Function at 0x756c70
Capabilities:
List tcp connections and listeners

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
push ebx
push esi
push edi
mov dword [ebp - 4], eax
call fcn.006ef23c
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x7e0], eax
mov dword [ecx + 0x7e4], edx
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x10], eax
xor edx, edx
push ebp
push 0x756f59
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
mov dword [ebp - 8], eax
push 0
push 8
push 2
push 0xffffffffffffffff
lea eax, [ebp - 8]
push eax
push 0
call sub.iphlpapi.dll_GetExtendedTcpTable
cmp eax, 0x7a
je 0x756cca
call fcn.00430fc0
mov eax, dword [ebp - 8]
call fcn.00407138
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x756ce0
call fcn.0042e934
push 0
push 8
push 2
push 0xffffffffffffffff
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.iphlpapi.dll_GetExtendedTcpTable
test eax, eax
je 0x756cfe
call fcn.00430fc0
xor eax, eax
mov dword [ebp - 8], eax
push 0
push 8
push 0x17
push 0xffffffffffffffff
lea eax, [ebp - 8]
push eax
push 0
call sub.iphlpapi.dll_GetExtendedTcpTable
cmp eax, 0x7a
je 0x756d20
call fcn.00430fc0
mov eax, dword [ebp - 8]
call fcn.00407138
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], 0
jne 0x756d36
call fcn.0042e934
push 0
push 8
push 0x17
push 0xffffffffffffffff
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.iphlpapi.dll_GetExtendedTcpTable
test eax, eax
je 0x756d54
call fcn.00430fc0
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7f0]
call fcn.00743b04
call fcn.00743d4c
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x756f26
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x756ef6
mov eax, dword [ebp - 0x18]
call fcn.00743d7c
mov ebx, eax
mov byte [ebp - 0x11], 0
cmp byte [ebx + 4], 1
jne 0x756e13
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
dec eax
test eax, eax
jl 0x756ee0
inc eax
mov dword [ebp - 0x1c], eax
xor esi, esi
mov edi, esi
add edi, edi
add edi, edi
lea edi, [edi + edi*4]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + edi*8 + 0x1c]
cmp eax, dword [ebx + 0x2c]
jne 0x756e08
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + edi*8 + 0xc]
cmp eax, dword [ebx + 8]
jne 0x756e08
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + edi*8 + 0x14]
cmp eax, dword [ebx + 0xc]
jne 0x756e08
mov eax, dword [ebp - 0xc]
movzx eax, word [eax + edi*8 + 0x10]
push eax
call fcn.006f0728
cmp ax, word [ebx + 0x28]
jne 0x756e08
mov eax, dword [ebp - 0xc]
movzx eax, word [eax + edi*8 + 0x18]
push eax
call fcn.006f0728
cmp ax, word [ebx + 0x2a]
jne 0x756e08
mov byte [ebp - 0x11], 1
jmp 0x756ee0
inc esi
dec dword [ebp - 0x1c]
jne 0x756daa
jmp 0x756ee0
cmp byte [ebx + 4], 2
jne 0x756ee0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
dec eax
test eax, eax
jl 0x756ee0
inc eax
mov dword [ebp - 0x1c], eax
xor esi, esi
mov eax, esi
add eax, eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + eax*8 + 0x3c]
cmp eax, dword [ebx + 0x2c]
jne 0x756ed6
mov eax, esi
add eax, eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*8 + 8]
lea edx, [ebx + 8]
mov ecx, 0x10
call fcn.00426e8c
test al, al
je 0x756ed6
mov eax, esi
add eax, eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*8 + 0x20]
lea edx, [ebx + 0x18]
mov ecx, 0x10
call fcn.00426e8c
test al, al
je 0x756ed6
mov eax, esi
add eax, eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + eax*8 + 0x1c]
push eax
call fcn.006f0728
cmp ax, word [ebx + 0x28]
jne 0x756ed6
mov eax, esi
add eax, eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + eax*8 + 0x34]
push eax
call fcn.006f0728
cmp ax, word [ebx + 0x2a]
jne 0x756ed6
mov byte [ebp - 0x11], 1
jmp 0x756ee0
inc esi
dec dword [ebp - 0x1c]
jne 0x756e31
cmp byte [ebp - 0x11], 0
jne 0x756ef6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7f0]
mov edx, ebx
call fcn.00743764
mov eax, dword [ebp - 0x18]
call fcn.00743dfc
test al, al
jne 0x756d82
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x756f2d
cmp dword [ebp - 0x18], 0
je 0x756f23
mov dl, 1
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx - 4]
pop eax
jmp eax