Function at 0x4b0750
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x57e133
mov eax, dword fs:[0]
push eax
sub esp, 0x260
mov eax, dword [0x5d7050]
xor eax, esp
mov dword [esp + 0x25c], eax
push ebx
push ebp
push edi
mov eax, dword [0x5d7050]
xor eax, esp
push eax
lea eax, [esp + 0x270]
mov dword fs:[0], eax
mov dword [esi + 4], vtable.IKClientEvent.0
lea edi, [esi + 0xc]
mov dword [esi + 8], vtable.IWifiHttpSrvListener.0
mov dword [esp + 0x10], esi
mov dword [edi], vtable.IPC::Listener.0
xor ebx, ebx
mov dword [esp + 0x278], ebx
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [esi + 0x10], vtable.business::CloudAdvertMgr::Callback.0
mov dword [esi + 0x14], vtable.business::Advert11_11::Callback.0
lea ebp, [esi + 0x10]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], eax
mov byte [esp + 0x278], 1
lea ecx, [esi + 0x40]
push ecx
mov dword [esi], vtable.KMainDlg.0
mov dword [esi + 4], vtable.KMainDlg.1.0
mov dword [esi + 8], vtable.KMainDlg.2.0
mov dword [edi], vtable.KMainDlg.3.0
mov dword [ebp], vtable.KMainDlg.4.0
mov dword [esi + 0x14], vtable.KMainDlg.5.0
mov dword [esi + 0x18], vtable.KMainDlg.6.0
mov dword [esi + 0x3c], ebx
call fcn.00476870
mov dword [esi + 0xa70], ebx
mov dword [esi + 0xa78], ebx
mov dword [esi + 0xab0], ebx
mov dword [esi + 0xac0], ebx
mov dword [esi + 0xabc], ebx
mov dword [esi + 0xac8], ebx
mov dword [esi + 0xab4], ebx
mov dword [esi + 0xab8], ebx
mov byte [esp + 0x278], 3
mov edx, dword [0x5e736c]
mov eax, dword [edx + 0xc]
mov ecx, 0x5e736c
call eax
add eax, 0x10
mov dword [esi + 0xad0], eax
mov byte [esp + 0x278], 4
mov edx, dword [0x5e736c]
mov eax, dword [edx + 0xc]
mov ecx, 0x5e736c
call eax
add eax, 0x10
mov dword [esi + 0xad4], eax
lea eax, [esi + 0xad8]
call fcn.0048b430
lea eax, [esi + 0xba8]
call fcn.0048b430
mov byte [esp + 0x278], 7
mov edx, dword [0x5e736c]
mov eax, dword [edx + 0xc]
mov ecx, 0x5e736c
call eax
add eax, 0x10
mov dword [esi + 0xc78], eax
lea ecx, [esi + 0x18e8]
push ecx
mov byte [esp + 0x27c], 8
call fcn.0052efb0
lea edx, [esi + 0x1914]
mov byte [esp + 0x278], 9
push edx
mov dword [esi + 0x1910], ebx
call fcn.004ae770
lea ecx, [esi + 0x1a60]
mov byte [esp + 0x278], 0xa
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
lea ecx, [esi + 0x1a8c]
mov byte [esp + 0x278], 0xb
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0x278], 0xc
call fcn.004156d0
mov dword [esi + 0x1ab0], eax
mov byte [eax + 0x1d], 1
mov eax, dword [esi + 0x1ab0]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x1ab0]
mov dword [eax], eax
mov eax, dword [esi + 0x1ab0]
mov dword [eax + 8], eax
mov dword [esi + 0x1ab4], ebx
mov byte [esp + 0x278], 0xd
call fcn.004c68c0
mov dword [esi + 0x1abc], eax
mov byte [eax + 0x11], 1
mov eax, dword [esi + 0x1abc]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x1abc]
mov dword [eax], eax
mov eax, dword [esi + 0x1abc]
mov dword [eax + 8], eax
mov dword [esi + 0x1ac0], ebx
mov byte [esp + 0x278], 0xe
call fcn.00412030
mov dword [esi + 0x1ac8], eax
mov byte [eax + 0x15], 1
mov eax, dword [esi + 0x1ac8]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x1ac8]
mov dword [eax], eax
mov eax, dword [esi + 0x1ac8]
mov dword [eax + 8], eax
mov dword [esi + 0x1acc], ebx
lea eax, [esi + 0x1ad8]
call fcn.0048b430
lea ecx, [esi + 0x1bc4]
xor eax, eax
mov byte [esp + 0x278], 0x10
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.00418200
cmp eax, ebx
jge 0x4b09f5
push eax
call fcn.0040fcd0
push edi
lea eax, [esi + 0x1bec]
push eax
mov byte [esp + 0x280], 0x11
call fcn.0040e1e0
mov byte [esp + 0x278], 0x12
mov edx, dword [0x5e736c]
mov eax, dword [edx + 0xc]
mov ecx, 0x5e736c
call eax
add eax, 0x10
mov dword [esi + 0x2cb4], eax
push ebp
lea edi, [esi + 0x2cbc]
mov byte [esp + 0x27c], 0x13
call fcn.00540940
lea eax, [esi + 0x14]
push eax
lea ecx, [esi + 0x2d50]
push ecx
mov byte [esp + 0x280], 0x14
call fcn.00541810
mov dword [esi + 0x2db4], 0x441f90
mov dword [esi + 0x2db8], 0x441fb0
mov dword [esi + 0x2dbc], 0x442040
mov dword [esi + 0x2dc0], 0x442060
mov dword [esi + 0x2dc4], 0x4420a0
mov dword [esi + 0x2dc8], 0x442120
mov dword [esi + 0x2dcc], 0x4421b0
xor eax, eax
mov dword [esi + 0x2dd0], ebx
mov dword [esi + 0x2dd4], ebx
mov dword [esi + 0x2dd8], ebx
mov dword [esi + 0x2ddc], ebx
mov dword [esi + 0x2de0], ebx
mov dword [esi + 0x2de4], ebx
mov dword [esi + 0x2de8], ebx
mov dword [esi + 0x2dec], ebx
mov dword [esi + 0x2df0], ebx
mov dword [esi + 0x2df4], ebx
mov dword [esi + 0x2df8], ebx
mov dword [esi + 0x2dfc], ebx
mov dword [esi + 0x2e00], ebx
mov dword [esi + 0x2e38], ebx
lea ecx, [esi + 0x2e3c]
mov byte [esp + 0x278], 0x1b
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
mov byte [esp + 0x278], 0x1c
mov dword [esi + 0x1aa8], ebx
mov dword [esi + 0xa74], ebx
mov dword [esi + 0xa80], ebx
mov dword [esi + 0xa84], 1
mov dword [esi + 0xa88], ebx
mov dword [esi + 0xaa8], ebx
mov dword [esi + 0xaac], ebx
mov dword [esi + 0xa8c], ebx
mov dword [esi + 0xa94], ebx
mov dword [esi + 0xa98], ebx
mov dword [esi + 0xa9c], ebx
mov dword [esi + 0xaa0], ebx
mov dword [esi + 0xaa4], ebx
mov dword [esi + 0x1874], ebx
mov dword [esi + 0x1878], ebx
mov dword [esi + 0x187c], ebx
mov dword [esi + 0x1880], ebx
mov dword [esi + 0x1884], ebx
mov dword [esi + 0x1888], ebx
mov dword [esi + 0x189c], ebx
mov dword [esi + 0x188c], ebx
push 0xbe4
lea edx, [esi + 0xc7c]
push ebx
push edx
mov dword [esi + 0x1890], ebx
mov dword [esi + 0x1898], ebx
mov dword [esi + 0x18a0], ebx
mov dword [esi + 0x18a4], ebx
mov dword [esi + 0x18a8], ebx
mov dword [esi + 0x18ac], ebx
mov dword [esi + 0x18b0], ebx
mov dword [esi + 0x1894], ebx
mov dword [esi + 0x1ad0], ebx
mov dword [esi + 0x18b4], ebx
mov dword [esi + 0x18e4], ebx
mov dword [esi + 0x1bdc], ebx
mov dword [esi + 0x18b8], ebx
mov dword [esi + 0x18bc], ebx
mov dword [esi + 0x18c4], ebx
mov dword [esi + 0x18c0], ebx
mov dword [esi + 0x18c8], ebx
mov dword [esi + 0x18cc], ebx
mov dword [esi + 0x18d0], ebx
mov dword [esi + 0x18d4], ebx
mov dword [esi + 0x18d8], ebx
mov dword [esi + 0xa7c], ebx
mov dword [esi + 0x18dc], ebx
mov dword [esi + 0x18e0], ebx
mov dword [esi + 0x1864], ebx
mov dword [esi + 0x1868], ebx
mov dword [esi + 0x186c], ebx
mov dword [esi + 0x1870], ebx
call sub.MSVCR80.dll_memset
add esp, 0xc
call fcn.004b7160
push esi
call fcn.004c19d0
xor eax, eax
mov dword [esp + 0x16], eax
mov dword [esp + 0x1a], eax
mov dword [esp + 0x1e], eax
mov dword [esp + 0x22], eax
mov dword [esp + 0x26], eax
mov dword [esp + 0x2a], eax
mov dword [esp + 0x2e], eax
mov dword [esp + 0x32], eax
mov dword [esp + 0x36], eax
mov word [esp + 0x3a], ax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
lea eax, [esp + 0x14]
push eax
mov word [esp + 0x18], bx
call fcn.0046ff40
lea eax, [esp + 0x18]
add esp, 4
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4b0cc5
sub eax, edx
sar eax, 1
lea ecx, [esp + 0x14]
mov ebx, eax
push ecx
lea eax, [esi + 0xad0]
call fcn.00410570
lea eax, [esp + 0x3c]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b0cf0
sub eax, edx
sar eax, 1
lea edx, [esp + 0x3c]
mov ebx, eax
push edx
lea eax, [esi + 0xad4]
call fcn.00410570
push 0x104
lea eax, [esp + 0x68]
push eax
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x64]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.kwifi.ini
lea edx, [esp + 0x68]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0x64]
push eax
lea ecx, [esi + 0x1a8c]
call dword [0x582408]
mov dword [esi + 0x1ba8], ebx
mov dword [esi + 0x1bac], ebx
mov dword [esi + 0x1bb0], ebx
mov dword [esi + 0x1bb4], ebx
mov dword [esi + 0x1be0], ebx
mov dword [esi + 0x1be4], ebx
mov byte [esi + 0x2cb0], bl
mov dword [esi + 0x1be8], ebx
mov eax, esi
mov ecx, dword [esp + 0x270]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x25c]
xor ecx, esp
call fcn.00569ed6
add esp, 0x26c
ret