Function at 0x18004fde0
Capabilities:
Connect socket
Get common file path
Get local ipv4 addresses
Get socket information

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0xf8]
sub rsp, 0x1f0
mov rax, qword [0x18032d860]
xor rax, rsp
mov qword [rbp + 0xd0], rax
cmp dword [0x18032f570], 0
mov dword [rsp + 0x54], reloc.WS2_32.dll_recv
mov dword [rsp + 0x58], 0x1c
jne 0x1800501a9
mov qword [r11 + 8], rbx
lea rcx, [rbp - 0x40]
mov qword [r11 + 0x10], rsi
mov edx, 0x104
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x18], r15
mov dword [0x18032f570], 1
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x18004ffc5
mov eax, eax
add rax, 0xe
cmp rax, 0x104
jae 0x18004ffc5
lea rcx, [rbp - 0x40]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18004fe70
movzx eax, word [0x1802612d0]
mov word [rcx], ax
lea rcx, [rbp - 0x40]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18004fe90
mov eax, dword [0x180260fb0]
movsd xmm0, qword [str.iphlpapi.dll]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, byte [0x180260fb4]
mov byte [rcx + 0xc], al
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor esi, esi
mov rbx, rax
lea r15d, [rsi - 1]
test rax, rax
je 0x18004ffc5
lea rdx, str.GetAdaptersAddresses
mov qword [rsp + 0x1e8], r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov r14, rbx
test rax, rax
je 0x18004ff9e
mov ecx, 0x3c00
mov dword [rsp + 0x40], 0x3c00
call fcn.18022c454
mov rsi, rax
test rax, rax
je 0x18004ff9e
lea rax, [rsp + 0x40]
mov r9, rsi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea edx, [r15 + 0xf]
xor ecx, ecx
call rdi
cmp eax, 0x6f
jne 0x18004ff68
mov rcx, rsi
call fcn.18022c440
mov ecx, dword [rsp + 0x40]
call fcn.18022c454
mov rsi, rax
test rax, rax
je 0x18004ff9e
lea rax, [rsp + 0x40]
mov r9, rsi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea edx, [r15 + 0xf]
xor ecx, ecx
call rdi
mov r14, rbx
test eax, eax
jne 0x18004ff9e
mov rdi, rsi
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x18004ff92
nop dword [rax + rax]
mov rcx, qword [rbx + 0x10]
call fcn.18004fb50
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x18004ff80
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x18004ff72
xor r15d, r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14, qword [rsp + 0x1e8]
test rsi, rsi
je 0x18004ffbc
mov rcx, rsi
call fcn.18022c440
test r15d, r15d
je 0x18005016f
mov edi, 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x60], di
lea ecx, [rdi + 0x33]
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x62], ax
lea r9, [rsp + 0x48]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rdx, str._u._u._u._u_c
lea rax, [rsp + 0x4c]
lea rcx, str.18.244.0.188
mov qword [rsp + 0x20], rax
call fcn.180050f00
cmp eax, 4
jne 0x180050070
mov ecx, dword [rsp + 0x40]
cmp ecx, 0xff
ja 0x180050070
mov eax, dword [rsp + 0x48]
cmp eax, 0xff
ja 0x180050070
mov edx, dword [rsp + 0x4c]
cmp edx, 0xff
ja 0x180050070
mov r8d, dword [rsp + 0x50]
cmp r8d, 0xff
ja 0x180050070
shl ecx, 8
or ecx, eax
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, r8d
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x64], eax
mov esi, reloc.WS2_32.dll_socket
mov qword [rbp - 0x7c], 0
xorps xmm0, xmm0
mov word [rsp + 0x70], si
movdqu xmmword [rsp + 0x74], xmm0
lea ecx, [rsi + 0x1e]
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rsp + 0x78]
mov ecx, esi
lea rdx, str.2001:4860:b002::68
mov word [rsp + 0x72], ax
call fcn.18004d020
xor eax, eax
lea r8d, [rsi - 6]
xorps xmm0, xmm0
mov qword [rbp - 0x50], rax
xorps xmm1, xmm1
mov dword [rbp - 0x48], eax
mov edx, edi
mov ecx, edi
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm1
call qword [sym.imp.WS2_32.dll_socket]
mov rbx, rax
test rax, rax
js 0x180050117
lea r8d, [rsi - 7]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x18005010e
lea r8, [rsp + 0x54]
mov rcx, rbx
lea rdx, [rbp - 0x70]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x18005010e
lea rcx, [rbp - 0x70]
call fcn.18004fb50
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
mov r8d, reloc.WS2_32.dll_recvfrom
mov edx, edi
mov ecx, esi
call qword [sym.imp.WS2_32.dll_socket]
mov rbx, rax
test rax, rax
js 0x18005016f
mov r8d, 0x1c
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x180050166
lea r8, [rsp + 0x58]
mov rcx, rbx
lea rdx, [rbp - 0x60]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x180050166
lea rcx, [rbp - 0x60]
call fcn.18004fb50
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
mov rdi, qword [rsp + 0x210]
xor eax, eax
mov rsi, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x200]
mov r15, qword [rsp + 0x1e0]
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.180227e50
add rsp, 0x1f0
pop rbp
ret
xor eax, eax
jmp 0x180050191