 0x24
mov dword [ebp - 0x1464], 0x64
mov ecx, dword [ebp - 0x1464]
push ecx
sub esp, 0x24
mov ecx, 9
lea esi, [ebp - 0x1460]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call sub.RtlIhvOid.dll_Ordinal_22
add esp, 0x28
lea ecx, [ebp - 0x750]
call fcn.10001850
lea ecx, [ebp - 4]
call fcn.10001850
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.1001362b
mov esp, ebp
pop ebp
ret