Function at 0x14005aa10
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x1f8]
cmp dword [rax + 0x18], 0
je 0x140059e45
mov edx, reloc.WS2_32.dll_listen
mov rcx, rbx
call fcn.140058510
mov r8d, edx
mov dl, 1
add rsp, 0x20
pop rbx
jmp fcn.140059f60
cmp byte [rcx + 0x73f], 0
je 0x140059e5d
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x14005aa10
cmp byte [rcx + 0x756], 0
je 0x140059f00
mov r8, qword [rbx + 0x7e8]
test r8, r8
jne 0x140059eb8
mov r8, qword [rcx + 0x7b0]
test r8, r8
jne 0x140059e9b
cmp byte [rcx + 0x73e], 0
lea rax, str.NLST
lea r8, str.LIST
cmovne r8, rax
lea rcx, [rbx + 0x760]
lea rdx, str.PRET__s
call fcn.14006cd90
test eax, eax
je 0x140059eee
add rsp, 0x20
pop rbx
ret
cmp byte [rcx + 0x74a], 0
lea rcx, [rbx + 0x760]
je 0x140059ede
lea rdx, str.PRET_STOR__s
call fcn.14006cd90
test eax, eax
je 0x140059eee
add rsp, 0x20
pop rbx
ret
lea rdx, str.PRET_RETR__s
call fcn.14006cd90
test eax, eax
jne 0x140059f0d
mov edx, Ordinal_33
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140058510
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.14005a980
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8f0]
sub rsp, 0x9f0
mov rax, qword [0x1400fe158]
xor rax, rsp
mov qword [rbp + 0x8e0], rax
mov r14, qword [rcx]
mov edi, edx
mov rsi, rcx
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], 0xffffffffffffffff
lea rcx, [rbp - 0x30]
mov r8d, 0x100
call fcn.140097cb0
mov rbx, qword [r14 + 0x7e0]
xor eax, eax
mov qword [rsp + 0x48], rax
mov r12d, eax
mov rcx, qword [r14 + 0x7e0]
movzx r13d, ax
mov word [rsp + 0x32], ax
mov r15d, eax
mov byte [rsp + 0x30], 1
test rcx, rcx
je 0x14005ac43
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x14005aaa0
cmp rax, 1
jbe 0x14005ac43
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r12b
jne 0x14005aab7
cmp rax, 0x16
jae 0x14005aacd
mov ecx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x14005aada
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x14005aad1
inc rcx
mov edx, 1
call qword [fcn.14009bf48]
mov r15, rax
test rax, rax
jne 0x14005aaf9
lea eax, [r15 + 0x1b]
jmp 0x14005b14c
cmp byte [rbx], 0x3a
jne 0x14005ab03
mov r14, rbx
jmp 0x14005ab29
mov edx, Ordinal_60
mov rcx, rbx
call fcn.140097548
mov r14, rax
mov rcx, r15
test rax, rax
je 0x14005ab95
mov r8, rax
mov rdx, rbx
sub r8, rbx
call fcn.1400ac810
test r14, r14
je 0x14005abae
mov edx, Ordinal_60
mov rcx, r14
call fcn.140097548
mov rbx, rax
test rax, rax
je 0x14005abae
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.1400a9280
mov ecx, eax
call fcn.140044060
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov rcx, rbx
movzx r14d, ax
call fcn.140097548
test rax, rax
je 0x14005ab8f
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.1400a9280
mov ecx, eax
call fcn.140044060
movzx r13d, ax
jmp 0x14005abb2
movzx r13d, r14w
jmp 0x14005abb2
sub rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rbx]
mov byte [rcx + rbx], al
lea rbx, [rbx + 1]
test al, al
jne 0x14005aba0
movzx r14d, r12w
xor eax, eax
cmp r14w, r13w
mov ebx, eax
cmovbe ax, r14w
cmovbe bx, r13w
movzx r14d, ax
mov word [rsp + 0x32], ax
cmp byte [r15], r12b
je 0x14005ac34
mov rcx, qword [rsi + 0x70]
mov rcx, qword [rcx + 0x20]
call fcn.140009a90
mov r8d, dword [rsi + 0xb8]
lea rcx, [rbp + 0xd0]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [rsi + 0x70]
mov r9, r15
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax + 4]
call fcn.140009a90
test eax, eax
je 0x14005ac26
sub eax, 1
je 0x14005b147
cmp eax, 1
jne 0x14005ac29
lea r12, [rbp + 0xd0]
jmp 0x14005ac29
mov r12, r15
movzx r13d, bx
test r12, r12
jne 0x14005acb0
jmp 0x14005ac3e
mov word [rsp + 0x32], r14w
movzx r13d, bx
mov r14, qword [rsp + 0x40]
mov rcx, qword [rsi + 0x238]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x14005ac88
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
mov r8, rax
lea rdx, str.getsockname___failed:__s
mov rcx, r14
jmp 0x14005b139
movzx ecx, word [rsp + 0x50]
lea r8, [rbp + 0xd0]
mov r9d, 0x401
lea rdx, [rsp + 0x54]
call fcn.1400511f0
lea r12, [rbp + 0xd0]
mov byte [rsp + 0x30], 0
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, r12
mov rcx, rsi
call fcn.140037270
cmp eax, 1
jne 0x14005acd5
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1400365e0
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x14005b12a
mov rcx, qword [rsp + 0x40]
mov r14, qword [rdx]
call fcn.140037450
test r14, r14
je 0x14005b12a
mov rcx, r15
call qword [fcn.1400a3ca8]
xor ebx, ebx
mov qword [rsp + 0x38], 0xffffffffffffffff
nop dword [rax]
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.140043180
mov r15d, eax
test eax, eax
je 0x14005ad3d
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r14, qword [r14 + 0x28]
mov ebx, eax
test r14, r14
jne 0x14005ad10
jmp 0x14005ad42
test r14, r14
jne 0x14005ad65
mov edx, ebx
mov rcx, rsi
call fcn.140067bd0
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
mov r8, rax
call fcn.140041b50
jmp 0x14005b147
movsxd r8, dword [r14 + 0x10]
lea rcx, [rsp + 0x50]
mov rdx, qword [r14 + 0x20]
call fcn.140097600
movzx r12d, word [rsp + 0x32]
mov eax, dword [r14 + 0x10]
movzx ebx, r12w
mov dword [rsp + 0x34], eax
cmp r12w, r13w
ja 0x14005ae45
cmp word [rsp + 0x50], 2
jne 0x14005ada9
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x52], ax
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x14005aed0
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [rsp + 0x30], 0
je 0x14005ae2c
cmp eax, 0x2741
jne 0x14005ae2c
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
movzx r8d, bx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s_n
mov rbx, qword [rsp + 0x40]
mov r9, rax
mov rcx, rbx
call fcn.140041c50
mov rcx, qword [rsi + 0x238]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x14005ae68
movzx ebx, r12w
mov byte [rsp + 0x30], al
jmp 0x14005ae3b
cmp eax, 0x2740
je 0x14005ae38
cmp eax, 0xd
jne 0x14005ae9c
inc bx
cmp bx, r13w
jbe 0x14005ad93
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind___failed__we_ran_out_of_ports_
call fcn.140041b50
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140042770
jmp 0x14005b147
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
mov rcx, rbx
lea rdx, str.getsockname___failed:__s
mov r8, rax
call fcn.140041b50
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140042770
jmp 0x14005b147
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind_port_hu__failed:__s
mov r9, rax
movzx r8d, bx
call fcn.140041b50
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140042770
jmp 0x14005b147
cmp bx, r13w
ja 0x14005ae45
mov rcx, qword [rsp + 0x38]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x14005af15
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
mov rcx, qword [rsp + 0x40]
jmp 0x14005ae7b
mov rcx, qword [rsp + 0x38]
mov edx, 1
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x14005af4a
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140067bd0
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
jmp 0x14005ae82
mov r8d, 0x100
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.140037240
cmp edi, 2
je 0x14005afa1
movzx eax, word [rsp + 0x50]
cmp byte [rsi + 0x3bd], 0
jne 0x14005af73
test edi, edi
je 0x14005af9a
cmp ax, 2
jne 0x14005af9a
movzx ecx, word [rsp + 0x52]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test edi, edi
je 0x14005b09e
cmp edi, 1
je 0x14005afde
movzx eax, word [rsp + 0x50]
inc edi
cmp edi, 2
jne 0x14005af66
lea rbx, [rsi + 0x760]
mov rcx, rsi
mov dword [rbx + 0xb0], edi
call fcn.140058520
mov rax, qword [rsp + 0x38]
mov edx, Ordinal_32
mov rcx, rsi
mov qword [rsi + 0x240], rax
mov byte [rsi + 0x3b6], 1
call fcn.140058510
mov eax, r15d
jmp 0x14005b14c
lea r10, [rbp + 0x4e0]
mov r9d, Ordinal_46
lea rdx, [rbp - 0x30]
nop
movzx ecx, byte [rdx]
test cl, cl
je 0x14005b00d
cmp cl, 0x2e
movzx eax, cl
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x14005aff0
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, str.__d__d
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.14004eda0
lea rbx, [rsi + 0x760]
mov rcx, rbx
lea r9, [rbp + 0x4e0]
lea r8, str.PORT
lea rdx, [0x1400d4128]
call fcn.14006cd90
mov r15d, eax
test eax, eax
je 0x14005afa8
mov ecx, eax
call fcn.140067d10
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_PORT_command:__s
mov r8, rax
call fcn.140041b50
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140042770
xor edx, edx
mov rcx, rsi
call fcn.140058510
mov eax, r15d
jmp 0x14005b14c
cmp word [rsp + 0x50], 2
lea rbx, [rsi + 0x760]
movzx eax, r8w
lea rdx, str._s__d_s_hu
mov ecx, 0
mov dword [rsp + 0x28], eax
setne cl
lea rax, [rbp - 0x30]
lea r8, str.EPRT
mov qword [rsp + 0x20], rax
lea r9d, [rcx + 1]
mov rcx, rbx
call fcn.14006cd90
mov r15d, eax
test eax, eax
je 0x14005afa8
mov ecx, eax
call fcn.140067d10
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_EPRT_command:__s
mov r8, rax
call fcn.140041b50
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140042770
xor edx, edx
mov dword [rbx + 0xb0], 1
mov rcx, rsi
call fcn.140058510
mov eax, r15d
jmp 0x14005b14c
mov rcx, qword [rsp + 0x40]
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov r8, r12
call fcn.140041b50
mov rcx, r15
call qword [fcn.1400a3ca8]
mov eax, reloc.WLDAP32.dll_Ordinal_30
mov rcx, qword [rbp + 0x8e0]
xor rcx, rsp
call fcn.1400951e0
mov rbx, qword [rsp + 0xa40]
add rsp, 0x9f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret