Function at 0x140023620
Capabilities:
List tcp connections and listeners

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1400a3020]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
xor r15d, r15d
mov qword [rbp - 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 4
lea r9d, [r15 + 2]
xor r8d, r8d
lea rdx, [rbp - 0x28]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
cmp eax, 0x7a
jne 0x140023708
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x10], r15
mov edx, dword [rbp - 0x28]
test rdx, rdx
je 0x14002369f
lea rcx, [rbp - 0x20]
call fcn.140001fb0
mov rdi, qword [rbp - 0x20]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 4
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x28]
mov rcx, rdi
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
je 0x140023759
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140023708
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023703
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023947
call fcn.1400477f0
mov rsi, qword [rbp - 0x38]
lea rbx, [r14 + 0x18]
mov qword [rbp - 0x28], rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov r13, qword [rbp - 0x40]
cmp r13, rsi
je 0x1400238be
lea rdi, [r13 + 0x14]
nop
mov r8, qword [r14 + 8]
mov rax, qword [r8 + 8]
mov rcx, r8
cmp byte [rax + 0x19], 0
jne 0x14002380c
mov edx, dword [rdi]
cmp dword [rax + 0x20], edx
jae 0x1400237fc
mov rax, qword [rax + 0x10]
jmp 0x140023802
mov ebx, r15d
mov rsi, qword [rbp - 0x38]
cmp dword [rdi], r15d
jbe 0x1400237b9
nop word [rax + rax]
mov eax, ebx
lea rcx, [rax + rax*2]
lea r8, [rdi + 4]
lea r8, [r8 + rcx*8]
cmp rsi, r15
je 0x14002379f
movups xmm0, xmmword [r8]
movups xmmword [rsi], xmm0
movsd xmm1, qword [r8 + 0x10]
movsd qword [rsi + 0x10], xmm1
add rsi, 0x18
mov qword [rbp - 0x38], rsi
jmp 0x1400237b3
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.140024fe0
mov r15, qword [rbp - 0x30]
mov rsi, qword [rbp - 0x38]
inc ebx
cmp ebx, dword [rdi]
jb 0x140023770
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14002370c
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400237f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023947
call fcn.1400477f0
jmp 0x14002370c
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140023747
cmp byte [rcx + 0x19], 0
jne 0x140023867
mov eax, dword [rcx + 0x20]
cmp dword [rdi], eax
jb 0x140023867
cmp rcx, r8
je 0x140023867
mov rdx, rdi
lea rcx, [r14 + 8]
call fcn.140024e60
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
cmp rcx, rdx
je 0x140023867
mov r8d, dword [rdi - 8]
nop word [rax + rax]
cmp dword [rcx + 0xc], r8d
jne 0x14002385e
mov eax, dword [rdi - 4]
cmp dword [rcx + 0x10], eax
jne 0x14002385e
mov eax, dword [rdi - 0x10]
cmp dword [rcx + 4], eax
jne 0x14002385e
mov eax, dword [rdi - 0xc]
cmp dword [rcx + 8], eax
je 0x14002389a
add rcx, 0x18
cmp rcx, rdx
jne 0x140023840
mov rdx, rdi
lea rcx, [r14 + 8]
call fcn.140024e60
mov rdx, qword [rax + 8]
lea r8, [rdi - 0x14]
cmp rdx, qword [rax + 0x10]
je 0x1400238a5
movups xmm0, xmmword [r8]
movups xmmword [rdx], xmm0
movsd xmm1, qword [r8 + 0x10]
movsd qword [rdx + 0x10], xmm1
add qword [rax + 8], 0x18
jmp 0x1400238ad
mov eax, dword [rdi - 0x14]
cmp dword [rcx], eax
je 0x1400238ad
mov dword [rcx], eax
jmp 0x1400238ad
mov rcx, rax
call fcn.140024fe0
add rdi, 0x18
lea rax, [rdi - 0x14]
cmp rax, rsi
jne 0x140023730
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
test r13, r13
je 0x14002391c
sub r15, r13
movabs rax, 0x2aaaaaaaaaaaaaab
imul r15
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, r13
cmp rdx, 0x1000
jb 0x140023914
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023941
mov rcx, r13
call fcn.1400477f0
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400477d0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.14004e14c
nop
call fcn.14004e14c
nop
int3