Function at 0x140098de0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x1b0]
mov rbx, rcx
mov rdx, qword [rcx + 0x18]
cmp dword [rax + 0x10], 0
je 0x140098e13
mov edx, reloc.WS2_32.dll_listen
call fcn.1400974d0
mov r8d, edx
mov dl, 1
add rsp, 0x20
pop rbx
jmp fcn.140098f00
cmp byte [rcx + 0xb0e], 0
je 0x140098e28
xor edx, edx
add rsp, 0x20
pop rbx
jmp 0x140099ac0
cmp byte [rcx + 0xb11], 0
je 0x140098eac
mov r9, qword [rdx + 0x528]
test r9, r9
jne 0x140098e6b
mov r9, qword [rcx + 0x7b8]
test r9, r9
jne 0x140098e62
cmp byte [rbx + 0x1311], 0
lea rcx, str.NLST
lea r9, str.LIST
cmovne r9, rcx
lea r8, str.PRET__s
jmp 0x140098e82
cmp byte [rcx + 0xb1d], 0
lea r8, str.PRET_STOR__s
jne 0x140098e82
lea r8, str.PRET_RETR__s
add rdx, 0x498
mov rcx, rbx
call fcn.1400aca60
mov r8d, eax
test eax, eax
jne 0x140098ea3
lea edx, [rax + 0x1d]
mov rcx, rbx
call fcn.1400974d0
mov eax, r8d
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.140099a10
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov rax, qword [0x1401deb80]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov r13, qword [rcx + 0x18]
xor eax, eax
mov r14, rcx
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
mov dword [rbp + 0x18], eax
mov rcx, 0xffffffffffffffff
mov word [rbp + 0x1c], ax
mov edi, edx
mov qword [rsp + 0x48], rcx
mov rbx, qword [r14 + 0x7e8]
movzx r12d, ax
mov byte [rbp + 0x1e], al
mov r15d, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rax
mov word [rsp + 0x50], ax
mov byte [rsp + 0x40], 1
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
test rbx, rbx
je 0x140099d4f
mov rax, rcx
nop
inc rax
cmp byte [rbx + rax], r12b
jne 0x140099b50
cmp rax, 1
jbe 0x140099d4f
mov rax, rcx
inc rax
cmp byte [rbx + rax], r12b
jne 0x140099b66
cmp rax, 0x41
jae 0x140099b80
mov ecx, 0x41
jmp 0x140099b89
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x140099b80
inc rcx
mov edx, 1
call qword [fcn.14015a708]
mov r15, rax
test rax, rax
jne 0x140099ba8
lea eax, [r15 + 0x1b]
jmp 0x14009a2a5
movzx eax, byte [rbx]
cmp al, 0x5b
jne 0x140099be0
mov edx, 0x5d
lea r12, [rbx + 1]
mov rcx, rbx
call fcn.14014ed10
mov rsi, rax
test rax, rax
je 0x140099bd3
mov r8, rax
mov rdx, r12
sub r8, r12
jmp 0x140099c42
xor ecx, ecx
movzx ebx, cx
movzx eax, cx
jmp 0x140099cc7
cmp al, 0x3a
jne 0x140099be9
mov rsi, rbx
jmp 0x140099c4a
mov edx, 0x3a
mov rcx, rbx
call fcn.14014ed10
mov rsi, rax
test rax, rax
je 0x140099cac
lea r8, [rsp + 0x70]
mov rdx, rbx
mov ecx, reloc.WS2_32.dll_socket
call fcn.1400a7420
cmp eax, 1
jne 0x140099c39
mov rcx, r15
sub rcx, rbx
nop
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x140099c20
xor ecx, ecx
mov ebx, ecx
mov eax, ecx
jmp 0x140099cc7
mov r8, rsi
mov rdx, rbx
sub r8, rbx
mov rcx, r15
call fcn.140153250
mov edx, 0x3a
mov rcx, rsi
call fcn.14014ed10
mov rsi, rax
xor eax, eax
movzx ebx, ax
test rsi, rsi
je 0x140099cc5
lea rcx, [rsi + 1]
xor edx, edx
lea r8d, [rax + 0xa]
call fcn.14016312c
mov ecx, eax
call fcn.14007f950
mov edx, Ordinal_46
mov rcx, rsi
movzx ebx, ax
call fcn.14014ed10
test rax, rax
je 0x140099ca7
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.14016312c
mov ecx, eax
call fcn.14007f950
jmp 0x140099cc5
movzx eax, bx
jmp 0x140099cc5
mov rcx, r15
sub rcx, rbx
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x140099cb2
xor eax, eax
movzx ebx, ax
xor ecx, ecx
cmp bx, ax
mov esi, ecx
mov r12d, ecx
cmovbe si, bx
cmovbe r12w, ax
cmp byte [r15], 0
mov dword [rsp + 0x50], esi
je 0x140099d4b
mov rcx, qword [r13 + 0x70]
mov rcx, qword [rcx + 0x20]
call fcn.1400a6f70
mov r8d, dword [r13 + 0x88]
lea rcx, [rbp + 0x170]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [r13 + 0x70]
mov r9, r15
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax + 4]
call fcn.1400749b0
test eax, eax
je 0x140099d36
sub eax, 1
je 0x14009a2a0
cmp eax, 1
jne 0x140099d3b
lea rbx, [rbp + 0x170]
jmp 0x140099d40
mov rbx, r15
jmp 0x140099d40
mov rbx, qword [rsp + 0x60]
test rbx, rbx
jne 0x140099dd7
jmp 0x140099d4f
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x44], pe_nt_image_headers64
lea r8, [rsp + 0x44]
mov rcx, qword [r13 + 0x1e8]
lea rdx, [rsp + 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x140099d98
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
mov r8, rax
lea rdx, str.getsockname___failed:__s
jmp 0x14009a28f
movzx eax, word [rsp + 0x70]
lea rcx, [rsp + 0x78]
cmp eax, 0x17
lea rdx, [rsp + 0x74]
mov r9d, 0x401
lea r8, [rbp + 0x170]
cmove rdx, rcx
mov ecx, eax
call fcn.1400a7030
test rax, rax
je 0x14009a2a0
lea rbx, [rbp + 0x170]
mov byte [rsp + 0x40], 0
lea rax, [rsp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, r14
call fcn.140084710
cmp eax, 1
jne 0x140099e04
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.140074b60
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14009a285
mov rsi, qword [rdx]
mov rcx, r14
call fcn.140084a40
test rsi, rsi
je 0x14009a285
mov rcx, r15
call qword [fcn.140152a38]
nop
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, rsi
mov rcx, r14
call fcn.14007e8a0
mov r15d, eax
test eax, eax
je 0x140099e81
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rsi, qword [rsi + 0x28]
test rsi, rsi
jne 0x140099e30
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
mov r8, rax
lea rdx, str.socket_failure:__s
mov rcx, r14
call fcn.14007d230
jmp 0x14009a2a0
movsxd r8, dword [rsi + 0x10]
lea rcx, [rsp + 0x70]
mov rdx, qword [rsi + 0x20]
call fcn.14014e4d0
mov eax, dword [rsi + 0x10]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x50]
movzx ebx, ax
cmp ax, r12w
ja 0x140099f5d
nop dword [rax + rax]
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov r8d, dword [rsp + 0x44]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x48]
mov word [rsp + 0x72], ax
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x140099ffb
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [rsp + 0x40], 0
je 0x140099f44
cmp eax, 0x2741
jne 0x140099f44
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
mov r9, rax
movzx r8d, bx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s
mov rcx, r14
call fcn.14007d310
mov dword [rsp + 0x44], pe_nt_image_headers64
lea r8, [rsp + 0x44]
mov rcx, qword [r13 + 0x1e8]
lea rdx, [rsp + 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140099f81
movzx ebx, word [rsp + 0x50]
mov byte [rsp + 0x40], al
jmp 0x140099f53
cmp eax, 0x2740
je 0x140099f50
cmp eax, 0xd
jne 0x140099fbf
inc bx
cmp bx, r12w
jbe 0x140099eb0
lea rdx, str.bind___failed__we_ran_out_of_ports_
mov rcx, r14
call fcn.14007d230
mov r8, qword [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.14007dc30
jmp 0x14009a2a0
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
lea rdx, str.getsockname___failed:__s
mov r8, rax
mov rcx, r14
call fcn.14007d230
mov r8, qword [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.14007dc30
jmp 0x14009a2a0
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
mov r9, rax
movzx r8d, bx
lea rdx, str.bind_port_hu__failed:__s
mov rcx, r14
call fcn.14007d230
mov r8, qword [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.14007dc30
jmp 0x14009a2a0
cmp bx, r12w
ja 0x140099f5d
mov rcx, qword [rsp + 0x48]
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x44], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140099f81
mov rcx, qword [rsp + 0x48]
lea edx, [rax + 1]
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x14009a05f
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rbp + 0x70]
mov ecx, eax
call fcn.14006b6b0
lea rdx, str.socket_failure:__s
jmp 0x140099f9f
mov r8d, gethostbyname
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.1400846d0
cmp byte [r13 + 0x3a8], 0
jne 0x14009a08d
cmp byte [r13 + 0x3a1], 0
je 0x14009a08d
mov byte [r13 + 0x3a8], 1
cmp edi, 2
je 0x14009a0ee
movzx eax, word [rsp + 0x70]
nop word [rax + rax]
cmp byte [r13 + 0x3a8], 0
jne 0x14009a0ae
test edi, edi
je 0x14009a0e7
cmp edi, 1
jne 0x14009a0b9
cmp ax, 2
jne 0x14009a0e7
movzx ecx, ax
cmp ecx, 2
je 0x14009a0c6
cmp ecx, 0x17
jne 0x14009a0e7
movzx ecx, word [rsp + 0x72]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test edi, edi
je 0x14009a1f3
cmp edi, 1
je 0x14009a12f
movzx eax, word [rsp + 0x70]
inc edi
cmp edi, 2
jne 0x14009a0a0
lea rbx, [r13 + 0x498]
mov rdx, r13
mov dword [rbx + 0xc4], edi
mov rcx, r14
call fcn.1400974e0
mov rax, qword [rsp + 0x48]
mov edx, 0x1c
mov rcx, r14
mov qword [r13 + 0x1f0], rax
mov byte [r13 + 0x391], 1
call fcn.1400974d0
mov eax, r15d
jmp 0x14009a2a5
lea r10, [rbp + 0x20]
mov r9d, Ordinal_46
lea rdx, [rbp - 0x10]
nop dword [rax]
movzx ecx, byte [rdx]
test cl, cl
je 0x14009a15c
cmp cl, 0x2e
mov eax, ecx
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x14009a140
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, str.__d__d
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.140081a90
lea rax, [rbp + 0x20]
mov rcx, r14
lea rbx, [r13 + 0x498]
mov qword [rsp + 0x20], rax
mov rdx, rbx
lea r9, str.PORT
lea r8, [0x14018fa60]
call fcn.1400aca60
mov r15d, eax
test eax, eax
je 0x14009a0f5
mov ecx, eax
call fcn.14006b7e0
mov r8, rax
lea rdx, str.Failure_sending_PORT_command:__s
mov rcx, r14
call fcn.14007d230
mov r8, qword [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.14007dc30
xor edx, edx
mov rcx, r14
call fcn.1400974d0
mov eax, r15d
jmp 0x14009a2a5
cmp word [rsp + 0x70], 2
lea rbx, [r13 + 0x498]
movzx eax, r8w
lea r9, str.EPRT
mov dword [rsp + 0x30], eax
lea r8, str._s__d_s_hu
mov ecx, 0
lea rax, [rbp - 0x10]
setne cl
mov qword [rsp + 0x28], rax
inc ecx
mov rdx, rbx
mov dword [rsp + 0x20], ecx
mov rcx, r14
call fcn.1400aca60
mov r15d, eax
test eax, eax
je 0x14009a0f5
mov ecx, eax
call fcn.14006b7e0
mov r8, rax
lea rdx, str.Failure_sending_EPRT_command:__s
mov rcx, r14
call fcn.14007d230
mov r8, qword [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.14007dc30
xor edx, edx
mov dword [rbx + 0xc4], 1
mov rcx, r14
call fcn.1400974d0
mov eax, r15d
jmp 0x14009a2a5
mov r8, rbx
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov rcx, r14
call fcn.14007d230
mov rcx, r15
call qword [fcn.140152a38]
mov eax, 0x1e
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140149a30
mov rbx, qword [rsp + 0x6e0]
add rsp, 0x690
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret