Function at 0x1400969b0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x1c0]
mov rbx, rcx
mov rdx, qword [rcx + 0x20]
cmp dword [rax + 0x10], 0
je 0x1400969e1
mov dl, reloc.WS2_32.dll_listen
call fcn.140095050
movzx r8d, dl
mov dl, 1
add rsp, 0x20
pop rbx
jmp fcn.140096ad0
cmp byte [rcx + 0xa9f], 0
je 0x1400969f6
xor edx, edx
add rsp, 0x20
pop rbx
jmp 0x140097680
cmp byte [rcx + 0xaa2], 0
je 0x140096a79
mov r9, qword [rdx + 0x4b0]
test r9, r9
jne 0x140096a39
mov r9, qword [rcx + 0x750]
test r9, r9
jne 0x140096a30
cmp byte [rbx + 0x1322], 0
lea rcx, [0x1400be830]
lea r9, [0x1400bdaec]
cmovne r9, rcx
lea r8, [0x1400be838]
jmp 0x140096a50
cmp byte [rcx + 0x1326], 0
lea r8, [0x1400be840]
jne 0x140096a50
lea r8, [0x1400be850]
add rdx, 0x3f8
mov rcx, rbx
call fcn.1400afbf0
mov r8d, eax
test eax, eax
jne 0x140096a70
mov dl, 0x1d
mov rcx, rbx
call fcn.140095050
mov eax, r8d
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.1400975e0
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov rax, qword [0x140185640]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov r13, qword [rcx + 0x20]
xor eax, eax
mov r14, rcx
mov qword [rsp + 0x58], 0xffffffffffffffff
xor ecx, ecx
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
mov dword [rbp + 0x18], eax
mov edi, edx
mov word [rbp + 0x1c], ax
mov rsi, qword [r14 + 0x780]
movzx r15d, cx
mov byte [rbp + 0x1e], al
mov r12b, 1
mov qword [rsp + 0x68], rcx
mov ebx, ecx
mov qword [rsp + 0x60], rcx
mov word [rsp + 0x50], cx
mov qword [rsp + 0x48], rcx
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
test rsi, rsi
je 0x140097904
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], cl
jne 0x140097713
cmp rax, 1
jbe 0x140097904
movzx eax, byte [rsi]
cmp al, 0x5b
jne 0x140097752
lea r15, [rsi + 1]
mov edx, 0x5d
mov rcx, r15
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
test rax, rax
je 0x1400977a0
mov rbx, rax
mov qword [rsp + 0x48], r15
sub rbx, r15
jmp 0x1400977b2
cmp al, 0x3a
je 0x1400977b2
mov edx, 0x3a
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
mov qword [rsp + 0x48], rsi
mov r15, rax
mov r9, rsi
test rax, rax
je 0x1400978b8
mov rbx, rax
lea r8, [rsp + 0x78]
mov rdx, rsi
mov ecx, reloc.WS2_32.dll_socket
sub rbx, rsi
call fcn.1400ab3a0
cmp eax, 1
mov rsi, r15
mov ecx, 0
cmove rsi, rcx
jmp 0x1400977a2
xor ecx, ecx
movzx r15d, cx
movzx eax, cx
test rsi, rsi
je 0x1400978d4
mov edx, 0x3a
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
xor eax, eax
mov r15d, eax
test rsi, rsi
je 0x140097814
lea rcx, [rsi + 1]
xor edx, edx
lea r8d, [rax + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov ecx, eax
call fcn.140078410
mov edx, Ordinal_46
mov rcx, rsi
movzx r15d, ax
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x1400978af
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov ecx, eax
call fcn.140078410
mov r9, qword [rsp + 0x48]
xor ecx, ecx
cmp r15w, ax
mov edx, ecx
cmovbe dx, ax
cmovbe cx, r15w
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x48], ecx
test rbx, rbx
je 0x1400978f9
cmp rbx, 0x32
jae 0x140097dc1
mov r8, rbx
lea rcx, [rbp + 0x20]
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x20], 0
mov rcx, qword [r13 + 0x38]
add rcx, 0x10
call fcn.1400b0ea0
mov r8d, dword [r13 + 0x538]
lea rcx, [rbp + 0x1b0]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [r13 + 0x38]
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax]
call fcn.14000d000
mov ecx, eax
test eax, eax
je 0x1400978de
sub ecx, 1
je 0x140097dc1
cmp ecx, 1
jne 0x1400978e4
lea rbx, [rbp + 0x1b0]
jmp 0x1400978e9
movzx eax, r15w
jmp 0x140097814
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rsi + rbx], 0
jne 0x1400978c0
xor eax, eax
movzx r15d, ax
jmp 0x140097819
mov r9, qword [rsp + 0x48]
jmp 0x14009781b
lea rbx, [rbp + 0x20]
jmp 0x1400978e9
mov rbx, qword [rsp + 0x68]
mov r15d, dword [rsp + 0x48]
test rbx, rbx
jne 0x140097994
jmp 0x140097904
mov dword [rsp + 0x48], ecx
mov r15d, ecx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x40], Ordinal_133
lea r8, [rsp + 0x40]
mov rcx, qword [r13 + 0x220]
lea rdx, [rsp + 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x140097950
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0xb0]
mov ecx, eax
call fcn.1400871e0
mov r8, rax
lea rdx, [0x1400be6c0]
jmp 0x140097db9
movzx eax, word [rsp + 0x70]
cmp ax, 0x17
je 0x140097962
lea rdx, [rsp + 0x74]
jmp 0x14009796c
lea rdx, [rsp + 0x78]
mov eax, reloc.WS2_32.dll_socket
movzx ecx, ax
lea r8, [rbp + 0x1b0]
mov r9d, 0x401
call fcn.1400a95e0
test rax, rax
je 0x140097dc1
lea rbx, [rbp + 0x1b0]
xor r12b, r12b
lea rax, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, r14
call fcn.14007d560
cmp eax, 1
jne 0x1400979c1
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.140069fb0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140097daf
mov rsi, qword [rdx]
mov rcx, r14
call fcn.14007d930
test rsi, rsi
je 0x140097daf
nop dword [rax]
nop word [rax + rax]
movzx r9d, byte [r13 + 0x542]
lea rax, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov rcx, r14
call fcn.1400a2d50
test eax, eax
je 0x140097a46
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rsi, qword [rsi + 0x28]
test rsi, rsi
jne 0x1400979f0
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0xb0]
mov ecx, eax
call fcn.1400871e0
mov r8, rax
lea rdx, [0x1400be718]
jmp 0x140097db9
movsxd r8, dword [rsi + 0x10]
lea rcx, [rsp + 0x70]
mov rdx, qword [rsi + 0x20]
call sub.VCRUNTIME140.dll_memcpy
movzx ebx, r15w
mov eax, dword [rsi + 0x10]
mov dword [rsp + 0x40], eax
cmp r15w, word [rsp + 0x50]
ja 0x140097b24
nop
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov r8d, dword [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
mov word [rsp + 0x72], ax
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x140097b67
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
test r12b, r12b
je 0x140097b0a
cmp eax, 0x2741
jne 0x140097b0a
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0xb0]
mov ecx, eax
call fcn.1400871e0
mov r9, rax
movzx r8d, bx
lea rdx, [0x1400be730]
mov rcx, r14
call fcn.140074850
mov dword [rsp + 0x40], Ordinal_133
lea r8, [rsp + 0x40]
mov rcx, qword [r13 + 0x220]
lea rdx, [rsp + 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140097927
movzx ebx, r15w
xor r12b, r12b
jmp 0x140097a70
cmp eax, 0x2740
je 0x140097b16
cmp eax, 0xd
jne 0x140097b38
inc bx
cmp bx, word [rsp + 0x50]
jbe 0x140097a70
lea rdx, [0x1400be780]
mov rcx, r14
call fcn.140074760
jmp 0x140097dc1
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0xb0]
mov ecx, eax
call fcn.1400871e0
mov r9, rax
movzx r8d, bx
lea rdx, [0x1400be760]
mov rcx, r14
call fcn.140074760
jmp 0x140097dc1
cmp bx, word [rsp + 0x50]
ja 0x140097b24
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], Ordinal_133
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140097927
mov rcx, qword [rsp + 0x58]
lea edx, [rax + 1]
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x140097bce
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0xb0]
mov ecx, eax
call fcn.1400871e0
mov r8, rax
lea rdx, [0x1400be718]
jmp 0x140097db9
mov r8d, 0x2f
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.14007d520
cmp byte [r13 + 0x351], 0
jne 0x140097bfc
cmp byte [r13 + 0x34c], 0
je 0x140097bfc
mov byte [r13 + 0x351], 1
lea r9, [rsp + 0x58]
mov r8d, 1
mov rdx, r13
mov rcx, r14
call fcn.1400a2ac0
mov ebx, eax
test eax, eax
jne 0x140097dc6
mov qword [rsp + 0x58], 0xffffffffffffffff
cmp edi, 2
je 0x140097c7e
movzx ecx, word [rsp + 0x70]
nop
cmp byte [r13 + 0x351], 0
jne 0x140097c3e
test edi, edi
je 0x140097c77
cmp edi, 1
jne 0x140097c49
cmp cx, 2
jne 0x140097c77
movzx eax, cx
cmp eax, 2
je 0x140097c56
cmp eax, 0x17
jne 0x140097c77
movzx ecx, word [rsp + 0x72]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test edi, edi
je 0x140097d45
cmp edi, 1
je 0x140097ca2
movzx ecx, word [rsp + 0x70]
inc edi
cmp edi, 2
jne 0x140097c30
lea rsi, [r13 + 0x3f8]
mov dl, 0x1c
mov dword [rsi + 0x100], edi
mov rcx, r14
call fcn.140095050
test ebx, ebx
je 0x140097dd0
jmp 0x140097dc6
lea r10, [rbp + 0x60]
mov r9d, Ordinal_46
lea rdx, [rbp - 0x10]
movzx ecx, byte [rdx]
test cl, cl
je 0x140097ccc
cmp cl, 0x2e
mov eax, ecx
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x140097cb0
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, [0x1400be7dc]
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.14007b090
lea rax, [rbp + 0x60]
mov rcx, r14
lea rsi, [r13 + 0x3f8]
mov qword [rsp + 0x20], rax
mov rdx, rsi
lea r9, [0x1400be605]
lea r8, [0x140174aac]
call fcn.1400afbf0
mov ebx, eax
test eax, eax
je 0x140097c85
mov ecx, eax
call fcn.140087310
mov r8, rax
lea rdx, [0x1400be7e8]
mov rcx, r14
call fcn.140074760
jmp 0x140097dc6
cmp word [rsp + 0x70], 2
lea rsi, [r13 + 0x3f8]
movzx eax, r8w
lea r9, [0x1400be600]
mov dword [rsp + 0x30], eax
lea r8, [0x1400be7a8]
mov ecx, 0
lea rax, [rbp - 0x10]
setne cl
mov qword [rsp + 0x28], rax
inc ecx
mov rdx, rsi
mov dword [rsp + 0x20], ecx
mov rcx, r14
call fcn.1400afbf0
mov ebx, eax
test eax, eax
je 0x140097c85
mov ecx, eax
call fcn.140087310
mov r8, rax
lea rdx, [0x1400be7b8]
mov rcx, r14
call fcn.140074760
jmp 0x140097dc6
mov r8, rbx
lea rdx, [0x1400be6e0]
mov rcx, r14
call fcn.140074760
mov ebx, 0x1e
xor edx, edx
mov rcx, r14
call fcn.140095050
mov r8, qword [rsp + 0x58]
cmp r8, 0xffffffffffffffff
je 0x140097de6
mov rdx, r13
mov rcx, r14
call fcn.1400a2d40
mov eax, ebx
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.1400b2d40
mov rbx, qword [rsp + 0x720]
add rsp, 0x6d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret