Function at 0x140002360
Capabilities:
Execute command
List tcp connections and listeners
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor esi, esi
mov rbx, rdx
mov r14d, ecx
mov dword [rsp + 0x28], esi
mov r15d, 2
mov dword [rsp + 0x20], 5
mov r9d, r15d
mov dword [rsp + 0x34], esi
mov r8d, 1
lea rdx, [rsp + 0x34]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
mov ecx, dword [rsp + 0x34]
call fcn.140002840
mov r9d, r15d
mov dword [rsp + 0x28], esi
mov r8d, 1
mov dword [rsp + 0x20], 5
lea rdx, [rsp + 0x34]
mov rcx, rax
mov rbp, rax
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
mov ecx, eax
lea rdx, [0x140004494]
mov qword [0x140007788], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001a80
cmp qword [0x140007788], rsi
mov r12d, 4
mov edi, r12d
mov ecx, 0xfffffff5
cmove di, r15w
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp qword [0x140007788], rsi
lea rax, [0x140004498]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14000449c]
cmove rdx, rax
call fcn.140001a80
mov ecx, 0xfffffff5
mov r13d, 7
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400044ac]
call fcn.140001a80
mov rcx, rax
lea rdx, str.TCP_table_init_n
call fcn.140001a80
cmp qword [0x140007788], rsi
je 0x140002530
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.1400018e0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, r15d
mov ebx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, ebx
mov qword [rsp + 0x20], rdi
mov rcx, rax
lea r8, str.TCP_table_init
lea rdx, str._n_message:_t_s_n_system_error:_t__d___s_n
call fcn.140001020
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [rbp], esi
jbe 0x140002580
lea rdi, [rbp + 0xc]
nop dword [rax]
cmp dword [rdi + 0xc], r14d
jne 0x140002575
movzx ecx, word [rdi]
call qword [sym.imp.WS2_32.dll_ntohs]
mov rdx, qword [rbx + 8]
movzx eax, ax
mov dword [rsp + 0x30], eax
cmp rdx, qword [rbx + 0x10]
je 0x140002568
mov dword [rdx], eax
add qword [rbx + 8], r12
jmp 0x140002575
lea r8, [rsp + 0x30]
mov rcx, rbx
call fcn.1400025c0
inc esi
add rdi, 0x18
cmp esi, dword [rbp]
jb 0x140002540
mov rcx, rbp
call fcn.14000280c
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1400027b0
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret