Function at 0x1400651b0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov rax, qword [0x1400b0700]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov rax, qword [rcx + 0x20]
xorps xmm0, xmm0
mov rbx, qword [rcx + 0x780]
mov edi, edx
mov qword [rsp + 0x50], rax
mov r14, rcx
xor eax, eax
mov qword [rsp + 0x48], 0xffffffffffffffff
mov qword [rbp + 0x10], rax
mov r12d, eax
mov dword [rbp + 0x18], eax
movzx r13d, ax
mov word [rbp + 0x1c], ax
movzx r15d, ax
mov byte [rbp + 0x1e], al
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x40], 1
mov qword [rsp + 0x60], rax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
test rbx, rbx
je 0x140065459
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r12b
jne 0x140065243
cmp rax, 1
jbe 0x140065459
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rbx + rax], r12b
jne 0x140065260
cmp rax, 0x41
jae 0x140065276
mov ecx, 0x41
jmp 0x140065289
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x140065280
inc rcx
mov edx, 1
call qword [str.:e_b_]
mov qword [rsp + 0x60], rax
mov r13, rax
test rax, rax
jne 0x1400652b1
mov r12, qword [rsp + 0x50]
lea ebx, [rax + 0x1b]
jmp 0x14006593a
movzx eax, byte [rbx]
cmp al, 0x5b
jne 0x1400652e0
mov edx, 0x5d
lea r15, [rbx + 1]
mov rcx, rbx
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
test rax, rax
je 0x1400653ce
mov r8, rax
mov rdx, r15
sub r8, r15
jmp 0x140065345
cmp al, 0x3a
jne 0x1400652e9
mov rsi, rbx
jmp 0x14006534e
mov edx, Ordinal_60
mov rcx, rbx
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
test rax, rax
je 0x1400653b7
lea r8, [rsp + 0x70]
mov rdx, rbx
mov ecx, reloc.WS2_32.dll_socket
call fcn.140074f10
cmp eax, 1
jne 0x14006533c
mov rcx, r13
sub rcx, rbx
nop
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x140065320
xor r13d, r13d
mov ebx, r13d
mov eax, r13d
jmp 0x1400653d9
mov r8, rsi
mov rdx, rbx
sub r8, rbx
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, Ordinal_60
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
xor r13d, r13d
mov rsi, rax
movzx ebx, r13w
movzx eax, r13w
test rsi, rsi
je 0x1400653d9
lea rcx, [rsi + 1]
xor edx, edx
lea r8d, [r13 + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov ecx, eax
call fcn.1400428d0
lea edx, [r13 + 0x2d]
mov rcx, rsi
movzx ebx, ax
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x1400653b2
lea rcx, [rax + 1]
xor edx, edx
lea r8d, [r13 + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov ecx, eax
call fcn.1400428d0
jmp 0x1400653d9
movzx eax, bx
jmp 0x1400653d9
mov rcx, r13
sub rcx, rbx
nop dword [rax]
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x1400653c0
xor r13d, r13d
movzx eax, r13w
movzx ebx, r13w
mov rsi, qword [rsp + 0x60]
cmp bx, ax
mov r15d, r13d
cmovbe r15w, ax
cmovbe r13w, bx
cmp byte [rsi], r12b
je 0x140065459
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rbx + 0x58]
add rcx, 0x10
call fcn.14007f920
mov r8d, dword [rbx + 0x700]
lea rcx, [rbp + 0x170]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [rbx + 0x58]
mov r9, rsi
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax]
call fcn.140034ac0
mov ecx, eax
test eax, eax
je 0x14006544d
sub ecx, 1
je 0x140065932
cmp ecx, 1
jne 0x140065450
lea r12, [rbp + 0x170]
jmp 0x140065450
mov r12, rsi
test r12, r12
jne 0x1400654ef
mov r12, qword [rsp + 0x50]
lea r8, [rsp + 0x44]
mov dword [rsp + 0x44], pe_nt_image_headers64
lea rdx, [rsp + 0x70]
mov rcx, qword [r12 + 0x1a8]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x1400654b0
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14002ab10
lea rdx, str.getsockname___failed:__s
mov r8, rax
mov rcx, r14
call fcn.140040af0
jmp 0x140065935
movzx eax, word [rsp + 0x70]
lea rcx, [rsp + 0x78]
cmp eax, 0x17
lea rdx, [rsp + 0x74]
mov r9d, 0x401
lea r8, [rbp + 0x170]
cmove rdx, rcx
mov ecx, eax
call fcn.140071c70
test rax, rax
je 0x140065935
lea r12, [rbp + 0x170]
mov byte [rsp + 0x40], 0
lea rax, [rsp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r12
mov rcx, r14
call fcn.14004a130
cmp eax, 1
jne 0x14006551c
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.140034ca0
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x140065919
mov rsi, qword [rdx]
mov rcx, r14
call fcn.14004a6d0
test rsi, rsi
je 0x140065919
mov r12, qword [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
movzx r9d, byte [r12 + 0x70b]
lea rax, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov rcx, r14
call fcn.14006fe90
test eax, eax
je 0x1400655ac
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rsi, qword [rsi + 0x28]
test rsi, rsi
jne 0x140065550
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14002ab10
mov r8, rax
lea rdx, str.socket_failure:__s
mov rcx, r14
call fcn.140040af0
jmp 0x140065935
movsxd r8, dword [rsi + 0x10]
lea rcx, [rsp + 0x70]
mov rdx, qword [rsi + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsi + 0x10]
movzx ebx, r13w
mov dword [rsp + 0x44], eax
cmp r13w, r15w
ja 0x140065684
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov r8d, dword [rsp + 0x44]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x48]
mov word [rsp + 0x72], ax
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x1400656c4
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [rsp + 0x40], 0
je 0x14006566b
cmp eax, 0x2741
jne 0x14006566b
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14002ab10
mov r9, rax
movzx r8d, bx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s
mov rcx, r14
call fcn.140040be0
mov dword [rsp + 0x44], pe_nt_image_headers64
lea r8, [rsp + 0x44]
mov rcx, qword [r12 + 0x1a8]
lea rdx, [rsp + 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140065482
movzx ebx, r13w
mov byte [rsp + 0x40], al
jmp 0x14006567a
cmp eax, 0x2740
je 0x140065677
cmp eax, 0xd
jne 0x140065698
inc bx
cmp bx, r15w
jbe 0x1400655d3
lea rdx, str.bind___failed__we_ran_out_of_ports
mov rcx, r14
call fcn.140040af0
jmp 0x140065935
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14002ab10
mov r9, rax
movzx r8d, bx
lea rdx, str.bind_port_hu__failed:__s
mov rcx, r14
call fcn.140040af0
jmp 0x140065935
cmp bx, r15w
ja 0x140065684
mov rcx, qword [rsp + 0x48]
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x44], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140065482
mov rcx, qword [rsp + 0x48]
lea edx, [rax + 1]
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x14006572f
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14002ab10
lea rdx, str.socket_failure:__s
mov r8, rax
mov rcx, r14
call fcn.140040af0
jmp 0x140065935
mov r8d, Ordinal_50
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.14004a0f0
cmp byte [r12 + 0x2da], 0
jne 0x140065760
cmp byte [r12 + 0x2d4], 0
je 0x140065760
mov byte [r12 + 0x2da], 1
cmp edi, 2
je 0x1400657bf
movzx eax, word [rsp + 0x70]
nop word [rax + rax]
cmp byte [r12 + 0x2da], 0
jne 0x14006577f
test edi, edi
je 0x1400657b8
cmp edi, 1
jne 0x14006578a
cmp ax, 2
jne 0x1400657b8
movzx ecx, ax
cmp ecx, 2
je 0x140065797
cmp ecx, 0x17
jne 0x1400657b8
movzx ecx, word [rsp + 0x72]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test edi, edi
je 0x1400658aa
cmp edi, 1
je 0x140065806
movzx eax, word [rsp + 0x70]
inc edi
cmp edi, 2
jne 0x140065770
lea rsi, [r12 + 0x5d0]
lea r9, [rsp + 0x48]
mov dword [rsi + 0xe8], edi
mov r8d, 1
mov rdx, r12
mov rcx, r14
call fcn.14006fc70
mov ebx, eax
test eax, eax
jne 0x14006593a
mov rax, qword [r14 + 0x20]
mov qword [rsp + 0x48], 0xffffffffffffffff
mov byte [rax + 0x6c6], 0x1c
jmp 0x140065945
lea r10, [rbp + 0x20]
mov r9d, Ordinal_45
lea rdx, [rbp - 0x10]
movzx ecx, byte [rdx]
test cl, cl
je 0x140065830
cmp cl, 0x2e
mov eax, ecx
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x140065814
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, str.__d__d
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.140044f00
lea rax, [rbp + 0x20]
mov rcx, r14
lea rsi, [r12 + 0x5d0]
mov qword [rsp + 0x20], rax
mov rdx, rsi
lea r9, str.PORT
lea r8, [0x140092b60]
call fcn.14007e1f0
mov ebx, eax
test eax, eax
je 0x1400657c7
mov ecx, eax
call fcn.14002ad00
mov r8, rax
lea rdx, str.Failure_sending_PORT_command:__s
mov rcx, r14
call fcn.140040af0
jmp 0x14006593a
cmp word [rsp + 0x70], 2
lea rsi, [r12 + 0x5d0]
movzx eax, r8w
lea r9, str.EPRT
mov dword [rsp + 0x30], eax
lea r8, str._s__d_s_hu
mov r13d, 0
lea rax, [rbp - 0x10]
setne r13b
mov qword [rsp + 0x28], rax
inc r13d
mov rdx, rsi
mov rcx, r14
mov dword [rsp + 0x20], r13d
call fcn.14007e1f0
mov ebx, eax
test eax, eax
je 0x1400657c7
mov ecx, eax
call fcn.14002ad00
mov r8, rax
lea rdx, str.Failure_sending_EPRT_command:__s
mov rcx, r14
call fcn.140040af0
jmp 0x14006593a
mov r8, r12
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov rcx, r14
call fcn.140040af0
mov r12, qword [rsp + 0x50]
jmp 0x140065935
mov r12, rbx
mov ebx, reloc.WLDAP32.dll_Ordinal_30
mov rax, qword [r14 + 0x20]
mov byte [rax + 0x6c6], 0
mov r8, qword [rsp + 0x48]
cmp r8, 0xffffffffffffffff
je 0x14006595b
mov rdx, r12
mov rcx, r14
call fcn.14006fe60
mov rcx, qword [rsp + 0x60]
call qword [fcn.140086522]
mov eax, ebx
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140085070
mov rbx, qword [rsp + 0x6e0]
add rsp, 0x690
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret