Function at 0x4ebf30
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea ebx, [edi + 0x14]
mov esi, ebx
call fcn.00515590
test eax, eax
je 0x4ec147
mov eax, dword [ebx + 4]
test eax, eax
je 0x4ec147
lea esi, [edi + 0x88]
push esi
lea ecx, [edi + 0x8c]
push ecx
push 0
push 2
call eax
test eax, eax
jne 0x4ec147
mov eax, dword [ebx + 0x28]
test eax, eax
mov esi, dword [esi]
je 0x4ec147
push 0
push 0
push edi
push 0x4ee7a0
mov ebx, 1
push ebx
push 0x80
push esi
call eax
test eax, eax
jne 0x4ec147
call fcn.004eb800
mov esi, eax
mov ecx, esi
call fcn.004e8b00
test byte [0x6198b8], bl
mov esi, dword [esi + 0xc]
jne 0x4ebfc9
or dword [0x6198b8], ebx
call fcn.0043b8d0
push esi
push str.wifihidtoryuser
call fcn.004a7180
call fcn.004eb800
mov ebx, eax
lea eax, [edi + 0x9c]
push eax
add ebx, 4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [edi + 0x94]
mov eax, dword [edx + 4]
lea esi, [edi + 0x90]
push eax
mov ecx, esi
call fcn.004f2670
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], 0
mov dword [eax], eax
mov esi, dword [esi + 4]
lea eax, [edi + 0x9c]
push eax
mov dword [esi + 8], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
mov esi, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
test esi, esi
mov edx, dword [ebx + 4]
mov dword [esp + 0x1c], edx
je 0x4ec045
cmp esi, ebx
je 0x4ec04f
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
je 0x4ec0b1
test esi, esi
jne 0x4ec063
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x14]
cmp eax, dword [esi + 4]
jne 0x4ec072
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x14]
mov byte [eax + 0x48], 0
cmp eax, dword [esi + 4]
jne 0x4ec085
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x8c]
lea ecx, [eax + 0x18]
mov eax, dword [eax + 0x10]
push edx
push eax
push edi
mov edi, ecx
call fcn.004ef2c0
lea esi, [esp + 0x10]
call fcn.004ea8f0
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 8]
mov eax, dword [esp + 0x14]
jmp 0x4ec036
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [edi + 0x13c], eax
call esi
cmp dword [edi + 0x13c], 0
mov dword [edi + 0x140], eax
je 0x4ec147
test eax, eax
je 0x4ec147
push 0x18
mov esi, 0x4f17e0
xor ebx, ebx
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
test eax, eax
jne 0x4ec0fd
xor esi, esi
jmp 0x4ec125
push 0
push 0
push eax
push 0x4f9150
push 0
push 0
mov dword [eax], edi
mov dword [eax + 0x10], 0
mov dword [eax + 8], esi
mov dword [eax + 0xc], ebx
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
mov esi, eax
mov eax, dword [edi + 0x120]
test eax, eax
je 0x4ec136
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x120], esi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
pop edi
pop esi
mov eax, 0x80004005
pop ebx
mov esp, ebp
pop ebp
ret 4