Function at 0x45525c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c79d2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5b8
mov dword [ebp - 0x18], 0x4f8cd4
mov dword [ebp - 0x10], 0x4f8ce4
lea ecx, [ebp - 0x14]
call fcn.00406f30
mov dword [ebp - 4], 0
xor eax, eax
mov al, byte [0x5220ea]
test eax, eax
je 0x45585d
push str._Do_RtlDHCP_for_VWiFi_Started_
call fcn.0040e045
add esp, 4
push 0x4f8d18
call fcn.0040e045
add esp, 4
push 0x4f8d2c
lea ecx, [ebp - 0x580]
call fcn.004a3364
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x580]
push ecx
lea edx, [ebp - 0x584]
push edx
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x5a4]
push ecx
lea edx, [ebp - 0x588]
push edx
call fcn.004a34d3
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x5ac], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x5ac]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004a33dd
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x588]
call fcn.004a32a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x584]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x580]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x14]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
push 0x5787cc
call dword [sym.imp.RtlICS.dll_Ordinal_3]
add esp, 0xc
cmp dword [0x5787cc], 0
jne 0x4553b2
push 0x5787d0
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x455408
push str._Set_IP_to_DHCP__6_
call fcn.0040e045
add esp, 4
push 0x522158
push 0x52215c
push 1
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetSoftAP_TcpIpAddress]
add esp, 0x10
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
mov edx, dword [0x5787cc]
push edx
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._Set_IP_192.168.100.1__3_
call fcn.0040e045
add esp, 4
push 0x4f8d74
push 0x4f8d84
push 0
push 0
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x10
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Stop]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x88], 5
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
push 0
push 0x4f8d94
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [0x521dbc], 2
je 0x4554ab
cmp dword [ebp - 0x88], 0
je 0x4554ab
mov eax, dword [ebp - 0x88]
sub eax, 1
mov dword [ebp - 0x88], eax
push 0x4f8da8
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Start]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
jmp 0x45545f
cmp dword [0x521dbc], 2
je 0x4554c8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004a32a4
jmp 0x455aad
lea ecx, [ebp - 0x80]
call fcn.00406f30
mov byte [ebp - 4], 4
push 0x4f8dbc
lea ecx, [ebp - 0x80]
call fcn.004a342d
mov dword [ebp - 0x84], 0xa
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.RtlLib.dll_RT_GetMacAddress]
add esp, 4
push 0x388
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
lea edx, [ebp - 0x410]
push edx
lea ecx, [ebp - 0x414]
call fcn.004a3312
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x80]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x414]
call fcn.0042e0a0
test eax, eax
je 0x45577a
cmp dword [ebp - 0x84], 0
je 0x45577a
push 0x4f8dcc
call fcn.0040e045
add esp, 4
push 0x522160
push 0x522164
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetNicTcpipAddr]
add esp, 0x18
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x84]
sub edx, 1
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x418], 0
push 0x32
push 0
lea eax, [ebp - 0x7c]
push eax
call fcn.0048a490
add esp, 0xc
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetMacAddress]
add esp, 4
and eax, 0xff
test eax, eax
je 0x455775
push 0x388
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.IpLib.dll_GetIpInformation]
add esp, 8
and eax, 0xff
test eax, eax
je 0x455775
lea ecx, [ebp - 0x4ec]
call fcn.00406f30
mov byte [ebp - 4], 6
push 0xc8
push 0
lea edx, [ebp - 0x4e4]
push edx
call fcn.0048a490
add esp, 0xc
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x41c], eax
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetGUID]
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x41c]
push ecx
call fcn.0049e8d2
add esp, 4
mov edx, dword [ebp - 0x41c]
push edx
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x4556a8
mov eax, dword [ebp - 0x41c]
push eax
push 0x4f8dec
push 0x5220f0
call fcn.0048a750
add esp, 0xc
mov ecx, dword [ebp - 0x41c]
push ecx
push 0x4f8df4
lea edx, [ebp - 0x4ec]
push edx
call fcn.0049faa5
add esp, 0xc
lea ecx, [ebp - 0x4e8]
call fcn.00406f30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4f0]
call fcn.00406f30
mov byte [ebp - 4], 8
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x4e8]
call fcn.004a342d
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0x4f0]
call fcn.004a342d
lea ecx, [ebp - 0x4ec]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x4e8]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x45571a
lea edx, [ebp - 0x410]
push edx
lea ecx, [ebp - 0x414]
call fcn.004a342d
jmp 0x455748
lea ecx, [ebp - 0x4ec]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x4f0]
call fcn.0049f764
cmp eax, 0xffffffff
je 0x455748
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x414]
call fcn.004a342d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4f0]
call fcn.004a32a4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4e8]
call fcn.004a32a4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4ec]
call fcn.004a32a4
jmp 0x455538
push 0x4f8df8
call fcn.0040e045
add esp, 4
push 0x4f8e08
lea ecx, [ebp - 0x58c]
call fcn.004a3364
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x58c]
push ecx
lea edx, [ebp - 0x590]
push edx
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x5b4], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x5b4]
push ecx
lea edx, [ebp - 0x594]
push edx
call fcn.004a34d3
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x5bc], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x5bc]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004a33dd
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x594]
call fcn.004a32a4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x590]
call fcn.004a32a4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x58c]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x14]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x414]
call fcn.004a32a4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.004a32a4
jmp 0x455a9e
push str._Do_Disable_ICS_for_VWiFi_Stop_
call fcn.0040e045
add esp, 4
push 0x4f8e44
call fcn.0040e045
add esp, 4
push 0x4f8e58
lea ecx, [ebp - 0x598]
call fcn.004a3364
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x598]
push edx
lea eax, [ebp - 0x59c]
push eax
call fcn.0042c922
add esp, 4
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c4], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x5c4]
push edx
lea eax, [ebp - 0x4f4]
push eax
call fcn.004a34d3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x59c]
call fcn.004a32a4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x598]
call fcn.004a32a4
push 0
lea ecx, [ebp - 0x4f4]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
push 0x5787cc
call dword [sym.imp.RtlICS.dll_Ordinal_3]
add esp, 0xc
and eax, 0xff
test eax, eax
je 0x455a68
cmp dword [0x5787cc], 0
jne 0x455949
push 0x5787d0
call fcn.0048a4f0
add esp, 4
test eax, eax
je 0x455a68
push str._Set_IP_to_DHCP__7_
call fcn.0040e045
add esp, 4
push 0x522168
push 0x52216c
push 1
push 0x5220f0
call dword [sym.imp.RtlLib.dll_RT_SetSoftAP_TcpIpAddress]
add esp, 0x10
lea ecx, [ebp - 0x578]
mov dword [ebp - 0x4f8], ecx
push 0x80
push 0
mov edx, dword [ebp - 0x4f8]
push edx
call fcn.0048a490
add esp, 0xc
mov eax, dword [ebp - 0x4f8]
push eax
push 0x5220f0
call fcn.0045a54d
add esp, 8
and eax, 0xff
test eax, eax
je 0x455a2b
lea ecx, [ebp - 0x57c]
call fcn.00406f30
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4f8]
push ecx
push str.netsh_interface_ip_reset___s_
lea edx, [ebp - 0x57c]
push edx
call fcn.0049faa5
add esp, 0xc
push 0
lea ecx, [ebp - 0x57c]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp - 0x4f8]
push eax
push str.ipconfig__release___s_
lea ecx, [ebp - 0x57c]
push ecx
call fcn.0049faa5
add esp, 0xc
push 0
lea ecx, [ebp - 0x57c]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x57c]
call fcn.004a32a4
mov dword [0x5787cc], 0
push 0x578804
push 0x5787d0
mov edx, dword [0x5787cc]
push edx
call dword [sym.imp.RtlICS.dll_Ordinal_2]
add esp, 0xc
push 0x522170
call dword [sym.imp.RtlICS.dll_Ordinal_5]
add esp, 4
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x521dbc], eax
cmp dword [0x521dbc], 2
jne 0x455a8f
push 0x4f8ebc
call fcn.0040e045
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_Stop]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4f4]
call fcn.004a32a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004a32a4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret