Function at 0x4aa3d0
Capabilities:
Check mutex on windows
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6153
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
push ebx
push esi
push edi
mov eax, dword [0x629560]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov eax, dword [0x649acc]
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x34], 0x649acc
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x30], eax
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [ebx + 0x2c]
cmp byte [eax + 0x44], 0
je 0x4aa56e
mov ecx, dword [ebp + 8]
cmp ecx, esi
je 0x4aa56e
cmp dword [eax + 0x34], 2
jne 0x4aa442
movzx ecx, word [ecx + 2]
push ecx
jmp 0x4aa447
movzx edx, word [ecx + 2]
push edx
call dword [sym.imp.WS2_32.dll_ntohs]
mov ecx, dword [0x649af0]
mov esi, dword [ecx]
movzx eax, ax
movzx eax, ax
mov edi, 0x649aec
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edi
lea esp, [esp]
test edi, edi
mov edx, dword [0x649af0]
mov dword [ebp - 0x1c], edx
je 0x4aa485
cmp edi, 0x649aec
je 0x4aa48a
call fcn.004f410b
cmp esi, dword [ebp - 0x1c]
je 0x4aa56c
test edi, edi
jne 0x4aa49c
call fcn.004f410b
cmp esi, dword [edi + 4]
jne 0x4aa4a6
call fcn.004f410b
mov eax, dword [ebx + 0x2c]
mov ecx, dword [esi + 0x24]
cmp ecx, dword [eax + 0x34]
jne 0x4aa4e8
cmp esi, dword [edi + 4]
jne 0x4aa4bb
call fcn.004f410b
mov edx, dword [ebx + 0x2c]
mov eax, dword [esi + 0x28]
cmp eax, dword [edx + 0x14]
jne 0x4aa4e8
cmp esi, dword [edi + 4]
jne 0x4aa4d0
call fcn.004f410b
cmp byte [esi + 0x30], 0
je 0x4aa4e8
cmp esi, dword [edi + 4]
jne 0x4aa4e0
call fcn.004f410b
mov ecx, dword [ebp - 0x14]
cmp dword [esi + 0x20], ecx
je 0x4aa4fb
lea esi, [ebp - 0x28]
call fcn.004ad390
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x28]
jmp 0x4aa470
cmp esi, dword [edi + 4]
jne 0x4aa505
call fcn.004f410b
add dword [esi + 0x2c], 1
cmp esi, dword [edi + 4]
jne 0x4aa513
call fcn.004f410b
mov edx, dword [ebx + 0x2c]
mov eax, dword [esi + 0x10]
mov dword [edx + 0x208], eax
cmp esi, dword [edi + 4]
jne 0x4aa529
call fcn.004f410b
mov ecx, dword [ebx + 0x2c]
mov edx, dword [esi + 0x14]
mov dword [ecx + 0x20c], edx
cmp esi, dword [edi + 4]
jne 0x4aa53f
call fcn.004f410b
cmp dword [ebp - 0x30], 0xffffffff
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x44], eax
je 0x4aa558
mov ecx, dword [0x649acc]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
xor esi, esi
mov eax, dword [ebx + 0x2c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x34]
mov dword [ebp - 0x44], edx
mov dl, byte [eax + 0x44]
mov eax, dword [ebx + 0x1c]
push 0x18
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], 1
mov byte [ebp - 0x3c], dl
mov dword [ebp - 0x38], eax
call fcn.004d3c8b
add esp, 4
cmp eax, esi
je 0x4aa5be
mov ecx, dword [ebx + 0x2c]
add ecx, 0x34
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
mov ecx, 0x2000
mov edi, eax
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x18], edi
jmp 0x4aa5c3
mov dword [ebp - 0x18], esi
mov edi, esi
mov eax, dword [ebx + 0x2c]
mov edx, dword [eax + 0x2c]
add eax, 0x2c
mov dword [edi + 0x10], edx
mov eax, dword [ebx + 0x2c]
add eax, 0x30
mov eax, dword [eax]
mov dword [edi + 0x14], eax
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0xc]
cmp eax, esi
mov dword [ebp - 0x54], edi
je 0x4aa5f6
mov eax, dword [eax]
mov dword [edi + 0xc], eax
mov eax, edi
call fcn.004b7df0
jmp 0x4aa600
mov eax, dword [ebp + 8]
mov ecx, edi
call fcn.004b7c10
mov dword [ebp - 4], esi
mov ecx, dword [ebx + 0x2c]
cmp dword [ecx + 0x34], 2
jne 0x4aa610
push 0x10
jmp 0x4aa612
push 0x1c
call fcn.004d3c8b
mov edx, dword [edi + 8]
mov ecx, dword [edi + 0xc]
sub edx, 2
add esp, 4
neg edx
mov esi, eax
sbb edx, edx
lea eax, [ebp + 0xc]
push eax
and edx, 0xc
push esi
add edx, 0x10
push ecx
mov dword [ebp + 0xc], edx
call dword [sym.imp.WS2_32.dll_getsockname]
mov edx, dword [ebx + 0x2c]
cmp dword [edx + 0x34], 2
jne 0x4aa64e
movzx eax, word [esi + 2]
push eax
jmp 0x4aa653
movzx ecx, word [esi + 2]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
movzx edx, ax
mov eax, dword [ebx + 0x2c]
push esi
mov dword [ebp - 0x4c], edx
call fcn.004d3cb6
add esp, 4
push 0x10
call fcn.004d3c8b
mov esi, eax
xor eax, eax
add esp, 4
cmp esi, eax
je 0x4aa6ad
push eax
push eax
push eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
push 0
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [esi + 8], eax
mov dword [ebp + 8], esi
jmp 0x4aa6b0
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
push 0x20
mov dword [ebp - 0x50], ecx
call fcn.004d3c8b
mov esi, eax
xor eax, eax
add esp, 4
cmp esi, eax
je 0x4aa712
push eax
push eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
push eax
mov byte [esi + 0x18], al
mov dword [esi + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
push 0
push 0
push 0
push 0
mov dword [esi + 0x10], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
push 0
push 0
push 0
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [esi + 0x1c], eax
mov dword [ebp + 0xc], esi
jmp 0x4aa717
mov dword [ebp + 0xc], eax
mov esi, eax
mov ecx, dword [ebp + 8]
push edi
mov edi, esi
mov dword [ebp - 0x5c], esi
call fcn.004b38f0
push 0x74
call fcn.004d3c8b
add esp, 4
mov dword [ebp - 0x1c], eax
test eax, eax
mov byte [ebp - 4], 3
je 0x4aa745
push eax
call fcn.004b40b0
mov dword [ebp - 0x14], eax
jmp 0x4aa74f
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
push edx
push ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebx + 0x2c]
lea edx, [ebp - 0x2c]
push edx
add ecx, 0x10
push ecx
lea edx, [ebp - 0x1c]
push edx
push eax
lea edx, [ebp - 0x48]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x2c], 0x400
mov dword [ebp - 0x1c], 0x20
call fcn.004b4320
lea ecx, [ebp - 0x38]
mov eax, 0x649aec
call fcn.004abd40
cmp dword [ebp - 0x30], 0xffffffff
mov edi, eax
mov ecx, 0xa
lea esi, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x208], ecx
mov edx, dword [ebx + 0x2c]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0x20c], eax
mov dword [ebx + 0x44], ecx
je 0x4aa558
mov edx, dword [0x649acc]
push edx
jmp 0x4aa552