Function at 0x45a6ea
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ce4a3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
lea ecx, [ebp - 0x54]
call fcn.00406f30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00406f30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.00406f30
mov byte [ebp - 4], 2
mov dword [ebp - 0x4c], 0
xor eax, eax
mov al, byte [0x5d451e]
test eax, eax
jne 0x45a764
xor ecx, ecx
mov cl, byte [0x5d541e]
test ecx, ecx
jne 0x45a764
xor edx, edx
mov dl, byte [0x5d5438]
test edx, edx
jne 0x45a764
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
jne 0x45a790
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
mov byte [0x5d541f], 1
cmp dword [0x5d53dc], 0
je 0x45a7af
mov ecx, dword [0x5d53dc]
sub ecx, 1
mov dword [0x5d53dc], ecx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x48], 0
xor edx, edx
mov dl, byte [0x5b8441]
test edx, edx
jne 0x45ab07
call dword [sym.imp.RtlLib.dll_RT_ACM_SoftAP_GetStatus]
mov dword [0x5d437c], eax
lea eax, [ebp - 0x4c]
push eax
push 0x549ce4
call fcn.004447c0
add esp, 8
mov dword [ebp - 0x58], eax
cmp dword [0x5d437c], 2
jne 0x45a81b
cmp dword [ebp - 0x58], 1
jl 0x45a81b
push 0x5d5274
push 0x5d53e4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
test eax, eax
jne 0x45ab02
cmp dword [ebp - 0x5c], 0x14
jge 0x45ab02
push 0x32
push 0
lea ecx, [ebp - 0x44]
push ecx
call fcn.00493430
add esp, 0xc
cmp dword [0x5d4510], 0
jle 0x45a9ce
mov edx, dword [0x5d4510]
sub edx, 1
mov dword [0x5d4510], edx
push 0x5d5274
push 0x5d53e4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
test eax, eax
jne 0x45a9ce
xor eax, eax
mov al, byte [0x5d451e]
test eax, eax
jne 0x45a89f
xor ecx, ecx
mov cl, byte [0x5d541e]
test ecx, ecx
jne 0x45a89f
xor edx, edx
mov dl, byte [0x5d5438]
test edx, edx
jne 0x45a89f
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
jne 0x45a8d2
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
push 0x549cf0
push 0x549cf4
push 0x549cfc
call fcn.0042908d
add esp, 0xc
push 0x549d0c
lea ecx, [ebp - 0x70]
call fcn.004ad180
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x74]
push edx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x60]
push edx
call fcn.004ad2ef
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.004ad0c0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.004ad0c0
push 0
lea ecx, [ebp - 0x60]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
push eax
push 0x549d24
call fcn.004448bb
add esp, 8
cmp dword [ebp - 0x64], 0
je 0x45a98a
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.004449bf
add esp, 4
cmp dword [ebp - 0x64], 0
jne 0x45a960
push 0x5d51a8
push 0x5d5274
push 0
push 0x5d53e4
call dword [sym.imp.RtlLib.dll_RT_SetSoftAP_TcpIpAddress]
add esp, 0x10
push str.VWiFi___Set_Default_IP___
call fcn.0040d6f5
add esp, 4
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
call fcn.004ad0c0
push 0x5d5274
push 0x5d53e4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
cmp eax, 1
jne 0x45ab02
xor edx, edx
mov dl, byte [0x5d451e]
test edx, edx
jne 0x45aa1e
xor eax, eax
mov al, byte [0x5d541e]
test eax, eax
jne 0x45aa1e
xor ecx, ecx
mov cl, byte [0x5d5438]
test ecx, ecx
jne 0x45aa1e
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
jne 0x45aa51
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
lea eax, [ebp - 0x4c]
push eax
push 0x549d4c
call fcn.004447c0
add esp, 8
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x45ab02
push 0x549d58
call fcn.0040d6f5
add esp, 4
push 0x5d520c
push 0x5d5240
push 0x5d5274
lea ecx, [ebp - 0x78]
push ecx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x94], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
push ecx
push 0x549d7c
lea edx, [ebp - 0x54]
push edx
call fcn.004a988a
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
call fcn.004ad0c0
xor eax, eax
mov al, byte [0x5b835c]
test eax, eax
je 0x45aaf1
push 1
lea ecx, [ebp - 0x54]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x45ab02
push 0
lea ecx, [ebp - 0x54]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x45aeda
push str.SoftAP_Do_Setting_RtlDHCP__
call fcn.0040d6f5
add esp, 4
lea ecx, [ebp - 0x4c]
push ecx
push 0x549dbc
call fcn.004447c0
add esp, 8
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jl 0x45ab4e
push 0x5d5274
push 0x5b83f4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
test eax, eax
jne 0x45aeda
push 0x5d5274
push 0x5b83f4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
test eax, eax
jne 0x45acfb
xor edx, edx
mov dl, byte [0x5d451e]
test edx, edx
jne 0x45ab9d
xor eax, eax
mov al, byte [0x5d541e]
test eax, eax
jne 0x45ab9d
xor ecx, ecx
mov cl, byte [0x5d5438]
test ecx, ecx
jne 0x45ab9d
xor edx, edx
mov dl, byte [0x5d3fc5]
test edx, edx
jne 0x45abd0
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
push 0x549dc8
push str.DoICS
push 0x549dd4
call fcn.0042908d
add esp, 0xc
push 0x549de4
lea ecx, [ebp - 0x7c]
call fcn.004ad180
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x98], eax
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x9c], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x68]
push ecx
call fcn.004ad2ef
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x80]
call fcn.004ad0c0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x7c]
call fcn.004ad0c0
push 0
lea ecx, [ebp - 0x68]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x6c], 0
lea edx, [ebp - 0x6c]
push edx
push 0x549dfc
call fcn.004448bb
add esp, 8
cmp dword [ebp - 0x6c], 0
je 0x45ac88
mov eax, dword [ebp - 0x6c]
push eax
call fcn.004449bf
add esp, 4
cmp dword [ebp - 0x6c], 0
jne 0x45ac5e
cmp dword [0x5d3fc0], 0x6d
jl 0x45acb3
push 0x5d51a8
push 0x5d5274
push 0
push 0x5b83f4
call dword [sym.imp.RtlLib.dll_RT_SetSoftAP_TcpIpAddress]
add esp, 0x10
jmp 0x45acef
push str.Jacken___Vista_SoftAP_RT_SetNicTcpipAddr__
call fcn.0040d6f5
add esp, 4
push 0x5d5454
push 0x5d5458
push 0x5d51a8
push 0x5d5274
push 0
push 0x5b83f4
call dword [sym.imp.RtlLib.dll_RT_SetNicTcpipAddr]
add esp, 0x18
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x68]
call fcn.004ad0c0
cmp dword [ebp - 0x5c], 0x14
jge 0x45aeda
push 0x5d5274
push 0x5b83f4
call dword [sym.imp.RtlLib.dll_RT_Check_Current_NIC_IPAddress]
add esp, 8
and eax, 0xff
cmp eax, 1
jne 0x45ae49
xor ecx, ecx
mov cl, byte [0x5d451e]
test ecx, ecx
jne 0x45ad55
xor edx, edx
mov dl, byte [0x5d541e]
test edx, edx
jne 0x45ad55
xor eax, eax
mov al, byte [0x5d5438]
test eax, eax
jne 0x45ad55
xor ecx, ecx
mov cl, byte [0x5d3fc5]
test ecx, ecx
jne 0x45ad88
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
lea edx, [ebp - 0x4c]
push edx
push str.rtldhcp.exe
call fcn.004447c0
add esp, 8
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x45ae42
push str._Check_RTLDHCP___ReRun_RTLDHCP_
call fcn.0040d6f5
add esp, 4
push 0x5d520c
push 0x5d5240
push 0x5d5274
lea eax, [ebp - 0x84]
push eax
call fcn.0042c094
add esp, 4
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xa4]
mov eax, dword [edx]
push eax
push 0x549e68
lea ecx, [ebp - 0x54]
push ecx
call fcn.004a988a
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x84]
call fcn.004ad0c0
xor edx, edx
mov dl, byte [0x5b835c]
test edx, edx
je 0x45ae2f
push 1
lea ecx, [ebp - 0x54]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x45ae40
push 0
lea ecx, [ebp - 0x54]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x45ae47
jmp 0x45aeda
jmp 0x45aebf
xor eax, eax
mov al, byte [0x5d451e]
test eax, eax
jne 0x45ae77
xor ecx, ecx
mov cl, byte [0x5d541e]
test ecx, ecx
jne 0x45ae77
xor edx, edx
mov dl, byte [0x5d5438]
test edx, edx
jne 0x45ae77
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
jne 0x45aea7
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
jmp 0x45af08
push 0x549e8c
call fcn.0040d6f5
add esp, 4
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.Jacken___Vista_SoftAP_Do_Setting_RtlDHCP___checktimes
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
jmp 0x45acfb
mov byte [0x5d541f], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004ad0c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret