Function at 0x414710
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket

Disassembly:
push 0xffffffffffffffff
push 0x43d868
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
push 0x467294
lea ecx, [esp + 0x14]
call fcn.004316dc
mov eax, dword [0x450334]
mov dword [esp + 0x34], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
push 0
push 1
push 2
mov byte [esp + 0x40], 2
call dword [sym.imp.WS2_32.dll_socket]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x41495f
mov ebx, dword [esp + 0x40]
mov word [esp + 0x1c], 2
cmp ebx, 5
jne 0x414782
push 0x1f40
jmp 0x414784
push 0x50
call dword [sym.imp.WS2_32.dll_htons]
dec ebx
mov word [esp + 0x1e], ax
cmp ebx, 0x17
ja case.0x4147a1.8
xor eax, eax
mov al, byte [ebx + 0x414f88]
jmp dword [eax*4 + 0x414f68]
mov esi, dword [esp + 0x3c]
lea ecx, [esi + 0x490]
push ecx
push str.GET__portalGetAuthCodeAction.do_userid_s_HTTP_1.1_r_n
lea edx, [esp + 0x1c]
push edx
call fcn.0042efe7
add esp, 0xc
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
call fcn.00431938
lea ecx, [esi + 0xd0]
push ecx
jmp 0x41493c
mov esi, dword [esp + 0x3c]
lea edx, [esi + 0x90]
push edx
call dword [sym.imp.WS2_32.dll_inet_addr]
push str.GET___HTTP_1.1_r_n
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], eax
call fcn.004318fc
jmp 0x414946
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
push str.GET__ext_portal.magi_HTTP_1.1_r_n
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], eax
call fcn.004318fc
jmp 0x414946
mov esi, dword [esp + 0x3c]
lea ecx, [esi + 0x310]
lea edx, [esi + 0x2f0]
push ecx
lea eax, [esi + 0x1f0]
push edx
push eax
lea ecx, [esp + 0x20]
push str.GET___s_wlanuserip_swlanacname_s_HTTP_1.1_r_n
push ecx
call fcn.0042efe7
add esp, 0x14
lea edx, [esp + 0x14]
lea ecx, [esp + 0x10]
push edx
call fcn.00431938
lea eax, [esi + 0xd0]
push eax
jmp 0x41493c
mov edi, 0x473a60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4148c1
mov edi, 0x473a80
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4148c1
lea ecx, [esp + 0x14]
push str.POST__portalValidateCodeAction.do_HTTP_1.1_r_n
push ecx
call fcn.0042efe7
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x10]
push edx
call fcn.00431938
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xd0]
push eax
jmp 0x41493c
mov esi, dword [esp + 0x3c]
lea ecx, [esi + 0x270]
push ecx
push str.POST__s_HTTP_1.1_r_n
jmp 0x4147b8
push str.POST__portalDisconnAction.do_HTTP_1.1_r_n
jmp 0x4148e2
push str.POST__portalBindg_portal_cfg.mobileAction.do_HTTP_1.1_r_n
lea edx, [esp + 0x18]
push edx
call fcn.0042efe7
add esp, 8
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
call fcn.00431938
mov esi, dword [esp + 0x3c]
lea ecx, [esi + 0xd0]
push ecx
jmp 0x41493c
mov esi, dword [esp + 0x3c]
lea eax, [esp + 0x14]
lea edx, [esi + 0x1f0]
push edx
push str.POST___s_HTTP_1.1_r_n
push eax
call fcn.0042efe7
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
call fcn.00431938
lea edx, [esi + 0xd0]
push edx
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x1c]
push 0x10
push eax
push ebp
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x4149a1
push ebp
call dword [sym.imp.WS2_32.dll_closesocket]
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call fcn.0043166e
lea ecx, [esp + 0x14]
mov byte [esp + 0x34], 0
call fcn.0043166e
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0xffffffff
call fcn.0043166e
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
push str.Accept:_image_jpeg__application_x_ms_application__image_gif__application_xamlxml__image_pjpeg__application_x_ms_xbap__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
mov eax, dword [esp + 0x40]
sub eax, 2
je 0x414a17
dec eax
je 0x4149f0
sub eax, 0x10
jne 0x414a9c
lea ecx, [esi + 0x310]
lea edx, [esi + 0x2f0]
push ecx
lea eax, [esi + 0xd0]
push edx
push eax
lea ecx, [esp + 0x20]
push str.Referer:_http:___s_portalBindg_portal_cfg.mobileAction.do_wlanuserip_swlanacname_s_r_n
push ecx
call fcn.0042efe7
add esp, 0x14
jmp 0x414a8e
lea eax, [esi + 0x1f0]
lea ecx, [esi + 0xd0]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.Referer:_http:___s__s_r_n
push edx
call fcn.0042efe7
add esp, 0x10
lea eax, [esp + 0x14]
push eax
jmp 0x414a93
mov edi, 0x473a60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414a60
mov edi, 0x473a80
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414a60
lea ecx, [esi + 0x310]
lea edx, [esi + 0x2f0]
push ecx
lea eax, [esi + 0xd0]
push edx
push eax
lea ecx, [esp + 0x20]
push str.Referer:_http:___s_portalBindg_portal_cfg.mobileAction.do_wlanuserip_swlanacname_s_r_n
push ecx
call fcn.0042efe7
add esp, 0x14
jmp 0x414a8e
lea eax, [esi + 0x310]
lea ecx, [esi + 0x2f0]
push eax
lea edx, [esi + 0x1f0]
push ecx
lea eax, [esi + 0xd0]
push edx
push eax
lea ecx, [esp + 0x24]
push str.Referer:_http:___s__s_wlanuserip_swlanacname_s_r_n
push ecx
call fcn.0042efe7
add esp, 0x18
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
call fcn.00431938
push str.Accept_Language:_zh_cn_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.User_Agent:_Supplicant_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Content_Type:_application_x_www_form_urlencoded_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Accept_Encoding:_gzip__deflate_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
cmp ebx, 0x17
ja case.0x414ae5.6
xor eax, eax
mov al, byte [ebx + 0x414fbc]
jmp dword [eax*4 + 0x414fa0]
lea ecx, [esi + 0x90]
jmp 0x414afa
lea ecx, [esi + 0xb0]
push ecx
lea edx, [esp + 0x18]
push str.Host:__s_r_n
push edx
call fcn.0042efe7
add esp, 0xc
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
call fcn.00431938
push str.Connection:_Keep_Alive_r_n_r_n
jmp 0x414ef3
push str.Host:
lea ecx, [esp + 0x14]
call fcn.004318fc
lea ecx, [esi + 0xd0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004318fc
push 0x44c6b0
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Connection:_Keep_Alive_r_n_r_n
jmp 0x414ef3
mov edi, 0x473a60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414bd4
mov edi, 0x473a80
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414bd4
lea edx, [esi + 0x470]
lea eax, [esi + 0x370]
push edx
push eax
push 0x473a80
lea ecx, [esi + 0x350]
push 0x473a60
lea edx, [esi + 0x330]
push ecx
lea eax, [esi + 0x310]
push edx
lea ecx, [esi + 0x2f0]
push eax
lea edx, [esi + 0x510]
push ecx
lea eax, [esi + 0x490]
push edx
push eax
lea ecx, [esp + 0x3c]
push str.userid_spasswd_swlanuserip_swlanacname_sauth_type_swlanacIp_sg_portal_cfg.mobile_svalidateCode_smd5Code_sbank_acct_s
push ecx
call fcn.0042efe7
add esp, 0x30
jmp 0x414c77
lea edx, [esi + 0x370]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414c3b
mov edi, 0x473a80
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414c3b
push edx
lea edx, [esi + 0x350]
push 0x473a80
lea eax, [esi + 0x330]
push edx
lea ecx, [esi + 0x310]
push eax
lea edx, [esi + 0x2f0]
push ecx
lea eax, [esi + 0x510]
push edx
lea ecx, [esi + 0x490]
push eax
push ecx
lea edx, [esp + 0x34]
push str.userid_spasswd_swlanuserip_swlanacname_sauth_type_swlanacIp_svalidateCode_smd5Code_s
push edx
call fcn.0042efe7
add esp, 0x28
jmp 0x414c77
lea eax, [esi + 0x350]
lea ecx, [esi + 0x330]
push eax
lea edx, [esi + 0x310]
push ecx
lea eax, [esi + 0x2f0]
push edx
lea ecx, [esi + 0x510]
push eax
lea edx, [esi + 0x490]
push ecx
push edx
lea eax, [esp + 0x2c]
push str.userid_spasswd_swlanuserip_swlanacname_sauth_type_swlanacIp_s
push eax
call fcn.0042efe7
add esp, 0x20
push str.Host:
lea ecx, [esp + 0x14]
call fcn.004318fc
lea ecx, [esi + 0xd0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004318fc
push 0x44c6b0
lea ecx, [esp + 0x14]
call fcn.004318fc
mov edx, dword [esp + 0x14]
mov eax, dword [edx - 8]
push eax
lea eax, [esp + 0x1c]
push str.Content_Length:__d_r_n
push eax
call fcn.0042efe7
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.00431938
push str.Connection:_Keep_Alive_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
mov edi, 0x473a60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414dde
mov edi, 0x473a80
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x414dde
push str.Cache_Control:_no_cache_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
lea edx, [esi + 0x3f0]
lea eax, [esp + 0x18]
push edx
push str.Cookie:_JSESSIONID_s_r_n_r_n
push eax
call fcn.0042efe7
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.00431938
jmp 0x414dec
lea eax, [esi + 0x350]
push 0x473a60
lea ecx, [esi + 0x330]
push eax
lea edx, [esi + 0x310]
push ecx
lea eax, [esi + 0x2f0]
push edx
lea ecx, [esi + 0x510]
push eax
lea edx, [esi + 0x490]
push ecx
push edx
lea eax, [esp + 0x30]
push str.userid_spasswd_swlanuserip_swlanacname_sauth_type_swlanacIp_sg_portal_cfg.mobile_s
push eax
call fcn.0042efe7
add esp, 0x24
lea ecx, [esp + 0x10]
push str.Host:
call fcn.004318fc
lea ecx, [esi + 0xd0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004318fc
push 0x44c6b0
lea ecx, [esp + 0x14]
call fcn.004318fc
mov edx, dword [esp + 0x14]
mov eax, dword [edx - 8]
push eax
lea eax, [esp + 0x1c]
push str.Content_Length:__d_r_n
push eax
call fcn.0042efe7
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.00431938
push str.Connection:_Keep_Alive_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Cache_Control:_no_cache_r_n_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
lea edx, [esp + 0x14]
lea ecx, [esp + 0x10]
push edx
call fcn.00431938
jmp 0x414efc
lea eax, [esi + 0x350]
lea ecx, [esi + 0x310]
push eax
lea edx, [esi + 0x2f0]
push ecx
push edx
lea eax, [esp + 0x20]
push str.wlanuserip_swlanacname_swlanacIp_sdisconect
push eax
call fcn.0042efe7
add esp, 0x14
lea ecx, [esp + 0x10]
push str.Host:
call fcn.004318fc
lea ecx, [esi + 0xd0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004318fc
push 0x44c6b0
lea ecx, [esp + 0x14]
call fcn.004318fc
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00431938
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
mov eax, dword [eax - 8]
push eax
push str.Content_Length:__d_r_n
push ecx
call fcn.0042efe7
add esp, 0xc
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00431938
push str.Connection:_Keep_Alive_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Cache_Control:_no_cache_r_n_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
call fcn.00431938
jmp 0x414efc
push str.Host:
lea ecx, [esp + 0x14]
call fcn.004318fc
lea ecx, [esi + 0xd0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004318fc
push 0x44c6b0
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Connection:_Keep_Alive_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
push str.Cache_Control:_no_cache_r_n
lea ecx, [esp + 0x14]
call fcn.004318fc
mov edx, dword [esp + 0x10]
push edx
push ebp
call fcn.00414570
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push eax
push ecx
push ebp
push esi
call fcn.00414600
add esp, 0x18
push ebp
call dword [sym.imp.WS2_32.dll_closesocket]
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call fcn.0043166e
lea ecx, [esp + 0x14]
mov byte [esp + 0x34], 0
call fcn.0043166e
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0xffffffff
call fcn.0043166e
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret