Function at 0x140385e40
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x870
lea rdi, [rsp + 0x40]
mov ecx, 0x20c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x880]
mov rax, qword [0x1404bf700]
xor rax, rsp
mov qword [rsp + 0x868], rax
mov dword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_30
mov rax, qword [rsp + 0x880]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
add rax, 0x590
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], 0xffffffffffffffff
movzx eax, byte [0x1404c92ce]
mov byte [rsp + 0x88], al
lea rax, [rsp + 0x89]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
rep stosb byte [rdi], al
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x5c8], rax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x5d8], rax
mov qword [rsp + 0x5e8], 0
mov eax, 8
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x880]
mov rax, qword [rcx + rax + 0x700]
mov qword [rsp + 0x5f0], rax
mov qword [rsp + 0x608], 0
xor eax, eax
mov word [rsp + 0x614], ax
xor eax, eax
mov word [rsp + 0x618], ax
mov byte [rsp + 0x620], 1
mov qword [rsp + 0x748], 0
mov qword [rsp + 0x750], 0
mov eax, 8
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x880]
cmp qword [rcx + rax + 0x700], 0
je 0x140386336
mov eax, 8
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x880]
mov rcx, qword [rcx + rax + 0x700]
call fcn.1401537e2
cmp rax, 1
jbe 0x140386336
mov qword [rsp + 0x7a8], 0
mov rax, qword [rsp + 0x5f0]
movsx eax, byte [rax]
cmp eax, 0x5b
jne 0x14038603c
mov rax, qword [rsp + 0x5f0]
inc rax
mov qword [rsp + 0x7b0], rax
mov edx, 0x5d
mov rcx, qword [rsp + 0x7b0]
call fcn.1401514bf
mov qword [rsp + 0x7a8], rax
cmp qword [rsp + 0x7a8], 0
je 0x140386037
mov rax, qword [rsp + 0x7b0]
mov rcx, qword [rsp + 0x7a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x7b0]
mov qword [rsp + 0x748], rax
jmp 0x140386117
mov rax, qword [rsp + 0x5f0]
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x140386061
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x7a8], rax
jmp 0x140386117
mov edx, Ordinal_60
mov rcx, qword [rsp + 0x5f0]
call fcn.1401514bf
mov qword [rsp + 0x7a8], rax
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x748], rax
cmp qword [rsp + 0x7a8], 0
je 0x140386102
mov rax, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x7a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x5d8]
add rax, 8
mov r8, rax
mov rdx, qword [rsp + 0x5f0]
mov ecx, reloc.WS2_32.dll_socket
call fcn.140151893
cmp eax, 1
jne 0x140386100
xor eax, eax
mov word [rsp + 0x618], ax
movzx eax, word [rsp + 0x618]
mov word [rsp + 0x614], ax
mov qword [rsp + 0x7a8], 0
jmp 0x140386117
mov rcx, qword [rsp + 0x5f0]
call fcn.1401537e2
mov qword [rsp + 0x750], rax
cmp qword [rsp + 0x7a8], 0
je 0x1403861e8
mov qword [rsp + 0x7b8], 0
mov edx, Ordinal_60
mov rcx, qword [rsp + 0x7a8]
call fcn.1401514bf
mov qword [rsp + 0x7c0], rax
cmp qword [rsp + 0x7c0], 0
je 0x1403861e8
mov rax, qword [rsp + 0x7c0]
inc rax
mov r8d, 0xa
xor edx, edx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_strtoul]
mov ecx, eax
call fcn.140155f92
mov word [rsp + 0x614], ax
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov rcx, qword [rsp + 0x7c0]
call fcn.1401514bf
mov qword [rsp + 0x7b8], rax
cmp qword [rsp + 0x7b8], 0
je 0x1403861d8
mov rax, qword [rsp + 0x7b8]
inc rax
mov r8d, 0xa
xor edx, edx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_strtoul]
mov ecx, eax
call fcn.140155f92
mov word [rsp + 0x618], ax
jmp 0x1403861e8
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x618], ax
movzx eax, word [rsp + 0x614]
movzx ecx, word [rsp + 0x618]
cmp eax, ecx
jle 0x140386216
xor eax, eax
mov word [rsp + 0x618], ax
movzx eax, word [rsp + 0x618]
mov word [rsp + 0x614], ax
cmp qword [rsp + 0x750], 0
je 0x14038632a
xor eax, eax
test eax, eax
jne 0x140386225
cmp qword [rsp + 0x750], 0x32
jb 0x14038623b
jmp 0x140386c92
mov r8, qword [rsp + 0x750]
mov rdx, qword [rsp + 0x748]
lea rcx, [rsp + 0x768]
call fcn.140153aee
mov rax, qword [rsp + 0x750]
mov qword [rsp + 0x850], rax
cmp qword [rsp + 0x850], 0x32
jae 0x140386275
jmp 0x14038627a
call fcn.14015503d
mov rax, qword [rsp + 0x850]
mov byte [rsp + rax + 0x768], 0
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x38]
add rax, 0x10
mov rcx, rax
call fcn.140156b40
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 0x38]
mov dword [rsp + 0x28], 0x401
lea rdx, [rsp + 0x1b0]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x768]
mov rdx, qword [rsp + 0x48]
mov r8d, dword [rdx + 0x6d8]
mov edx, eax
mov ecx, dword [rcx]
call fcn.140155ec0
mov dword [rsp + 0x858], eax
cmp dword [rsp + 0x858], 0
je 0x140386301
cmp dword [rsp + 0x858], 1
je 0x140386313
cmp dword [rsp + 0x858], 2
je 0x140386318
jmp 0x140386328
lea rax, [rsp + 0x768]
mov qword [rsp + 0x5e8], rax
jmp 0x140386328
jmp 0x140386c92
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x5e8], rax
jmp 0x140386336
mov qword [rsp + 0x5e8], 0
cmp qword [rsp + 0x5e8], 0
jne 0x140386469
mov dword [rsp + 0x184], 0x80
mov eax, 8
imul rax, rax, 0
lea r8, [rsp + 0x184]
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + rax + 0x188]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x1403863b7
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, eax
call fcn.140155579
mov r8, rax
lea rdx, [0x1404b71a8]
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
mov rax, qword [rsp + 0x5c8]
movzx eax, word [rax]
mov dword [rsp + 0x85c], eax
cmp dword [rsp + 0x85c], 0x17
je 0x1403863d5
jmp 0x14038640c
mov rax, qword [rsp + 0x5d8]
add rax, 8
mov rcx, qword [rsp + 0x5c8]
movzx ecx, word [rcx]
mov r9d, 0x401
lea r8, [rsp + 0x1b0]
mov rdx, rax
call fcn.140152a6d
mov qword [rsp + 0x7c8], rax
jmp 0x140386441
mov rax, qword [rsp + 0x5d0]
add rax, 4
mov rcx, qword [rsp + 0x5c8]
movzx ecx, word [rcx]
mov r9d, 0x401
lea r8, [rsp + 0x1b0]
mov rdx, rax
call fcn.140152a6d
mov qword [rsp + 0x7c8], rax
cmp qword [rsp + 0x7c8], 0
jne 0x140386451
jmp 0x140386c92
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x5e8], rax
mov byte [rsp + 0x620], 0
lea rax, [rsp + 0x608]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rsp + 0x880]
call fcn.140152662
mov dword [rsp + 0x5e0], eax
cmp dword [rsp + 0x5e0], 1
jne 0x1403864b7
lea rdx, [rsp + 0x608]
mov rcx, qword [rsp + 0x880]
call fcn.1401551b9
cmp qword [rsp + 0x608], 0
je 0x1403864ec
mov rax, qword [rsp + 0x608]
mov rax, qword [rax]
mov qword [rsp + 0x168], rax
mov rdx, qword [rsp + 0x608]
mov rcx, qword [rsp + 0x880]
call fcn.140156bd1
jmp 0x1403864f8
mov qword [rsp + 0x168], 0
cmp qword [rsp + 0x168], 0
jne 0x140386524
mov r8, qword [rsp + 0x5e8]
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
mov qword [rsp + 0x5e8], 0
mov dword [rsp + 0x5e4], 0
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x170], rax
jmp 0x140386561
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x170], rax
cmp qword [rsp + 0x170], 0
je 0x1403865b4
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x6e2]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x880]
call fcn.140154322
test eax, eax
je 0x1403865b0
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rsp + 0x5e4], eax
jmp 0x14038654d
jmp 0x1403865b4
cmp qword [rsp + 0x170], 0
jne 0x1403865f5
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, dword [rsp + 0x5e4]
call fcn.140155579
mov r8, rax
lea rdx, [0x1404b7200]
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
xor eax, eax
test eax, eax
jne 0x1403865f5
mov rax, qword [rsp + 0x170]
movsxd rax, dword [rax + 0x10]
mov r8, rax
mov rax, qword [rsp + 0x170]
mov rdx, qword [rax + 0x20]
mov rcx, qword [rsp + 0x5c8]
call fcn.140153aee
mov rax, qword [rsp + 0x170]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x184], eax
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x61c], ax
movzx eax, word [rsp + 0x61c]
movzx ecx, word [rsp + 0x618]
cmp eax, ecx
jg 0x140386833
mov rax, qword [rsp + 0x5c8]
movzx eax, word [rax]
cmp eax, 2
jne 0x140386689
movzx ecx, word [rsp + 0x61c]
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, qword [rsp + 0x5d0]
mov word [rcx + 2], ax
jmp 0x1403866a3
movzx ecx, word [rsp + 0x61c]
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, qword [rsp + 0x5d8]
mov word [rcx + 2], ax
mov r8d, dword [rsp + 0x184]
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x140386819
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rsp + 0x5e4], eax
movzx eax, byte [rsp + 0x620]
test eax, eax
je 0x1403867bf
cmp dword [rsp + 0x5e4], 0x2741
jne 0x1403867bf
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, dword [rsp + 0x5e4]
call fcn.140155579
movzx ecx, word [rsp + 0x61c]
mov r9, rax
mov r8d, ecx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s
mov rcx, qword [rsp + 0x880]
call fcn.1401560f5
mov dword [rsp + 0x184], 0x80
mov eax, 8
imul rax, rax, 0
lea r8, [rsp + 0x184]
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + rax + 0x188]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x1403867a2
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, eax
call fcn.140155579
mov r8, rax
lea rdx, [0x1404b7248]
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x61c], ax
mov byte [rsp + 0x620], 0
jmp 0x140386645
cmp dword [rsp + 0x5e4], 0x2740
je 0x140386817
cmp dword [rsp + 0x5e4], 0xd
je 0x140386817
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, dword [rsp + 0x5e4]
call fcn.140155579
movzx ecx, word [rsp + 0x61c]
mov r9, rax
mov r8d, ecx
lea rdx, str.bind_port_hu__failed:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
jmp 0x14038681b
jmp 0x140386833
movzx eax, word [rsp + 0x61c]
inc ax
mov word [rsp + 0x61c], ax
jmp 0x140386645
movzx eax, word [rsp + 0x61c]
movzx ecx, word [rsp + 0x618]
cmp eax, ecx
jle 0x140386860
lea rdx, str.bind___failed__we_ran_out_of_ports
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
mov dword [rsp + 0x184], 0x80
lea r8, [rsp + 0x184]
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x1403868c1
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, eax
call fcn.140155579
mov r8, rax
lea rdx, str.getsockname___failed:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
xor eax, eax
test eax, eax
jne 0x1403868c1
mov edx, 1
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x140386912
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x640]
mov ecx, eax
call fcn.140155579
mov r8, rax
lea rdx, str.socket_failure:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
xor eax, eax
test eax, eax
jne 0x140386912
mov r8d, Ordinal_50
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x170]
call fcn.1401550e2
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x2ba]
test eax, eax
jne 0x14038695f
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x2b4]
test eax, eax
je 0x14038695f
mov rax, qword [rsp + 0x48]
mov byte [rax + 0x2ba], 1
jmp 0x140386971
mov eax, dword [rsp + 0x888]
inc eax
mov dword [rsp + 0x888], eax
cmp dword [rsp + 0x888], 2
je 0x140386c3e
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x2ba]
test eax, eax
jne 0x14038699b
cmp dword [rsp + 0x888], 0
jne 0x14038699b
jmp 0x140386961
cmp dword [rsp + 0x888], 1
jne 0x1403869b7
mov rax, qword [rsp + 0x5c8]
movzx eax, word [rax]
cmp eax, 2
je 0x1403869b7
jmp 0x140386961
mov rax, qword [rsp + 0x5c8]
movzx eax, word [rax]
mov dword [rsp + 0x860], eax
cmp dword [rsp + 0x860], 2
je 0x1403869df
cmp dword [rsp + 0x860], 0x17
je 0x1403869fb
jmp 0x140386a17
mov rax, qword [rsp + 0x5d0]
movzx ecx, word [rax + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rsp + 0x61c], ax
jmp 0x140386a1c
mov rax, qword [rsp + 0x5d8]
movzx ecx, word [rax + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rsp + 0x61c], ax
jmp 0x140386a1c
jmp 0x140386961
cmp dword [rsp + 0x888], 0
jne 0x140386ae0
mov rax, qword [rsp + 0x5c8]
movzx eax, word [rax]
cmp eax, 2
jne 0x140386a47
mov dword [rsp + 0x864], 1
jmp 0x140386a52
mov dword [rsp + 0x864], 2
movzx eax, word [rsp + 0x61c]
movsxd rcx, dword [rsp + 0x888]
imul rcx, rcx, 5
lea rdx, str.EPRT
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0x50]
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x864]
mov dword [rsp + 0x20], eax
mov r9, rcx
lea r8, str._s__d_s_hu
mov rcx, qword [rsp + 0x880]
call fcn.140152716
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140386adb
mov ecx, dword [rsp + 0x40]
call fcn.1401524f5
mov r8, rax
lea rdx, str.Failure_sending_EPRT_command:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
jmp 0x140386c3e
cmp dword [rsp + 0x888], 1
jne 0x140386c39
lea rax, [rsp + 0x88]
mov qword [rsp + 0x838], rax
lea rax, [rsp + 0x7e0]
mov qword [rsp + 0x840], rax
cmp qword [rsp + 0x838], 0
je 0x140386b82
mov rax, qword [rsp + 0x838]
movsx eax, byte [rax]
test eax, eax
je 0x140386b82
mov rax, qword [rsp + 0x838]
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x140386b45
mov rax, qword [rsp + 0x840]
mov byte [rax], Ordinal_46
jmp 0x140386b5a
mov rax, qword [rsp + 0x840]
mov rcx, qword [rsp + 0x838]
movzx ecx, byte [rcx]
mov byte [rax], cl
mov rax, qword [rsp + 0x840]
inc rax
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x838]
inc rax
mov qword [rsp + 0x838], rax
jmp 0x140386b0e
mov rax, qword [rsp + 0x840]
mov byte [rax], 0
movzx eax, word [rsp + 0x61c]
and eax, 0xff
movzx ecx, word [rsp + 0x61c]
sar ecx, 8
mov dword [rsp + 0x20], eax
mov r9d, ecx
lea r8, str.__d__d
mov edx, reloc.WS2_32.dll_sendto
mov rcx, qword [rsp + 0x840]
call fcn.140152879
movsxd rax, dword [rsp + 0x888]
imul rax, rax, 5
lea rcx, str.EPRT
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x7e0]
mov qword [rsp + 0x20], rdx
mov r9, rax
lea r8, [0x1404b7324]
mov rdx, rcx
mov rcx, qword [rsp + 0x880]
call fcn.140152716
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140386c37
mov ecx, dword [rsp + 0x40]
call fcn.1401524f5
mov r8, rax
lea rdx, str.Failure_sending_PORT_command:__s
mov rcx, qword [rsp + 0x880]
call fcn.140157004
jmp 0x140386c92
jmp 0x140386c3e
jmp 0x140386961
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x888]
mov dword [rax + 0x100], ecx
lea r9, [rsp + 0x68]
mov r8d, 1
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x880]
call fcn.140153364
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140386c7a
jmp 0x140386c92
mov qword [rsp + 0x68], 0xffffffffffffffff
mov dl, 0x1c
mov rcx, qword [rsp + 0x880]
call fcn.140381a80
cmp dword [rsp + 0x40], 0
je 0x140386ca8
xor edx, edx
mov rcx, qword [rsp + 0x880]
call fcn.140381a80
cmp qword [rsp + 0x68], 0xffffffffffffffff
je 0x140386cc7
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x880]
call fcn.140155f7e
mov eax, dword [rsp + 0x40]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_htons
call fcn.1401559a2
mov rax, rdi
mov rcx, qword [rsp + 0x868]
xor rcx, rsp
call fcn.140153acb
add rsp, 0x870
pop rdi
ret