Function at 0x7ff78713a160
Capabilities:
List tcp connections and listeners

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
movdqa xmm1, xmmword [0x7ff78744d6e0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
lea rax, [rsp + 0x31]
mov r13, 0xffffffffffffffff
mov qword [rbp + 0x198], r13
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x7ff78713a206
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x30]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x30], 0x38
mov al, 9
mov cl, 8
mov dl, 0xc
mov r8b, 0x16
mov r9b, 0xa
mov r10b, 0xd
movzx r11d, r8b
movzx ebx, al
movzx edi, r10b
movzx esi, r10b
movzx r14d, r8b
movzx r15d, r9b
mov r12b, 0xe
xor r13d, r13d
xor al, 0x38
mov byte [rsp + 0x31], al
xor cl, 0x38
mov byte [rsp + 0x32], cl
xor dl, 0x38
mov byte [rsp + 0x33], dl
xor r8b, 0x38
mov byte [rsp + 0x34], r8b
xor r9b, 0x38
mov byte [rsp + 0x35], r9b
xor r10b, 0x38
mov byte [rsp + 0x36], r10b
xor r11b, 0x38
mov byte [rsp + 0x37], r11b
xor bl, 0x38
mov byte [rsp + 0x38], bl
xor dil, 0x38
mov byte [rsp + 0x39], dil
xor sil, 0x38
mov byte [rsp + 0x3a], sil
xor r14b, 0x38
mov byte [rsp + 0x3b], r14b
xor r15b, 0x38
mov byte [rsp + 0x3c], r15b
xor r12b, 0x38
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x7ff78713a2e0
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x10]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x30], 0x5f
mov al, 0x6e
mov cl, 0x6f
mov dl, 0x6b
mov r8b, 0x71
mov r9b, 0x6d
mov r10b, 0x6a
movzx r11d, r8b
movzx ebx, al
movzx edi, cl
movzx esi, r8b
movzx r14d, al
movzx r15d, cl
mov r12b, 0x6c
xor r13d, r13d
xor al, 0x5f
mov byte [rsp + 0x31], al
xor cl, 0x5f
mov byte [rsp + 0x32], cl
xor dl, 0x5f
mov byte [rsp + 0x33], dl
xor r8b, 0x5f
mov byte [rsp + 0x34], r8b
xor r9b, 0x5f
mov byte [rsp + 0x35], r9b
xor r10b, 0x5f
mov byte [rsp + 0x36], r10b
xor r11b, 0x5f
mov byte [rsp + 0x37], r11b
xor bl, 0x5f
mov byte [rsp + 0x38], bl
xor dil, 0x5f
mov byte [rsp + 0x39], dil
xor sil, 0x5f
mov byte [rsp + 0x3a], sil
xor r14b, 0x5f
mov byte [rsp + 0x3b], r14b
xor r15b, 0x5f
mov byte [rsp + 0x3c], r15b
xor r12b, 0x5f
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x20], xmm1
lea rax, [rsp + 0x31]
mov r13, qword [rbp + 0x198]
inc r13
cmp byte [rax + r13], 0
jne 0x7ff78713a3b4
mov r8, r13
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x10]
call fcn.7ff78711dbf0
nop
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.7ff78713a880
nop
lea r9, [fcn.7ff78711d4d0]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp - 0x30]
call fcn.7ff78718e960
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
xor r14d, r14d
mov edi, r14d
mov qword [rbp - 0x78], r14
mov ebx, r14d
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
sub rax, rdx
sar rax, 5
mov rsi, qword [rbp - 0x80]
test rax, rax
je 0x7ff78713a492
mov ecx, r14d
nop dword [rax + rax]
shl rcx, 5
add rcx, rdx
cmp rsi, rdi
je 0x7ff78713a461
mov rdx, rcx
mov rcx, rsi
call fcn.7ff78711ead0
add rsi, 0x20
mov qword [rbp - 0x80], rsi
jmp 0x7ff78713a479
mov r8, rcx
mov rdx, rsi
lea rcx, [rsp + 0x78]
call fcn.7ff78711f1d0
mov rdi, qword [rbp - 0x78]
mov rsi, qword [rbp - 0x80]
inc ebx
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
sub rax, rdx
sar rax, 5
movsxd rcx, ebx
cmp rcx, rax
jb 0x7ff78713a440
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov dword [rbp + 0x190], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 8
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x190]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
mov ecx, dword [rbp + 0x190]
call qword [sym.imp.ucrtbase.dll_malloc]
mov rbx, rax
mov qword [rbp + 0x198], rax
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 8
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
jne 0x7ff78713a767
mov r12d, r14d
cmp dword [rbx], r14d
jbe 0x7ff78713a767
lea r15, [rbx + 0x14]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x68]
nop word [rax + rax]
mov rbx, r13
cmp r13, rsi
je 0x7ff78713a5af
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.7ff78711ead0
nop
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rcx, qword [rbp - 0x70]
call qword [sym.imp.ws2_32.dll_inet_addr]
cmp dword [r15], eax
jne 0x7ff78713a59d
cmp rdi, r14
je 0x7ff78713a582
lea rdx, [rbp - 0x70]
mov rcx, rdi
call fcn.7ff78711ead0
add rdi, 0x20
mov qword [rsp + 0x68], rdi
jmp 0x7ff78713a59d
lea r8, [rbp - 0x70]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.7ff78711f1d0
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.7ff78711d510
add rbx, 0x20
cmp rbx, rsi
jne 0x7ff78713a540
inc r12d
add r15, 0xa0
mov rbx, qword [rbp + 0x198]
cmp r12d, dword [rbx]
jb 0x7ff78713a530
mov r14, qword [rsp + 0x60]
cmp r14, rdi
je 0x7ff78713a767
mov rbx, r14
lea rsi, [r14 + 0x20]
cmp rsi, rdi
je 0x7ff78713a620
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x7ff78713a5f0
mov rdx, qword [rsi]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x7ff78713a601
mov rcx, qword [rbx]
cmp r8, qword [rsi + 0x10]
jne 0x7ff78713a614
call sub.vcruntime140.dll_memcmp
test eax, eax
je 0x7ff78713a709
mov rbx, rsi
add rsi, 0x20
cmp rsi, rdi
jne 0x7ff78713a5e3
mov rbx, rdi
cmp rbx, rdi
je 0x7ff78713a649
mov rsi, rbx
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ff78711d510
add rsi, 0x20
cmp rsi, rdi
jne 0x7ff78713a630
mov rdi, rbx
mov qword [rsp + 0x68], rbx
sub rdi, r14
sar rdi, 5
test rdi, rdi
je 0x7ff78713a760
lea rdx, [rbp + 0x30]
call fcn.7ff787133df0
lea rdx, [0x7ff787444c58]
mov rcx, rax
call fcn.7ff787125bb0
xor r15d, r15d
test al, al
jne 0x7ff78713a7ab
mov byte [rsp + 0x50], 3
mov al, 0x40
mov cl, 0x6f
mov dl, 0x6c
mov r8b, 0x70
mov r9b, 0x66
mov r10b, 0x23
mov r11b, 0x4a
mov bl, 0x53
movzx edi, r10b
mov sil, 0x26
movzx r14d, r8b
xor al, 3
mov byte [rsp + 0x51], al
xor cl, 3
mov byte [rsp + 0x52], cl
xor dl, 3
mov byte [rsp + 0x53], dl
xor r8b, 3
mov byte [rsp + 0x54], r8b
xor r9b, 3
mov byte [rsp + 0x55], r9b
xor r10b, 3
mov byte [rsp + 0x56], r10b
xor r11b, 3
mov byte [rsp + 0x57], r11b
xor bl, 3
mov byte [rsp + 0x58], bl
xor dil, 3
mov byte [rsp + 0x59], dil
xor sil, 3
mov byte [rsp + 0x5a], sil
xor r14b, 3
mov byte [rsp + 0x5b], r14b
mov byte [rsp + 0x5c], r15b
lea rdx, [rsp + 0x51]
jmp 0x7ff78713a833
add rsi, 0x20
cmp rsi, rdi
je 0x7ff78713a757
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x7ff78713a71f
mov rdx, qword [rsi]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x7ff78713a730
mov rcx, qword [rbx]
cmp r8, qword [rsi + 0x10]
jne 0x7ff78713a73f
call sub.vcruntime140.dll_memcmp
test eax, eax
je 0x7ff78713a74e
add rbx, 0x20
mov rdx, rsi
mov rcx, rbx
call fcn.7ff78711da20
add rsi, 0x20
cmp rsi, rdi
jne 0x7ff78713a712
add rbx, 0x20
jmp 0x7ff78713a623
mov rbx, qword [rbp + 0x198]
mov rcx, rbx
call qword [sym.imp.ucrtbase.dll_free]
nop
lea rcx, [rsp + 0x60]
call fcn.7ff78711daf0
nop
lea rcx, [rsp + 0x78]
call fcn.7ff78711daf0
nop
lea rcx, [rbp - 0x50]
call fcn.7ff78711daf0
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x30], 0x4d
mov al, 0xb
mov cl, 0x28
mov dl, 0x2e
mov r8b, 0x25
movzx r9d, cl
mov r10b, 0x6d
mov r11b, 4
mov bl, 0x1d
movzx edi, r10b
mov sil, 0x68
mov r14b, 0x3e
xor al, 0x4d
mov byte [rsp + 0x31], al
xor cl, 0x4d
mov byte [rsp + 0x32], cl
xor dl, 0x4d
mov byte [rsp + 0x33], dl
xor r8b, 0x4d
mov byte [rsp + 0x34], r8b
xor r9b, 0x4d
mov byte [rsp + 0x35], r9b
xor r10b, 0x4d
mov byte [rsp + 0x36], r10b
xor r11b, 0x4d
mov byte [rsp + 0x37], r11b
xor bl, 0x4d
mov byte [rsp + 0x38], bl
xor dil, 0x4d
mov byte [rsp + 0x39], dil
xor sil, 0x4d
mov byte [rsp + 0x3a], sil
xor r14b, 0x4d
mov byte [rsp + 0x3b], r14b
mov byte [rsp + 0x3c], r15b
lea rdx, [rsp + 0x31]
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rsp + 0x70]
movsd qword [rbp - 0x60], xmm1
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0x50]
call fcn.7ff78711d570
lea rcx, [rbp + 0x30]
call fcn.7ff78711d4d0
call fcn.7ff78711d450
lea rdx, [rbp + 0x50]
mov rcx, rax
call fcn.7ff7871485c0
int3