Function at 0x42973e
Capabilities:
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc792
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf4
mov dword [ebp - 0x100], ecx
xor eax, eax
mov al, byte [0x5d4370]
test eax, eax
je 0x429772
jmp 0x429fc2
xor ecx, ecx
mov cl, byte [0x5d450c]
test ecx, ecx
je 0x429783
jmp 0x429fc2
xor edx, edx
mov dl, byte [0x5d3ffd]
test edx, edx
je 0x4297a1
mov ecx, dword [ebp - 0x100]
call fcn.004245a9
mov byte [0x5d3ffd], 0
call dword [sym.imp.RtlLib.dll_RT_GetStatusHardwareRadioOff]
mov byte [ebp - 0xe0], al
push 0x64
lea eax, [ebp - 0x70]
push eax
push 0x84
call fcn.00412d30
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x64
lea ecx, [ebp - 0xd8]
push ecx
push 0x85
call fcn.00412d30
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
cmp dword [0x5d38e4], 0
jne 0x429844
lea ecx, [ebp - 0xf0]
call fcn.0044d160
lea ecx, [ebp - 0xf0]
call fcn.0042db10
push eax
mov ecx, dword [ebp - 0x100]
call fcn.0042de40
mov edx, dword [ebp - 0xf0]
mov dword [0x5d3934], edx
mov eax, dword [ebp - 0xec]
mov dword [0x5d3930], eax
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp - 0xf0]
mov dword [0x534fe0], ecx
mov edx, dword [ebp - 0xe4]
sub edx, dword [ebp - 0xec]
mov dword [0x534fe4], edx
push 0xb0
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov dword [ebp - 0xdc], eax
xor eax, eax
mov al, byte [0x53c0d5]
test eax, eax
je 0x42988d
cmp dword [0x5d3fc0], 0x6b
jge 0x42988d
xor ecx, ecx
mov cl, byte [0x5d3fbc]
push ecx
mov ecx, dword [ebp - 0xdc]
call fcn.00414690
jmp 0x429a30
cmp dword [0x5d3fc0], 0x6d
jl 0x429a22
xor edx, edx
mov dl, byte [0x5b7bd0]
test edx, edx
je 0x429a22
lea ecx, [ebp - 0xf8]
call fcn.00406f30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.00406f30
mov byte [ebp - 4], 1
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
je 0x4299ff
cmp dword [0x5d400c], 1
jne 0x4299ff
xor ecx, ecx
mov cl, byte [0x5d53e1]
test ecx, ecx
je 0x429914
push 0
push 0xb0
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0d06
jmp 0x429933
push 1
push 0xb0
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0d06
mov edx, dword [ebp + 8]
and edx, 0xff
test edx, edx
je 0x429983
mov eax, dword [0x5d3948]
push eax
push str._s_allowed
lea ecx, [ebp - 0xf8]
push ecx
call fcn.004a988a
add esp, 0xc
lea ecx, [ebp - 0xf8]
call fcn.00406f50
push eax
push 0x534
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0b7f
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_IsEnable]
and eax, 0xff
test eax, eax
je 0x42999b
mov byte [0x5d4379], 1
jmp 0x4299a2
mov byte [0x5d4379], 0
xor edx, edx
mov dl, byte [0x5d4379]
test edx, edx
je 0x4299bd
push 1
mov ecx, dword [ebp - 0xdc]
call fcn.00414690
jmp 0x4299ca
push 0
mov ecx, dword [ebp - 0xdc]
call fcn.00414690
xor eax, eax
mov al, byte [0x5b8449]
xor ecx, ecx
mov cl, byte [0x5d4379]
cmp eax, ecx
jne 0x4299ea
mov edx, dword [ebp + 8]
and edx, 0xff
test edx, edx
je 0x4299f5
mov ecx, dword [ebp - 0x100]
call fcn.0042cba5
mov al, byte [0x5d4379]
mov byte [0x5b8449], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.004ad0c0
jmp 0x429a30
mov byte [0x5d4379], 0
mov byte [0x5d437a], 0
xor ecx, ecx
mov cl, byte [0x5d3fbd]
test ecx, ecx
je 0x429a8a
call fcn.0042d2de
and eax, 0xff
test eax, eax
jne 0x429a8a
push 5
push 0x533
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0cc4
push 5
push 0x2b00
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0cc4
jmp 0x429ac8
push 0
push 0x533
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0cc4
push 0
push 0x2b00
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov ecx, eax
call fcn.004b0cc4
push 0x2aff
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov dword [ebp - 0xdc], eax
push 0x2b49
mov ecx, dword [ebp - 0x100]
add ecx, 0xd0
call fcn.004b09fd
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0xdc], 0
je 0x429b35
push 0
mov edx, dword [0x5b7b84]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x429b28
push 0
mov ecx, dword [ebp - 0xdc]
call fcn.004b0d06
jmp 0x429b35
push 1
mov ecx, dword [ebp - 0xdc]
call fcn.004b0d06
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
je 0x429f5b
xor ecx, ecx
mov cl, byte [0x5d4380]
test ecx, ecx
jne 0x429f5b
xor edx, edx
mov dl, byte [0x5d4378]
test edx, edx
jne 0x429dbe
xor eax, eax
mov al, byte [0x5d403e]
test eax, eax
je 0x429c1c
xor ecx, ecx
mov cl, byte [0x5d4380]
test ecx, ecx
jne 0x429b8b
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
jne 0x429b90
jmp 0x429fc2
mov byte [0x5d4508], 0
mov byte [0x5d403e], 0
mov eax, dword [0x5d400c]
mov dword [0x5b844c], eax
mov byte [0x5d4005], 0
mov ecx, dword [ebp - 0x100]
call fcn.0042cbdd
mov ecx, dword [ebp - 0x100]
call fcn.004245a9
push 1
mov ecx, dword [ebp - 0x100]
call fcn.00429297
call fcn.0043f022
call fcn.0042ce03
mov byte [0x5d4515], 1
cmp dword [0x5d38e4], 0
jne 0x429c17
push 0x60
mov ecx, dword [0x534fe4]
push ecx
mov edx, dword [0x534fe0]
push edx
mov eax, dword [0x5d3930]
push eax
mov ecx, dword [0x5d3934]
push ecx
push 0
call fcn.00410f70
mov ecx, eax
call fcn.004b0c75
jmp 0x429dbe
xor edx, edx
mov dl, byte [0x5d403d]
test edx, edx
je 0x429d07
xor eax, eax
mov al, byte [0x5d4380]
test eax, eax
jne 0x429c43
xor ecx, ecx
mov cl, byte [0x5d3fc5]
test ecx, ecx
jne 0x429c48
jmp 0x429fc2
mov byte [0x5d4508], 0
mov byte [0x5b7f04], 0
mov byte [0x5d403d], 0
mov edx, dword [0x5d400c]
mov dword [0x5b844c], edx
mov byte [0x5d4005], 1
mov eax, dword [0x5d3fc8]
mov dword [0x527da4], eax
call dword [sym.imp.RtlLib.dll_RT_AP_GetIsAPMode]
and eax, 0xff
test eax, eax
jne 0x429c8f
call dword [sym.imp.RtlLib.dll_RT_AP_SwitchToAPMode]
push 1
mov ecx, dword [ebp - 0x100]
call fcn.00429297
mov ecx, dword [ebp - 0x100]
call fcn.0042c603
mov ecx, dword [ebp - 0x100]
call fcn.004245a9
call fcn.0042ce03
cmp dword [0x5d3fc8], 1
je 0x429cce
mov byte [0x5b7f04], 0
mov byte [0x5b8440], 1
cmp dword [0x5d38e4], 0
jne 0x429d02
push 0x60
mov ecx, dword [0x534fe4]
push ecx
mov edx, dword [0x534fe0]
push edx
mov eax, dword [0x5d3930]
push eax
mov ecx, dword [0x5d3934]
push ecx
push 0
call fcn.00410f70
mov ecx, eax
call fcn.004b0c75
jmp 0x429dbe
xor edx, edx
mov dl, byte [0x5d3fc6]
test edx, edx
je 0x429dbe
xor eax, eax
mov al, byte [0x5d403c]
test eax, eax
je 0x429dbe
xor ecx, ecx
mov cl, byte [0x5d4380]
test ecx, ecx
jne 0x429d3e
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
jne 0x429d43
jmp 0x429fc2
mov byte [0x5d4508], 0
mov byte [0x5d403c], 0
mov eax, dword [0x5d400c]
mov dword [0x5b844c], eax
mov byte [0x5d4005], 0
mov ecx, dword [ebp - 0x100]
call fcn.0042cc07
mov ecx, dword [ebp - 0x100]
call fcn.004245a9
push 1
mov ecx, dword [ebp - 0x100]
call fcn.00429297
call fcn.0042ce03
cmp dword [0x5d38e4], 0
jne 0x429dbe
push 0x60
mov ecx, dword [0x534fe4]
push ecx
mov edx, dword [0x534fe0]
push edx
mov eax, dword [0x5d3930]
push eax
mov ecx, dword [0x5d3934]
push ecx
push 0
call fcn.00410f70
mov ecx, eax
call fcn.004b0c75
mov edx, dword [ebp - 0xe0]
and edx, 0xff
test edx, edx
je 0x429eb5
xor eax, eax
mov al, byte [0x5b834e]
test eax, eax
jne 0x429e68
call dword [sym.imp.RtlLib.dll_RT_AP_GetIsAPMode]
and eax, 0xff
test eax, eax
jne 0x429e68
cmp dword [0x5d37bc], 0
je 0x429e68
cmp dword [0x5d37bc], 0xdddddddd
je 0x429e68
push 0
mov ecx, dword [0x5d37b4]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x429e68
mov byte [0x5d436d], 1
mov dword [ebp - 0xfc], 5
push 0
mov edx, dword [0x5d37b4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x429e61
cmp dword [ebp - 0xfc], 0
je 0x429e61
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0xfc]
sub eax, 1
mov dword [ebp - 0xfc], eax
jmp 0x429e29
mov byte [0x5d436d], 0
mov byte [0x5b834e], 1
mov byte [0x5b8350], 1
mov ecx, dword [ebp - 0xdc]
call fcn.004b0ceb
test eax, eax
je 0x429eb0
push 0
mov ecx, dword [ebp - 0xdc]
call fcn.004b0cc4
push 5
mov ecx, dword [ebp - 0x74]
call fcn.004b0cc4
push 1
mov ecx, dword [ebp - 0x74]
call fcn.00414690
push 0
mov ecx, dword [ebp - 0x74]
call fcn.004b0d06
jmp 0x429f59
mov ecx, dword [ebp + 8]
and ecx, 0xff
test ecx, ecx
jne 0x429ee0
mov ecx, dword [ebp - 0xdc]
call fcn.0042de60
test eax, eax
je 0x429ee0
mov ecx, dword [ebp - 0xdc]
call fcn.004b0ceb
test eax, eax
je 0x429f2e
push 0
mov ecx, dword [ebp - 0x74]
call fcn.004b0cc4
push 5
mov ecx, dword [ebp - 0xdc]
call fcn.004b0cc4
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
je 0x429f21
call dword [sym.imp.RtlLib.dll_RT_GetIsRadioOff]
mov byte [0x5b834f], al
xor eax, eax
mov al, byte [0x5b834f]
push eax
mov ecx, dword [ebp - 0xdc]
call fcn.00414690
push 1
mov ecx, dword [ebp - 0xdc]
call fcn.004b0d06
xor ecx, ecx
mov cl, byte [0x5b834e]
test ecx, ecx
je 0x429f59
xor edx, edx
mov dl, byte [0x5d4378]
test edx, edx
jne 0x429f59
mov byte [0x5b834e], 0
mov byte [0x53c0e0], 1
call fcn.0043f022
jmp 0x429fc2
push 0
mov eax, dword [0x5b7b84]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x429fab
cmp dword [0x5b7bd4], 0
je 0x429fa1
push 0
mov ecx, dword [0x5b7bd4]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [0x5b7bd4]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x5b7bd4], 0
mov ecx, 0x5b7b80
call fcn.0042daa0
push 0
mov ecx, dword [ebp - 0xdc]
call fcn.004b0cc4
push 0
mov ecx, dword [ebp - 0x74]
call fcn.004b0cc4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4