Function at 0x140064c40
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x1f8]
cmp dword [rax + 0x18], 0
je 0x140064075
mov edx, reloc.WS2_32.dll_listen
mov rcx, rbx
call fcn.140062740
mov r8d, edx
mov dl, 1
add rsp, 0x20
pop rbx
jmp fcn.140064190
cmp byte [rcx + 0x74e], 0
je 0x14006408d
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140064c40
cmp byte [rcx + 0x766], 0
je 0x140064130
mov r8, qword [rbx + 0x6b0]
test r8, r8
jne 0x1400640e8
mov r8, qword [rcx + 0x7c0]
test r8, r8
jne 0x1400640cb
cmp byte [rcx + 0x74d], 0
lea rax, str.NLST
lea r8, str.LIST
cmovne r8, rax
lea rcx, [rbx + 0x628]
lea rdx, str.PRET__s
call fcn.140074840
test eax, eax
je 0x14006411e
add rsp, 0x20
pop rbx
ret
cmp byte [rcx + 0x759], 0
lea rcx, [rbx + 0x628]
je 0x14006410e
lea rdx, str.PRET_STOR__s
call fcn.140074840
test eax, eax
je 0x14006411e
add rsp, 0x20
pop rbx
ret
lea rdx, str.PRET_RETR__s
call fcn.140074840
test eax, eax
jne 0x14006413d
mov edx, Ordinal_32
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140062740
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140064bb0
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8f0]
sub rsp, 0x9f0
mov rax, qword [0x1401310c8]
xor rax, rsp
mov qword [rbp + 0x8e0], rax
mov r14, qword [rcx]
mov edi, edx
mov rsi, rcx
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], 0xffffffffffffffff
lea rcx, [rbp - 0x30]
mov r8d, 0x100
call fcn.14009cd20
mov rbx, qword [r14 + 0x7f0]
xor eax, eax
mov qword [rsp + 0x48], rax
mov r12d, eax
mov rcx, qword [r14 + 0x7f0]
movzx r13d, ax
mov word [rsp + 0x32], ax
mov r15d, eax
mov byte [rsp + 0x30], 1
test rcx, rcx
je 0x140064e73
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140064cd0
cmp rax, 1
jbe 0x140064e73
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r12b
jne 0x140064ce7
cmp rax, 0x16
jae 0x140064cfd
mov ecx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x140064d0a
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x140064d01
inc rcx
mov edx, 1
call qword [fcn.1400a27b0]
mov r15, rax
test rax, rax
jne 0x140064d29
lea eax, [r15 + 0x1b]
jmp 0x14006537c
cmp byte [rbx], 0x3a
jne 0x140064d33
mov r14, rbx
jmp 0x140064d59
mov edx, Ordinal_60
mov rcx, rbx
call fcn.14009d000
mov r14, rax
mov rcx, r15
test rax, rax
je 0x140064dc5
mov r8, rax
mov rdx, rbx
sub r8, rbx
call fcn.1400a47a0
test r14, r14
je 0x140064dde
mov edx, Ordinal_60
mov rcx, r14
call fcn.14009d000
mov rbx, rax
test rax, rax
je 0x140064dde
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.1400a29f8
mov ecx, eax
call fcn.140051a10
mov edx, Ordinal_46
mov rcx, rbx
movzx r14d, ax
call fcn.14009d000
test rax, rax
je 0x140064dbf
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.1400a29f8
mov ecx, eax
call fcn.140051a10
movzx r13d, ax
jmp 0x140064de2
movzx r13d, r14w
jmp 0x140064de2
sub rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rbx]
mov byte [rcx + rbx], al
lea rbx, [rbx + 1]
test al, al
jne 0x140064dd0
movzx r14d, r12w
xor eax, eax
cmp r14w, r13w
mov ebx, eax
cmovbe ax, r14w
cmovbe bx, r13w
movzx r14d, ax
mov word [rsp + 0x32], ax
cmp byte [r15], r12b
je 0x140064e64
mov rcx, qword [rsi + 0x70]
mov rcx, qword [rcx + 0x20]
call fcn.14000f5b0
mov r8d, dword [rsi + 0xb8]
lea rcx, [rbp + 0xd0]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [rsi + 0x70]
mov r9, r15
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax + 4]
call fcn.14000f5b0
test eax, eax
je 0x140064e56
sub eax, 1
je 0x140065377
cmp eax, 1
jne 0x140064e59
lea r12, [rbp + 0xd0]
jmp 0x140064e59
mov r12, r15
movzx r13d, bx
test r12, r12
jne 0x140064ee0
jmp 0x140064e6e
mov word [rsp + 0x32], r14w
movzx r13d, bx
mov r14, qword [rsp + 0x40]
mov rcx, qword [rsi + 0x238]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x140064eb8
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.14003e130
mov r8, rax
lea rdx, str.getsockname___failed:__s
mov rcx, r14
jmp 0x140065369
movzx ecx, word [rsp + 0x50]
lea r8, [rbp + 0xd0]
mov r9d, 0x401
lea rdx, [rsp + 0x54]
call fcn.14005eab0
lea r12, [rbp + 0xd0]
mov byte [rsp + 0x30], 0
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, r12
mov rcx, rsi
call fcn.140047150
cmp eax, 1
jne 0x140064f05
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.140046480
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x14006535a
mov rcx, qword [rsp + 0x40]
mov r14, qword [rdx]
call fcn.140047330
test r14, r14
je 0x14006535a
mov rcx, r15
call qword [fcn.14009e748]
xor ebx, ebx
mov qword [rsp + 0x38], 0xffffffffffffffff
nop dword [rax]
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.140050b50
mov r15d, eax
test eax, eax
je 0x140064f6d
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r14, qword [r14 + 0x28]
mov ebx, eax
test r14, r14
jne 0x140064f40
jmp 0x140064f72
test r14, r14
jne 0x140064f95
mov edx, ebx
mov rcx, rsi
call fcn.14003e130
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
mov r8, rax
call fcn.14004f6b0
jmp 0x140065377
movsxd r8, dword [r14 + 0x10]
lea rcx, [rsp + 0x50]
mov rdx, qword [r14 + 0x20]
call fcn.14009b2c0
movzx r12d, word [rsp + 0x32]
mov eax, dword [r14 + 0x10]
movzx ebx, r12w
mov dword [rsp + 0x34], eax
cmp r12w, r13w
ja 0x140065075
cmp word [rsp + 0x50], 2
jne 0x140064fd9
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x52], ax
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x140065100
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [rsp + 0x30], 0
je 0x14006505c
cmp eax, 0x2741
jne 0x14006505c
mov edx, eax
mov rcx, rsi
call fcn.14003e130
movzx r8d, bx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s_n
mov rbx, qword [rsp + 0x40]
mov r9, rax
mov rcx, rbx
call fcn.14004f7b0
mov rcx, qword [rsi + 0x238]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140065098
movzx ebx, r12w
mov byte [rsp + 0x30], al
jmp 0x14006506b
cmp eax, 0x2740
je 0x140065068
cmp eax, 0xd
jne 0x1400650cc
inc bx
cmp bx, r13w
jbe 0x140064fc3
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind___failed__we_ran_out_of_ports_
call fcn.14004f6b0
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140050210
jmp 0x140065377
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.14003e130
mov rcx, rbx
lea rdx, str.getsockname___failed:__s
mov r8, rax
call fcn.14004f6b0
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140050210
jmp 0x140065377
mov edx, eax
mov rcx, rsi
call fcn.14003e130
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind_port_hu__failed:__s
mov r9, rax
movzx r8d, bx
call fcn.14004f6b0
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140050210
jmp 0x140065377
cmp bx, r13w
ja 0x140065075
mov rcx, qword [rsp + 0x38]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x34], pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x140065145
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.14003e130
mov rcx, qword [rsp + 0x40]
jmp 0x1400650ab
mov rcx, qword [rsp + 0x38]
mov edx, 1
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x14006517a
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rsi
call fcn.14003e130
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
jmp 0x1400650b2
mov r8d, 0x100
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.140047120
cmp edi, 2
je 0x1400651d1
movzx eax, word [rsp + 0x50]
cmp byte [rsi + 0x395], 0
jne 0x1400651a3
test edi, edi
je 0x1400651ca
cmp ax, 2
jne 0x1400651ca
movzx ecx, word [rsp + 0x52]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test edi, edi
je 0x1400652ce
cmp edi, 1
je 0x14006520e
movzx eax, word [rsp + 0x50]
inc edi
cmp edi, 2
jne 0x140065196
lea rbx, [rsi + 0x628]
mov rcx, rsi
mov dword [rbx + 0xb0], edi
call fcn.140062750
mov rax, qword [rsp + 0x38]
mov edx, Ordinal_32
mov rcx, rsi
mov qword [rsi + 0x240], rax
mov byte [rsi + 0x38e], 1
call fcn.140062740
mov eax, r15d
jmp 0x14006537c
lea r10, [rbp + 0x4e0]
mov r9d, Ordinal_46
lea rdx, [rbp - 0x30]
nop
movzx ecx, byte [rdx]
test cl, cl
je 0x14006523d
cmp cl, 0x2e
movzx eax, cl
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x140065220
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, str.__d__d
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.140051ea0
lea rbx, [rsi + 0x628]
mov rcx, rbx
lea r9, [rbp + 0x4e0]
lea r8, str.PORT
lea rdx, [0x1400f1f70]
call fcn.140074840
mov r15d, eax
test eax, eax
je 0x1400651d8
mov ecx, eax
call fcn.14003e270
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_PORT_command:__s
mov r8, rax
call fcn.14004f6b0
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140050210
xor edx, edx
mov rcx, rsi
call fcn.140062740
mov eax, r15d
jmp 0x14006537c
cmp word [rsp + 0x50], 2
lea rbx, [rsi + 0x628]
movzx eax, r8w
lea rdx, str._s__d_s_hu
mov ecx, 0
mov dword [rsp + 0x28], eax
setne cl
lea rax, [rbp - 0x30]
lea r8, str.EPRT
mov qword [rsp + 0x20], rax
lea r9d, [rcx + 1]
mov rcx, rbx
call fcn.140074840
mov r15d, eax
test eax, eax
je 0x1400651d8
mov ecx, eax
call fcn.14003e270
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_EPRT_command:__s
mov r8, rax
call fcn.14004f6b0
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.140050210
xor edx, edx
mov dword [rbx + 0xb0], 1
mov rcx, rsi
call fcn.140062740
mov eax, r15d
jmp 0x14006537c
mov rcx, qword [rsp + 0x40]
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov r8, r12
call fcn.14004f6b0
mov rcx, r15
call qword [fcn.14009e748]
mov eax, reloc.WLDAP32.dll_Ordinal_30
mov rcx, qword [rbp + 0x8e0]
xor rcx, rsp
call fcn.1400784c0
mov rbx, qword [rsp + 0xa40]
add rsp, 0x9f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret