Function at 0x14003af00
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rbx, rdx
mov rsi, rcx
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14003af44
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14003b433
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x18
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14003b433
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x10], 0
mov r14, qword [rbx + 0x18]
cmp r14, 0xffffffffffffffff
je 0x14003b433
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xd0], xmm0
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmmword [rsp + 0xa0], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov dword [rsp + 0x30], pe_nt_image_headers64
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x30]
mov rcx, r14
call sub.ws2_32.dll_getpeername
cmp eax, 0xffffffff
je 0x14003b06b
mov eax, dword [rsp + 0x30]
movzx ecx, word [rsp + 0x80]
cmp ecx, 2
je 0x14003b07c
cmp ecx, 0x17
jne 0x14003b0a6
cmp eax, 0x1b
jbe 0x14003b433
movzx eax, word [rsp + 0x82]
rol ax, 8
mov word [rsp + 0x2e], ax
movdqu xmm0, xmmword [rsp + 0x88]
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x64], eax
movq rax, xmm0
pshufd xmm1, xmm0, 0xee
movq rbx, xmm1
shld rbx, rax, 0x20
movdqu xmmword [rsp + 0x6a], xmm0
pshufd xmm0, xmm0, 0xff
movd dword [rsp + 0x60], xmm0
mov r15w, 1
jmp 0x14003b0b7
call sub.ws2_32.dll_WSAGetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
jmp 0x14003b0b2
cmp eax, 0xf
jbe 0x14003b433
movzx eax, word [rsp + 0x82]
rol ax, 8
mov ecx, dword [rsp + 0x84]
mov word [rsp + 0x6c], ax
mov dword [rsp + 0x68], ecx
xor r15d, r15d
jmp 0x14003b0b7
lea rbx, str.invalid_argumentinvalid_socket_address
mov qword [rsp + 0x6e], rbx
mov r15w, 2
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xd0], xmm0
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmmword [rsp + 0xa0], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov dword [rsp + 0x28], pe_nt_image_headers64
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x28]
mov rcx, r14
call sub.ws2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x14003b16c
mov eax, dword [rsp + 0x28]
movzx ecx, word [rsp + 0x80]
cmp ecx, 0x17
je 0x14003b183
cmp ecx, 2
jne 0x14003b1e1
cmp eax, 0xf
jbe 0x14003b433
movzx eax, word [rsp + 0x82]
rol ax, 8
mov ecx, dword [rsp + 0x84]
mov word [rsp + 0x34], ax
mov dword [rsp + 0x30], ecx
xor r13d, r13d
jmp 0x14003b1ed
call sub.ws2_32.dll_WSAGetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
mov r13w, 2
jmp 0x14003b1ed
cmp eax, 0x1b
jbe 0x14003b433
movzx r12d, word [rsp + 0x82]
rol r12w, 8
movdqu xmm0, xmmword [rsp + 0x88]
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x58], eax
mov ebp, dword [rsp + 0x98]
movq rax, xmm0
pshufd xmm1, xmm0, 0xee
movq r14, xmm1
shld r14, rax, 0x20
movdqu xmmword [rsp + 0x32], xmm0
pshufd xmm0, xmm0, 0xff
movd dword [rsp + 0x54], xmm0
mov r13w, 1
jmp 0x14003b1ed
mov r13w, 2
lea r14, str.invalid_argumentinvalid_socket_address
movzx eax, word [rsp + 0x6c]
mov word [rsp + 0x2c], ax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x48], eax
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x4c], ax
cmp r15w, 2
je 0x14003b32a
cmp r13w, 2
je 0x14003b32a
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x80], eax
movzx eax, word [rsp + 0x2c]
mov word [rsp + 0x84], ax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x30], eax
movzx eax, word [rsp + 0x4c]
mov word [rsp + 0x34], ax
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14003b27c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14003b433
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x40
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14003b433
mov word [rax], r15w
mov ecx, dword [rsp + 0x80]
mov dword [rax + 2], ecx
movzx ecx, word [rsp + 0x84]
mov word [rax + 6], cx
mov qword [rax + 8], rbx
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x10], ecx
mov ecx, dword [rsp + 0x5c]
mov dword [rax + 0x14], ecx
mov ecx, dword [rsp + 0x64]
mov dword [rax + 0x18], ecx
movzx ecx, word [rsp + 0x2e]
mov word [rax + 0x1c], cx
mov word [rax + 0x20], r13w
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x22], ecx
movzx ecx, word [rsp + 0x34]
mov word [rax + 0x26], cx
mov qword [rax + 0x28], r14
mov ecx, dword [rsp + 0x54]
mov dword [rax + 0x30], ecx
mov ecx, dword [rsp + 0x58]
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], ebp
mov word [rax + 0x3c], r12w
mov qword [rsi], rax
lea rax, [0x1401b8700]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
mov word [rsi + 0x18], 1
mov eax, dword [rsp + 0x4e]
mov dword [rsi + 0x1a], eax
movzx eax, word [rsp + 0x52]
mov word [rsi + 0x1e], ax
jmp 0x14003b3c7
mov qword [rsi], 0
mov qword [rsi + 0x10], rdi
mov word [rsi + 0x18], 1
mov eax, dword [rsp + 0x4e]
mov dword [rsi + 0x1a], eax
movzx eax, word [rsp + 0x52]
mov word [rsi + 0x1e], ax
cmp r15w, 2
jne 0x14003b3ab
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14003b3ab
test rax, rax
je 0x14003b3ab
lea rsi, [rbx - 1]
mov rdi, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14003b39a
cmp qword [rbx + 0x10], 0x11
jb 0x14003b389
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
cmp r13w, 2
jne 0x14003b3c7
mov eax, r14d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14003b3c7
test rax, rax
jne 0x14003b3db
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [r14 - 1]
mov rdi, qword [r14 - 1]
mov rbx, qword [r14 + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14003b40f
cmp qword [rbx + 0x10], 0x11
jb 0x14003b3fe
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sub.kernel32.dll_HeapFree
ud2