Function at 0x1400112c6
Capabilities:
Execute command
List tcp connections and listeners
Terminate process

Disassembly:
jmp 0x14001c370
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x1d8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x3a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x1f8]
mov rax, qword [0x14002c040]
xor rax, rbp
mov qword [rbp + 0x190], rax
lea rcx, [0x140033295]
call fcn.14001187a
nop
mov dword [rbp + 4], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 5
mov r9d, 2
mov r8d, 1
lea rdx, [rbp + 4]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
nop
mov eax, dword [rbp + 4]
mov ecx, eax
call fcn.14001137f
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x128]
mov qword [rbp + 0x28], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 5
mov r9d, 2
mov r8d, 1
lea rdx, [rbp + 4]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
mov eax, eax
mov qword [0x14002c520], rax
lea rdx, [0x140027ab8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
nop
cmp qword [0x14002c520], 0
jne 0x14001c466
mov dword [rbp + 0x174], 2
jmp 0x14001c470
mov dword [rbp + 0x174], 4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movzx edx, word [rbp + 0x174]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x178], rax
cmp qword [0x14002c520], 0
jne 0x14001c4b4
lea rax, [0x140027abc]
mov qword [rbp + 0x180], rax
jmp 0x14001c4c2
lea rax, [0x140027ac0]
mov qword [rbp + 0x180], rax
mov rdx, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x178]
call fcn.1400110e6
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rdx, [0x140027ad4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, str.TCP_table_init_n
mov rcx, rax
call fcn.1400110e6
nop
cmp qword [0x14002c520], 0
je 0x14001c5cc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140011640
mov qword [rbp + 0x178], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x180], eax
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x188], rax
mov rax, qword [rbp + 0x178]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x180]
lea r8, str.TCP_table_init
lea rdx, str._n_message:_t_s_n_system_error:_t__d___s_n
mov rcx, qword [rbp + 0x188]
call fcn.1400117b7
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov dword [rbp + 0x44], 0
jmp 0x14001c5dd
mov eax, dword [rbp + 0x44]
inc eax
mov dword [rbp + 0x44], eax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax]
cmp dword [rbp + 0x44], eax
jae 0x14001c636
movsxd rax, dword [rbp + 0x44]
imul rax, rax, 0x18
mov rcx, qword [rbp + 0x28]
mov edx, dword [rbp + 0x1c0]
cmp dword [rcx + rax + 0x18], edx
jne 0x14001c634
movsxd rax, dword [rbp + 0x44]
imul rax, rax, 0x18
mov rcx, qword [rbp + 0x28]
movzx ecx, word [rcx + rax + 0xc]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov dword [rbp + 0x144], eax
lea rdx, [rbp + 0x144]
mov rcx, qword [rbp + 0x1c8]
call fcn.14001135c
nop
jmp 0x14001c5d5
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x168], rax
mov rcx, qword [rbp + 0x168]
call fcn.1400113ed
cmp qword [rbp + 0x168], 0
jne 0x14001c664
mov qword [rbp + 0x178], 0
jmp 0x14001c677
mov qword [rbp + 0x28], 0x8123
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x178], rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140027d10]
call fcn.140011730
mov rcx, qword [rbp + 0x190]
xor rcx, rbp
call fcn.1400113fc
lea rsp, [rbp + 0x1a8]
pop rdi
pop rbp
ret