Function at 0x40bfb0
Capabilities:
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x47fe38
mov eax, dword fs:[0]
push eax
sub esp, 0xdd4
mov eax, dword [0x4a97e0]
xor eax, esp
mov dword [esp + 0xdd0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a97e0]
xor eax, esp
push eax
lea eax, [esp + 0xde8]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xdf8]
push ebp
mov ecx, 0x1f
lea esi, [esp + 0xe00]
lea edi, [esp + 0x210]
push str.SetHotspotCredentials__s_
rep movsd dword es:[edi], dword [esi]
call fcn.00421450
mov edi, eax
call fcn.00421970
add esp, 8
lea esi, [esp + 0x4c]
call fcn.00402120
push ebp
mov eax, esi
xor ebx, ebx
push eax
mov dword [esp + 0xdf8], ebx
call fcn.00404070
test eax, eax
jne 0x40c0a0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
push ebp
lea ecx, [esp + 0x50]
push ecx
call fcn.00404070
test eax, eax
jne 0x40c0a0
push 0x2710
call edi
mov ecx, ebp
call fcn.00422320
test eax, eax
jne 0x40c06c
add esi, 1
cmp esi, 0x12
jl 0x40c043
mov dword [esp + 0xdf0], 0xffffffff
mov ecx, dword [esp + 0x54]
cmp ecx, ebx
je 0x40c08a
mov eax, dword [esp + 0x68]
cmp eax, ebx
je 0x40c08a
push ecx
call eax
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x40c099
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x40cb5a
push 0x7cf
lea edx, [esp + 0x519]
push ebx
push edx
mov byte [esp + 0x520], bl
call fcn.00461780
mov esi, 0xf
add esp, 0xc
mov dword [esp + 0x17c], esi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
mov byte [esp + 0xdf0], 1
push 0x26
push str._IoMgmt_Adapters_wifi1_Profiles_Active
lea ecx, [esp + 0x1c0]
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
mov byte [esp + 0x1c4], bl
call fcn.00401960
mov byte [esp + 0xdf0], 2
push 0xc1
push str._io:Profile__r_n_io:AdapterProfile__r_n_io:WifiBaseStation__r_n_wifi:SSID__s__wifi:SSID__r_n_wifi:EncryptionType_none__wifi:EncryptionType__r_n__io:WifiBaseStation__r_n__io:AdapterProfile__r_n__io:Profile__r_n
lea ecx, [esp + 0x1a4]
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov byte [esp + 0x1a8], bl
call fcn.00401960
mov byte [esp + 0xdf0], 3
push 0xa0
push str._io:Profile__r_n_io:AdapterProfile__r_n_io:WifiBaseStation__r_n_wifi:SSID__s__wifi:SSID__r_n_wifi:EncryptionType_WEP__wifi:EncryptionType__r_n_io:KeyInfo__r_n_io:WepKeys__r_n
lea ecx, [esp + 0x188]
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov byte [esp + 0x18c], bl
call fcn.00401960
mov byte [esp + 0xdf0], 4
push 0x67
push str._io:WepKey__r_n_wifi:WepKey__s__wifi:WepKey__r_n_wifi:WepArrayIndex__d__wifi:WepArrayIndex__r_n__io:WepKey__r_n
lea ecx, [esp + 0x1dc]
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x1f0], ebx
mov byte [esp + 0x1e0], bl
call fcn.00401960
mov byte [esp + 0xdf0], 5
push 0x5a
push str.__io:WepKeys__r_n__io:KeyInfo__r_n__io:WifiBaseStation__r_n__io:AdapterProfile__r_n__io:Profile__r_n
lea ecx, [esp + 0x1f8]
mov dword [esp + 0x210], esi
mov dword [esp + 0x20c], ebx
mov byte [esp + 0x1fc], bl
call fcn.00401960
mov byte [esp + 0xdf0], 6
push 0x161
push str._io:Profile__r_n_io:AdapterProfile__r_n_io:WifiBaseStation__r_n_wifi:SSID__s__wifi:SSID__r_n_wifi:EncryptionType__s__wifi:EncryptionType__r_n_io:KeyInfo__r_n_io:WpaPassPhraseInfo__r_n_wifi:RsnEncryption__s__wifi:RsnEncryption__r_n_wifi:PassPhrase__s__wifi:PassPhrase__r_n__io:WpaPassPhraseInfo__r_n__io:KeyInfo__r_n__io:WifiBaseStation__r_n__io:AdapterProfile__r_n__io:Profile__r_n
lea ecx, [esp + 0x150]
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
call fcn.00401960
lea eax, [esp + 0x214]
mov byte [esp + 0xdf0], 7
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40c212
sub eax, edx
lea ecx, [esp + 0x214]
push ecx
lea edi, [esp + 0x418]
mov ebx, eax
call fcn.00430360
add esp, 4
test eax, eax
jne 0x40c38c
mov edi, 0x10
cmp dword [esp + 0x160], edi
jb 0x40c25c
mov edx, dword [esp + 0x14c]
push edx
call fcn.0044204a
add esp, 4
xor ebx, ebx
cmp dword [esp + 0x208], edi
mov dword [esp + 0x160], esi
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
jb 0x40c28c
mov eax, dword [esp + 0x1f4]
push eax
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1ec], edi
mov dword [esp + 0x208], esi
mov dword [esp + 0x204], ebx
mov byte [esp + 0x1f4], bl
jb 0x40c2ba
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x198], edi
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1e8], ebx
mov byte [esp + 0x1d8], bl
jb 0x40c2e8
mov edx, dword [esp + 0x184]
push edx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1b4], edi
mov dword [esp + 0x198], esi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
jb 0x40c316
mov eax, dword [esp + 0x1a0]
push eax
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1d0], edi
mov dword [esp + 0x1b4], esi
mov dword [esp + 0x1b0], ebx
mov byte [esp + 0x1a0], bl
jb 0x40c344
mov ecx, dword [esp + 0x1bc]
push ecx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x17c], edi
mov dword [esp + 0x1d0], esi
mov dword [esp + 0x1cc], ebx
mov byte [esp + 0x1bc], bl
jb 0x40c372
mov edx, dword [esp + 0x168]
push edx
call fcn.0044204a
add esp, 4
mov dword [esp + 0x17c], esi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
jmp 0x40c06c
mov al, byte [esp + 0x211]
cmp al, 1
mov esi, 0x10
jne 0x40c3d6
cmp dword [esp + 0x1b4], esi
mov eax, dword [esp + 0x1a0]
jae 0x40c3b3
lea eax, [esp + 0x1a0]
lea ecx, [esp + 0x414]
push ecx
push eax
lea edx, [esp + 0x51c]
push 0x7d0
push edx
call fcn.0045ecdb
add esp, 0x10
jmp 0x40c936
cmp al, 2
jne 0x40c777
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x188]
push eax
lea ecx, [esp + 0x170]
call fcn.00401800
cmp dword [esp + 0x198], esi
mov eax, dword [esp + 0x184]
jae 0x40c40d
lea eax, [esp + 0x184]
lea ecx, [esp + 0x414]
push ecx
push eax
lea edx, [esp + 0x51c]
push 0x7d0
push edx
call fcn.0045ecdb
lea eax, [esp + 0x524]
add esp, 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c435
sub eax, edx
push eax
lea eax, [esp + 0x518]
push eax
lea ecx, [esp + 0x16c]
call fcn.00401960
movzx eax, byte [esp + 0x23d]
sub eax, 0
je 0x40c5dd
sub eax, 1
je 0x40c486
push str.__WEP_KEY_STRENGTH_UNKNOWN
call fcn.00421450
mov edi, eax
call fcn.00421970
add esp, 4
mov ebx, esi
jmp 0x40c71c
push str.__WEP_KEY_STRENGTH_128_LENGTH
call fcn.00421450
mov edi, eax
call fcn.00421970
add esp, 4
xor esi, esi
lea ebp, [esp + 0x23f]
lea ebx, [esi + 0x10]
push 0xff
lea ecx, [esp + 0x319]
push 0
push ecx
mov byte [esp + 0x320], 0
call fcn.00461780
add esp, 0xc
cmp byte [esp + 0x23e], 0
jne 0x40c4eb
push ebp
lea edi, [esp + 0x318]
mov ebx, 0xd
call fcn.00430360
add esp, 4
mov ebx, 0x10
jmp 0x40c52a
push 0x100
lea edx, [esp + 0x318]
push 0
push edx
call fcn.00461780
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov dword [esp + 0x320], eax
mov al, byte [ebp + 0xc]
add esp, 0xc
mov dword [esp + 0x318], ecx
mov dword [esp + 0x31c], edx
mov byte [esp + 0x320], al
lea ecx, [esp + 0x1d4]
push ecx
lea edx, [esp + 0x168]
push edx
lea edi, [esp + 0x38]
call fcn.0040e950
add esp, 8
cmp dword [eax + 0x18], ebx
jb 0x40c550
mov eax, dword [eax + 4]
jmp 0x40c553
add eax, 4
add esi, 1
push esi
lea ecx, [esp + 0x318]
push ecx
push eax
lea edx, [esp + 0x520]
push 0x7d0
push edx
call fcn.0045ecdb
add esp, 0x14
cmp dword [esp + 0x48], ebx
jb 0x40c588
mov eax, dword [esp + 0x34]
push eax
call fcn.0044204a
add esp, 4
lea eax, [esp + 0x514]
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c5a7
sub eax, edx
push eax
lea ecx, [esp + 0x518]
push ecx
lea ecx, [esp + 0x16c]
call fcn.00401960
add ebp, 0xd
cmp esi, 4
jb 0x40c4a6
mov ebx, 0x10
jmp 0x40c71c
push str.__WEP_KEY_STRENGTH_64_LENGTH
call fcn.00421450
mov edi, eax
call fcn.00421970
add esp, 4
xor esi, esi
lea ebp, [esp + 0x23f]
lea ebx, [esi + 0x10]
lea ecx, [ecx]
push 0xff
lea edx, [esp + 0x319]
push 0
push edx
mov byte [esp + 0x320], 0
call fcn.00461780
add esp, 0xc
cmp byte [esp + 0x23e], 0
jne 0x40c645
push ebp
lea edi, [esp + 0x318]
mov ebx, 5
call fcn.00430360
add esp, 4
mov ebx, 0x10
jmp 0x40c670
push 0x100
lea eax, [esp + 0x318]
push 0
push eax
call fcn.00461780
mov ecx, dword [ebp]
mov dl, byte [ebp + 4]
add esp, 0xc
mov dword [esp + 0x314], ecx
mov byte [esp + 0x318], dl
lea eax, [esp + 0x1d4]
push eax
lea ecx, [esp + 0x168]
push ecx
lea edi, [esp + 0x1c]
call fcn.0040e950
add esp, 8
cmp dword [eax + 0x18], ebx
jb 0x40c696
mov eax, dword [eax + 4]
jmp 0x40c699
add eax, 4
add esi, 1
push esi
lea edx, [esp + 0x318]
push edx
push eax
lea eax, [esp + 0x520]
push 0x7d0
push eax
call fcn.0045ecdb
add esp, 0x14
cmp dword [esp + 0x2c], ebx
jb 0x40c6ce
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0044204a
add esp, 4
lea eax, [esp + 0x514]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c6f0
sub eax, edx
push eax
lea edx, [esp + 0x518]
push edx
lea ecx, [esp + 0x16c]
call fcn.00401960
add ebp, 0xd
cmp esi, 4
jb 0x40c600
lea eax, [esp + 0x1f0]
push eax
lea ecx, [esp + 0x168]
push ecx
lea edi, [esp + 0x1c]
call fcn.0040e950
add esp, 8
cmp dword [eax + 0x18], ebx
jb 0x40c742
mov eax, dword [eax + 4]
jmp 0x40c745
add eax, 4
push eax
lea edx, [esp + 0x518]
push 0x7d0
push edx
call fcn.0045ecdb
add esp, 0xc
cmp dword [esp + 0x2c], ebx
jb 0x40c936
mov eax, dword [esp + 0x18]
push eax
call fcn.0044204a
add esp, 4
jmp 0x40c936
cmp al, 3
jne 0x40c855
lea eax, [esp + 0x23e]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c790
sub eax, edx
lea ecx, [esp + 0x23e]
push ecx
lea edi, [esp + 0x318]
mov ebx, eax
call fcn.00430360
add esp, 4
test eax, eax
jne 0x40c827
lea ecx, [esp + 0x148]
call fcn.004017d0
lea ecx, [esp + 0x1f0]
call fcn.004017d0
lea ecx, [esp + 0x1d4]
call fcn.004017d0
lea ecx, [esp + 0x180]
call fcn.004017d0
lea ecx, [esp + 0x19c]
call fcn.004017d0
lea ecx, [esp + 0x1b8]
call fcn.004017d0
lea ecx, [esp + 0x164]
call fcn.004017d0
lea esi, [esp + 0x4c]
mov dword [esp + 0xdf0], 0xffffffff
call fcn.00402240
xor eax, eax
jmp 0x40cb5a
cmp dword [esp + 0x160], esi
mov eax, dword [esp + 0x14c]
jae 0x40c83e
lea eax, [esp + 0x14c]
lea edx, [esp + 0x314]
push edx
push str.TKIP
push str.WPA_PSK
jmp 0x40c918
cmp al, 5
jne 0x40c8b5
lea eax, [esp + 0x23e]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c863
sub eax, edx
lea ecx, [esp + 0x23e]
push ecx
lea edi, [esp + 0x318]
mov ebx, eax
call fcn.00430360
add esp, 4
test eax, eax
je 0x40c7b8
cmp dword [esp + 0x160], esi
mov eax, dword [esp + 0x14c]
jae 0x40c8a6
lea eax, [esp + 0x14c]
lea edx, [esp + 0x314]
push edx
push 0x48dff4
jmp 0x40c913
cmp al, 6
jne 0x40c936
lea eax, [esp + 0x23e]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c8c3
sub eax, edx
lea ecx, [esp + 0x23e]
push ecx
lea edi, [esp + 0xce8]
mov ebx, eax
call fcn.00430360
add esp, 4
test eax, eax
je 0x40c7b8
cmp dword [esp + 0x160], esi
mov eax, dword [esp + 0x14c]
jae 0x40c906
lea eax, [esp + 0x14c]
lea edx, [esp + 0xce4]
push edx
push str.AESOrTKIP
push 0x48c354
lea ecx, [esp + 0x420]
push ecx
push eax
lea edx, [esp + 0x528]
push 0x7d0
push edx
call fcn.0045ecdb
add esp, 0x1c
lea eax, [esp + 0x514]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c940
sub eax, edx
push eax
lea eax, [esp + 0x518]
push eax
lea ecx, [esp + 0x16c]
call fcn.00401960
mov esi, dword [esp + 0x1bc]
mov ebp, 0x10
cmp dword [esp + 0x1d0], ebp
jae 0x40c97c
lea esi, [esp + 0x1bc]
mov edi, dword [esp + 0x54]
xor ebx, ebx
cmp edi, ebx
je 0x40c9de
mov eax, dword [esp + 0x9c]
cmp eax, ebx
jne 0x40c9ca
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x40c9bd
push str.PutPage
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
mov dword [esp + 0x9c], eax
jne 0x40c9ca
push str.EWSIntf::put_page:_Function_not_found_in_DLL:_PutPage_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40c9de
push str.EWSIntf::put_page:_Attempting_to_lookup_PutPage_with_no_DLL_handle_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40c9de
lea ecx, [esp + 0x28c]
push ecx
lea edx, [esp + 0x518]
push edx
push esi
push edi
call eax
cmp dword [esp + 0x160], ebp
jb 0x40c9f7
mov eax, dword [esp + 0x14c]
push eax
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x208], ebp
mov esi, 0xf
mov dword [esp + 0x160], esi
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], 0
jb 0x40ca2b
mov ecx, dword [esp + 0x1f4]
push ecx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1ec], ebp
mov dword [esp + 0x208], esi
mov dword [esp + 0x204], ebx
mov byte [esp + 0x1f4], 0
jb 0x40ca5a
mov edx, dword [esp + 0x1d8]
push edx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x198], ebp
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1e8], ebx
mov byte [esp + 0x1d8], 0
jb 0x40ca89
mov eax, dword [esp + 0x184]
push eax
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1b4], ebp
mov dword [esp + 0x198], esi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], 0
jb 0x40cab8
mov ecx, dword [esp + 0x1a0]
push ecx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x1d0], ebp
mov dword [esp + 0x1b4], esi
mov dword [esp + 0x1b0], ebx
mov byte [esp + 0x1a0], 0
jb 0x40cae7
mov edx, dword [esp + 0x1bc]
push edx
call fcn.0044204a
add esp, 4
cmp dword [esp + 0x17c], ebp
mov dword [esp + 0x1d0], esi
mov dword [esp + 0x1cc], ebx
mov byte [esp + 0x1bc], 0
jb 0x40cb16
mov eax, dword [esp + 0x168]
push eax
call fcn.0044204a
add esp, 4
cmp edi, ebx
mov dword [esp + 0x17c], esi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], 0
mov dword [esp + 0xdf0], 0xffffffff
je 0x40cb46
mov eax, dword [esp + 0x68]
cmp eax, ebx
je 0x40cb46
push edi
call eax
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x40cb55
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov ecx, dword [esp + 0xde8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xdd0]
xor ecx, esp
call fcn.0045e88c
add esp, 0xde0
ret 0x80