Function at 0x14004e860
Capabilities:
Check os version
Create udp socket
Get local ipv4 addresses
Get socket information
Initialize winsock library

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x140177698]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov rbx, rcx
lea rdi, [0x1401a9eb0]
mov rcx, rdi
xor edx, edx
mov r8d, 0x6028
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
cmp qword [rbx], 0
jne 0x14004e8b5
mov qword [rbx], rdi
mov qword [rsp + 0x318], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rcx, qword [rbx]
xor r14d, r14d
mov qword [rcx + 0x28], rax
mov rax, qword [rbx]
cmp qword [rax + 0x28], r14
jne 0x14004e8f0
mov edi, 0xfffeffff
jmp 0x14004ed31
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov rcx, qword [rbx]
mov qword [rcx + 0x30], rax
mov rax, qword [rbx]
cmp qword [rax + 0x30], r14
jne 0x14004e917
mov edi, 0xfffeffff
jmp 0x14004ed31
mov dword [rax + 0x38], 0xa
lea rcx, [rbp - 0x60]
mov dword [0x1401a9ea0], 0x3e8
mov dword [rbp - 0x60], 0x94
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x14004e95b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14004ec34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x14004ed31
mov eax, dword [rbp - 0x5c]
lea rdx, [rbp + 0x40]
mov rcx, qword [rbx]
mov dword [rcx + 0x6020], eax
mov rcx, qword [rbx]
mov eax, dword [rbp - 0x58]
mov dword [rcx + 0x6024], eax
mov ecx, dword [reloc.WS2_32.dll_accept]
mov rax, qword [rbx]
cmp dword [rax + 0x6020], 6
cmovb ecx, r14d
mov dword [reloc.WS2_32.dll_accept], ecx
mov ecx, 0x202
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov edi, eax
test eax, eax
jne 0x14004ed31
movzx eax, word [rbp + 0x40]
cmp al, 2
jne 0x14004ed2c
shr ax, 8
cmp al, 2
jne 0x14004ed2c
mov qword [rsp + 0x320], r15
lea r8d, [rdi + 0x11]
mov r15d, 2
mov edx, r15d
mov ecx, r15d
call qword [sym.imp.WS2_32.dll_socket]
cmp rax, 0xffffffffffffffff
mov rdi, rax
setne sil
je 0x14004ea34
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
movzx eax, word [0x14014fa2c]
mov word [rsp + 0x62], ax
mov word [rsp + 0x60], r15w
call qword [sym.imp.WS2_32.dll_htonl]
lea r8d, [r15 + 0xe]
mov rcx, rdi
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x64], eax
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
mov rcx, rdi
sete sil
call qword [sym.imp.WS2_32.dll_closesocket]
lea r8, str.Windows
mov byte [rbx + 8], sil
mov edx, 0xfe
lea rcx, [rbx + 0x2ba9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax + 0x2ba9], r14b
jne 0x14004ea60
mov byte [rbx + 0x2ba8], al
lea rdx, [rsp + 0x70]
mov rax, qword [rbx]
mov rcx, rbx
mov qword [rax + 0x19c8], 0xffffffffffffffff
mov rax, qword [rbx]
mov qword [rax + 0x19d0], r14
mov rax, qword [rbx]
mov qword [rax + 0x3cd0], r14
mov rax, qword [rbx]
mov qword [rax + 0x3cd8], r14
mov rax, qword [rbx]
mov qword [rax + 0x3ce0], rbx
mov r9, qword [rbx]
movzx r8d, word [0x14014fa4c]
add r9, 0x19c8
mov word [rsp + 0x70], r15w
mov dword [rsp + 0x74], r14d
call fcn.14004cc90
mov rcx, qword [rbx]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x70]
mov rcx, qword [rcx + 0x19c8]
call qword [sym.imp.WS2_32.dll_getsockname]
mov r15, qword [rsp + 0x320]
mov edi, eax
test eax, eax
jne 0x14004ed31
movzx eax, word [rsp + 0x72]
lea rdx, [rsp + 0x58]
mov rcx, qword [rbx]
lea r9d, [rdi + 0x10]
mov qword [rsp + 0x40], r14
lea r8, [0x1401775d0]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rdx
mov edx, 0xc8000006
mov word [rcx + 0x19b0], ax
mov rcx, qword [rbx]
mov dword [rsp + 0x28], 8
movzx eax, word [rcx + 0x19b0]
mov word [rbx + 0x10], ax
lea rax, [rcx + 0x19d0]
mov rcx, qword [rcx + 0x19c8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.WS2_32.dll_WSAIoctl]
test eax, eax
je 0x14004eb77
mov rax, qword [rbx]
mov qword [rax + 0x19d0], r14
mov rcx, qword [rbx]
lea r8, [0x14004d510]
mov edx, 1
lea r9, [rcx + 0x19b0]
mov rcx, qword [rcx + 0x19c8]
call fcn.140050df0
mov edi, eax
test eax, eax
jne 0x14004ed31
cmp dword [reloc.WS2_32.dll_accept], r14d
mov rax, qword [rbx]
mov qword [rax + 0x3d00], 0xffffffffffffffff
mov rax, qword [rbx]
mov qword [rax + 0x3d08], r14
mov rax, qword [rbx]
mov qword [rax + 0x6008], r14
mov rax, qword [rbx]
mov qword [rax + 0x6010], r14
mov rax, qword [rbx]
mov qword [rax + 0x6018], rbx
je 0x14004ed11
movups xmm0, xmmword [0x140156890]
mov r9, qword [rbx]
lea rdx, [rbp - 0x80]
movzx r8d, word [0x14014fa4c]
mov eax, reloc.WS2_32.dll_socket
add r9, 0x3d00
mov word [rbp - 0x80], ax
mov rcx, rbx
mov dword [rbp - 0x68], r14d
movups xmmword [rbp - 0x78], xmm0
call fcn.14004cc90
test eax, eax
je 0x14004ec3e
cmp eax, 0x273f
je 0x14004ec3e
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
jmp 0x14004ed23
mov edi, 0xffffe5d4
jmp 0x14004ed31
mov rcx, qword [rbx]
mov edi, r14d
cmp qword [rcx + 0x3d00], 0xffffffffffffffff
je 0x14004ed11
mov dword [rsp + 0x54], 0x1c
lea r8, [rsp + 0x54]
mov rcx, qword [rcx + 0x3d00]
lea rdx, [rbp - 0x80]
call qword [sym.imp.WS2_32.dll_getsockname]
mov edi, eax
test eax, eax
jne 0x14004ed31
movzx eax, word [rbp - 0x7e]
lea r10, [rsp + 0x58]
mov rcx, qword [rbx]
lea r9d, [rdi + 0x10]
mov qword [rsp + 0x40], r14
lea r8, [0x1401775d0]
mov qword [rsp + 0x38], r14
mov edx, 0xc8000006
mov qword [rsp + 0x30], r10
mov word [rcx + 0x3ce8], ax
mov rcx, qword [rbx]
mov dword [rsp + 0x28], 8
movzx eax, word [rcx + 0x3ce8]
mov word [rbx + 0x12], ax
lea rax, [rcx + 0x3d08]
mov rcx, qword [rcx + 0x3d00]
mov qword [rsp + 0x20], rax
call qword [sym.imp.WS2_32.dll_WSAIoctl]
test eax, eax
je 0x14004ece9
mov rax, qword [rbx]
mov qword [rax + 0x3d08], r14
mov rcx, qword [rbx]
lea r8, [0x14004d510]
mov edx, 1
lea r9, [rcx + 0x3ce8]
mov rcx, qword [rcx + 0x3d00]
call fcn.140050df0
mov edi, eax
test eax, eax
jne 0x14004ed31
mov rcx, rbx
call fcn.14004be90
mov edx, edi
mov rcx, rbx
call fcn.1400403e0
test edi, edi
jne 0x14004ed31
jmp 0x14004eefa
mov edi, 0xfffefff8
cmp qword [0x1401aff28], r14
je 0x14004ee04
mov rcx, qword [0x1401aff40]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [0x1401aff48]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14004ede0
mov rcx, qword [0x1401aff48]
test rcx, rcx
je 0x14004ed7a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401aff48], r14
mov rcx, qword [0x1401aff40]
test rcx, rcx
je 0x14004ed93
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401aff40], r14
mov rcx, qword [0x1401aff38]
test rcx, rcx
je 0x14004edac
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401aff38], r14
mov rcx, qword [0x1401aff30]
test rcx, rcx
je 0x14004edc5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401aff30], r14
mov rcx, qword [0x1401aff10]
test rcx, rcx
je 0x14004edf0
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401aff10], r14
jmp 0x14004edf0
lea rdx, str.Unable_to_stop_SMBThread
xor ecx, ecx
call fcn.140051100
nop
mov rax, qword [rbx]
mov byte [rax + 0x90], r14b
mov rax, qword [rbx]
mov byte [rax + 0x91], r14b
mov rcx, rbx
call fcn.14004d3b0
mov rsi, qword [rbx]
mov rcx, qword [rsi + 0x19c8]
cmp rcx, 0xffffffffffffffff
je 0x14004ee3c
call fcn.140050fe0
mov rcx, qword [rsi + 0x19c8]
call qword [sym.imp.WS2_32.dll_closesocket]
mov qword [rsi + 0x19c8], 0xffffffffffffffff
mov rsi, qword [rbx]
cmp dword [reloc.WS2_32.dll_accept], r14d
je 0x14004ee6f
mov rcx, qword [rsi + 0x3d00]
cmp rcx, 0xffffffffffffffff
je 0x14004ee6f
call fcn.140050fe0
mov rcx, qword [rsi + 0x3d00]
call qword [sym.imp.WS2_32.dll_closesocket]
mov qword [rsi + 0x3d00], 0xffffffffffffffff
mov rcx, qword [0x1401afed8]
test rcx, rcx
je 0x14004ee8f
mov qword [0x1401afee0], r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401afed8], r14
mov rcx, qword [0x1401aff00]
test rcx, rcx
je 0x14004eeeb
mov rax, qword [0x1401aff08]
test rax, rax
je 0x14004eec2
mov r8, qword [0x1401afef0]
test r8, r8
je 0x14004eec2
xor edx, edx
mov rcx, rax
call r8
mov rcx, qword [0x1401aff00]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401afee8], r14
mov qword [0x1401afef0], r14
mov qword [0x1401afef8], r14
mov qword [0x1401aff08], r14
mov qword [0x1401aff00], r14
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov rsi, qword [rsp + 0x318]
mov eax, edi
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.14006a270
mov rbx, qword [rsp + 0x328]
add rsp, 0x2f0
pop r14
pop rdi
pop rbp
ret