Function at 0x48629a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d0ae6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2dc
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0x11c]
call fcn.00406f30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.00406f30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x190]
call fcn.00406f30
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x118]
call fcn.00406f30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.00406f30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00406f30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2b8]
call fcn.00406f30
mov byte [ebp - 4], 6
push 0x200
mov ecx, 0x5d3e18
call fcn.004ad4f0
push eax
lea ecx, [ebp - 0x10c]
call fcn.0042314e
mov dword [ebp - 0x198], 0
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x2d8], edx
mov eax, dword [ebp - 0x2d8]
add eax, 0x1000000
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x2a
ja case.0x48639c.17
mov edx, dword [ebp - 0x2d8]
xor ecx, ecx
mov cl, byte [edx + 0x486d9f]
jmp dword [ecx*4 + 0x486d57]
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2c0], ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx]
mov dword [0x661f24], eax
mov ecx, dword [0x62ba9c]
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx]
mov dword [ecx], eax
mov dword [ebp - 0x2a8], 0
jmp 0x4863ea
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [edx]
jae 0x486541
push 6
mov ecx, dword [ebp - 0x2a8]
imul ecx, ecx, 0x8b0
mov edx, dword [ebp - 0x2c0]
lea eax, [edx + ecx + 0x1b]
push eax
mov ecx, dword [ebp - 0x2a8]
imul ecx, ecx, 0x18
mov edx, dword [0x62ba9c]
lea eax, [edx + ecx + 4]
push eax
call fcn.00493550
add esp, 0xc
test eax, eax
jne 0x486473
push 0x899
mov ecx, dword [ebp - 0x2a8]
imul ecx, ecx, 0x8b0
mov edx, dword [ebp - 0x2c0]
lea eax, [edx + ecx + 5]
push eax
mov ecx, dword [ebp - 0x2a8]
imul ecx, ecx, 0x899
add ecx, 0x62c358
push ecx
call fcn.004952d0
add esp, 0xc
jmp 0x4863db
push 6
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x8b0
mov eax, dword [ebp - 0x2c0]
lea ecx, [eax + edx + 0x1b]
push ecx
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x18
mov eax, dword [0x62ba9c]
lea ecx, [eax + edx + 4]
push ecx
call fcn.004952d0
add esp, 0xc
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x8b0
mov eax, dword [ebp - 0x2c0]
lea ecx, [eax + edx + 0x8a0]
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x18
mov eax, dword [0x62ba9c]
lea edx, [eax + edx + 0xc]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
push 0x899
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x8b0
mov eax, dword [ebp - 0x2c0]
lea ecx, [eax + edx + 5]
push ecx
mov edx, dword [ebp - 0x2a8]
imul edx, edx, 0x899
add edx, 0x62c358
push edx
call fcn.004952d0
add esp, 0xc
mov eax, dword [ebp - 0x2a8]
imul eax, eax, 0x899
add eax, 0x62c358
push eax
mov ecx, dword [ebp - 0x2d4]
call fcn.004879d5
jmp 0x4863db
push str.DIAG_NOTE_RTL_P2P_SCAN_LIST
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
mov eax, dword [edx]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
add edx, 4
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax + 4]
add ecx, 0xa
mov dword [ebp - 0x2ac], ecx
push str.DIAG_NOTE_RTL_P2P_GO_FORMATED_n
call fcn.0040d6f5
add esp, 4
push 0x16
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx + 4]
push eax
push str.pGoNegoInfo:
call fcn.0040e1fa
add esp, 0xc
cmp dword [ebp - 0x19c], 0
je 0x48681c
push str.Status___P2P_STATUS_SUCCESS_n
call fcn.0040d6f5
add esp, 4
cmp dword [ebp - 0x19c], 1
jne 0x48673c
push str.Status__P2P_STATUS_FAIL_INFORMATION_IS_UNAVAILABLE_n
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x2ac]
xor edx, edx
mov dl, byte [ecx + 1]
cmp edx, 1
jne 0x486737
push str.pGoNegoInfo__ReasonCode___P2P_GO_NEGO_REASON_CODE_DPI_NOT_MATCH_n
call fcn.0040d6f5
add esp, 4
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 8], 4
jne 0x486660
push str.pGoNegoInfo__PeerWpsDevPasswdId__P2P_WPS_DEV_PASSWD_ID_PBC
call fcn.0040d6f5
add esp, 4
mov byte [0x661f3a], 1
mov ecx, dword [ebp - 0x184]
push ecx
mov edx, dword [ebp - 0x2bc]
add edx, 0xc
sub esp, 0x10
mov eax, esp
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
push 2
mov ecx, dword [ebp - 0x2d4]
call fcn.00488db9
jmp 0x486737
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 8], 0
je 0x486678
mov ecx, dword [ebp - 0x2ac]
cmp dword [ecx + 8], 1
jne 0x4866e6
push str.pGoNegoInfo__PeerWpsDevPasswdId__P2P_WPS_DEV_PASSWD_ID_DEFAULT_or_P2P_WPS_DEV_PASSWD_ID_USER_SPEC_n
call fcn.0040d6f5
add esp, 4
push 6
push 0
push 0x62ba48
call fcn.00493430
add esp, 0xc
push 6
mov edx, dword [ebp - 0x184]
push edx
push 0x62ba48
call fcn.004930f0
add esp, 0xc
mov eax, dword [ebp - 0x184]
push eax
mov ecx, dword [ebp - 0x2bc]
add ecx, 0xc
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
push 1
mov ecx, dword [ebp - 0x2d4]
call fcn.00488db9
jmp 0x486737
mov edx, dword [ebp - 0x2ac]
cmp dword [edx + 8], 5
jne 0x486737
push str.pGoNegoInfo__PeerWpsDevPasswdId__P2P_WPS_DEV_PASSWD_ID_REG_SPEC
call fcn.0040d6f5
add esp, 4
mov eax, dword [ebp - 0x184]
push eax
mov ecx, dword [ebp - 0x2bc]
add ecx, 0xc
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
push 3
mov ecx, dword [ebp - 0x2d4]
call fcn.00488db9
jmp 0x48681a
push 0x100
push 0
lea edx, [ebp - 0x2a4]
push edx
call fcn.00493430
add esp, 0xc
lea eax, [ebp - 0x2a4]
push eax
push 0x100
push 0
mov ecx, dword [ebp - 0x19c]
push ecx
call dword [sym.imp.P2PLib.dll_P2PLibGetStatusCodeDescription]
add esp, 0x10
lea edx, [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x19c]
push eax
push str.DIAG_NOTE_RTL_P2P_GO_FORMATED_nStatus:__d_nDescription:__s
lea ecx, [ebp - 0x11c]
push ecx
call fcn.004a988a
add esp, 0x10
mov byte [0x661f38], 1
xor edx, edx
mov dl, byte [0x5b836b]
test edx, edx
je 0x4867c5
push 0x40010
push 0x5a7d5c
lea ecx, [ebp - 0x11c]
call fcn.00406f50
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4867fe
cmp dword [ebp - 0x19c], 9
jne 0x4867e7
push 0x40010
push 0x5a7d64
push str.The_Group_Owner_Intent_of_these_two_devices_are_all_be_set_to_15___Please_try_to_change_it_and_connect_again__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4867fe
push 0x40010
push 0x5a7ddc
push str.Associate_fail___Please_try_to_connect_again__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x661f2d], 1
mov byte [0x661f2e], 1
mov byte [0x661f31], 0
mov byte [0x662139], 0
jmp 0x486823
mov byte [0x661f39], 1
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_ON_PROVISION_DISCOVERY_REQ_n
call fcn.0040d6f5
add esp, 4
xor eax, eax
mov al, byte [0x661f3d]
test eax, eax
jne 0x4868a0
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
mov eax, dword [edx]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
add edx, 4
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x184]
push eax
mov ecx, dword [ebp - 0x2bc]
add ecx, 0xc
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x114]
push edx
mov ecx, dword [ebp - 0x2d4]
call fcn.00488db9
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_ON_PROVISION_DISCOVERY_RSP_n
call fcn.0040d6f5
add esp, 4
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov dword [ebp - 0x110], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x2d4]
call fcn.00488ed0
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_ON_INVITATION_REQ_n
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2b4], edx
xor eax, eax
mov al, byte [0x662139]
test eax, eax
jne 0x486a27
push 0x64
push 0
lea ecx, [ebp - 0x180]
push ecx
call fcn.00493430
add esp, 0xc
mov edx, dword [ebp - 0x2b4]
xor eax, eax
mov al, byte [edx + 0x19]
push eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 0x1a
push ecx
lea edx, [ebp - 0x180]
push edx
call fcn.004930f0
add esp, 0xc
push str.Reinvoke
push str.Msg25_Title
push 0x5a7eb4
lea ecx, [ebp - 0x10c]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x2b8]
call fcn.004ad249
push str.Invoked_to_join_:
push str.Msg25_Value1
push 0x5a7ee4
lea ecx, [ebp - 0x10c]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x118]
call fcn.004ad249
push str.Do_you_accept_to_reinvoke_it__
push str.Msg25_Value2
push str.MessageBox
lea ecx, [ebp - 0x10c]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x188]
call fcn.004ad249
mov eax, dword [ebp - 0x188]
push eax
lea ecx, [ebp - 0x180]
push ecx
mov edx, dword [ebp - 0x118]
push edx
push str._s__s__n_s
lea eax, [ebp - 0x2b0]
push eax
call fcn.004a988a
add esp, 0x14
push 0x40024
lea ecx, [ebp - 0x2b8]
call fcn.00406f50
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00406f50
push eax
call fcn.00410f70
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 6
jne 0x486a25
mov edx, dword [ebp - 0x2b4]
push edx
mov ecx, dword [ebp - 0x2d4]
call fcn.0048920e
jmp 0x486a39
mov eax, dword [ebp - 0x2b4]
push eax
mov ecx, dword [ebp - 0x2d4]
call fcn.0048920e
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_ON_INVITATION_RSP_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_INDIC_STATE_VERBOSE_n
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
mov dword [0x62ba44], edx
mov eax, dword [0x62ba44]
push eax
mov ecx, dword [ebp - 0x2d4]
call fcn.004886c6
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_PORT_REMOVED_n
call fcn.0040d6f5
add esp, 4
push str.DIAG_NOTE_RTL_P2P_ADAPTER_ARRIVAL_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
push 0x40040
push str.CALLBACK
push str.Service_Updated
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.DIAG_NOTE_RTL_P2P_SERVICE_UPDATED_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x1a4]
push eax
call fcn.00440a27
add esp, 4
push str.DIAG_NOTE_RTL_P2P_PROFILE_SAVED_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_START_AP_REQ_n
call fcn.0040d6f5
add esp, 4
push 0
push 0x5d51a8
push 0x5d5274
push 0
push 0
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x14
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_STOP_AP_REQ_n
call fcn.0040d6f5
add esp, 4
push 0
push 0x661f68
push 0x661f6c
push 0
push 1
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x14
jmp case.0x48639c.17
call fcn.0045a6ea
push str.START_DHCP_n
call fcn.0040d6f5
add esp, 4
push str.DIAG_NOTE_RTL_P2P_GO_STARTED_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
push 0
push 0x661f70
push 0x661f74
push 0
push 1
call dword [sym.imp.RtlLib.dll_RT_SetVWiFi_TcpIpAddress]
add esp, 0x14
push str._Check_RTLDHCP___Close_RTLDHCP_
call fcn.0040d6f5
add esp, 4
push str.RTLDHCP__q
lea ecx, [ebp - 0x2c4]
call fcn.004ad180
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c4]
push ecx
lea edx, [ebp - 0x2c8]
push edx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2e0]
push ecx
lea edx, [ebp - 0x2cc]
push edx
call fcn.004ad2ef
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2e8]
push ecx
lea ecx, [ebp - 0x190]
call fcn.004ad1f9
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2cc]
call fcn.004ad0c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c8]
call fcn.004ad0c0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c4]
call fcn.004ad0c0
push 0
lea ecx, [ebp - 0x190]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x18c], 0
lea edx, [ebp - 0x18c]
push edx
push str.RTLDHCP.exe
call fcn.004448bb
add esp, 8
cmp dword [ebp - 0x18c], 0
je 0x486c8c
mov eax, dword [ebp - 0x18c]
push eax
call fcn.004449bf
add esp, 4
cmp dword [ebp - 0x18c], 0
jne 0x486c56
push str.DIAG_NOTE_RTL_P2P_GO_STOPPED_n
call fcn.0040d6f5
add esp, 4
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_ENABLED_n
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x2d4]
call fcn.00487254
jmp case.0x48639c.17
push str.DIAG_NOTE_RTL_P2P_DISABLED_n
call fcn.0040d6f5
add esp, 4
mov dword [ebp - 0x2d0], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2b8]
call fcn.004ad0c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.004ad0c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.004ad0c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x118]
call fcn.004ad0c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x190]
call fcn.004ad0c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c]
call fcn.004ad0c0
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8