Function at 0x4b8e60
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push 0xffffffffffffffff
push 0x4f5e52
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x28], 0
call fcn.00496ab0
cmp dword [0x103a97c], 9
jne 0x4b8ebc
push str.SendLogin
push 8
call fcn.0043d500
add esp, 8
mov eax, dword [ebp + 0x32464]
mov ebx, dword [sym.imp.WSOCK32.dll_getsockname]
mov dword [esp + 0x38], 0x10
test eax, eax
je 0x4b8ee4
mov eax, dword [eax + 4]
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x78]
push edx
push eax
call ebx
mov ecx, dword [esp + 0x78]
mov edi, dword [sym.imp.WSOCK32.dll_inet_ntoa]
push ecx
call edi
mov edx, dword [0x1070800]
mov esi, eax
mov eax, dword [edx - 0xc]
test eax, eax
jne 0x4b8ff3
lea ecx, [esp + 0x50]
call fcn.00443db0
mov dword [esp + 0x90], 0
push esi
mov ecx, 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_820]
cmp byte [0x103aef5], 0
je 0x4b8f3f
push 0x101e9d8
mov ecx, 0x1070800
call dword [sym.imp.mfc90.dll_Ordinal_820]
jmp 0x4b8fa8
test dword [0x1043084], 0x400
je 0x4b8f52
call fcn.004a0c60
jmp 0x4b8fa8
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x94], 1
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
lea ecx, [esp + 0x58]
call fcn.004452d0
mov byte [esp + 0x90], 2
push eax
mov ecx, 0x1070800
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x90], 0
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp byte [0x103b0fc], 0
jne 0x4b8fd0
mov ecx, dword [0x1070804]
mov edx, dword [0x1070800]
push ecx
push edx
push str.SendLogin_After_Connect_MAC:_s_IP:_s
push 8
call fcn.0043d500
add esp, 0x10
jmp 0x4b8fdf
push str.SendLogin_After_Connect
push 8
call fcn.0043d500
add esp, 8
mov dword [esp + 0x90], 0xffffffff
lea ecx, [esp + 0x50]
call fcn.00443e30
cmp dword [0x103a97c], 9
jne 0x4b900c
push esi
push str.SendLogin_2__s_
push 8
call fcn.0043d500
add esp, 0xc
push esi
call fcn.00472e70
add esp, 4
push esi
mov ecx, 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_820]
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov dword [esp + 0x90], 3
test dword [0x10430b0], 0x800
je 0x4b907b
push 1
call fcn.004b83a0
lea eax, [esp + 0x1c]
push eax
call fcn.00495e30
add esp, 8
mov byte [esp + 0x90], 4
push eax
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x90], 3
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push 0
call dword [sym.imp.MSVCR90.dll__time64]
add esp, 4
push str._Y__m__d__H:_M:_S
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
call fcn.00409400
mov byte [esp + 0x90], 5
push eax
mov ecx, 0x10dd2ec
call dword [sym.imp.mfc90.dll_Ordinal_817]
push eax
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x90], 7
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x90], 8
push 0x5116d8
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x90], 9
cmp byte [0x103a972], 0
mov byte [esp + 0x17], 0
je 0x4b92ab
push 0x200
push 0x10195c0
push str.PEeurTSalt
push str.SoftwareTruecut
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4b9174
push 0x200
push 0
push 0x10195c0
call sub.MSVCR90.dll_memset
push 0x1ff
push 0x10195c0
call fcn.00467e10
push 0x10195c0
push str.PEeurTSalt
push str.SoftwareTruecut
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491e90
add esp, 0x24
mov byte [esp + 0x17], 1
mov ecx, dword [0x10d5bd4]
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x78]
push eax
push ecx
mov dword [esp + 0x48], 0
call ebx
mov edx, dword [esp + 0x78]
push edx
call edi
push eax
mov ecx, 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_820]
lea ecx, [esp + 0x50]
call fcn.00443db0
mov bl, 0xa
mov byte [esp + 0x90], bl
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x1070804
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x94], 0xb
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], bl
lea ecx, [esp + 0x58]
call fcn.004452d0
mov byte [esp + 0x90], 0xc
push eax
mov ecx, 0x1070800
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x90], bl
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, 0x10195c0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4b9210
sub eax, ecx
push 0x10195c0
lea ecx, [esp + 0x24]
push 0x1070804
push ecx
mov esi, eax
call fcn.00402a60
mov byte [esp + 0x9c], 0xd
mov edx, dword [0x1070804]
mov ecx, dword [edx - 0xc]
mov eax, dword [eax]
lea edx, [esp + 0x48]
push edx
add esi, ecx
push esi
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00466670
add esp, 0x1c
mov byte [esp + 0x90], 0xe
push eax
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x90], 0xd
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x90], bl
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x90], 9
lea ecx, [esp + 0x50]
call fcn.00443e30
cmp byte [esp + 0x17], 0
mov esi, 0x10195c0
jne 0x4b92b0
mov esi, 0x5116d8
test byte [0x10430dc], 0x40
je 0x4b92c1
mov ecx, dword [0x10de38c]
jmp 0x4b92e2
push 0x5116d8
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x90], 0xf
mov ecx, dword [eax]
mov dword [esp + 0x28], 1
mov eax, dword [0x1043104]
and eax, 0x400000
mov edx, 0x1070a00
jne 0x4b92f8
mov edx, 0x5116d8
test eax, eax
mov eax, 0x107096a
jne 0x4b9306
mov eax, 0x5116d8
mov edi, dword [0x1043074]
push edi
mov edi, dword [0x10dca74]
push edi
mov edi, dword [0x1043118]
push edi
mov edi, dword [0x10da084]
push edi
mov edi, dword [0x103a360]
push edi
mov edi, dword [0x1042d74]
push 3
push edi
mov edi, dword [esp + 0x4c]
push edi
mov edi, dword [esp + 0x4c]
push 0x101e9d8
push edi
push esi
mov esi, dword [0x103aca4]
push esi
movzx esi, byte [esp + 0xcc]
push esi
push ecx
mov ecx, dword [0x1070808]
push edx
mov edx, dword [0x1070804]
push eax
movzx eax, byte [ebp + 0xad]
push ecx
mov ecx, dword [0x6806c0]
push edx
mov edx, dword [0x6806bc]
push eax
mov eax, dword [0x6806b8]
push ecx
mov ecx, dword [0x10da088]
push edx
mov edx, dword [0x5f3f48]
push eax
mov eax, dword [0x655a3c]
push ecx
mov ecx, dword [ebp + 0x324e4]
push edx
mov edx, dword [esp + 0x94]
push eax
mov eax, dword [0x1070800]
push ecx
push edx
push eax
push 0xee11
lea ecx, [esp + 0x90]
push str.SET_d_s_s_d_d_d_d_d_d_d_d_s_s_s_s_s_d_s_s_s_s_s_d_d_d_d_d_d_d
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x7c
mov dword [esp + 0x90], 9
test byte [esp + 0x28], 1
je 0x4b93e4
and dword [esp + 0x28], 0xfffffffe
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp byte [esp + 0x98], 0
je 0x4b9419
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x94], 0x10
mov byte [esp + 0x94], 9
mov ecx, ebp
call fcn.004aa680
jmp 0x4b9444
push 1
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x98], 0x11
mov byte [esp + 0x98], 9
mov ecx, ebp
call fcn.004a9f10
cmp dword [0x103a97c], 0x77
jne 0x4b9468
mov ecx, dword [esp + 0x1c]
mov edx, dword [0x1070790]
push ecx
push edx
push str.send_TC_CONNECT_LOGIN__s___s_
push 8
call fcn.0043d500
add esp, 0x10
push 0
lea ecx, [esp + 0x44]
call fcn.00456910
mov bl, 0x12
mov byte [esp + 0x90], bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.tc_iAddClick
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x98], 0x13
push ecx
mov ecx, esp
mov dword [esp + 0x48], esp
push str.tc_Env_tc_CLIENT
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x9c], 0x14
mov byte [esp + 0x9c], bl
lea ecx, [esp + 0x4c]
call fcn.004573e0
mov byte [esp + 0x90], 9
lea ecx, [esp + 0x40]
call fcn.00456840
mov byte [esp + 0x90], 8
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x90], 7
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x90], 3
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x90], 0xffffffff
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.004e0148
add esp, 0x80
ret 8