Function at 0x4d6300
Capabilities:
Create thread
Get local ipv4 addresses
Get socket information

Disassembly:
push 0xffffffffffffffff
push 0x4f920d
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x5c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x74]
mov dword fs:[0], eax
mov esi, 0x77
mov ebp, ecx
mov dword [esp + 0x20], ebp
cmp dword [0x103a97c], esi
jne 0x4d635a
mov eax, dword [0x1070778]
push eax
push str.Connecting..._start__s_
push 8
call fcn.0043d500
add esp, 0xc
push 0x1070778
mov ecx, 0x1070790
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp byte [0x103a972], 0
je 0x4d63c8
push 0x1070778
mov ecx, 0x1070790
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [0x10dca64], 0
jne 0x4d63a8
lea ecx, [esp + 0x1c]
push ecx
push 3
push ebp
push 0x4d60a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10dca64], eax
cmp dword [0x103a97c], esi
jne 0x4d6a1a
push str.Connecting..._tc_SSL
push 8
call fcn.0043d500
add esp, 8
jmp 0x4d6a1a
mov eax, dword [0x1042d70]
test eax, eax
je 0x4d661a
cmp byte [esp + 0x84], 0
je 0x4d661a
cmp byte [ebp + 0x3244d], 0
jne 0x4d661a
movsx edi, word [0x1042d72]
mov esi, eax
and eax, 0xff
sar esi, 8
push 0
and esi, 0xff
mov dword [esp + 0x34], eax
and edi, 0xff
call dword [sym.imp.MSVCR90.dll__time64]
add esp, 4
mov dword [esp + 0x64], edx
push 0x51c508
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x68]
mov dword [esp + 0x68], eax
call fcn.00409400
mov dword [esp + 0x7c], 0
push 0x5206ec
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x68]
call fcn.00409400
mov byte [esp + 0x7c], 1
push 0x5206e8
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x68]
call fcn.00409400
mov byte [esp + 0x7c], 2
mov edx, dword [esp + 0x24]
push edx
call fcn.004d8d70
mov ebx, eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004d8d70
mov ecx, dword [esp + 0x1c]
push ecx
mov dword [esp + 0x24], eax
call fcn.004d8d70
add esp, 0xc
cmp ebx, esi
mov dword [esp + 0x1c], eax
jl 0x4d65e6
mov eax, dword [esp + 0x30]
cmp ebx, eax
jg 0x4d65e6
cmp edi, 0xa
mov dword [esp + 0x2c], 1
mov ecx, edi
jge 0x4d64ca
lea ecx, [edi + edi*4]
add ecx, ecx
mov dword [esp + 0x2c], 0xa
mov ebp, eax
imul ecx, ecx, 0x2710
sub ebp, esi
inc ebp
imul ebp, ebp, 0xe10
mov eax, ecx
cdq
idiv ebp
mov ebp, eax
inc ebp
test ebp, ebp
jg 0x4d64ec
mov ebp, 1
mov eax, dword [esp + 0x18]
sub ebx, esi
mov edx, ebx
shl edx, 4
sub edx, ebx
lea eax, [eax + edx*4]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [esp + 0x1c]
lea edx, [eax + edx*4]
imul edx, ebp
sub ecx, edx
mov eax, ecx
mov dword [esp + 0x1c], eax
cdq
idiv ebp
mov ebx, eax
test ebx, ebx
jg 0x4d6523
mov ebx, 1
push 0
call dword [sym.imp.MSVCR90.dll__time64]
push eax
call dword [sym.imp.MSVCR90.dll_srand]
add esp, 8
call dword [sym.imp.MSVCR90.dll_rand]
cdq
idiv ebx
cmp dword [0x103a97c], 0x77
mov dword [esp + 0x18], edx
jne 0x4d658c
mov eax, ebx
imul edi, edi, 0x2710
mov ebx, dword [esp + 0x2c]
cdq
idiv ebx
mov ecx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
cdq
idiv ebx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x1c]
push ebp
push ebx
push edi
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
push esi
push str.Connecting...
push 8
call fcn.0043d500
add esp, 0x30
jmp 0x4d6590
mov ebx, dword [esp + 0x2c]
cmp dword [esp + 0x18], 0
je 0x4d65e2
mov ecx, dword [esp + 0x20]
imul ebx, ebx, 0x3e8
mov edx, dword [ecx + 0x20]
push 0
push ebx
push 0x38f
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esp + 0x7c], 1
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x7c], 0
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x7c], 0xffffffff
lea ecx, [esp + 0x24]
jmp 0x4d6a14
mov ebp, dword [esp + 0x20]
mov byte [esp + 0x7c], 1
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x7c], 0
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
or edi, 0xffffffff
mov dword [esp + 0x7c], edi
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea esi, [edi + 0x78]
jmp 0x4d661d
or edi, 0xffffffff
mov ecx, dword [ebp + 0x32464]
test ecx, ecx
je 0x4d665a
cmp dword [0x1042d74], 2
jne 0x4d665a
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push 1
call edx
mov dword [ebp + 0x32464], 0
cmp dword [0x103a97c], esi
jne 0x4d665a
push str.Connecting..._Already_Connected........Close_CONNECT_CONTINUE_HALF
push 8
call fcn.0043d500
add esp, 8
cmp dword [ebp + 0x32464], 0
jne 0x4d69c3
push 0x24
call sub.mfc90.dll_Ordinal_798
add esp, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x7c], 3
test eax, eax
je 0x4d668c
push 1
mov ecx, eax
call fcn.004013b0
jmp 0x4d668e
xor eax, eax
mov dword [esp + 0x7c], edi
mov bl, byte [esp + 0x88]
mov dword [ebp + 0x32464], eax
mov byte [eax + 0x13], bl
mov eax, dword [0x1070770]
mov ecx, dword [0x1070790]
push eax
push ecx
mov ecx, dword [ebp + 0x32464]
call sub.mfc90.dll_Ordinal_1612
mov edx, dword [ebp + 0x32464]
push edx
call fcn.004a6880
add esp, 4
test al, al
jne 0x4d6723
mov ecx, dword [ebp + 0x32464]
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
call edx
push 3
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 0x32464]
test ecx, ecx
je 0x4d66f5
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push 1
call edx
mov dword [ebp + 0x32464], 0
cmp dword [0x103a97c], esi
jne 0x4d671c
mov eax, dword [0x1070778]
push eax
push str.Connecting..._BeConnect_error__s_
push 8
call fcn.0043d500
add esp, 0xc
xor eax, eax
jmp 0x4d6a1f
mov byte [ebp + 0x3244c], 0
mov byte [ebp + 0x3244e], 1
mov byte [0x53f212], 1
cmp dword [0x103a97c], esi
jne 0x4d675e
mov eax, str.status
test bl, bl
jne 0x4d674e
mov eax, str.connect
push eax
push str.Connecting...__s
push 8
call fcn.0043d500
add esp, 0xc
test byte [0x10389dc], 3
je 0x4d69c3
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xa
call ebx
mov eax, dword [ebp + 0x32464]
mov dword [esp + 0x1c], 0x10
test eax, eax
je 0x4d679b
mov eax, dword [eax + 4]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x64]
push edx
push eax
call dword [sym.imp.WSOCK32.dll_getsockname]
mov ecx, dword [esp + 0x64]
push ecx
call dword [sym.imp.WSOCK32.dll_inet_ntoa]
lea ecx, [esp + 0x3c]
mov esi, eax
call fcn.00443db0
mov dword [esp + 0x7c], 4
push esi
mov ecx, 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_820]
cmp byte [0x103aef5], 0
je 0x4d67e0
push 0x101e9d8
mov ecx, 0x1070800
call dword [sym.imp.mfc90.dll_Ordinal_820]
jmp 0x4d6843
test dword [0x1043084], 0x400
je 0x4d67f3
call fcn.004a0c60
jmp 0x4d6843
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x80], 5
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x84], 4
lea ecx, [esp + 0x44]
call fcn.004452d0
mov byte [esp + 0x7c], 6
push eax
mov ecx, 0x1070800
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x7c], 4
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp byte [0x103b0fc], 0
jne 0x4d686a
mov eax, dword [0x1070804]
mov ecx, dword [0x1070800]
push eax
push ecx
push str.SERVER_TYPE_HTTPSS_SendLogin_After_Connect_MAC:_s_IP:_s
push 8
call fcn.0043d500
add esp, 0x10
jmp 0x4d6879
push str.SERVER_TYPE_HTTPSS_SendLogin_After_Connect
push 8
call fcn.0043d500
add esp, 8
mov ecx, dword [ebp + 0x32464]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
push 3
call ebx
mov ebp, dword [ebp + 0x32464]
test ebp, ebp
je 0x4d68a0
mov edx, dword [ebp]
mov eax, dword [edx + 4]
push 1
mov ecx, ebp
call eax
lea ecx, [esp + 0x14]
push ecx
call fcn.00486de0
mov bl, 7
mov byte [esp + 0x80], bl
push 0x14
call sub.mfc90.dll_Ordinal_798
add esp, 8
mov dword [esp + 0x18], eax
mov byte [esp + 0x7c], 8
test eax, eax
je 0x4d68d3
mov ecx, eax
call sub.mfc90.dll_Ordinal_580
jmp 0x4d68d5
xor eax, eax
mov byte [esp + 0x7c], bl
mov dword [0x10d7be4], eax
mov ecx, dword [eax + 8]
push str.tc_connect_login.php
push ecx
mov ecx, eax
call sub.mfc90.dll_Ordinal_6154
mov ecx, dword [0x10d7be4]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x14]
push edx
push eax
call sub.mfc90.dll_Ordinal_6153
mov ecx, dword [0x10d7be4]
mov eax, dword [ecx + 8]
push 0x5116d8
push eax
call sub.mfc90.dll_Ordinal_6154
mov eax, dword [0x10d7be4]
push eax
call fcn.0047cfa0
add esp, 4
cmp dword [0x103a97c], 0x7b
jne 0x4d698d
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x80], 9
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x84], bl
call fcn.00469750
add esp, 8
mov byte [esp + 0x7c], 0xa
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x7c], bl
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x14]
push ecx
push str.makeJson_tc_connect_login_n_s
push 8
call fcn.0043d500
add esp, 0xc
cmp dword [0x103a97c], 0x77
jne 0x4d69a5
push str.Connecting_http..._end
push 8
call fcn.0043d500
add esp, 8
mov byte [esp + 0x7c], 4
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x7c], edi
lea ecx, [esp + 0x3c]
call fcn.00443e30
jmp 0x4d6a1a
push 0x5116d8
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov dword [esp + 0x7c], 0xb
mov ebp, dword [ebp + 0x32464]
test ebp, ebp
je 0x4d69f5
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call sub.mfc90.dll_Ordinal_3705
cmp dword [0x103a97c], esi
jne 0x4d6a0c
push str.Connecting..._end
push 8
call fcn.0043d500
add esp, 8
mov dword [esp + 0x7c], edi
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, 1
mov ecx, dword [esp + 0x74]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5c]
xor ecx, esp
call fcn.004e0148
add esp, 0x6c
ret 8