How does it create two access points

[justcallmekoko]

I have been reading through the source for a while now and I can't piece it together. How does the ESP8266 host two access points? One is the hidden attacker interface (espbug) and the other is the victim interface hosting the captive portal.

How is this accomplished? I don't see exactly where in the source this is done.