Function at 0x454871
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c790e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5e8
mov dword [ebp - 0x4b0], 0x4f8b3c
mov dword [ebp - 0x14], 0x4f8b4c
lea ecx, [ebp - 0x80]
call fcn.00406f30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.00406f30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.00406f30
mov byte [ebp - 4], 2
push str._Do_Set_ICS_for_VWiFi_Started_
call fcn.0040e045
add esp, 4
mov dword [ebp - 0x108], 0
lea eax, [ebp - 0x108]
push eax
push 0x4f8b80
call fcn.00443e60
add esp, 8
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
jle 0x4549a9
push 0x4f8b8c
call fcn.0040e045
add esp, 4
push 0x4f8ba0
lea ecx, [ebp - 0x5d8]
call fcn.004a3364
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5d8]
push ecx
lea edx, [ebp - 0x5dc]
push edx
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x5ec], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x5ec]
push ecx
lea edx, [ebp - 0x4f8]
push edx
call fcn.004a34d3
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5dc]
call fcn.004a32a4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5d8]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f8]
call fcn.004a32a4
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
push 0x5787cc
call dword [sym.imp.RtlICS.dll_Ordinal_3]
add esp, 0xc
cmp dword [0x5787cc], 0
jne 0x4549e5
push 0x5787d0
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x454a3a
push str._Set_IP_to_DHCP__5_
call fcn.0040e045
add esp, 4
push 0x522148
push 0x52214c
push 1
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetSoftAP_TcpIpAddress]
add esp, 0x10
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
mov eax, dword [0x5787cc]
push eax
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Stop]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x118], 5
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
push 0
push 0x4f8bcc
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [0x521dbc], 2
je 0x454ab9
cmp dword [ebp - 0x118], 0
je 0x454ab9
mov ecx, dword [ebp - 0x118]
sub ecx, 1
mov dword [ebp - 0x118], ecx
push 0x4f8be0
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
jmp 0x454a6d
cmp dword [0x521dbc], 2
je 0x454af1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.004a32a4
jmp 0x45524e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
je 0x454b16
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
jne 0x454b32
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x454b16
mov dword [0x5787cc], 1
push 0x522068
push 0x5220f0
mov edx, dword [0x5787cc]
push edx
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
and eax, 0xff
test eax, eax
jne 0x454bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
je 0x454b84
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
jne 0x454ba0
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x454b84
push 0x522068
push 0x5220f0
mov eax, dword [0x5787cc]
push eax
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
push 0x522068
call dword [sym.imp.RtlICS.dll_Ordinal_5]
add esp, 4
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x4f4], 0
push 0x32
push 0
lea ecx, [ebp - 0x4e8]
push ecx
call fcn.0048a490
add esp, 0xc
push 0x80
push 0
lea edx, [ebp - 0x100]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x4e8]
push ecx
lea edx, [ebp - 0x4f4]
push edx
call dword [sym.imp.RtlICS.dll_Ordinal_3]
add esp, 0xc
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x4f0]
call fcn.004a3312
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
push ecx
lea ecx, [ebp - 0x4a8]
call fcn.004a3312
mov byte [ebp - 4], 9
push 0x5220f0
lea ecx, [ebp - 0x4f0]
call fcn.0042e0a0
test eax, eax
jne 0x454c7b
push 0x522068
lea ecx, [ebp - 0x4a8]
call fcn.0042e0a0
test eax, eax
je 0x454d02
mov dword [0x5787cc], 1
push 0x522068
push 0x5220f0
mov edx, dword [0x5787cc]
push edx
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
and eax, 0xff
test eax, eax
jne 0x454d02
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
je 0x454ccd
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlICS.dll_CheckICS]
and eax, 0xff
test eax, eax
jne 0x454ce9
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x454ccd
push 0x522068
push 0x5220f0
mov eax, dword [0x5787cc]
push eax
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
push str._Set_IP_192.168.100.1__2_
call fcn.0040e045
add esp, 4
push 0x4f8c10
push 0x4f8c20
push 0
push 0
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x10
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Stop]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x118], 5
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
push 0
push 0x4f8c30
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [0x521dbc], 2
je 0x454da5
cmp dword [ebp - 0x118], 0
je 0x454da5
mov ecx, dword [ebp - 0x118]
sub ecx, 1
mov dword [ebp - 0x118], ecx
push 0x4f8c44
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
jmp 0x454d59
cmp dword [0x521dbc], 2
je 0x454dfb
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4a8]
call fcn.004a32a4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f0]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.004a32a4
jmp 0x45524e
lea ecx, [ebp - 0x104]
call fcn.00406f30
mov byte [ebp - 4], 0xa
push 0x4f8c58
lea ecx, [ebp - 0x104]
call fcn.004a342d
mov dword [ebp - 0x114], 5
push 0x4f8c68
lea ecx, [ebp - 0x5e0]
call fcn.004a3364
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x5e0]
push edx
lea eax, [ebp - 0x5e4]
push eax
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x5f0], eax
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp - 0x5f4], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x5f4]
push edx
lea eax, [ebp - 0x110]
push eax
call fcn.004a34d3
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5e4]
call fcn.004a32a4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5e0]
call fcn.004a32a4
push 0x64
push 0
lea ecx, [ebp - 0x78]
push ecx
call fcn.0048a490
add esp, 0xc
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.RtlLib.dll_RT_GetMacAddress]
add esp, 4
push 0x388
push 0
lea eax, [ebp - 0x4a4]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x4a4]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.004a3312
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x104]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x4b4]
call fcn.0042e0a0
test eax, eax
je 0x45513a
cmp dword [ebp - 0x114], 0
je 0x45513a
push 0x4f8c80
call fcn.0040e045
add esp, 4
push 0x522150
push 0x522154
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x4b0]
push edx
push 0
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetNicTcpipAddr]
add esp, 0x18
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x114]
sub eax, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x4fc], 0
push 0x32
push 0
lea ecx, [ebp - 0x78]
push ecx
call fcn.0048a490
add esp, 0xc
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetMacAddress]
add esp, 4
and eax, 0xff
test eax, eax
je 0x455135
push 0x388
push 0
lea eax, [ebp - 0x4a4]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x4a4]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
and eax, 0xff
test eax, eax
je 0x455135
lea ecx, [ebp - 0x5d0]
call fcn.00406f30
mov byte [ebp - 4], 0x11
push 0xc8
push 0
lea eax, [ebp - 0x5c8]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x500], ecx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetGUID]
mov dword [ebp - 0x500], eax
mov edx, dword [ebp - 0x500]
push edx
call fcn.0049e8d2
add esp, 4
mov eax, dword [ebp - 0x500]
push eax
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x455068
mov ecx, dword [ebp - 0x500]
push ecx
push 0x4f8ca0
push 0x5220f0
call fcn.0048a750
add esp, 0xc
mov edx, dword [ebp - 0x500]
push edx
push 0x4f8ca8
lea eax, [ebp - 0x5d0]
push eax
call fcn.0049faa5
add esp, 0xc
lea ecx, [ebp - 0x5cc]
call fcn.00406f30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x5d4]
call fcn.00406f30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x468]
push ecx
lea ecx, [ebp - 0x5cc]
call fcn.004a342d
lea edx, [ebp - 0x2a4]
push edx
lea ecx, [ebp - 0x5d4]
call fcn.004a342d
lea ecx, [ebp - 0x5d0]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x5cc]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x4550da
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.004a342d
jmp 0x455108
lea ecx, [ebp - 0x5d0]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x5d4]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x455108
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x4b4]
call fcn.004a342d
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x5d4]
call fcn.004a32a4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5cc]
call fcn.004a32a4
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x5d0]
call fcn.004a32a4
jmp 0x454ef2
mov dword [ebp - 0x10], 0xa
mov dword [ebp - 0x11c], 0
lea edx, [ebp - 0x11c]
push edx
push 0x4f8cac
call fcn.00443e60
add esp, 8
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 1
jge 0x4551c5
cmp dword [ebp - 0x10], 0
je 0x4551c5
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
push 0x4f8cb8
call fcn.0040e045
add esp, 4
push 0
lea ecx, [ebp - 0x110]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x11c]
push ecx
push 0x4f8cc8
call fcn.00443e60
add esp, 8
mov dword [ebp - 0x4ec], eax
jmp 0x455165
push 0
lea ecx, [ebp - 0x110]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4b4]
call fcn.004a32a4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x110]
call fcn.004a32a4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x104]
call fcn.004a32a4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4a8]
call fcn.004a32a4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f0]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.004a32a4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret