Function at 0x14009ef30
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x1f8]
cmp dword [rax + 0x28], 0
je 0x14009e365
mov edx, reloc.WS2_32.dll_listen
mov rcx, rbx
call fcn.14009ca60
mov r8d, edx
mov dl, 1
add rsp, 0x20
pop rbx
jmp fcn.14009e480
cmp byte [rcx + 0xbc6], 0
je 0x14009e37d
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x14009ef30
cmp byte [rcx + 0xbde], 0
je 0x14009e420
mov r8, qword [rbx + 0x818]
test r8, r8
jne 0x14009e3d8
mov r8, qword [rcx + 0xc38]
test r8, r8
jne 0x14009e3bb
cmp byte [rcx + 0xbc5], 0
lea rax, str.NLST
lea r8, str.LIST
cmovne r8, rax
lea rcx, [rbx + 0x790]
lea rdx, str.PRET__s
call fcn.1400ab1a0
test eax, eax
je 0x14009e40e
add rsp, 0x20
pop rbx
ret
cmp byte [rcx + 0xbd1], 0
lea rcx, [rbx + 0x790]
je 0x14009e3fe
lea rdx, str.PRET_STOR__s
call fcn.1400ab1a0
test eax, eax
je 0x14009e40e
add rsp, 0x20
pop rbx
ret
lea rdx, str.PRET_RETR__s
call fcn.1400ab1a0
test eax, eax
jne 0x14009e42d
mov edx, Ordinal_32
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.14009ca60
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.14009eea0
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x900]
sub rsp, 0xa00
mov rax, qword [0x14017b4c0]
xor rax, rsp
mov qword [rbp + 0x8f0], rax
mov rbx, qword [rcx]
mov esi, edx
mov rdi, rcx
mov qword [rsp + 0x40], rbx
mov r14, 0xffffffffffffffff
lea rcx, [rbp - 0x20]
xor edx, edx
mov qword [rsp + 0x38], r14
mov r8d, 0x100
call fcn.140107fe0
mov rcx, qword [rsp + 0x40]
xor eax, eax
mov rbx, qword [rbx + 0xc68]
movzx r13d, ax
mov qword [rsp + 0x48], rax
movzx r12d, ax
mov qword [rsp + 0x50], rax
mov r15d, eax
mov rcx, qword [rcx + 0xc68]
mov byte [rsp + 0x30], 1
test rcx, rcx
je 0x14009f1e2
mov rax, r14
inc rax
cmp byte [rcx + rax], r12b
jne 0x14009efc5
cmp rax, 1
jbe 0x14009f1e2
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], r12b
jne 0x14009efe0
cmp rax, 0x41
jae 0x14009eff7
mov r14d, 0x41
jmp 0x14009f000
inc r14
cmp byte [rbx + r14], r12b
jne 0x14009eff7
lea rcx, [r14 + 1]
mov edx, 1
call qword [fcn.1400dca98]
mov r15, rax
test rax, rax
jne 0x14009f020
lea eax, [r15 + 0x1b]
jmp 0x14009f70d
movzx eax, byte [rbx]
cmp al, 0x5b
jne 0x14009f053
mov edx, 0x5d
lea r12, [rbx + 1]
mov rcx, rbx
call fcn.1400d0534
mov r14, rax
test rax, rax
je 0x14009f05a
mov r8, rax
mov rdx, r12
sub r8, r12
mov rcx, r15
call fcn.1400e6ee0
jmp 0x14009f05a
cmp al, 0x3a
jne 0x14009f070
mov r14, rbx
xor r13d, r13d
movzx ebx, r13w
movzx eax, r13w
test r14, r14
je 0x14009f169
jmp 0x14009f0dd
mov edx, Ordinal_60
mov rcx, rbx
call fcn.1400d0534
mov r14, rax
test rax, rax
je 0x14009f142
lea r8, [rsp + 0x60]
mov rdx, rbx
mov ecx, reloc.WS2_32.dll_socket
call fcn.14008bc90
mov rcx, r15
cmp eax, 1
jne 0x14009f0cc
sub rcx, rbx
nop word [rax + rax]
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x14009f0b0
xor r13d, r13d
mov ebx, r13d
mov eax, r13d
jmp 0x14009f169
mov r8, r14
mov rdx, rbx
sub r8, rbx
call fcn.1400e6ee0
xor r13d, r13d
mov edx, Ordinal_60
mov rcx, r14
call fcn.1400d0534
mov r14, rax
movzx ebx, r13w
movzx eax, r13w
test r14, r14
je 0x14009f169
xor edx, edx
lea rcx, [r14 + 1]
lea r8d, [rdx + 0xa]
call fcn.1400e1470
mov ecx, eax
call fcn.14007f320
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov rcx, r14
movzx ebx, ax
call fcn.1400d0534
test rax, rax
je 0x14009f13d
xor edx, edx
lea rcx, [rax + 1]
lea r8d, [rdx + 0xa]
call fcn.1400e1470
mov ecx, eax
call fcn.14007f320
jmp 0x14009f169
movzx eax, bx
jmp 0x14009f169
mov rcx, r15
sub rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rbx]
mov byte [rbx + rcx], al
lea rbx, [rbx + 1]
test al, al
jne 0x14009f150
xor r13d, r13d
movzx ebx, r13w
movzx eax, r13w
cmp bx, ax
mov r12d, r13d
cmovbe r12w, ax
cmovbe r13w, bx
cmp byte [r15], 0
je 0x14009f1e2
mov rcx, qword [rdi + 0x70]
mov rcx, qword [rcx + 0x20]
call fcn.1400a6780
mov r8d, dword [rdi + 0xb8]
lea rcx, [rbp + 0xe0]
mov edx, eax
mov dword [rsp + 0x28], 0x401
mov rax, qword [rdi + 0x70]
mov r9, r15
mov qword [rsp + 0x20], rcx
mov ecx, dword [rax + 4]
call fcn.140002520
test eax, eax
je 0x14009f1d3
sub eax, 1
je 0x14009f708
cmp eax, 1
jne 0x14009f1d8
lea rbx, [rbp + 0xe0]
jmp 0x14009f1dd
mov rbx, r15
jmp 0x14009f1dd
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jne 0x14009f25a
mov rcx, qword [rdi + 0x240]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x34], 0x80
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x14009f224
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov r8, rax
lea rdx, str.getsockname___failed:__s
jmp 0x14009f6f5
movzx eax, word [rsp + 0x60]
lea rcx, [rsp + 0x68]
cmp eax, 0x17
lea rdx, [rsp + 0x64]
mov r9d, 0x401
lea r8, [rbp + 0xe0]
cmove rdx, rcx
mov ecx, eax
call fcn.14008c820
lea rbx, [rbp + 0xe0]
mov byte [rsp + 0x30], 0
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
call fcn.1400732f0
cmp eax, 1
jne 0x14009f27f
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.140072610
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x14009f6eb
mov rcx, qword [rsp + 0x40]
mov r14, qword [rdx]
call fcn.140073520
test r14, r14
je 0x14009f6eb
mov rcx, r15
call qword [fcn.1400e44e0]
nop dword [rax]
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.14007e2f0
mov r15d, eax
test eax, eax
je 0x14009f2fc
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r14, qword [r14 + 0x28]
test r14, r14
jne 0x14009f2b0
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
mov r8, rax
call fcn.14007cda0
jmp 0x14009f708
movsxd r8, dword [r14 + 0x10]
lea rcx, [rsp + 0x60]
mov rdx, qword [r14 + 0x20]
call fcn.140107940
mov eax, dword [r14 + 0x10]
movzx ebx, r13w
mov dword [rsp + 0x34], eax
cmp r13w, r12w
ja 0x14009f3ce
movzx ecx, bx
call qword [sym.imp.WS2_32.dll_htons]
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov word [rsp + 0x62], ax
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x14009f459
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp byte [rsp + 0x30], 0
je 0x14009f3b5
cmp eax, 0x2741
jne 0x14009f3b5
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
movzx r8d, bx
lea rdx, str.bind_port_hu__on_non_local_address_failed:__s_n
mov rbx, qword [rsp + 0x40]
mov r9, rax
mov rcx, rbx
call fcn.14007ceb0
mov rcx, qword [rdi + 0x240]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x34], 0x80
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x14009f3f1
movzx ebx, r13w
mov byte [rsp + 0x30], al
jmp 0x14009f3c4
cmp eax, 0x2740
je 0x14009f3c1
cmp eax, 0xd
jne 0x14009f425
inc bx
cmp bx, r12w
jbe 0x14009f324
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind___failed__we_ran_out_of_ports_
call fcn.14007cda0
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.14007d970
jmp 0x14009f708
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov rcx, rbx
lea rdx, str.getsockname___failed:__s
mov r8, rax
call fcn.14007cda0
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.14007d970
jmp 0x14009f708
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov rcx, qword [rsp + 0x40]
lea rdx, str.bind_port_hu__failed:__s
mov r9, rax
movzx r8d, bx
call fcn.14007cda0
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.14007d970
jmp 0x14009f708
cmp bx, r12w
ja 0x14009f3ce
mov rcx, qword [rsp + 0x38]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x34], 0x80
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
je 0x14009f49e
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov rcx, qword [rsp + 0x40]
jmp 0x14009f404
mov rcx, qword [rsp + 0x38]
mov edx, 1
call qword [sym.imp.WS2_32.dll_listen]
test eax, eax
je 0x14009f4d3
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rdi
call fcn.14006a2d0
mov rcx, qword [rsp + 0x40]
lea rdx, str.socket_failure:__s
jmp 0x14009f40b
mov r8d, 0x100
lea rdx, [rbp - 0x20]
mov rcx, r14
call fcn.1400732b0
cmp byte [rdi + 0x3d5], 0
jne 0x14009f4fe
cmp byte [rdi + 0x3cb], 0
je 0x14009f4fe
mov byte [rdi + 0x3d5], 1
cmp esi, 2
je 0x14009f55d
movzx eax, word [rsp + 0x60]
nop dword [rax + rax]
cmp byte [rdi + 0x3d5], 0
jne 0x14009f51d
test esi, esi
je 0x14009f556
cmp esi, 1
jne 0x14009f528
cmp ax, 2
jne 0x14009f556
movzx ecx, ax
cmp ecx, 2
je 0x14009f535
cmp ecx, 0x17
jne 0x14009f556
movzx ecx, word [rsp + 0x62]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
test esi, esi
je 0x14009f65d
cmp esi, 1
je 0x14009f59a
movzx eax, word [rsp + 0x60]
inc esi
cmp esi, 2
jne 0x14009f510
lea rbx, [rdi + 0x790]
mov rcx, rdi
mov dword [rbx + 0xb0], esi
call fcn.14009ca70
mov rax, qword [rsp + 0x38]
mov edx, Ordinal_32
mov rcx, rdi
mov qword [rdi + 0x248], rax
mov byte [rdi + 0x3ce], 1
call fcn.14009ca60
mov eax, r15d
jmp 0x14009f70d
lea r10, [rbp + 0x4f0]
mov r9d, Ordinal_46
lea rdx, [rbp - 0x20]
nop dword [rax + rax]
movzx ecx, byte [rdx]
test cl, cl
je 0x14009f5cc
cmp cl, 0x2e
mov eax, ecx
cmove eax, r9d
mov byte [r10], al
inc r10
add rdx, 1
jne 0x14009f5b0
movzx r9d, r8w
mov edx, reloc.WS2_32.dll_sendto
movzx eax, r9b
lea r8, str.__d__d
shr r9d, 8
mov rcx, r10
mov dword [rsp + 0x20], eax
mov byte [r10], 0
call fcn.14007f900
lea rbx, [rdi + 0x790]
mov rcx, rbx
lea r9, [rbp + 0x4f0]
lea r8, str.PORT
lea rdx, [0x14011a578]
call fcn.1400ab1a0
mov r15d, eax
test eax, eax
je 0x14009f564
mov ecx, eax
call fcn.14006a410
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_PORT_command:__s
mov r8, rax
call fcn.14007cda0
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.14007d970
xor edx, edx
mov rcx, rdi
call fcn.14009ca60
mov eax, r15d
jmp 0x14009f70d
cmp word [rsp + 0x60], 2
lea rbx, [rdi + 0x790]
movzx eax, r8w
lea rdx, str._s__d_s_hu
mov dword [rsp + 0x28], eax
lea r8, str.EPRT
mov r13d, 0
lea rax, [rbp - 0x20]
setne r13b
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea r9d, [r13 + 1]
call fcn.1400ab1a0
mov r15d, eax
test eax, eax
je 0x14009f564
mov ecx, eax
call fcn.14006a410
mov rcx, qword [rsp + 0x40]
lea rdx, str.Failure_sending_EPRT_command:__s
mov r8, rax
call fcn.14007cda0
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.14007d970
xor edx, edx
mov dword [rbx + 0xb0], 1
mov rcx, rdi
call fcn.14009ca60
mov eax, r15d
jmp 0x14009f70d
mov r8, rbx
lea rdx, str.failed_to_resolve_the_address_provided_to_PORT:__s
mov rcx, qword [rsp + 0x40]
call fcn.14007cda0
mov rcx, r15
call qword [fcn.1400e44e0]
mov eax, reloc.WLDAP32.dll_Ordinal_30
mov rcx, qword [rbp + 0x8f0]
xor rcx, rsp
call fcn.1400ce1f0
mov rbx, qword [rsp + 0xa50]
add rsp, 0xa00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret