Function at 0x14001129e
Capabilities:
Enumerate processes
Initialize winsock library
List tcp connections and listeners

Disassembly:
jmp 0x1400119f0
push rbp
push rdi
sub rsp, 0x7a8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x14e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14001e008]
xor rax, rbp
mov qword [rbp + 0x768], rax
lea rcx, [0x1400240c8]
call fcn.1400113b1
lea rdx, [rbp + 0x10]
mov cx, 0x202
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140011a63
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.WSAStartup_failed_n
mov rcx, rax
call fcn.14001136b
mov eax, 1
jmp 0x140011d4b
lea rax, str.javaw.exe
mov qword [rbp + 0x1c8], rax
xor eax, eax
cmp eax, 1
je 0x140011d43
mov dword [rbp + 0x1e4], 0
mov dword [rbp + 0x210], 0x238
xor edx, edx
mov ecx, 2
call fcn.1400111b3
mov qword [rbp + 0x468], rax
lea rdx, [rbp + 0x210]
mov rcx, qword [rbp + 0x468]
call fcn.14001124e
test eax, eax
je 0x140011af7
mov rdx, qword [rbp + 0x1c8]
lea rcx, [rbp + 0x23c]
call qword [sym.imp.ucrtbased.dll_wcscmp]
test eax, eax
jne 0x140011ae0
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x1e4], eax
jmp 0x140011af7
lea rdx, [rbp + 0x210]
mov rcx, qword [rbp + 0x468]
call fcn.140011361
test eax, eax
jne 0x140011aba
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x1e4], 0
jne 0x140011b2c
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.Process_not_found_n
mov rcx, rax
call fcn.14001136b
jmp 0x140011d33
mov qword [rbp + 0x488], 0
mov dword [rbp + 0x4a4], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x4a4]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
cmp eax, 0x7a
jne 0x140011cf4
mov eax, dword [rbp + 0x4a4]
mov ecx, eax
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0x488], rax
cmp qword [rbp + 0x488], 0
jne 0x140011bb0
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.Memory_allocation_failed_n
mov rcx, rax
call fcn.14001136b
jmp 0x140011cf2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x4a4]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
jne 0x140011ccb
mov dword [rbp + 0x4c4], 0
jmp 0x140011bff
mov eax, dword [rbp + 0x4c4]
inc eax
mov dword [rbp + 0x4c4], eax
mov rax, qword [rbp + 0x488]
mov eax, dword [rax]
cmp dword [rbp + 0x4c4], eax
jae 0x140011cc9
mov eax, dword [rbp + 0x4c4]
imul rax, rax, 0x1c
mov rcx, qword [rbp + 0x488]
mov edx, dword [rbp + 0x1e4]
cmp dword [rcx + rax + 0x18], edx
jne 0x140011cc4
mov eax, dword [rbp + 0x4c4]
imul rax, rax, 0x1c
mov rcx, qword [rbp + 0x488]
mov eax, dword [rcx + rax + 0x10]
mov dword [rbp + 0x4e4], eax
mov r9d, 0x16
lea r8, [rbp + 0x508]
lea rdx, [rbp + 0x4e4]
mov ecx, 2
call fcn.140011212
test rax, rax
je 0x140011caa
mov eax, dword [rbp + 0x4c4]
imul rax, rax, 0x1c
mov rcx, qword [rbp + 0x488]
movzx ecx, word [rcx + rax + 0x14]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov r8d, eax
lea rdx, [rbp + 0x508]
lea rcx, str.Remote_IP_Address:__s__Remote_Port:__d_n
call fcn.1400111a9
jmp 0x140011cc4
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.Error_converting_IP_address_n
mov rcx, rax
call fcn.14001136b
jmp 0x140011bf1
jmp 0x140011ce5
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.GetExtendedTcpTable_failed_n
mov rcx, rax
call fcn.14001136b
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.ucrtbased.dll_free]
jmp 0x140011d33
cmp dword [rbp + 0x4a4], 0
jne 0x140011d19
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.No_TCP_connections_found_for_the_target_process_n
mov rcx, rax
call fcn.14001136b
jmp 0x140011d33
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.GetExtendedTcpTable_failed_with_an_unexpected_error_n
mov rcx, rax
call fcn.14001136b
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140011a71
call qword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001ae30]
call fcn.14001133e
mov rax, rdi
mov rcx, qword [rbp + 0x768]
xor rcx, rbp
call fcn.1400111c7
lea rsp, [rbp + 0x778]
pop rdi
pop rbp
ret