Function at 0x457664
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7bf8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa88
xor eax, eax
mov al, byte [0x5220eb]
test eax, eax
jne 0x4576d6
xor ecx, ecx
mov cl, byte [0x521a05]
test ecx, ecx
je 0x4576d6
xor edx, edx
mov dl, byte [0x521a47]
test edx, edx
jne 0x4576d6
xor eax, eax
mov al, byte [0x521db0]
test eax, eax
jne 0x4576d6
xor ecx, ecx
mov cl, byte [0x505ed6]
test ecx, ecx
jne 0x4576d6
xor edx, edx
mov dl, byte [0x505ed7]
test edx, edx
jne 0x4576d6
call fcn.00454510
and eax, 0xff
test eax, eax
je 0x4576db
jmp 0x4581f7
xor eax, eax
mov al, byte [0x522141]
test eax, eax
je 0x4576eb
jmp 0x4581f7
mov byte [0x522141], 1
mov byte [ebp - 0x10], 0
xor ecx, ecx
mov cl, byte [0x5220ea]
test ecx, ecx
je 0x4581f0
xor edx, edx
mov dl, byte [0x5220eb]
test edx, edx
jne 0x4581f0
push str._Check_RTLDHCP_
call fcn.0040e045
add esp, 4
lea ecx, [ebp - 0x48]
call fcn.00406f30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.00406f30
mov byte [ebp - 4], 1
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
cmp dword [0x521dbc], 2
je 0x4577cd
push 0x4f92f4
call fcn.0040e045
add esp, 4
mov dword [ebp - 0x3dc], 5
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
push 0
push 0x4f9318
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [0x521dbc], 2
je 0x4577cd
cmp dword [ebp - 0x3dc], 0
je 0x4577cd
mov eax, dword [ebp - 0x3dc]
sub eax, 1
mov dword [ebp - 0x3dc], eax
push str._Check_RTLDHCP___Do_VWiFi_Start_
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
jmp 0x457781
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
cmp dword [0x521dbc], 2
je 0x457815
push str._Check_RTLDHCP_VWiFi_Start_Fail_
call fcn.0040e045
add esp, 4
mov byte [0x522141], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.004a32a4
jmp 0x4581f7
push 0x32
push 0
lea ecx, [ebp - 0x44]
push ecx
call fcn.0048a490
add esp, 0xc
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.RtlLib.dll_RT_GetMacAddress]
add esp, 4
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
lea edx, [ebp - 0x3d8]
push edx
push 0x4f9374
lea eax, [ebp - 0x48]
push eax
call fcn.0049faa5
add esp, 0xc
lea ecx, [ebp - 0x214]
push ecx
push 0x4f9378
lea edx, [ebp - 0x50]
push edx
call fcn.0049faa5
add esp, 0xc
push 0x32
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetMacAddress]
add esp, 4
and eax, 0xff
test eax, eax
je 0x457a43
push 0x388
push 0
lea edx, [ebp - 0x3d8]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
and eax, 0xff
test eax, eax
je 0x457a43
lea ecx, [ebp - 0x4b0]
call fcn.00406f30
mov byte [ebp - 4], 2
push 0xc8
push 0
lea edx, [ebp - 0x4a8]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x3e0], eax
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetGUID]
mov dword [ebp - 0x3e0], eax
mov ecx, dword [ebp - 0x3e0]
push ecx
call fcn.0049e8d2
add esp, 4
mov edx, dword [ebp - 0x3e0]
push edx
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x45796a
mov eax, dword [ebp - 0x3e0]
push eax
push 0x4f937c
push 0x5220f0
call fcn.0048a750
add esp, 0xc
mov ecx, dword [ebp - 0x3e0]
push ecx
push 0x4f9384
lea edx, [ebp - 0x4b0]
push edx
call fcn.0049faa5
add esp, 0xc
lea ecx, [ebp - 0x4ac]
call fcn.00406f30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4b4]
call fcn.00406f30
mov byte [ebp - 4], 4
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.004a342d
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x4b4]
call fcn.004a342d
lea ecx, [ebp - 0x4b0]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x4ac]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x4579e2
lea edx, [ebp - 0x3d8]
push edx
push 0x4f9388
lea eax, [ebp - 0x48]
push eax
call fcn.0049faa5
add esp, 0xc
jmp 0x457a16
lea ecx, [ebp - 0x4b0]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x4b4]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x457a16
lea ecx, [ebp - 0x214]
push ecx
push 0x4f938c
lea edx, [ebp - 0x48]
push edx
call fcn.0049faa5
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4b4]
call fcn.004a32a4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4ac]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4b0]
call fcn.004a32a4
mov eax, dword [0x52213c]
add eax, 1
mov dword [0x52213c], eax
push 0x4f9390
lea ecx, [ebp - 0x48]
call fcn.0042e0a0
test eax, eax
je 0x458008
push 0x4f93a0
lea ecx, [ebp - 0x50]
call fcn.0042e0a0
test eax, eax
je 0x458008
cmp dword [0x52213c], 3
jge 0x458008
push str._Check_RTLDHCP___ReStart_VWiFi_
call fcn.0040e045
add esp, 4
mov byte [0x5220eb], 1
mov byte [0x522132], 0
push str._Disable_RTLDHCP_
call fcn.0040e045
add esp, 4
push str.RTLDHCP__q
lea ecx, [ebp - 0xa5c]
call fcn.004a3364
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa5c]
push ecx
lea edx, [ebp - 0xa60]
push edx
call fcn.0042c922
add esp, 4
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0xa7c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xa7c]
push ecx
lea edx, [ebp - 0x51c]
push edx
call fcn.004a34d3
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xa60]
call fcn.004a32a4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa5c]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x51c]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
push str._Set_IP_192.168.100.1__4_
call fcn.0040e045
add esp, 4
push 0x4f941c
push 0x4f942c
push 0
push 0
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x10
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Stop]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x528], 5
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
push 0
push 0x4f943c
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [0x521dbc], 2
je 0x457bd7
cmp dword [ebp - 0x528], 0
je 0x457bd7
mov eax, dword [ebp - 0x528]
sub eax, 1
mov dword [ebp - 0x528], eax
push 0x4f9450
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
jmp 0x457b8b
cmp dword [0x521dbc], 2
je 0x457c0f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x51c]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.004a32a4
jmp 0x4581f7
lea ecx, [ebp - 0x520]
call fcn.00406f30
mov byte [ebp - 4], 0xa
push 0x4f9464
lea ecx, [ebp - 0x520]
call fcn.004a342d
mov dword [ebp - 0x524], 0xa
lea ecx, [ebp - 0x518]
push ecx
call dword [sym.imp.RtlLib.dll_RT_GetMacAddress]
add esp, 4
push 0x388
push 0
lea edx, [ebp - 0x8b0]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0x518]
push ecx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
lea edx, [ebp - 0x8b0]
push edx
lea ecx, [ebp - 0x8b4]
call fcn.004a3312
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x520]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x8b4]
call fcn.0042e0a0
test eax, eax
je 0x457edb
cmp dword [ebp - 0x524], 0
je 0x457edb
push str._wait_Set_IP_192.168.100.1_
call fcn.0040e045
add esp, 4
push 0x522174
push 0x522178
push 0x4f9494
push 0x4f94a4
push 0
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetNicTcpipAddr]
add esp, 0x18
mov eax, dword [ebp - 0x524]
sub eax, 1
mov dword [ebp - 0x524], eax
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x8b8], 0
push 0x32
push 0
lea ecx, [ebp - 0x518]
push ecx
call fcn.0048a490
add esp, 0xc
lea edx, [ebp - 0x518]
push edx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetMacAddress]
add esp, 4
and eax, 0xff
test eax, eax
je 0x457ed6
push 0x388
push 0
lea eax, [ebp - 0x8b0]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x8b0]
push ecx
lea edx, [ebp - 0x518]
push edx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
and eax, 0xff
test eax, eax
je 0x457ed6
lea ecx, [ebp - 0x98c]
call fcn.00406f30
mov byte [ebp - 4], 0xc
push 0xc8
push 0
lea eax, [ebp - 0x984]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x984]
mov dword [ebp - 0x8bc], ecx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetGUID]
mov dword [ebp - 0x8bc], eax
mov edx, dword [ebp - 0x8bc]
push edx
call fcn.0049e8d2
add esp, 4
mov eax, dword [ebp - 0x8bc]
push eax
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x457e09
mov ecx, dword [ebp - 0x8bc]
push ecx
push 0x4f94b4
push 0x5220f0
call fcn.0048a750
add esp, 0xc
mov edx, dword [ebp - 0x8bc]
push edx
push 0x4f94bc
lea eax, [ebp - 0x98c]
push eax
call fcn.0049faa5
add esp, 0xc
lea ecx, [ebp - 0x988]
call fcn.00406f30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x990]
call fcn.00406f30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x874]
push ecx
lea ecx, [ebp - 0x988]
call fcn.004a342d
lea edx, [ebp - 0x6b0]
push edx
lea ecx, [ebp - 0x990]
call fcn.004a342d
lea ecx, [ebp - 0x98c]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x988]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x457e7b
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.004a342d
jmp 0x457ea9
lea ecx, [ebp - 0x98c]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x990]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x457ea9
lea ecx, [ebp - 0x6ec]
push ecx
lea ecx, [ebp - 0x8b4]
call fcn.004a342d
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x990]
call fcn.004a32a4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x988]
call fcn.004a32a4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98c]
call fcn.004a32a4
jmp 0x457c8b
lea ecx, [ebp - 0x520]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x8b4]
call fcn.0042e0a0
test eax, eax
jne 0x457fd2
mov byte [ebp - 0x10], 1
push str._Run_RTLDHCP_
call fcn.0040e045
add esp, 4
push 0x4f94d0
lea ecx, [ebp - 0xa64]
call fcn.004a3364
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0xa64]
push edx
lea eax, [ebp - 0xa68]
push eax
call fcn.0042c922
add esp, 4
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0xa80]
mov dword [ebp - 0xa84], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xa84]
push edx
lea eax, [ebp - 0xa6c]
push eax
call fcn.004a34d3
mov dword [ebp - 0xa88], eax
mov ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xa8c]
push edx
lea ecx, [ebp - 0x51c]
call fcn.004a33dd
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa6c]
call fcn.004a32a4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa68]
call fcn.004a32a4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa64]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x51c]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x5220eb], 0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8b4]
call fcn.004a32a4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x520]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x51c]
call fcn.004a32a4
jmp 0x45800c
mov byte [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
and eax, 0xff
test eax, eax
je 0x4580e1
lea ecx, [ebp - 0x4c]
push ecx
push 0x4f94e8
call fcn.00443e60
add esp, 8
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 1
jge 0x4580e1
push str._Check_RTLDHCP___ReRun_RTLDHCP_
call fcn.0040e045
add esp, 4
push 0x4f9518
lea ecx, [ebp - 0xa70]
call fcn.004a3364
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0xa70]
push edx
lea eax, [ebp - 0xa74]
push eax
call fcn.0042c922
add esp, 4
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xa94]
push edx
lea eax, [ebp - 0x998]
push eax
call fcn.004a34d3
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa74]
call fcn.004a32a4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa70]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x998]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x998]
call fcn.004a32a4
xor ecx, ecx
mov cl, byte [0x521e92]
test ecx, ecx
je 0x4581d5
cmp dword [0x52213c], 3
jge 0x4581d5
mov dword [ebp - 0xa58], 0
push 0x32
push 0
lea edx, [ebp - 0xa50]
push edx
call fcn.0048a490
add esp, 0xc
push 0x80
push 0
lea eax, [ebp - 0xa18]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0xa18]
push ecx
lea edx, [ebp - 0xa50]
push edx
lea eax, [ebp - 0xa58]
push eax
call dword [sym.imp.RtlICS.dll_Ordinal_3]
add esp, 0xc
lea ecx, [ebp - 0xa50]
push ecx
lea ecx, [ebp - 0xa54]
call fcn.004a3312
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0xa18]
push edx
lea ecx, [ebp - 0xa1c]
call fcn.004a3312
mov byte [ebp - 4], 0x18
push 0x5220f0
lea ecx, [ebp - 0xa54]
call fcn.0042e0a0
test eax, eax
jne 0x4581a3
push 0x522068
lea ecx, [ebp - 0xa1c]
call fcn.0042e0a0
test eax, eax
je 0x4581b7
push str._Check_RTLDHCP___bDoInitVWiFi_IPtrue_
call fcn.0040e045
add esp, 4
mov byte [0x522132], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xa1c]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa54]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.004a32a4
mov byte [0x522141], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret