Function at 0x41d66d
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9ec4
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, str.PerformWiFiPasswordRecovery
push ebx
push str._s___Starting_the_WiFi_Password_Recovery....
call fcn.00449974
pop ecx
pop ecx
call fcn.00449844
push ebx
test eax, eax
jne 0x41d6b2
push str._n_s____Not_Recovering_WiFi_Passwords___XP_or_lower_Vista_OS_detected_.....
call fcn.00449974
pop ecx
pop ecx
jmp 0x41d94c
push str._n_s___Impersonate_user_as_System.....
call fcn.00449974
pop ecx
pop ecx
call fcn.00412925
test eax, eax
jne 0x41d6fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._s___Failed_to_impersonate_as_system_0x_.8x
call fcn.00449974
push 0xffffffffffffffff
mov eax, 0x66ae5d
push eax
push str.Error:_Not_enough_permission._Try_running_this_application_as_Administrator
push eax
push eax
push eax
push 0xffffffffffffffff
push 9
call fcn.00412c85
add esp, 0x2c
jmp 0x41d94c
push esi
push edi
push 0xd
pop ecx
mov esi, str.C:ProgramDataMicrosoftWlansvcProfilesInterfaces
lea edi, [ebp - 0x4e24]
rep movsd dword es:[edi], dword [esi]
push 0x26db
lea eax, [ebp - 0x4def]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.00626f50
add esp, 0xc
lea eax, [ebp - 0x9c44]
mov esi, 0x2710
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x41d746
mov al, byte [ebp - 0x9c44]
mov byte [ebp - 0x4e24], al
push 0x66d678
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x4e24]
push eax
push ebx
push str._s___Enumerating_WiFi_interfaces_within_folder__s
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x9d84]
push eax
lea eax, [ebp - 0x4e24]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x41d92b
mov edi, dword [sym.imp.KERNEL32.dll_FindClose]
test byte [ebp - 0x9d84], 0x10
je 0x41d90d
lea eax, [ebp - 0x9d58]
push 0x67feac
push eax
call fcn.00631370
pop ecx
pop ecx
test eax, eax
je 0x41d90d
lea eax, [ebp - 0x9d58]
push 0x67feb0
push eax
call fcn.00631370
pop ecx
pop ecx
test eax, eax
je 0x41d90d
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x2714]
push 0x2710
push eax
call fcn.006311ec
lea eax, [ebp - 0x2714]
push eax
call fcn.00631510
add esp, 0x10
mov ecx, 0x2710
dec eax
cmp eax, ecx
jae 0x41d959
mov byte [ebp + eax - 0x2714], 0
lea eax, [ebp - 0x9d58]
push eax
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00631246
lea eax, [ebp - 0x2714]
push eax
push ebx
push str._s___Enumerating_XML_file_for_WIFI_interface__s
call fcn.00449974
push 0x66d678
lea eax, [ebp - 0x2714]
push 0x2710
push eax
call fcn.00631246
add esp, 0x24
lea eax, [ebp - 0x9ec4]
push eax
lea eax, [ebp - 0x2714]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41d923
test byte [ebp - 0x9ec4], 0x10
jne 0x41d8ef
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x7534]
push 0x2710
push eax
call fcn.006311ec
lea eax, [ebp - 0x7534]
push eax
call fcn.00631510
add esp, 0x10
mov ecx, 0x2710
dec eax
cmp eax, ecx
jae 0x41d959
mov byte [ebp + eax - 0x7534], 0
lea eax, [ebp - 0x9e98]
push eax
push ecx
lea eax, [ebp - 0x7534]
push eax
call fcn.00631246
lea eax, [ebp - 0x7534]
push eax
push str.PerformWiFiPasswordRecovery
push str._s___Found_XML_Configuration_File__s
call fcn.00449974
lea eax, [ebp - 0x7534]
push eax
call fcn.0043c37a
add esp, 0x1c
lea eax, [ebp - 0x9ec4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41d870
push ebx
call edi
mov ebx, str.PerformWiFiPasswordRecovery
lea eax, [ebp - 0x9d84]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41d792
push esi
call edi
mov ebx, str.PerformWiFiPasswordRecovery
push ebx
push str._s___Finished_enumerating_all_wifi_interfaces
call fcn.00449974
push ebx
push str._n_n_s___Reverting_the_system_user_impersonation...
call fcn.00449974
add esp, 0x10
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
call fcn.005fe87a
int3