Function at 0x447af0
Capabilities:
Create process on windows
Print debug messages
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7037
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4590
call fcn.0048af50
push esi
push edi
mov dword [ebp - 0x4560], ecx
push 0x4f6aec
call fcn.0040e045
add esp, 4
mov ecx, dword [ebp - 0x4560]
call fcn.0042e150
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bdf0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x4538]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x4564], eax
mov edx, dword [ebp - 0x4564]
mov dword [ebp - 0x4568], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x4568]
push eax
mov ecx, 0x52179c
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4538]
call fcn.004a32a4
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x453c]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x456c], eax
mov eax, dword [ebp - 0x456c]
mov dword [ebp - 0x4570], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x4570]
push ecx
mov ecx, 0x521724
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x453c]
call fcn.004a32a4
mov dword [ebp - 0x8dc], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
mov byte [ebp - 0x8e8], 0
mov byte [ebp - 0x8d4], 0
mov dword [ebp - 0x8e4], 0xa
xor edx, edx
mov dl, byte [0x5217d4]
test edx, edx
je 0x447c44
cmp dword [ebp - 0x8e4], 0
je 0x447c44
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x8e4]
sub eax, 1
mov dword [ebp - 0x8e4], eax
jmp 0x447c13
mov byte [0x5217d4], 1
cmp dword [ebp - 0x14], 0
je 0x447c76
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a96
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 0xffffffff
jne 0x447c76
mov byte [ebp - 0x8d4], 1
cmp dword [ebp - 0x14], 0
je 0x447c90
mov edx, dword [ebp - 0x8d4]
and edx, 0xff
test edx, edx
je 0x447f78
cmp dword [ebp - 0x8dc], 0xffffffff
je 0x447d04
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8ec], eax
push 0xffff0000
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x8ec], 0
jle 0x447cf0
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bdc0
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x8ec]
sub edx, 1
mov dword [ebp - 0x8ec], edx
jmp 0x447cc4
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be20
jmp 0x447e7b
push 0xffff0000
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be20
mov byte [ebp - 0x8e8], 0
cmp dword [ebp - 0x14], 0
je 0x447dad
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a96
cmp eax, 0xffffffff
je 0x447d99
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a5e
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
and ecx, 0x200
test ecx, ecx
jne 0x447d99
mov byte [0x505ed9], 0
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be20
mov byte [ebp - 0x8e8], 1
jmp 0x447dad
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bdc0
mov dword [ebp - 0x14], eax
jmp 0x447d39
mov ecx, dword [ebp - 0x8e8]
and ecx, 0xff
test ecx, ecx
jne 0x447e7b
mov byte [0x505ed9], 1
push 0xffff0000
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x447e7b
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a96
cmp eax, 0xffffffff
je 0x447e64
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be20
mov byte [ebp - 0x8e8], 1
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a96
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0x8dc]
push edx
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d0]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea eax, [ebp - 0x48]
push eax
push 0x505f74
call fcn.0048a150
add esp, 0xc
jmp 0x447e7b
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bdc0
mov dword [ebp - 0x14], eax
jmp 0x447de7
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bdf0
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x4540]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x4574], eax
mov ecx, dword [ebp - 0x4574]
mov dword [ebp - 0x4578], ecx
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x4578]
push edx
mov ecx, 0x52179c
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4540]
call fcn.004a32a4
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x4544]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x457c], eax
mov edx, dword [ebp - 0x457c]
mov dword [ebp - 0x4580], edx
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x4580]
push eax
mov ecx, 0x521724
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4544]
call fcn.004a32a4
cmp dword [ebp - 0x14], 0
jne 0x447f78
push 0xffff0000
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044bd90
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be20
mov byte [0x505ed9], 1
mov byte [0x5217d4], 0
mov dword [ebp - 0x8dc], 0xffffffff
jmp 0x448776
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a96
mov dword [ebp - 0x8dc], eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a5e
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
and eax, 0x200
test eax, eax
je 0x448015
mov ecx, dword [ebp - 0x8dc]
push ecx
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d0]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea edx, [ebp - 0x48]
push edx
push 0x505f74
call fcn.0048a150
add esp, 0xc
push 0x505f74
push 0x4f6b08
push 0x4f6b10
call fcn.00429a0e
add esp, 0xc
mov byte [0x505ed9], 1
push 0x4f6b20
call fcn.0040e045
add esp, 4
jmp 0x448745
cmp dword [ebp - 0x8dc], 0xffffffff
je 0x448745
mov byte [0x505ed9], 0
push 0
lea eax, [ebp - 0x43bc]
push eax
call dword [sym.imp.RtlLib.dll_RT_GetAdapterList]
add esp, 8
push 1
push 1
mov ecx, dword [0x52172c]
push ecx
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be50
mov edx, dword [ebp - 0x14]
mov dword [0x52172c], edx
push 3
push 3
mov eax, dword [0x52172c]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.0044be50
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x4548]
push edx
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x4584], eax
mov eax, dword [ebp - 0x4584]
mov dword [ebp - 0x4588], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x4588]
push ecx
mov ecx, 0x521724
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4548]
call fcn.004a32a4
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x454c]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.004a09be
mov dword [ebp - 0x458c], eax
mov ecx, dword [ebp - 0x458c]
mov dword [ebp - 0x4590], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x4590]
push edx
mov ecx, 0x52179c
call fcn.004a33dd
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454c]
call fcn.004a32a4
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.004a0a5e
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8dc]
push ecx
call dword [sym.imp.EnumDevLib.dll_GetDeviceInfo]
add esp, 4
mov esi, eax
mov ecx, 0x22f
lea edi, [ebp - 0x8d0]
rep movsd dword es:[edi], dword [esi]
push 0x32
lea edx, [ebp - 0x48]
push edx
push 0x505f74
call fcn.0048a150
add esp, 0xc
push 0x505f74
push str.NicGuid
push 0x4f6b48
call fcn.00429a0e
add esp, 0xc
mov eax, dword [ebp - 0x8d8]
and eax, 0x200
test eax, eax
je 0x4481b1
mov byte [0x505ed9], 1
push 0
push 0
mov ecx, dword [ebp - 0x4560]
call fcn.00449bd1
push 1
mov ecx, dword [ebp - 0x4560]
call fcn.004a52e5
mov ecx, eax
call fcn.00429c18
jmp 0x448745
mov byte [ebp - 0x8e8], 0
mov dword [ebp - 0x43c0], 0
jmp 0x4481d3
mov ecx, dword [ebp - 0x43c0]
add ecx, 1
mov dword [ebp - 0x43c0], ecx
mov edx, dword [ebp - 0x43c0]
cmp edx, dword [ebp - 0x43bc]
jae 0x448217
mov eax, dword [ebp - 0x43c0]
imul eax, eax, 0x32
lea ecx, [ebp + eax - 0x1c76]
push ecx
push 0x505f74
call fcn.0048ab80
add esp, 8
test eax, eax
jne 0x448215
mov byte [ebp - 0x8e8], 1
mov edx, dword [ebp - 0x43c0]
mov dword [ebp - 0x10], edx
jmp 0x448217
jmp 0x4481c4
mov eax, dword [ebp - 0x8e8]
and eax, 0xff
test eax, eax
je 0x448731
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1ca8]
test edx, edx
jne 0x448731
push 0
mov eax, dword [0x5056ec]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4482f3
push 0x64
mov ecx, 0x5056e8
call fcn.0044bb10
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4482f3
cmp dword [0x505ee8], 0
je 0x4482f3
push 0
mov ecx, dword [0x505ee8]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [0x505ee8]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x505ee8]
mov dword [ebp - 0x4554], edx
mov eax, dword [ebp - 0x4554]
mov dword [ebp - 0x4550], eax
cmp dword [ebp - 0x4550], 0
je 0x4482d5
push 1
mov ecx, dword [ebp - 0x4550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4550]
call dword [edx + 4]
mov dword [ebp - 0x4594], eax
jmp 0x4482df
mov dword [ebp - 0x4594], 0
mov dword [0x505ee8], 0
mov ecx, 0x5056e8
call fcn.0042e0e0
push 0
mov eax, dword [0x520eec]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x448316
mov byte [0x52134d], 1
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4482f3
mov ecx, dword [ebp - 0x10]
push ecx
push str.OnDblclk::RT_SetDefaultAdapterIndex_n_
call fcn.0040e2c0
add esp, 8
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.RtlLib.dll_RT_SetDefaultAdapterIndex]
add esp, 4
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x32
lea ecx, [ebp + eax - 0x12b2]
push ecx
call fcn.0044627e
add esp, 4
mov dword [0x521a38], eax
mov ecx, dword [ebp - 0x4560]
call fcn.004a52e5
mov ecx, eax
call fcn.00424f9d
mov byte [0x52134d], 1
xor edx, edx
mov dl, byte [0x521a05]
test edx, edx
je 0x448381
mov byte [0x521a05], 0
call dword [sym.imp.RtlLib.dll_RT_Stop]
mov byte [0x4f747c], 1
push str._Start_Initialize_NIC__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.OnDblclk::RT_Initialize_Start
call fcn.0040e045
add esp, 4
push 0
call dword [sym.imp.RtlLib.dll_RT_Initialize]
add esp, 4
mov byte [ebp - 0x43c4], al
mov eax, dword [ebp - 0x43c4]
and eax, 0xff
test eax, eax
je 0x448705
push str._Initialize_success__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [0x521db0], 0
push str.OnDblclk::RT_Initialize_success
call fcn.0040e045
add esp, 4
push 0x12c
push 0
push 0x521a80
call fcn.0048a490
add esp, 0xc
push 0x521a80
call dword [sym.imp.RtlLib.dll_RT_GetDriverPath]
add esp, 4
mov byte [0x505ed9], 0
mov byte [0x521a3d], 1
cmp dword [0x521a00], 0x6d
jl 0x44860d
xor ecx, ecx
mov cl, byte [0x505ef0]
test ecx, ecx
je 0x44860d
lea ecx, [ebp - 0x44c8]
call fcn.00406f30
mov dword [ebp - 4], 6
push 0x200
mov ecx, 0x521868
call fcn.004a3660
push eax
lea ecx, [ebp - 0x44c4]
call fcn.00423aee
push 0x521834
push str.VWiFi_Init_Status
push 0x32
mov ecx, 0x52186c
call fcn.004a3660
push eax
lea ecx, [ebp - 0x44c4]
call fcn.00423c94
push eax
lea ecx, [ebp - 0x44c8]
call fcn.004a342d
push 0x4f6c0c
lea edx, [ebp - 0x44c8]
push edx
call fcn.004166a0
and eax, 0xff
test eax, eax
je 0x4485d8
mov byte [0x4f747f], 1
push 0x521838
push str.VWiFi_default_Enable
push 0x32
mov ecx, 0x52186c
call fcn.004a3660
push eax
lea ecx, [ebp - 0x44c4]
call fcn.00423c94
push eax
lea ecx, [ebp - 0x44c8]
call fcn.004a342d
push 0x4f6c28
lea eax, [ebp - 0x44c8]
push eax
call fcn.004166a0
and eax, 0xff
test eax, eax
je 0x448501
mov byte [0x521f4b], 1
jmp 0x448508
mov byte [0x521f4b], 0
xor ecx, ecx
mov cl, byte [0x521f4b]
test ecx, ecx
je 0x4485d6
mov dword [ebp - 0x4530], 0x64
push 0x64
push 0
lea edx, [ebp - 0x452c]
push edx
call fcn.0048a490
add esp, 0xc
mov dword [ebp - 0x4530], 0x64
lea eax, [ebp - 0x4530]
push eax
lea ecx, [ebp - 0x452c]
push ecx
push 1
push 0x4f6c2c
push 0x4f6c44
call fcn.004298ee
add esp, 0x14
lea edx, [ebp - 0x452c]
push edx
call fcn.0048a4f0
add esp, 4
cmp eax, 1
jae 0x4485d6
push 0x4f6c54
push 0x4f6c58
push 0x4f6c70
call fcn.00429a0e
add esp, 0xc
push 0x4f6c80
push 0x4f6c84
push 0x4f6c98
call fcn.00429a0e
add esp, 0xc
push 0x4f6ca8
push 0x4f6cac
push 0x4f6cc0
call fcn.00429a0e
add esp, 0xc
push 1
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Enable]
add esp, 4
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
jmp 0x4485f6
push 0x4f6cd0
push 0x4f6cd4
push 0x4f6cec
call fcn.00429a0e
add esp, 0xc
mov byte [0x4f747f], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c8]
call fcn.004a32a4
jmp 0x4486cb
push 0x4f6cfc
call fcn.0040e045
add esp, 4
push 0x4f6d10
push 0x4f6d14
push 0x4f6d1c
call fcn.00429a0e
add esp, 0xc
push 0x4f6d2c
lea ecx, [ebp - 0x4558]
call fcn.004a3364
mov dword [ebp - 4], 7
lea eax, [ebp - 0x4558]
push eax
lea ecx, [ebp - 0x455c]
push ecx
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x4598], eax
mov edx, dword [ebp - 0x4598]
mov dword [ebp - 0x459c], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x459c]
push eax
lea ecx, [ebp - 0x4534]
push ecx
call fcn.004a34d3
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x455c]
call fcn.004a32a4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4558]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x4534]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4534]
call fcn.004a32a4
push 0x52179c
mov ecx, dword [ebp - 0x4560]
add ecx, 0x54
call fcn.004a33dd
mov byte [0x521a05], 1
mov byte [0x521a07], 0
xor edx, edx
mov dl, byte [0x521a05]
test edx, edx
je 0x448703
mov ecx, dword [ebp - 0x4560]
call fcn.004477bc
jmp 0x44872f
push str._Initialize_failed__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.OnDblclk_Initialize_failed
call fcn.0040e045
add esp, 4
mov byte [0x505ed9], 1
mov ecx, dword [ebp - 0x4560]
call fcn.00448788
jmp 0x448745
mov byte [0x505ed9], 1
push str.OnDblclk_removed_or_disabled
call fcn.0040e045
add esp, 4
push 1
mov ecx, dword [ebp - 0x4560]
call fcn.004a52e5
mov ecx, eax
call fcn.00429c18
mov byte [0x5217d4], 0
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
push str.__CRtWLanView::OnDblclk
call fcn.0040e045
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8