Function at 0x14002d9b0
Capabilities:
Get local ipv4 addresses
Get mac address on windows

Disassembly:
push rbp
push rbx
push r12
push r13
lea rbp, [rsp - 0x3f]
sub rsp, 0xd8
xor ebx, ebx
lea rdx, [rbp + 0x67]
xor ecx, ecx
mov qword [rbp - 0x41], rbx
mov dword [rbp + 0x67], ebx
xor r12d, r12d
xor r13d, r13d
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x14002cee7
mov eax, dword [rbp + 0x67]
imul rcx, rax, 0x2c0
call fcn.1400462e4
mov qword [rbp - 0x41], rax
mov rbx, rax
test rax, rax
jne 0x14002cedb
add rsp, 0xd8
pop r13
pop r12
pop rbx
pop rbp
ret
lea rdx, [rbp + 0x67]
mov rcx, rax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x14002d788
test rbx, rbx
je 0x14002d788
mov qword [rsp + 0xb8], r15
lea ecx, [rax + 0x20]
mov r15, rbx
call fcn.1400462e4
mov qword [rbp + 0x7f], rax
mov r12, rax
test rax, rax
je 0x14002d780
mov rcx, rax
call fcn.140005f10
test al, al
je 0x14002d780
mov ecx, 0x20
call fcn.1400462e4
mov qword [rbp - 0x49], rax
mov r13, rax
test rax, rax
je 0x14002d780
mov rcx, rax
call fcn.140005f10
test al, al
je 0x14002d780
mov qword [rsp + 0xc8], rdi
mov ebx, 3
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xd0], rsi
mov edx, 0x80
lea ecx, [rdx - 0x7f]
call fcn.1400462ec
mov r14, rax
test rax, rax
je 0x14002d438
lea rcx, [r15 + 0x110]
call fcn.140009880
mov qword [r14], rax
mov edx, dword [r15 + 0x1a4]
cmp edx, 6
je 0x14002cfb7
cmp edx, 0x47
mov ecx, 1
cmovne ecx, ebx
mov dword [r14 + 0x70], ecx
jmp 0x14002cfbf
mov dword [r14 + 0x70], 0
mov eax, dword [r15 + 0x1a0]
lea rcx, [r15 + 0x1c0]
mov dword [r14 + 0x74], eax
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp byte [rcx + rdx], 0
jne 0x14002cfe0
test rdx, rdx
je 0x14002cffa
inc rdx
call fcn.140009910
mov qword [r14 + 8], rax
lea rcx, [r15 + 0x1d0]
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp byte [rcx + rdx], 0
jne 0x14002d010
test rdx, rdx
je 0x14002d02a
inc rdx
call fcn.140009910
mov qword [r14 + 0x18], rax
mov ecx, 0x24
call fcn.1400462e4
mov qword [r14 + 0x20], rax
test rax, rax
je 0x14002d098
movzx ecx, byte [r15 + 0x19d]
movzx edx, byte [r15 + 0x19c]
movzx r8d, byte [r15 + 0x19b]
movzx r10d, byte [r15 + 0x19a]
movzx r11d, byte [r15 + 0x199]
movzx r9d, byte [r15 + 0x198]
mov dword [rsp + 0x40], ecx
mov rcx, rax
mov dword [rsp + 0x38], edx
mov edx, 0x12
mov dword [rsp + 0x30], r8d
lea r8, [0x140085938]
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.14000c930
cmp dword [r15 + 0x1a8], 0
mov rdx, 0xffffffffffffffff
setne al
mov byte [r14 + 0x78], al
nop
inc rdx
cmp byte [r15 + rdx + 0x1f0], 0
jne 0x14002d0b0
test rdx, rdx
je 0x14002d164
inc rdx
lea rcx, [r15 + 0x1f0]
call fcn.140009910
mov qword [r14 + 0x50], rax
xor ebx, ebx
mov r10, qword [r13 + 8]
mov r11, rax
test r10, r10
je 0x14002d128
mov rsi, qword [r13]
mov r9, rsi
nop
mov rcx, qword [r9]
mov r8, r11
mov rdx, qword [rcx]
sub r8, rdx
nop dword [rax]
movzx ecx, word [rdx]
movzx eax, word [rdx + r8]
sub ecx, eax
jne 0x14002d114
add rdx, 2
test eax, eax
jne 0x14002d100
test ecx, ecx
je 0x14002d32d
inc rbx
add r9, 8
cmp rbx, r10
jb 0x14002d0f0
lea rcx, [r15 + 0x1f0]
call fcn.14002d7c0
mov edx, 0x10
mov qword [r14 + 0x60], rax
lea ecx, [rdx - 0xf]
call fcn.1400462ec
test rax, rax
je 0x14002d164
mov rcx, qword [r14 + 0x50]
mov rdx, rax
mov qword [rax], rcx
mov rcx, qword [r14 + 0x60]
mov qword [rax + 8], rcx
mov rcx, r13
call fcn.1400057c0
cmp byte [r14 + 0x78], 0
je 0x14002d410
lea rdx, [r15 + 0x2b0]
mov ebx, 0x7b2
lea rcx, [rbp - 0x39]
call fcn.140050838
test eax, eax
jne 0x14002d1df
mov ebx, dword [rbp - 0x25]
lea ecx, [rax + 0x28]
inc dword [rbp - 0x29]
add ebx, 0x76c
call fcn.1400462e4
mov qword [r14 + 0x40], rax
test rax, rax
je 0x14002d1df
mov ecx, dword [rbp - 0x39]
lea r8, [0x1400859a0]
mov dword [rsp + 0x40], ecx
mov r9d, ebx
mov ecx, dword [rbp - 0x35]
mov edx, 0x14
mov dword [rsp + 0x38], ecx
mov ecx, dword [rbp - 0x31]
mov dword [rsp + 0x30], ecx
mov ecx, dword [rbp - 0x2d]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rbp - 0x29]
mov dword [rsp + 0x20], ecx
mov rcx, rax
call fcn.14000c930
lea rdx, [r15 + 0x2b8]
lea rcx, [rbp - 0x11]
call fcn.140050838
test eax, eax
jne 0x14002d25c
mov edi, dword [rbp + 3]
inc dword [rbp - 1]
add edi, 0x76c
cmp edi, ebx
jl 0x14002d25c
cmp edi, 0x7b2
jne 0x14002d20f
cmp ebx, edi
je 0x14002d25c
mov ecx, 0x28
call fcn.1400462e4
mov qword [r14 + 0x48], rax
test rax, rax
je 0x14002d25c
mov ecx, dword [rbp - 0x11]
lea r8, [0x1400859a0]
mov dword [rsp + 0x40], ecx
mov r9d, edi
mov ecx, dword [rbp - 0xd]
mov edx, 0x14
mov dword [rsp + 0x38], ecx
mov ecx, dword [rbp - 9]
mov dword [rsp + 0x30], ecx
mov ecx, dword [rbp - 5]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rbp - 1]
mov dword [rsp + 0x20], ecx
mov rcx, rax
call fcn.14000c930
mov rdx, 0xffffffffffffffff
nop dword [rax]
nop word [rax + rax]
inc rdx
cmp byte [r15 + rdx + 0x220], 0
jne 0x14002d270
test rdx, rdx
je 0x14002d428
inc rdx
lea rcx, [r15 + 0x220]
call fcn.140009910
mov qword [r14 + 0x28], rax
xor ebx, ebx
mov r10, qword [r13 + 8]
mov r11, rax
test r10, r10
je 0x14002d2e8
mov rsi, qword [r13]
mov r9, rsi
nop
mov rcx, qword [r9]
mov r8, r11
mov rdx, qword [rcx]
sub r8, rdx
nop dword [rax]
movzx ecx, word [rdx]
movzx eax, word [rdx + r8]
sub ecx, eax
jne 0x14002d2d4
add rdx, 2
test eax, eax
jne 0x14002d2c0
test ecx, ecx
je 0x14002d3a6
inc rbx
add r9, 8
cmp rbx, r10
jb 0x14002d2b0
lea rcx, [r15 + 0x220]
call fcn.14002d7c0
mov edx, 0x10
mov qword [r14 + 0x38], rax
lea ecx, [rdx - 0xf]
call fcn.1400462ec
test rax, rax
je 0x14002d428
mov rcx, qword [r14 + 0x28]
mov rdx, rax
mov qword [rax], rcx
mov rcx, qword [r14 + 0x38]
mov qword [rax + 8], rcx
mov rcx, r13
call fcn.1400057c0
jmp 0x14002d428
mov rax, qword [rsi + rbx*8]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14002d399
mov rcx, 0xffffffffffffffff
cmp word [rdx + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x14002d341
lea rcx, [rcx*2 + 2]
call fcn.1400462e4
mov qword [r14 + 0x60], rax
test rax, rax
je 0x14002d164
mov rcx, qword [r13]
mov rdx, qword [rcx + rbx*8]
mov r8, qword [rdx + 8]
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [r8]
lea r8, [r8 + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14002d380
jmp 0x14002d164
mov qword [r14 + 0x60], 0
jmp 0x14002d164
mov rax, qword [rsi + rbx*8]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14002d406
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
cmp word [rdx + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x14002d3c0
lea rcx, [rcx*2 + 2]
call fcn.1400462e4
mov qword [r14 + 0x38], rax
test rax, rax
je 0x14002d428
mov rcx, qword [r13]
mov rdx, qword [rcx + rbx*8]
mov r8, qword [rdx + 8]
nop
movzx ecx, word [r8]
lea r8, [r8 + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14002d3f0
jmp 0x14002d428
mov qword [r14 + 0x38], 0
jmp 0x14002d428
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x40], 0
mov qword [r14 + 0x48], 0
mov rdx, r14
mov rcx, r12
call fcn.1400057c0
mov ebx, 3
mov r15, qword [r15]
test r15, r15
jne 0x14002cf72
call fcn.14002c410
mov r14, rax
test rax, rax
je 0x14002d5d2
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14002d5d2
xor esi, esi
test ecx, ecx
jle 0x14002d550
nop dword [rax]
mov rax, qword [r14]
xor r11d, r11d
mov rdi, qword [r15 + rax]
movsxd rax, dword [r12 + 8]
test eax, eax
jle 0x14002d504
mov r10, qword [r12]
mov rbx, rax
nop
mov r9, qword [r10]
test rdi, rdi
je 0x14002d4f8
test r9, r9
je 0x14002d4f8
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x14002d4f8
mov r8, qword [r9 + 0x20]
test r8, r8
je 0x14002d4f8
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14002d4c6
add rax, 2
test ecx, ecx
jne 0x14002d4b2
test edx, edx
jne 0x14002d4f8
mov rax, qword [rdi]
test rax, rax
je 0x14002d4f8
mov r8, qword [r9]
test r8, r8
je 0x14002d4f8
sub r8, rax
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14002d4f4
add rax, 2
test ecx, ecx
jne 0x14002d4e0
test edx, edx
je 0x14002d53c
inc r11
add r10, 8
cmp r11, rbx
jl 0x14002d490
mov edx, 0x80
lea ecx, [rdx - 0x7f]
call fcn.1400462ec
mov rbx, rax
test rax, rax
je 0x14002d53c
mov rcx, qword [rdi + 0x20]
call fcn.14004db8c
mov qword [rbx + 0x20], rax
mov rcx, qword [rdi]
call fcn.14004db8c
mov rdx, rbx
mov qword [rbx], rax
mov rcx, r12
call fcn.1400057c0
mov eax, dword [r14 + 8]
inc esi
add r15, 8
cmp esi, eax
jl 0x14002d470
mov ecx, eax
xor edi, edi
test ecx, ecx
jle 0x14002d5d2
xor r15d, r15d
mov esi, r15d
mov rax, qword [r14]
mov rbx, qword [rsi + rax]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002d595
mov r8, 0xffffffffffffffff
inc r8
cmp word [rcx + r8*2], r15w
jne 0x14002d576
add r8, r8
xor edx, edx
call fcn.1400452a0
mov rcx, qword [rbx]
call fcn.1400462d0
mov qword [rbx], r15
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14002d5c6
mov r8, 0xffffffffffffffff
inc r8
cmp word [rcx + r8*2], r15w
jne 0x14002d5a5
add r8, r8
xor edx, edx
call fcn.1400452a0
mov rcx, qword [rbx + 0x20]
call fcn.1400462d0
mov qword [rbx + 0x20], r15
inc edi
add rsi, 8
cmp edi, dword [r14 + 8]
jl 0x14002d560
mov dl, 1
mov rcx, r14
call fcn.140005c80
mov rcx, r14
call fcn.1400462d0
cmp qword [r12 + 8], 0
je 0x14002d768
mov ecx, 0x1c0
mov dword [rbp + 0x6f], 0x1c0
call fcn.1400462e4
mov qword [rbp + 0x77], rax
mov r13, rax
test rax, rax
je 0x14002d764
xor r8d, r8d
lea rax, [rbp + 0x6f]
mov r9, r13
mov qword [rsp + 0x20], rax
lea edx, [r8 + 0x10]
lea ecx, [rdx + 7]
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
cmp eax, 0x6f
jne 0x14002d66c
mov rcx, r13
call fcn.1400462d0
mov ecx, dword [rbp + 0x6f]
call fcn.1400462e4
mov qword [rbp + 0x77], rax
mov r13, rax
test rax, rax
je 0x14002d75c
xor r8d, r8d
lea rax, [rbp + 0x6f]
mov r9, r13
mov qword [rsp + 0x20], rax
lea edx, [r8 + 0x10]
lea ecx, [rdx + 7]
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
test eax, eax
jne 0x14002d75c
mov r15, r13
mov ecx, 0x80fe
mov r13, r12
nop
mov r14, qword [r15 + 0x18]
test r14, r14
je 0x14002d747
nop dword [rax]
mov rax, qword [r14 + 0x10]
cmp word [rax], 0x17
jne 0x14002d73a
cmp word [rax + 8], cx
lea r12, [rax + 8]
je 0x14002d73a
xor edi, edi
cmp qword [r13 + 8], rdi
jbe 0x14002d73a
nop dword [rax + rax]
mov rax, qword [r13]
mov rsi, qword [rax + rdi*8]
mov eax, dword [r15 + 4]
cmp dword [rsi + 0x74], eax
jne 0x14002d72c
mov ecx, 0x41
call fcn.1400462e4
mov rbx, rax
test rax, rax
je 0x14002d72c
mov r9d, MsiGetPropertyW
mov r8, rax
mov rdx, r12
lea ecx, [r9 - 0x2a]
call sub.WS2_32.dll_inet_ntop
mov rcx, rbx
call fcn.14000be40
mov qword [rsi + 0x10], rax
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14002d710
xor edx, edx
mov rcx, rbx
call fcn.1400452a0
mov rcx, rbx
call fcn.1400462d0
inc rdi
cmp rdi, qword [r13 + 8]
jb 0x14002d6c0
mov ecx, 0x80fe
mov r14, qword [r14 + 8]
test r14, r14
jne 0x14002d690
mov r15, qword [r15 + 8]
test r15, r15
jne 0x14002d680
mov r13, qword [rbp + 0x77]
mov r12, qword [rbp + 0x7f]
mov rcx, r13
call fcn.1400462d0
mov r13, qword [rbp - 0x49]
mov rsi, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xc8]
mov r14, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xb8]
mov dl, 1
mov rcx, r13
call fcn.140005c80
mov rcx, r13
call fcn.1400462d0
mov rcx, qword [rbp - 0x41]
call fcn.1400462d0
mov rax, r12
add rsp, 0xd8
pop r13
pop r12
pop rbx
pop rbp
ret
jmp 0x14002ce80