Function at 0x140041e10
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov r14, qword [rcx]
xor r13d, r13d
mov r12d, r8d
mov qword [rsp + 0x38], r13
mov rsi, qword [r14 + 0xc08]
movzx ebx, word [r14 + 0x6e0]
mov r15d, dword [r14 + 0x6e4]
test rsi, rsi
jne 0x140041e6e
test bx, bx
jne 0x140041e6e
xor eax, eax
jmp 0x1400422e1
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x290], rdi
call sub.msvcrt.dll_memset
test rsi, rsi
je 0x140042165
or rdi, 0xffffffffffffffff
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp byte [rsi + rax], r13b
jne 0x140041ea0
cmp rax, 0xff
jae 0x140042165
lea rcx, [rbp - 0x3f]
xor edx, edx
mov r8d, 0xff
mov byte [rbp - 0x40], r13b
call sub.msvcrt.dll_memset
mov rcx, qword [0x1402339b8]
mov r8, rdi
inc r8
cmp byte [rcx + r8], r13b
jne 0x140041ed4
mov rdx, rsi
call qword [sym.imp.msvcrt.dll_strncmp]
test eax, eax
jne 0x140041f05
mov rax, qword [0x1402339b8]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x140041ef1
add rsi, rdi
mov dil, 1
jmp 0x140042009
mov rcx, qword [0x1402339c0]
mov r8, rdi
nop
inc r8
cmp byte [rcx + r8], r13b
jne 0x140041f10
mov rdx, rsi
call qword [sym.imp.msvcrt.dll_strncmp]
test eax, eax
jne 0x140042006
mov rax, qword [0x1402339c0]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x140041f31
add rsi, rdi
mov rcx, qword [rbp + 0x180]
mov eax, dword [rcx + 0x440]
mov dword [rsp + 0x30], eax
cmp r12d, 2
jne 0x14004212a
mov dword [rcx + 0x440], 1
mov edi, 2
lea rax, [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.14004e8b0
mov rcx, qword [rbp + 0x180]
mov eax, dword [rsp + 0x30]
mov dword [rcx + 0x440], eax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140042052
mov rcx, qword [rcx]
lea rdx, [rbp - 0x40]
mov r8d, 0x100
call fcn.14004e870
mov rax, qword [rsp + 0x38]
lea rdx, [0x140081550]
mov rcx, qword [rax]
mov r9d, r12d
mov r8, rsi
mov eax, dword [rcx + 4]
mov rcx, r14
mov dword [rsp + 0x28], eax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
call fcn.14003ca50
mov rdx, qword [rsp + 0x38]
mov rcx, r14
call fcn.14004eb60
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
cmp r12d, dword [rcx + 4]
je 0x140042095
mov eax, 1
jmp 0x1400422d9
xor dil, dil
mov rcx, qword [rbp + 0x180]
mov edx, dword [rbp + 0x198]
lea rax, [rbp - 0x40]
mov r8d, dword [rcx + 0xb8]
mov r9, rsi
mov ecx, r12d
mov dword [rsp + 0x28], 0x100
mov qword [rsp + 0x20], rax
call fcn.14005eb50
test eax, eax
je 0x140042105
dec eax
je 0x140041ffc
dec eax
je 0x140042075
test dil, dil
je 0x140041f3d
lea rdx, [0x140081580]
mov r8, rsi
mov rcx, r14
mov byte [r14 + 0x150f], r13b
call fcn.14003c8f0
mov eax, 0x2d
jmp 0x1400422d9
lea r9, [rbp - 0x40]
lea rdx, [0x140081518]
mov r8, rsi
mov rcx, r14
mov dword [rsp + 0x20], r12d
call fcn.14003ca50
mov edi, 2
cmp r12d, 0x17
jne 0x140042144
lea edx, [r12 + 0xe]
lea rcx, [rbp - 0x40]
call qword [sym.imp.msvcrt.dll_strchr]
mov rdi, rax
test rax, rax
je 0x1400420bc
mov byte [rax], r13b
inc rdi
mov esi, 0x17
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x40]
mov ecx, esi
call fcn.1400556f0
test eax, eax
jle 0x1400420fa
movzx ecx, bx
mov word [rsp + 0x40], si
call qword [sym.imp.WSOCK32.DLL_htons]
mov word [rsp + 0x42], ax
test rdi, rdi
je 0x1400420fa
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_atoi]
mov dword [rsp + 0x58], eax
mov r13d, 0x1c
jmp 0x1400421a5
test dil, dil
je 0x140041f3d
lea rdx, [0x1400814f8]
mov r8, rsi
mov rcx, r14
call fcn.14003c8f0
mov eax, 0x2d
jmp 0x1400422d9
cmp r12d, 0x17
jne 0x140041f62
mov edi, 2
mov dword [rcx + 0x440], edi
jmp 0x140041f67
cmp r12d, 2
jne 0x1400421a5
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x40]
mov ecx, edi
call fcn.1400556f0
test eax, eax
jle 0x1400421a5
mov word [rsp + 0x40], di
jmp 0x140042191
cmp r12d, 0x17
jne 0x140042183
mov esi, r12d
movzx ecx, bx
mov word [rsp + 0x40], si
call qword [sym.imp.WSOCK32.DLL_htons]
lea r13d, [r12 + 5]
jmp 0x1400421a0
cmp r12d, 2
jne 0x1400421a5
mov eax, r12d
mov word [rsp + 0x40], ax
movzx ecx, bx
call qword [sym.imp.WSOCK32.DLL_htons]
mov r13d, 0x10
mov word [rsp + 0x42], ax
mov rdi, qword [rbp + 0x188]
lea rdx, [rsp + 0x40]
mov r8d, r13d
mov rcx, rdi
call qword [sym.imp.WSOCK32.DLL_bind]
test eax, eax
jns 0x140042206
dec r15d
test r15d, r15d
jle 0x140042277
lea rdx, [0x1400815d8]
movzx r8d, bx
mov rcx, r14
call fcn.14003ca50
inc bx
movzx ecx, bx
call qword [sym.imp.WSOCK32.DLL_ntohs]
lea rdx, [rsp + 0x40]
mov r8d, r13d
mov rcx, rdi
mov word [rsp + 0x42], ax
call qword [sym.imp.WSOCK32.DLL_bind]
test eax, eax
js 0x1400421c1
lea rcx, [rbp + 0xc0]
xor edx, edx
mov r8d, pe_nt_image_headers64
mov dword [rsp + 0x30], pe_nt_image_headers64
call sub.msvcrt.dll_memset
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xc0]
mov rcx, rdi
call qword [sym.imp.WSOCK32.DLL_getsockname]
test eax, eax
jns 0x1400422b6
call qword [sym.imp.WSOCK32.DLL_WSAGetLastError]
lea rdx, [rbp - 0x40]
mov r8d, pe_nt_image_headers64
mov ecx, eax
mov ebx, eax
mov dword [r14 + 0x1128], eax
call fcn.14005a1c0
lea rdx, [0x140081598]
mov r8d, ebx
mov r9, rax
mov rcx, r14
call fcn.14003c8f0
mov eax, 0x2d
jmp 0x1400422d9
call qword [sym.imp.WSOCK32.DLL_WSAGetLastError]
lea rdx, [rbp + 0xc0]
mov r8d, pe_nt_image_headers64
mov ecx, eax
mov ebx, eax
mov dword [r14 + 0x1128], eax
call fcn.14005a1c0
lea rdx, [0x140081608]
mov r8d, ebx
mov r9, rax
mov rcx, r14
call fcn.14003c8f0
mov eax, 0x2d
jmp 0x1400422d9
lea rdx, [0x1400815c0]
movzx r8d, bx
mov rcx, r14
call fcn.14003ca50
mov rax, qword [rbp + 0x180]
mov byte [rax + 0x402], 1
xor eax, eax
mov rdi, qword [rsp + 0x290]
add rsp, 0x240
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret