Function at 0x47ca70
Capabilities:
Create process on windows
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dce82
mov eax, dword fs:[0]
push eax
sub esp, 0x250
mov eax, dword [0x51cca4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x14]
mov dword [eax], 0
mov eax, dword [ebp + 0x10]
sub eax, 0x201
je 0x47d3fc
sub eax, 2
je 0x47d3b2
sub eax, 2
jne 0x47d41e
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0x6d
push dword [0x5228b4]
call dword [sym.imp.USER32.dll_LoadMenuA]
push 0
push eax
mov dword [ebp - 0x244], eax
call dword [sym.imp.USER32.dll_GetSubMenu]
cmp dword [0x51f2dc], 0
mov esi, eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0
jne 0x47cd6f
push 0x8012
push esi
call dword [sym.imp.USER32.dll_DeleteMenu]
call fcn.004670d0
test eax, eax
jne 0x47cb3b
push 1
push 0x803d
push esi
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x47cbcc
cmp dword [0x51f2b4], 0
je 0x47cbcc
mov dword [ebp - 0x22c], 0xf
mov dword [ebp - 0x230], 0
mov byte [ebp - 0x240], 0
cmp dword [0x51f2b8], 0x10
mov eax, 0x51f2a4
mov dword [ebp - 4], 0
cmovae eax, dword [0x51f2a4]
push eax
lea eax, [ebp - 0x240]
push str.Connect_Bluetooth___s_
push eax
call fcn.004645f0
add esp, 0xc
lea eax, [ebp - 0x240]
cmp dword [ebp - 0x22c], 0x10
cmovae eax, dword [ebp - 0x240]
push eax
push 0x803d
push 0
push 0x803d
push esi
call dword [sym.imp.USER32.dll_ModifyMenuA]
lea ecx, [ebp - 0x240]
mov dword [ebp - 4], 0xffffffff
call fcn.00460af0
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.0048e7f0
add esp, 0xc
lea eax, [ebp - 0x250]
push eax
push 0x20019
push 0
push str.SoftwarePdaNetAndroid
push closesocket
call ebx
test eax, eax
jne 0x47cc48
lea eax, [ebp - 0x248]
mov dword [ebp - 0x254], 1
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x248], 0x1000
push eax
lea eax, [ebp - 0x254]
push eax
push 0
push str.LastWifiSsid3
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x100
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.0048e7f0
add esp, 0xc
lea eax, [ebp - 0x250]
push eax
push 0x20019
push 0
push str.SoftwarePdaNetAndroid
push closesocket
call ebx
test eax, eax
jne 0x47ccc4
lea eax, [ebp - 0x254]
mov dword [ebp - 0x248], 1
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x254], 0x1000
push eax
lea eax, [ebp - 0x248]
push eax
push 0
push str.LastWifiMac3
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0x110], 0
je 0x47ce49
cmp byte [ebp - 0x210], 0
je 0x47ce49
push 0
call fcn.00485b30
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.004863a0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 2
jb 0x47cd29
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x228]
push str.Connect_WiFi___s_
push eax
call fcn.004645f0
add esp, 0xc
lea ecx, [ebp - 0x240]
call fcn.00460af0
cmp dword [ebp - 0x214], 0x10
lea eax, [ebp - 0x228]
cmovae eax, dword [ebp - 0x228]
push eax
push 0x8048
push 0
push 0x8048
jmp 0x47ce30
mov ebx, dword [sym.imp.USER32.dll_DeleteMenu]
push 0x8018
push esi
call ebx
push 0
push 0x803d
push esi
call ebx
push 0
push 0x8048
push esi
call ebx
cmp dword [0x51f2e0], 2
jne 0x47ce49
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
cmp dword [0x51f284], 0x10
mov eax, 0x51f270
mov dword [ebp - 4], 3
cmovae eax, dword [0x51f270]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.004863a0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x47cdef
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x228]
push str.Disconnect_WiFi___s_
push eax
call fcn.004645f0
add esp, 0xc
lea ecx, [ebp - 0x240]
call fcn.00460af0
cmp dword [ebp - 0x214], 0x10
lea eax, [ebp - 0x228]
cmovae eax, dword [ebp - 0x228]
push eax
push 0x8012
push 0
push 0x8012
push esi
call dword [sym.imp.USER32.dll_ModifyMenuA]
lea ecx, [ebp - 0x228]
mov dword [ebp - 4], 0xffffffff
call fcn.00460af0
mov ecx, 0x51f1d8
call fcn.0046a030
mov ebx, dword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [ebp - 0x248], eax
test eax, eax
je 0x47cf87
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.0048e7f0
add esp, 0xc
lea eax, [ebp - 0x250]
push eax
push 0x20019
push 0
push str.SoftwarePdaNetAndroid
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x47cee7
lea eax, [ebp - 0x254]
mov dword [ebp - 0x24c], 1
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x254], 0x1000
push eax
lea eax, [ebp - 0x24c]
push eax
push 0
push str.WifiSSID
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x250]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47cef0
sub ecx, edx
jne 0x47cf06
mov dword [ebp - 0x248], ecx
jmp 0x47cf87
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x228]
push str.WiFi_Share___s_
push eax
call fcn.004645f0
add esp, 0xc
lea eax, [ebp - 0x228]
cmp dword [ebp - 0x214], 0x10
cmovae eax, dword [ebp - 0x228]
push eax
push 0x803f
push 0
push 0x803f
push esi
call dword [sym.imp.USER32.dll_ModifyMenuA]
push 8
push 0x803f
push esi
call ebx
lea ecx, [ebp - 0x228]
mov dword [ebp - 4], 0xffffffff
call fcn.00460af0
push 0
push str.AutoConnect
call fcn.0046bed0
add esp, 8
mov dword [ebp - 0x24c], eax
test eax, eax
je 0x47cfaa
push 8
push 0x801d
push esi
call ebx
cmp dword [0x520818], 0
je 0x47cfbd
push 8
push 0x802c
push esi
call ebx
push 0
push str.BlockWinUpdate
call fcn.0046bed0
add esp, 8
mov dword [0x51f784], eax
test eax, eax
je 0x47cfdf
push 8
push 0x8041
push esi
call ebx
cmp dword [0x51f2e4], 0
je 0x47cff2
push 8
push 0x8044
push esi
call ebx
push 0
push 0x8042
push esi
call dword [sym.imp.USER32.dll_DeleteMenu]
push 0
push dword [edi + 0x10]
push 0
push dword [ebp - 0x258]
push dword [ebp - 0x25c]
push 0x182
push esi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
add eax, 0xffff7ffd
cmp eax, 0x46
ja case.0x47d034.32772
movzx eax, byte [eax + 0x47d488]
jmp dword [eax*4 + 0x47d440]
push 0
push 0
push 0x10
push dword [0x51f1dc]
call dword [sym.imp.USER32.dll_PostMessageA]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
mov ecx, 0x51f1d8
call fcn.004697c0
cmp dword [0x51f2e0], 2
jne case.0x47d034.32772
call fcn.00484800
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
mov ecx, 0x51f1fc
call fcn.0047e970
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 1
mov ecx, 0x51f1d8
call fcn.0046b950
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
xor eax, eax
mov ecx, 0x51f1d8
cmp dword [ebp - 0x248], eax
sete al
push eax
call fcn.0046b820
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
call fcn.004681f0
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
cmp dword [0x51f2dc], 0
je 0x47d136
push 0x10
push str.PdaNet
push str.Please_disconnect_PdaNet_first_before_setting_up_new_WiFi_connection.
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 1
call fcn.00483d50
mov esi, dword [ebp - 0x244]
add esp, 4
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 5
push 0
push 0
push str.ms_settings:network_mobilehotspot
push 0
jmp 0x47d330
push 0x12c
push 0x1c2
push str.account.htm
mov ecx, edi
call fcn.0047d8f0
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
mov ecx, dword [0x51f784]
test ecx, ecx
jne 0x47d1ba
push 0x31
push str.PdaNet_Warning
push str.Enabling_this_will_prevent_certain_Windows_features_such_as_App_Store__OneDrive_or_Windows_Update_from_having_Internet_Access_while_PdaNet_is_connected._It_will_be_useful_if_your_data_plan_is_not_unlimited_or_if_your_carrier_is_relying_on_Windows_network_usages_to_detect_your_tethering._n_nSelect_OK_to_continue_or_Cancel_to_abort.
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne case.0x47d034.32772
mov ecx, dword [0x51f784]
xor eax, eax
test ecx, ecx
sete al
push eax
push str.BlockWinUpdate
mov dword [0x51f784], eax
call fcn.0047dea0
mov esi, dword [ebp - 0x244]
add esp, 8
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
cmp dword [0x51f2dc], 0
je 0x47d22b
mov eax, dword [0x51f4d4]
test eax, eax
je case.0x47d034.32772
push 1
push str.Please_disconnect_PdaNet_first_before_making_this_change.
push 0x8066
push eax
mov dword [0x51f550], 0
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
mov ecx, dword [0x51f2e4]
test ecx, ecx
jne 0x47d259
push 0x31
push str.PdaNet_Warning
push str.This_setting_should_only_be_enabled_for_some_older_Android_models_that_have_problem_staying_connected_in_USB_mode._It_will_greatly_reduce_your_connection_speed_when_enabled._n_nSelect_OK_to_continue_or_Cancel_to_abort.
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne case.0x47d034.32772
mov ecx, dword [0x51f2e4]
xor eax, eax
test ecx, ecx
push 0
sete al
mov dword [0x51f2e4], eax
mov dword [ebp - 0x24c], eax
lea eax, [ebp - 0x248]
push eax
push 0
push 0x20006
push 0
push 0
push 0
push str.SoftwarePdaNetAndroid
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x47d034.32772
push 4
lea eax, [ebp - 0x24c]
push eax
push 4
push 0
push str.ThrottleConnection
push dword [ebp - 0x248]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x248]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
xor eax, eax
cmp dword [ebp - 0x24c], eax
sete al
push eax
push str.AutoConnect
call fcn.0047dea0
mov esi, dword [ebp - 0x244]
add esp, 8
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 5
push dword [0x51f578]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 3
push 0
push 0
push str.http:__www.junefabrics.com_android_beta.php_v523
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 3
push 0
push 0
push str.http:__www.junefabrics.com_android_faq.php_v523
jmp 0x47d32b
mov eax, dword [0x51f430]
test eax, eax
jne 0x47d39a
movaps xmm0, xmmword [0x4eb900]
push eax
push ecx
mov eax, esp
push 0
push 0
push 0
push ecx
movups xmmword [ebp - 0x238], xmm0
mov dword [eax], 0
lea ecx, [ebp - 0x238]
mov eax, esp
push 0
mov dword [eax], ecx
mov ecx, 0x51f42c
call fcn.0047c3c0
mov eax, dword [0x51f430]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [ebp - 0x244]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 0x21
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [0x51f2dc], 0
jne 0x47d41e
mov esi, dword [ebp - 0x24c]
mov ecx, 0x51f1d8
push 0
call fcn.0046b950
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
mov esi, dword [ebp - 0x244]
push 0
mov ecx, 0x51f1d8
call fcn.0046b950
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x47d41e
push 0x21
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_KillTimer]
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push 0
add eax, 0xa
push eax
push 0x21
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00489c7b
mov esp, ebp
pop ebp
ret 0x10