Function at 0x14002ca70
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
mov rbx, rdx
mov rsi, rcx
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x14002cab4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14002cf20
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, 0x18
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14002cf20
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x10], 0
mov r14, qword [rbx + 0x18]
cmp r14, 0xffffffffffffffff
je 0x14002cf20
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xd0], xmm0
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmmword [rsp + 0xa0], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x40], pe_nt_image_headers64
lea rdx, [rsp + 0x70]
lea r8, [rsp + 0x40]
mov rcx, r14
call sub.ws2_32.dll_getpeername
cmp eax, 0xffffffff
je 0x14002cbc9
mov eax, dword [rsp + 0x40]
movzx ecx, word [rsp + 0x70]
cmp ecx, 2
je 0x14002cbda
cmp ecx, 0x17
jne 0x14002cbfe
cmp eax, 0x1b
jbe 0x14002cf20
movzx eax, word [rsp + 0x72]
rol ax, 8
mov word [rsp + 0x2a], ax
movdqu xmm0, xmmword [rsp + 0x78]
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x3c], eax
movq rax, xmm0
pshufd xmm1, xmm0, 0xee
movq rbx, xmm1
shld rbx, rax, 0x20
movdqu xmmword [rsp + 0x5a], xmm0
pshufd xmm0, xmm0, 0xff
movd dword [rsp + 0x38], xmm0
mov r15w, 1
jmp 0x14002cc0f
call sub.ws2_32.dll_WSAGetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
jmp 0x14002cc0a
cmp eax, 0xf
jbe 0x14002cf20
movzx eax, word [rsp + 0x72]
rol ax, 8
mov ecx, dword [rsp + 0x74]
mov word [rsp + 0x5c], ax
mov dword [rsp + 0x58], ecx
xor r15d, r15d
jmp 0x14002cc0f
lea rbx, str.invalid_argumentinvalid_socket_address
mov qword [rsp + 0x5e], rbx
mov r15w, 2
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xd0], xmm0
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmmword [rsp + 0xa0], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x24], pe_nt_image_headers64
lea rdx, [rsp + 0x70]
lea r8, [rsp + 0x24]
mov rcx, r14
call sub.ws2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x14002ccb2
mov eax, dword [rsp + 0x24]
movzx ecx, word [rsp + 0x70]
cmp ecx, 0x17
je 0x14002ccc9
cmp ecx, 2
jne 0x14002cd1e
cmp eax, 0xf
jbe 0x14002cf20
movzx eax, word [rsp + 0x72]
rol ax, 8
mov ecx, dword [rsp + 0x74]
mov word [rsp + 0x44], ax
mov dword [rsp + 0x40], ecx
xor r13d, r13d
jmp 0x14002cd2a
call sub.ws2_32.dll_WSAGetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
mov r13w, 2
jmp 0x14002cd2a
cmp eax, 0x1b
jbe 0x14002cf20
movzx r12d, word [rsp + 0x72]
rol r12w, 8
movdqu xmm0, xmmword [rsp + 0x78]
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x30], eax
mov ebp, dword [rsp + 0x88]
movq rax, xmm0
pshufd xmm1, xmm0, 0xee
movq r14, xmm1
shld r14, rax, 0x20
movdqu xmmword [rsp + 0x42], xmm0
pshufd xmm0, xmm0, 0xff
movd dword [rsp + 0x2c], xmm0
mov r13w, 1
jmp 0x14002cd2a
mov r13w, 2
lea r14, str.invalid_argumentinvalid_socket_address
movzx eax, word [rsp + 0x5c]
mov word [rsp + 0x74], ax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x24], eax
movzx eax, word [rsp + 0x44]
mov word [rsp + 0x28], ax
cmp r15w, 2
je 0x14002ce27
cmp r13w, 2
je 0x14002ce27
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x14002cd8f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14002cf20
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, 0x40
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14002cf20
mov word [rax], r15w
mov ecx, dword [rsp + 0x70]
mov dword [rax + 2], ecx
movzx ecx, word [rsp + 0x74]
mov word [rax + 6], cx
mov qword [rax + 8], rbx
mov ecx, dword [rsp + 0x38]
mov dword [rax + 0x10], ecx
mov ecx, dword [rsp + 0x34]
mov dword [rax + 0x14], ecx
mov ecx, dword [rsp + 0x3c]
mov dword [rax + 0x18], ecx
movzx ecx, word [rsp + 0x2a]
mov word [rax + 0x1c], cx
mov word [rax + 0x20], r13w
mov ecx, dword [rsp + 0x24]
mov dword [rax + 0x22], ecx
movzx ecx, word [rsp + 0x28]
mov word [rax + 0x26], cx
mov qword [rax + 0x28], r14
mov ecx, dword [rsp + 0x2c]
mov dword [rax + 0x30], ecx
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], ebp
mov word [rax + 0x3c], r12w
mov qword [rsi], rax
lea rax, [0x1401a2798]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
mov word [rsi + 0x18], 1
jmp 0x14002ceb4
mov qword [rsi], 0
mov qword [rsi + 0x10], rdi
mov word [rsi + 0x18], 1
cmp r15w, 2
jne 0x14002ce98
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14002ce98
test rax, rax
je 0x14002ce98
lea rsi, [rbx - 1]
mov rdi, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14002ce87
cmp qword [rbx + 0x10], 0x11
jb 0x14002ce76
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1401ee100]
xor edx, edx
mov r8, rdi
call fcn.140104a84
mov rcx, qword [0x1401ee100]
xor edx, edx
mov r8, rsi
call fcn.140104a84
cmp r13w, 2
jne 0x14002ceb4
mov eax, r14d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14002ceb4
test rax, rax
jne 0x14002cec8
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [r14 - 1]
mov rdi, qword [r14 - 1]
mov rbx, qword [r14 + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14002cefc
cmp qword [rbx + 0x10], 0x11
jb 0x14002ceeb
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1401ee100]
xor edx, edx
mov r8, rdi
call fcn.140104a84
mov rcx, qword [0x1401ee100]
xor edx, edx
mov r8, rsi
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.140104a84
ud2