Function at 0x4489cf
Capabilities:
Create process on windows
Print debug messages
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cda99
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4598
call fcn.00494070
push esi
push edi
mov dword [ebp - 0x4568], ecx
push 0x5359b0
call fcn.0040d6f5
add esp, 4
call fcn.00410f70
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x4568]
call fcn.0044d160
mov dword [ebp - 0x8e4], eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cfe0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x4540]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x456c], eax
mov edx, dword [ebp - 0x456c]
mov dword [ebp - 0x4570], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x4570]
push eax
mov ecx, 0x5d3c1c
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4540]
call fcn.004ad0c0
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x4544]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x4574], eax
mov eax, dword [ebp - 0x4574]
mov dword [ebp - 0x4578], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x4578]
push ecx
mov ecx, 0x5d3ba4
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4544]
call fcn.004ad0c0
mov dword [ebp - 0x8e0], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
mov byte [ebp - 0x8ec], 0
mov byte [ebp - 0x8d8], 0
mov dword [ebp - 0x8e8], 0xa
cmp dword [ebp - 0x14], 0
je 0x448b1b
mov edx, dword [ebp - 0x14]
cmp edx, dword [0x5d3bac]
jne 0x448b1b
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
je 0x448b1b
jmp 0x4496fd
xor ecx, ecx
mov cl, byte [0x5d451c]
test ecx, ecx
je 0x448b4c
cmp dword [ebp - 0x8e8], 0
je 0x448b4c
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x8e8]
sub edx, 1
mov dword [ebp - 0x8e8], edx
jmp 0x448b1b
mov byte [0x5d451c], 1
cmp dword [ebp - 0x14], 0
je 0x448b7e
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa88b
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 0xffffffff
jne 0x448b7e
mov byte [ebp - 0x8d8], 1
cmp dword [ebp - 0x14], 0
je 0x448b98
mov ecx, dword [ebp - 0x8d8]
and ecx, 0xff
test ecx, ecx
je 0x448e7e
cmp dword [ebp - 0x8e0], 0xffffffff
je 0x448c0c
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8f0], edx
push 0xffff0000
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x8f0], 0
jle 0x448bf8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cfb0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x8f0]
sub ecx, 1
mov dword [ebp - 0x8f0], ecx
jmp 0x448bcc
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d010
jmp 0x448d81
push 0xffff0000
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d010
mov byte [ebp - 0x8ec], 0
cmp dword [ebp - 0x14], 0
je 0x448cb4
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa88b
cmp eax, 0xffffffff
je 0x448ca0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa853
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8dc]
and eax, 0x200
test eax, eax
jne 0x448ca0
mov byte [0x5b8351], 0
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d010
mov byte [ebp - 0x8ec], 1
jmp 0x448cb4
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cfb0
mov dword [ebp - 0x14], eax
jmp 0x448c41
mov eax, dword [ebp - 0x8ec]
and eax, 0xff
test eax, eax
jne 0x448d81
mov byte [0x5b8351], 1
push 0xffff0000
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x448d81
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa88b
cmp eax, 0xffffffff
je 0x448d6a
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d010
mov byte [ebp - 0x8ec], 1
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa88b
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
push ecx
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d4]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea edx, [ebp - 0x80]
push edx
push 0x5b83f4
call fcn.004930f0
add esp, 0xc
jmp 0x448d81
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cfb0
mov dword [ebp - 0x14], eax
jmp 0x448ced
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cfe0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x4548]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x457c], eax
mov eax, dword [ebp - 0x457c]
mov dword [ebp - 0x4580], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x4580]
push ecx
mov ecx, 0x5d3c1c
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4548]
call fcn.004ad0c0
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x454c]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x4584], eax
mov ecx, dword [ebp - 0x4584]
mov dword [ebp - 0x4588], ecx
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x4588]
push edx
mov ecx, 0x5d3ba4
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454c]
call fcn.004ad0c0
cmp dword [ebp - 0x14], 0
jne 0x448e7e
push 0xffff0000
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044cf80
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d010
mov byte [0x5b8351], 1
mov byte [0x5d451c], 0
mov dword [ebp - 0x8e0], 0xffffffff
jmp 0x4496fd
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa88b
mov dword [ebp - 0x8e0], eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa853
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0x8dc]
and edx, 0x200
test edx, edx
je 0x448f2b
mov eax, dword [ebp - 0x8e0]
push eax
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d4]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea ecx, [ebp - 0x80]
push ecx
push 0x5b83f4
call fcn.004930f0
add esp, 0xc
push 0x5b83f4
push 0x5359cc
push 0x5359d4
call fcn.0042908d
add esp, 0xc
mov byte [0x5b8351], 1
push 0
push 0
mov ecx, dword [ebp - 0x4568]
call fcn.0044ad65
push 0x5359e4
call fcn.0040d6f5
add esp, 4
jmp 0x4496d0
cmp dword [ebp - 0x8e0], 0xffffffff
je 0x4496d0
mov byte [0x5b8351], 0
push 0
lea edx, [ebp - 0x43c0]
push edx
call dword [sym.imp.RtlLib.dll_RT_GetAdapterList]
add esp, 8
push 1
push 1
mov eax, dword [0x5d3bac]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d040
mov ecx, dword [ebp - 0x14]
mov dword [0x5d3bac], ecx
push 3
push 3
mov edx, dword [0x5d3bac]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.0044d040
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x4550]
push ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x458c], eax
mov edx, dword [ebp - 0x458c]
mov dword [ebp - 0x4590], edx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x4590]
push eax
mov ecx, 0x5d3ba4
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4550]
call fcn.004ad0c0
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x4554]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa7b3
mov dword [ebp - 0x4594], eax
mov eax, dword [ebp - 0x4594]
mov dword [ebp - 0x4598], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x4598]
push ecx
mov ecx, 0x5d3c1c
call fcn.004ad1f9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4554]
call fcn.004ad0c0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.004aa853
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8e0]
push eax
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d4]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea ecx, [ebp - 0x80]
push ecx
push 0x5b83f4
call fcn.004930f0
add esp, 0xc
push 0x5b83f4
push str.NicGuid
push 0x535a0c
call fcn.0042908d
add esp, 0xc
cmp dword [ebp - 0x43c0], 1
jne 0x4490a8
push 0x32
lea edx, [ebp - 0x1c7a]
push edx
push 0x5b83f4
call fcn.004930f0
add esp, 0xc
mov eax, dword [ebp - 0x8dc]
and eax, 0x200
test eax, eax
je 0x4490e0
mov byte [0x5b8351], 1
push 0
push 0
mov ecx, dword [ebp - 0x4568]
call fcn.0044ad65
push 1
call fcn.00410f70
mov ecx, eax
call fcn.00429297
jmp 0x4496d0
mov byte [ebp - 0x8ec], 0
mov dword [ebp - 0x43c4], 0
jmp 0x449102
mov ecx, dword [ebp - 0x43c4]
add ecx, 1
mov dword [ebp - 0x43c4], ecx
mov edx, dword [ebp - 0x43c4]
cmp edx, dword [ebp - 0x43c0]
jae 0x449146
mov eax, dword [ebp - 0x43c4]
imul eax, eax, 0x32
lea ecx, [ebp + eax - 0x1c7a]
push ecx
push 0x5b83f4
call fcn.00493b20
add esp, 8
test eax, eax
jne 0x449144
mov byte [ebp - 0x8ec], 1
mov edx, dword [ebp - 0x43c4]
mov dword [ebp - 0x10], edx
jmp 0x449146
jmp 0x4490f3
mov eax, dword [ebp - 0x8ec]
and eax, 0xff
test eax, eax
je 0x4496bc
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1cac]
test edx, edx
jne 0x4496bc
push 0
mov eax, dword [0x5b7b6c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x449222
push 0x64
mov ecx, 0x5b7b68
call fcn.0044cd30
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x449222
cmp dword [0x5b8360], 0
je 0x449222
push 0
mov ecx, dword [0x5b8360]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [0x5b8360]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x5b8360]
mov dword [ebp - 0x455c], edx
mov eax, dword [ebp - 0x455c]
mov dword [ebp - 0x4558], eax
cmp dword [ebp - 0x4558], 0
je 0x449204
push 1
mov ecx, dword [ebp - 0x4558]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4558]
call dword [edx + 4]
mov dword [ebp - 0x459c], eax
jmp 0x44920e
mov dword [ebp - 0x459c], 0
mov dword [0x5b8360], 0
mov ecx, 0x5b7b68
call fcn.0042daa0
push 0
mov eax, dword [0x5d336c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x449245
mov byte [0x5d37c9], 1
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x449222
mov ecx, dword [ebp - 0x10]
push ecx
push str.OnDblclk::RT_SetDefaultAdapterIndex_n_
call fcn.0040da45
add esp, 8
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.RtlLib.dll_RT_SetDefaultAdapterIndex]
add esp, 4
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x32
lea ecx, [ebp + eax - 0x12b6]
push ecx
call fcn.00446c06
add esp, 4
mov dword [0x5d3ff8], eax
cmp dword [ebp - 0x18], 0
je 0x449298
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
je 0x449298
mov ecx, dword [ebp - 0x18]
call fcn.004245a9
mov byte [0x5d37c9], 1
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
je 0x4492b7
mov byte [0x5d3fc5], 0
call dword [sym.imp.RtlLib.dll_RT_Stop]
mov byte [0x53c0e0], 1
push str._Start_Initialize_NIC__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.OnDblclk::RT_Initialize_Start
call fcn.0040d6f5
add esp, 4
push 0
call dword [sym.imp.RtlLib.dll_RT_Initialize]
add esp, 4
mov byte [ebp - 0x43c8], al
mov ecx, dword [ebp - 0x43c8]
and ecx, 0xff
test ecx, ecx
je 0x449690
push str._Initialize_success__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [0x5d4370], 0
push str.OnDblclk::RT_Initialize_success
call fcn.0040d6f5
add esp, 4
push 0x12c
push 0
push 0x5d4040
call fcn.00493430
add esp, 0xc
push 0x5d4040
call dword [sym.imp.RtlLib.dll_RT_GetDriverPath]
add esp, 4
mov byte [0x5b8351], 0
mov byte [0x5d3ffd], 1
cmp dword [0x5d3fc0], 0x6d
jl 0x449544
xor edx, edx
mov dl, byte [0x5b7bd0]
test edx, edx
je 0x449544
lea ecx, [ebp - 0x44cc]
call fcn.00406f30
mov dword [ebp - 4], 6
push 0x200
mov ecx, 0x5d3e28
call fcn.004ad4f0
push eax
lea ecx, [ebp - 0x44c8]
call fcn.0042314e
push 0x5d3df4
push str.VWiFi_Init_Status
push 0x32
mov ecx, 0x5d3e2c
call fcn.004ad4f0
push eax
lea ecx, [ebp - 0x44c8]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x44cc]
call fcn.004ad249
push 0x535ad0
lea eax, [ebp - 0x44cc]
push eax
call fcn.00415f90
and eax, 0xff
test eax, eax
je 0x44950f
mov byte [0x53c0e3], 1
push 0x5d3df8
push str.VWiFi_default_Enable
push 0x32
mov ecx, 0x5d3e2c
call fcn.004ad4f0
push eax
lea ecx, [ebp - 0x44c8]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x44cc]
call fcn.004ad249
push 0x535aec
lea ecx, [ebp - 0x44cc]
push ecx
call fcn.00415f90
and eax, 0xff
test eax, eax
je 0x449438
mov byte [0x5d450b], 1
jmp 0x44943f
mov byte [0x5d450b], 0
xor edx, edx
mov dl, byte [0x5d450b]
test edx, edx
je 0x44950d
mov dword [ebp - 0x4534], 0x64
push 0x64
push 0
lea eax, [ebp - 0x4530]
push eax
call fcn.00493430
add esp, 0xc
mov dword [ebp - 0x4534], 0x64
lea ecx, [ebp - 0x4534]
push ecx
lea edx, [ebp - 0x4530]
push edx
push 1
push 0x535af0
push 0x535b08
call fcn.00428f6d
add esp, 0x14
lea eax, [ebp - 0x4530]
push eax
call fcn.00493490
add esp, 4
cmp eax, 1
jae 0x44950d
push 0x535b18
push 0x535b1c
push 0x535b34
call fcn.0042908d
add esp, 0xc
push 0x535b44
push 0x535b48
push 0x535b5c
call fcn.0042908d
add esp, 0xc
push 0x535b6c
push 0x535b70
push 0x535b84
call fcn.0042908d
add esp, 0xc
push 1
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Enable]
add esp, 4
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
jmp 0x44952d
push 0x535b94
push 0x535b98
push 0x535bb0
call fcn.0042908d
add esp, 0xc
mov byte [0x53c0e3], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44cc]
call fcn.004ad0c0
jmp 0x44964b
push 0x535bc0
call fcn.0040d6f5
add esp, 4
push 0x535bd4
push 0x535bd8
push 0x535be0
call fcn.0042908d
add esp, 0xc
push 0x535bf0
lea ecx, [ebp - 0x4560]
call fcn.004ad180
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x4560]
push ecx
lea edx, [ebp - 0x4564]
push edx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x45a0], eax
mov eax, dword [ebp - 0x45a0]
mov dword [ebp - 0x45a4], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x45a4]
push ecx
lea edx, [ebp - 0x4538]
push edx
call fcn.004ad2ef
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4564]
call fcn.004ad0c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4560]
call fcn.004ad0c0
push 0
lea ecx, [ebp - 0x4538]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x453c], 0
mov dword [ebp - 0x453c], 0
lea eax, [ebp - 0x453c]
push eax
push 0x535c08
call fcn.004448bb
add esp, 8
cmp dword [ebp - 0x453c], 0
je 0x449630
mov ecx, dword [ebp - 0x453c]
push ecx
call fcn.004449bf
add esp, 4
cmp dword [ebp - 0x453c], 0
jne 0x4495fa
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4538]
call fcn.004ad0c0
push 0x5d3c1c
mov ecx, dword [ebp - 0x4568]
add ecx, 0x54
call fcn.004ad1f9
mov byte [0x5d3fc5], 1
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
je 0x44968e
xor eax, eax
mov al, byte [0x5d450c]
test eax, eax
jne 0x44968e
mov byte [0x5d3fc7], 0
mov ecx, dword [ebp - 0x4568]
call fcn.0044867a
jmp 0x4496ba
push str._Initialize_failed__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.OnDblclk_Initialize_failed
call fcn.0040d6f5
add esp, 4
mov byte [0x5b8351], 1
mov ecx, dword [ebp - 0x4568]
call fcn.0044970f
jmp 0x4496d0
mov byte [0x5b8351], 1
push str.OnDblclk_removed_or_disabled
call fcn.0040d6f5
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x4496e0
push 1
mov ecx, dword [ebp - 0x18]
call fcn.00429297
mov byte [0x5d451c], 0
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
push str.__CRtWLanView::OnDblclk
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8