Function at 0x431c80
Capabilities:
Get local ipv4 addresses
Get socket information
Read .ini file
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6a4
push esi
push 0x4668f8
push 1
push str.SECURITYLEVEL
mov esi, ecx
push 0x463724
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
mov dword [esp + 0x2c], eax
jne 0x431cb6
mov al, 1
pop esi
add esp, 0x6a4
ret
mov edx, dword [esi + 0xc3c]
push 0
push 0
lea eax, [esp + 0x3c]
push eax
push 0x5f0
lea ecx, [esp + 0xc8]
push ecx
push 0
push 0
push 0x4004747f
push edx
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
jne 0x431cf1
xor al, al
pop esi
add esp, 0x6a4
ret
mov ecx, dword [esp + 0x34]
mov eax, 0xaf286bcb
mul ecx
sub ecx, edx
push ebx
shr ecx, 1
push ebp
add ecx, edx
mov edx, dword [esi + 0xc3c]
push edi
shr ecx, 6
mov edi, ecx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x54]
push ecx
push edx
mov dword [esp + 0x50], edi
mov dword [esp + 0x3c], 0x10
call dword [sym.imp.WS2_32.dll_getsockname]
cmp eax, 0xffffffff
je 0x431e1a
test edi, edi
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0
jle 0x431e1a
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ebp, dword [sym.imp.WS2_32.dll_inet_ntoa]
mov byte [esp + 0x13], 1
lea esi, [esp + 0xcc]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x25]
mov ebx, dword [esi - 8]
push eax
mov dword [esp + 0x2c], eax
call ebp
push eax
lea edx, [esp + 0x64]
push edx
call edi
push 4
lea eax, [esp + 0x18]
push esi
push eax
call fcn.004394b0
push 4
lea ecx, [esi + 0x30]
push ecx
lea edx, [esp + 0x38]
push edx
call fcn.004394b0
push 4
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.004394b0
push 4
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x78]
push eax
call fcn.004394b0
push 4
lea ecx, [esp + 0x7c]
push esi
push ecx
call fcn.004394b0
push 4
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.004394b0
add esp, 0x48
push 4
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x3c]
push edx
call fcn.004394b0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
add esp, 0xc
cmp ecx, eax
je 0x431e27
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x44]
inc eax
add esi, 0x4c
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x431d66
pop edi
pop ebp
pop ebx
xor al, al
pop esi
add esp, 0x6a4
ret
test bl, 4
je 0x431e39
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x6a4
ret
test bl, 8
je 0x431e5d
mov eax, dword [esp + 0x18]
push str.PPP_interface
push eax
call fcn.004312e0
add esp, 8
pop edi
pop ebp
pop ebx
xor al, al
pop esi
add esp, 0x6a4
ret
cmp dword [esp + 0x34], eax
je 0x431e2c
mov eax, dword [esp + 0x24]
mov dl, byte [esp + 0x14]
mov ecx, dword [esp + 0x2c]
mov bl, al
and dl, al
and bl, cl
cmp dl, bl
je 0x431e7e
mov byte [esp + 0x13], 0
mov dl, byte [esp + 0x15]
mov al, ah
and dl, ah
and al, ch
cmp dl, al
je 0x431e91
mov byte [esp + 0x13], 0
mov ax, word [esp + 0x26]
mov dl, byte [esp + 0x16]
mov cx, word [esp + 0x2e]
mov bl, al
and dl, al
and bl, cl
cmp dl, bl
je 0x431eae
mov byte [esp + 0x13], 0
mov dl, byte [esp + 0x17]
mov cl, ch
and cl, ah
and dl, ah
cmp dl, cl
je 0x431ec1
mov byte [esp + 0x13], 0
cmp dword [esp + 0x38], 2
jne 0x431ecf
mov byte [esp + 0x13], 0
jmp 0x431edc
mov al, byte [esp + 0x13]
test al, al
mov eax, str.Accepted
jne 0x431ee1
mov eax, str.Refused
mov ecx, dword [esp + 0x18]
push eax
lea eax, [esp + 0x64]
push eax
push str.Far_s_Connection__s
push ecx
call fcn.004312e0
mov al, byte [esp + 0x23]
add esp, 0x10
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x6a4
ret