Function at 0x140167390
Capabilities:
List tcp connections and listeners

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
movdqa xmm1, xmmword [0x14044a8b0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x30], xmm1
lea rax, [rsp + 0x31]
mov r13, 0xffffffffffffffff
mov qword [rbp + 0x168], r13
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140152bf6
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x40]
call fcn.14013ab10
nop
mov byte [rsp + 0x30], 0x42
mov al, reloc.WS2_32.dll_WSAStartup
mov cl, WSAStartup
mov dl, 0x76
mov r8b, 0x6c
mov r9b, reloc.WS2_32.dll_WSASetLastError
mov r10b, 0x77
movzx r11d, r8b
movzx ebx, al
movzx edi, r10b
movzx esi, r10b
movzx r14d, r8b
movzx r15d, r9b
mov r12b, reloc.WS2_32.dll_WSACleanup
xor r13d, r13d
xor al, 0x42
mov byte [rsp + 0x31], al
xor cl, 0x42
mov byte [rsp + 0x32], cl
xor dl, 0x42
mov byte [rsp + 0x33], dl
xor r8b, 0x42
mov byte [rsp + 0x34], r8b
xor r9b, 0x42
mov byte [rsp + 0x35], r9b
xor r10b, 0x42
mov byte [rsp + 0x36], r10b
xor r11b, 0x42
mov byte [rsp + 0x37], r11b
xor bl, 0x42
mov byte [rsp + 0x38], bl
xor dil, 0x42
mov byte [rsp + 0x39], dil
xor sil, 0x42
mov byte [rsp + 0x3a], sil
xor r14b, 0x42
mov byte [rsp + 0x3b], r14b
xor r15b, 0x42
mov byte [rsp + 0x3c], r15b
xor r12b, 0x42
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x10], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140152cd0
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x20]
call fcn.14013ab10
nop
mov byte [rsp + 0x30], 0x65
mov al, 0x54
mov cl, 0x55
mov dl, 0x51
mov r8b, 0x4b
mov r9b, 0x57
mov r10b, 0x50
movzx r11d, r8b
movzx ebx, al
movzx edi, cl
movzx esi, r8b
movzx r14d, al
movzx r15d, cl
mov r12b, 0x56
xor r13d, r13d
xor al, 0x65
mov byte [rsp + 0x31], al
xor cl, 0x65
mov byte [rsp + 0x32], cl
xor dl, 0x65
mov byte [rsp + 0x33], dl
xor r8b, 0x65
mov byte [rsp + 0x34], r8b
xor r9b, 0x65
mov byte [rsp + 0x35], r9b
xor r10b, 0x65
mov byte [rsp + 0x36], r10b
xor r11b, 0x65
mov byte [rsp + 0x37], r11b
xor bl, 0x65
mov byte [rsp + 0x38], bl
xor dil, 0x65
mov byte [rsp + 0x39], dil
xor sil, 0x65
mov byte [rsp + 0x3a], sil
xor r14b, 0x65
mov byte [rsp + 0x3b], r14b
xor r15b, 0x65
mov byte [rsp + 0x3c], r15b
xor r12b, 0x65
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10], xmm1
lea rax, [rsp + 0x31]
mov r13, qword [rbp + 0x168]
inc r13
cmp byte [rax + r13], 0
jne 0x140152da4
mov r8, r13
lea rdx, [rsp + 0x31]
lea rcx, [rbp]
call fcn.14013ab10
nop
lea rax, [rbp - 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140153200
nop
lea r9, [fcn.140135dd0]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp - 0x40]
call fcn.1401c752c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
xor r15d, r15d
mov edi, r15d
mov qword [rsp + 0x78], r15
mov ebx, r15d
mov rax, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
sub rax, rdx
sar rax, 5
mov rsi, qword [rsp + 0x70]
test rax, rax
je 0x140152e85
mov ecx, r15d
nop dword [rax]
shl rcx, 5
add rcx, rdx
cmp rsi, rdi
je 0x140152e52
mov rdx, rcx
mov rcx, rsi
call fcn.140135eb0
add rsi, 0x20
mov qword [rsp + 0x70], rsi
jmp 0x140152e6c
mov r8, rcx
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.1401533a0
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
inc ebx
mov rax, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
sub rax, rdx
sar rax, 5
movsxd rcx, ebx
cmp rcx, rax
jb 0x140152e30
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov r14, r15
mov qword [rsp + 0x60], r15
mov dword [rbp + 0x160], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 8
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x160]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
mov ecx, dword [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r13, rax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 8
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
jne 0x140153031
mov r12d, r15d
cmp dword [r13], r15d
jbe 0x140153031
lea r15, [r13 + 0x14]
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x68]
cmp rbx, rsi
je 0x140152f8f
nop
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140135eb0
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.WS2_32.dll_inet_addr]
cmp dword [r15], eax
jne 0x140152f7d
cmp rdi, r14
je 0x140152f62
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.140135eb0
add rdi, 0x20
mov qword [rsp + 0x58], rdi
jmp 0x140152f7d
lea r8, [rbp - 0x80]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.1401533a0
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
lea rcx, [rbp - 0x80]
call fcn.1401362c0
add rbx, 0x20
cmp rbx, rsi
jne 0x140152f20
inc r12d
add r15, 0xa0
cmp r12d, dword [r13]
jb 0x140152f15
mov r14, qword [rsp + 0x50]
cmp r14, rdi
je 0x140153031
mov rbx, r14
lea rsi, [r14 + 0x20]
cmp rsi, rdi
je 0x140152ffd
nop dword [rax]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x140152fcd
mov rdx, qword [rsi]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140152fde
mov rcx, qword [rbx]
cmp r8, qword [rsi + 0x10]
jne 0x140152ff1
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140153075
mov rbx, rsi
add rsi, 0x20
cmp rsi, rdi
jne 0x140152fc0
mov rbx, rdi
cmp rbx, rdi
je 0x140153021
mov rsi, rbx
mov rcx, rsi
call fcn.1401362c0
add rsi, 0x20
cmp rsi, rdi
jne 0x140153008
mov rdi, rbx
mov qword [rsp + 0x58], rbx
sub rdi, r14
sar rdi, 5
test rdi, rdi
jne 0x1401530ce
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
lea rcx, [rsp + 0x50]
call fcn.140136110
nop
lea rcx, [rsp + 0x68]
call fcn.140136110
nop
lea rcx, [rbp - 0x60]
call fcn.140136110
mov rbx, qword [rsp + 0x270]
add rsp, 0x220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
add rsi, 0x20
cmp rsi, rdi
je 0x1401530c5
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14015308d
mov rdx, qword [rsi]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14015309e
mov rcx, qword [rbx]
cmp r8, qword [rsi + 0x10]
jne 0x1401530ad
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401530bc
add rbx, 0x20
mov rdx, rsi
mov rcx, rbx
call fcn.140135df0
add rsi, 0x20
cmp rsi, rdi
jne 0x140153080
add rbx, 0x20
jmp 0x140153000
mov byte [rsp + 0x30], 0x1e
mov al, 0x5d
mov cl, WSAStartup
mov dl, 0x71
mov r8b, WSAGetLastError
mov r9b, 0x7b
mov r10b, 0x3e
mov r11b, 0x57
mov bl, 0x4e
movzx edi, r10b
mov sil, 0x3b
movzx r14d, r8b
xor r15d, r15d
xor al, 0x1e
mov byte [rsp + 0x31], al
xor cl, 0x1e
mov byte [rsp + 0x32], cl
xor dl, 0x1e
mov byte [rsp + 0x33], dl
xor r8b, 0x1e
mov byte [rsp + 0x34], r8b
xor r9b, 0x1e
mov byte [rsp + 0x35], r9b
xor r10b, 0x1e
mov byte [rsp + 0x36], r10b
xor r11b, 0x1e
mov byte [rsp + 0x37], r11b
xor bl, 0x1e
mov byte [rsp + 0x38], bl
xor dil, 0x1e
mov byte [rsp + 0x39], dil
xor sil, 0x1e
mov byte [rsp + 0x3a], sil
xor r14b, 0x1e
mov byte [rsp + 0x3b], r14b
mov byte [rsp + 0x3c], r15b
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x80], xmm0
movsd xmm1, qword [rsp + 0x60]
movsd qword [rbp - 0x70], xmm1
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x20]
call fcn.140134380
mov byte [rbp + 0x168], reloc.WS2_32.dll_getservbyport
mov al, 0x7d
mov cl, 0x4a
movzx edx, cl
mov r8b, 0x57
movzx r9d, cl
xor r10d, r10d
xor al, 0x38
mov byte [rbp + 0x169], al
xor cl, 0x38
mov byte [rbp + 0x16a], cl
xor dl, 0x38
mov byte [rbp + 0x16b], dl
xor r8b, 0x38
mov byte [rbp + 0x16c], r8b
xor r9b, 0x38
mov byte [rbp + 0x16d], r9b
mov byte [rbp + 0x16e], r10b
mov dword [rsp + 0x28], 0x3a98
xor eax, eax
mov word [rsp + 0x20], ax
mov r9d, 0x1010
lea r8, [rbp + 0x169]
lea rdx, [rbp + 0x20]
xor ecx, ecx
call fcn.140145110
lea rcx, [0x140443e9f]
call fcn.14014cf40
int3
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
call fcn.14012f950
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], 5
call fcn.1401a73d0
call fcn.14014fc80
lea rcx, [rsp + 0x30]
call fcn.140156910
mov rax, qword [rsp + 0x30]
movabs rdi, 0x7fffffffffb3b4be
movabs rbx, 0x7fffffffffffffff
cmp rax, rdi
jg 0x1401673ec
add rax, 0x4c4b40
mov qword [rsp + 0x30], rax
jmp 0x1401673f1
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x30]
call fcn.1401adf70
call fcn.14014e6a0
lea rcx, [rsp + 0x30]
call fcn.140156910
mov rax, qword [rsp + 0x30]
cmp rax, rdi
jg 0x140167421
add rax, 0x4c4b40
mov qword [rsp + 0x30], rax
jmp 0x140167426
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x30]
call fcn.1401adf70
call fcn.140152230
lea rcx, [rsp + 0x30]
call fcn.140156910
mov rax, qword [rsp + 0x30]
cmp rax, rdi
jg 0x140167456
add rax, 0x4c4b40
mov qword [rsp + 0x30], rax
jmp 0x14016745b
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x30]
call fcn.1401adf70
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140152b50