Function at 0x140028ab0
Capabilities:
Create udp socket

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push r12
push r13
push r15
sub rsp, 0xa8
lea rax, [rsp + 0x50]
xor ebx, ebx
mov r15, rcx
mov qword [rsp + 0x60], rax
mov eax, 2
lea r8d, [rbx + 0x11]
mov edx, eax
mov ecx, eax
mov r13d, ebx
mov qword [rsp + 0x50], rbx
call qword [sym.imp.WS2_32.dll_socket]
mov r12, rax
mov qword [rsp + 0x68], rax
cmp rax, 0xffffffffffffffff
jne 0x140028b17
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140028bbb
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140028e35
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0x98], rsi
mov esi, 0x4c0
xor ecx, ecx
mov edx, esi
mov qword [rsp + 0x90], rdi
mov ebp, ebx
call fcn.140044ff0
mov rdi, rax
test rax, rax
je 0x140028bb1
nop word [rax + rax]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4004747f
mov rcx, r12
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x58], rdi
call qword [sym.imp.WS2_32.dll_WSAIoctl]
test eax, eax
je 0x140028bdc
inc ebp
cmp ebp, 0x64
jge 0x140028bcf
add esi, 0x4c0
mov rcx, rdi
mov edx, esi
call fcn.140044ff0
mov rdi, rax
test rax, rax
jne 0x140028b50
mov r13, qword [rsp + 0x58]
mov ebx, 0x2747
jmp 0x140028dff
mov eax, 0xffffe5d4
add rsp, 0xa8
pop r15
pop r13
pop r12
pop rbx
ret
mov ebx, 0x2741
mov r13, rdi
jmp 0x140028dff
mov ecx, dword [rsp + 0xe0]
movabs rax, 0xd79435e50d79435f
mov qword [rsp + 0x88], r14
mov r14, rbx
mul rcx
shr rdx, 6
movsxd r12, edx
mov qword [rsp + 0xe8], r12
test edx, edx
jle 0x140028dcc
mov rax, qword [rsp + 0xe8]
mov r13d, 1
lea r12, [rdi + 4]
cmp word [r12], 2
jne 0x140028db1
xor eax, eax
mov r15d, ebx
mov rsi, rbx
mov dword [rsp + 0xd8], ebx
mov edi, ebx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
nop dword [rax + rax]
lea rdx, [rsp + 0xd8]
xor r8d, r8d
mov rcx, rsi
call sub.IPHLPAPI.DLL_GetIpAddrTable
mov ebp, eax
cmp eax, 0x7a
jne 0x140028c8e
mov edx, dword [rsp + 0xd8]
mov rcx, rsi
call fcn.140044ff0
mov rsi, rax
test rax, rax
je 0x140028da9
inc edi
cmp edi, 0x64
jb 0x140028c50
jmp 0x140028cd8
test eax, eax
jne 0x140028cd8
mov r8d, dword [rsi]
mov ebp, 0xfffeffff
mov ecx, ebx
mov rdx, rbx
test r8d, r8d
je 0x140028cd8
mov r9d, dword [r12 + 4]
lea rax, [rsi + 4]
nop dword [rax]
cmp r9d, dword [rax]
je 0x140028cc5
inc ecx
inc rdx
add rax, 0x18
cmp ecx, r8d
jb 0x140028cb0
jmp 0x140028cd8
lea rax, [rdx + rdx*2]
mov ebp, ebx
mov r15d, dword [rsi + rax*8 + 8]
mov eax, dword [rsi + rax*8 + 0xc]
mov dword [rsp + 0x74], eax
test rsi, rsi
je 0x140028ce5
mov rcx, rsi
call fcn.1400447c0
test ebp, ebp
jne 0x140028da9
lea edx, [rbp + 0x68]
lea ecx, [rbp + 1]
call fcn.1400456e8
mov rdi, rax
test rax, rax
je 0x140028e44
mov rax, qword [rsp + 0x60]
lea ecx, [rbp + 0x10]
mov qword [rsp + 0x60], rdi
mov qword [rax], rdi
call fcn.140044708
mov qword [rdi + 8], rax
test rax, rax
je 0x140028e44
lea rdx, [0x140059a24]
mov r8d, r13d
mov rcx, rax
call fcn.140045648
mov r11d, dword [r12 - 4]
mov dword [rdi + 0x10], r11d
cmp word [r12], 2
jne 0x140028da5
lea edx, [rbp + 0x10]
lea ecx, [rbp + 1]
call fcn.1400456e8
mov r11, rax
mov qword [rdi + 0x18], rax
test rax, rax
je 0x140028e44
mov rax, qword [r12]
lea edx, [rbp + 0x10]
lea ecx, [rbp + 1]
mov qword [r11], rax
mov rax, qword [r12 + 8]
mov qword [r11 + 8], rax
call fcn.1400456e8
mov qword [rdi + 0x20], rax
test rax, rax
je 0x140028e44
mov ecx, 2
mov word [rax], cx
mov rcx, qword [rdi + 0x20]
mov eax, dword [rsp + 0x74]
mov dword [rcx + 4], eax
mov dword [rdi + 0x60], r15d
jmp 0x140028da9
mov dword [rdi + 0x60], r13d
mov rax, qword [rsp + 0xe8]
inc r14
inc r13d
add r12, 0x4c
cmp r14, rax
jl 0x140028c24
mov r15, qword [rsp + 0xd0]
test r15, r15
je 0x140028dde
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x50], rbx
mov qword [r15], rax
mov rcx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x88]
test rcx, rcx
je 0x140028df5
call fcn.140026bd0
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0xa0]
test r13, r13
je 0x140028e24
mov rcx, r13
call fcn.1400447c0
cmp r12, 0xffffffffffffffff
je 0x140028e33
mov rcx, r12
call qword [sym.imp.WS2_32.dll_closesocket]
mov eax, ebx
add rsp, 0xa8
pop r15
pop r13
pop r12
pop rbx
ret
mov ebx, 0x2747
jmp 0x140028dde