Function at 0x140261020
Capabilities:
Get local ipv4 addresses

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm8
movdqa xmmword [rbp + 0x90], xmm7
movdqa xmmword [rbp + 0x80], xmm6
mov qword [rbp + 0x78], 0xfffffffffffffffe
mov rbx, rcx
mov qword [rbp - 8], 0
mov qword [rbp], 8
mov qword [rbp + 8], 0
mov dword [rbp + 0x4c], 0x3a98
mov ecx, 0x3a98
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x1402610d6
mov r14, rax
lea rsi, [rbp + 0x4c]
mov rdi, qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
nop dword [rax + rax]
mov qword [rsp + 0x20], rsi
xor ecx, ecx
mov edx, 0x3e
xor r8d, r8d
mov r9, r14
call rdi
cmp eax, 0x6f
jne 0x1402610f0
mov rcx, r14
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov ecx, dword [rbp + 0x4c]
add ecx, ecx
mov dword [rbp + 0x4c], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r14, rax
test rax, rax
jne 0x1402610a0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], 8
call fcn.1402e2920
jmp 0x140261d0b
mov qword [rbp - 0x38], rbx
test eax, eax
jne 0x140261c74
mov qword [rbp - 0x40], r14
mov eax, 8
mov qword [rbp + 0x20], rax
lea r13, [rbp - 0x30]
pxor xmm6, xmm6
mov qword [rbp + 0x10], 0
xor esi, esi
xor eax, eax
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x28], ecx
mov dword [rbp + 0x2c], ecx
mov dword [rbp + 0x34], ecx
jmp 0x140261133
mov rax, rdi
mov rdi, qword [rbp - 0x40]
test rax, rax
je 0x140261140
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x140261ca8
mov rax, qword [rdi + 0x18]
mov qword [rbp - 0x50], rax
xor ebx, ebx
nop word cs:[rax + rax]
mov rax, qword [rbp - 0x50]
test rbx, rbx
je 0x14026116d
mov rax, qword [rbx + 8]
test rax, rax
je 0x140261130
mov rbx, rax
mov r15, qword [rdi + 0x10]
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea r8, [rax + 1]
mov qword [rbp + 0x40], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x38], rax
mov rcx, r13
mov rdx, r15
call fcn.1402cd190
mov rax, qword [rbp - 0x30]
mov r14, qword [rbp - 0x28]
mov rdx, rax
neg rax
mov r15, qword [rbp - 0x20]
jno 0x1402611f0
test r15, r15
js 0x140261cf1
je 0x140261202
movzx eax, byte [0x14046c4c1]
mov r13d, 1
mov edx, 1
mov rcx, r15
call fcn.1400b33d0
test rax, rax
je 0x140261cf4
mov r12, rax
lea r13, [rbp - 0x30]
jmp 0x140261208
mov qword [rbp + 0x18], r14
mov rax, qword [rbx + 0x10]
test rax, rax
jne 0x14026122a
jmp 0x14026166c
mov r12d, 1
mov rcx, r12
mov rdx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x18], r12
mov rdx, r15
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x14026166c
movzx ecx, word [rax]
cmp ecx, 0x17
je 0x140261650
cmp ecx, 2
jne 0x14026166c
mov r12d, dword [rax + 4]
movzx eax, r12w
cmp eax, 0xfea9
je 0x14026166c
mov r10, qword [rdi + 0xb0]
xor r14d, r14d
nop dword [rax]
mov rcx, r10
test r14, r14
je 0x14026126c
mov rcx, qword [r14 + 8]
mov r13b, 2
test rcx, rcx
je 0x140261a99
mov rax, qword [rcx + 0x10]
mov r14, rcx
test rax, rax
je 0x140261260
cmp word [rax], 2
mov r14, rcx
jne 0x140261260
mov r8d, dword [rax + 4]
movzx eax, r8w
mov r14, rcx
cmp eax, 0xfea9
je 0x140261260
mov r9d, dword [rcx + 0x20]
test r9, r9
je 0x140261b89
xor r8d, r12d
mov r14, rcx
test r8b, 3
jne 0x140261260
mov al, 3
cmp r9d, 1
jne 0x1402613d5
mov r11, r9
add r11, 7
shr r11, 3
cmp r11d, 1
je 0x140261c28
cmp r9d, 8
jae 0x140261465
xor r14d, r14d
cmp r11d, 2
je 0x140261c40
cmp r9d, 0x10
jae 0x140261535
mov dword [rbp + 0x70], 0
cmp r11d, 3
je 0x140261c35
cmp r9d, 0x18
jb 0x140261c35
mov esi, r14d
mov r11d, r8d
shr r11d, 0x18
mov r14, rcx
test r11b, 1
jne 0x140261260
cmp r9d, 0x18
je 0x140261c4a
mov r14, rcx
test r11b, 2
jne 0x140261260
cmp r9d, 0x1a
jb 0x140261c4e
mov r14, rcx
test r11b, 4
jne 0x140261260
cmp r9d, 0x1a
je 0x140261c52
mov r14, rcx
test r11b, 8
jne 0x140261260
cmp r9d, 0x1c
jb 0x140261c56
mov r14, rcx
test r11b, 0x10
jne 0x140261260
cmp r9d, 0x1c
je 0x140261c5a
mov r14, rcx
test r11b, 0x20
jne 0x140261260
cmp r9d, 0x1e
jb 0x140261c5e
mov r14, rcx
test r11b, 0x40
jne 0x140261260
cmp r9d, 0x1e
je 0x140261c62
mov r14, rcx
cmp r8d, 0x1000000
jae 0x140261260
jmp 0x140261c66
mov r14, rcx
test r8b, 4
jne 0x140261260
mov al, 7
cmp r9d, 3
jb 0x1402612c4
mov r14, rcx
test r8b, 8
jne 0x140261260
mov al, 0xf
cmp r9d, 3
je 0x1402612c4
mov r14, rcx
test r8b, 0x10
jne 0x140261260
mov al, 0x1f
cmp r9d, 5
jb 0x1402612c4
mov r14, rcx
test r8b, 0x20
jne 0x140261260
mov al, 0x3f
cmp r9d, 5
je 0x1402612c4
mov r14, rcx
test r8b, 0x40
jne 0x140261260
mov al, 0x7f
cmp r9d, 7
jb 0x1402612c4
mov r14, rcx
test r8b, r8b
jne 0x140261260
mov al, 0xff
jmp 0x1402612c4
mov esi, r8d
shr esi, 8
mov r14, rcx
test sil, 1
jne 0x140261260
mov r14b, 1
cmp r9d, 8
je 0x1402612e6
mov r14, rcx
test sil, 2
jne 0x140261260
mov r14b, 3
cmp r9d, 0xa
jb 0x1402612e6
mov r14, rcx
test sil, 4
jne 0x140261260
mov r14b, 7
cmp r9d, 0xa
je 0x1402612e6
mov r14, rcx
test sil, 8
jne 0x140261260
mov r14b, 0xf
cmp r9d, 0xc
jb 0x1402612e6
mov r14, rcx
test sil, 0x10
jne 0x140261260
mov r14b, 0x1f
cmp r9d, 0xc
je 0x1402612e6
mov r14, rcx
test sil, 0x20
jne 0x140261260
mov r14b, 0x3f
cmp r9d, 0xe
jb 0x1402612e6
mov r14, rcx
test sil, 0x40
jne 0x140261260
mov r14b, 0x7f
cmp r9d, 0xe
je 0x1402612e6
mov r14, rcx
test sil, sil
jne 0x140261260
mov r14b, 0xff
jmp 0x1402612e6
mov dword [rbp + 0x68], r14d
mov esi, r8d
shr esi, 0x10
mov r14, rcx
test sil, 1
jne 0x140261260
mov r14b, 1
mov dword [rbp + 0x70], r14d
cmp r9d, 0x10
mov r14d, dword [rbp + 0x68]
je 0x140261301
mov r14, rcx
test sil, 2
jne 0x140261260
mov r14b, 3
mov dword [rbp + 0x70], r14d
cmp r9d, 0x12
mov r14d, dword [rbp + 0x68]
jb 0x140261301
mov r14, rcx
test sil, 4
jne 0x140261260
mov r14b, 7
mov dword [rbp + 0x70], r14d
cmp r9d, 0x12
mov r14d, dword [rbp + 0x68]
je 0x140261301
mov r14, rcx
test sil, 8
jne 0x140261260
mov r14b, 0xf
mov dword [rbp + 0x70], r14d
cmp r9d, 0x14
mov r14d, dword [rbp + 0x68]
jb 0x140261301
mov r14, rcx
test sil, 0x10
jne 0x140261260
mov r14b, 0x1f
mov dword [rbp + 0x70], r14d
cmp r9d, 0x14
mov r14d, dword [rbp + 0x68]
je 0x140261301
mov r14, rcx
test sil, 0x20
jne 0x140261260
mov r14b, 0x3f
mov dword [rbp + 0x70], r14d
cmp r9d, 0x16
mov r14d, dword [rbp + 0x68]
jb 0x140261301
mov r14, rcx
test sil, 0x40
jne 0x140261260
mov r14b, 0x7f
mov dword [rbp + 0x70], r14d
cmp r9d, 0x16
mov r14d, dword [rbp + 0x68]
je 0x140261301
mov r14, rcx
test sil, sil
jne 0x140261260
mov sil, 0xff
mov dword [rbp + 0x70], esi
mov r14d, dword [rbp + 0x68]
jmp 0x140261301
movzx ecx, byte [rax + 8]
movzx ecx, cx
movzx r9d, byte [rax + 9]
cmp ecx, 0xfe
jne 0x140261689
mov r8d, r9d
neg r8b
jno 0x140261689
test rdx, rdx
je 0x140261160
mov r8d, 1
mov rcx, qword [rbp + 0x18]
call fcn.1400b33e0
jmp 0x140261160
movzx r11d, r9b
movq xmm7, qword [rax + 0xa]
movzx r8d, word [rax + 0x12]
movzx r9d, word [rax + 0x14]
movzx r10d, word [rax + 0x16]
movzx eax, r11w
shl eax, 8
or eax, ecx
movdqa xmm0, xmm7
pslldq xmm0, 2
mov dword [rbp + 0x30], eax
pinsrw xmm0, eax, 0
mov dword [rbp + 0x28], r8d
pinsrw xmm0, r8d, 5
mov dword [rbp + 0x2c], r9d
pinsrw xmm0, r9d, 6
mov rsi, qword [rdi + 0xb0]
mov dword [rbp + 0x34], r10d
pinsrw xmm0, r10d, 7
movdqa xmm1, xmm0
punpckhbw xmm1, xmm6
pshuflw xmm1, xmm1, 0xb1
pshufhw xmm1, xmm1, 0xb1
punpcklbw xmm0, xmm6
pshuflw xmm0, xmm0, 0xb1
pshufhw xmm0, xmm0, 0xb1
packuswb xmm0, xmm1
xor ecx, ecx
mov qword [rbp - 0x48], rsi
nop word [rax + rax]
mov rax, rsi
test rcx, rcx
je 0x14026171c
mov rax, qword [rcx + 8]
test rax, rax
je 0x140261ad7
mov rcx, rax
mov r14, qword [rax + 0x10]
test r14, r14
je 0x140261710
cmp word [r14], 0x17
jne 0x140261710
movzx r11d, byte [r14 + 8]
movzx r8d, byte [r14 + 9]
mov eax, r11d
xor al, 0xfe
lea r9d, [r8 - 0x80]
or r9b, al
je 0x140261710
movzx r13d, word [r14 + 0xa]
movzx eax, word [r14 + 0xc]
movzx r9d, word [r14 + 0xe]
movzx r10d, word [r14 + 0x10]
mov dword [rbp + 0x70], r10d
movzx r10d, word [r14 + 0x12]
movzx esi, word [r14 + 0x14]
movzx r12d, word [r14 + 0x16]
movdqa xmmword [rbp + 0x50], xmm6
mov r14d, dword [rcx + 0x20]
test r14, r14
je 0x140261c1f
movzx r8d, r8b
mov dword [rbp - 0xc], r10d
lea r10, [r14 + 0xf]
mov qword [rbp + 0x68], r10
movzx r8d, r8w
shl r8d, 8
movzx r11d, r11w
or r11d, r8d
mov r8, qword [rbp + 0x68]
movd xmm1, r9d
movd xmm2, eax
punpcklwd xmm2, xmm1
movd xmm1, r13d
movd xmm3, r11d
punpcklwd xmm3, xmm1
punpckldq xmm3, xmm2
movd xmm1, r12d
movd xmm2, esi
punpcklwd xmm2, xmm1
movd xmm1, dword [rbp - 0xc]
movd xmm4, dword [rbp + 0x70]
punpcklwd xmm4, xmm1
punpckldq xmm4, xmm2
punpcklbw xmm4, xmm6
pshuflw xmm1, xmm4, 0xb1
pshufhw xmm2, xmm1, 0xb1
punpcklbw xmm3, xmm6
pshuflw xmm1, xmm3, 0xb1
pshufhw xmm1, xmm1, 0xb1
packuswb xmm1, xmm2
and r8, 0xfffffffffffffff0
xor r9d, r9d
xor r10d, r10d
jmp 0x140261831
add r9, 0x10
add r10, 2
cmp r8, r9
je 0x140261aaa
cmp r9, 0x80
je 0x140261aaa
movdqa xmmword [rbp - 0x30], xmm0
movzx r11d, word [rbp + r10 - 0x30]
movdqa xmmword [rbp - 0x30], xmm1
cmp r9, r14
ja 0x140261820
movzx esi, word [rbp + r10 - 0x30]
mov r12d, esi
xor r12d, r11d
test r12b, 1
jne 0x140261a90
movzx r13d, word [rbp + r10 + 0x50]
mov eax, r13d
or eax, 1
mov word [rbp + r10 + 0x50], ax
cmp r9, r14
jae 0x140261820
test r12b, 2
jne 0x140261a90
mov eax, r13d
or eax, 3
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 2]
cmp rax, r14
ja 0x140261820
test r12b, 4
jne 0x140261a90
mov eax, r13d
or eax, 7
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 3]
cmp rax, r14
ja 0x140261820
test r12b, 8
jne 0x140261a90
mov eax, r13d
or eax, 0xf
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 4]
cmp rax, r14
ja 0x140261820
test r12b, 0x10
jne 0x140261a90
mov eax, r13d
or eax, 0x1f
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 5]
cmp rax, r14
ja 0x140261820
test r12b, 0x20
jne 0x140261a90
mov eax, r13d
or eax, 0x3f
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 6]
cmp rax, r14
ja 0x140261820
test r12b, 0x40
jne 0x140261a90
mov eax, r13d
or eax, 0x7f
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 7]
cmp rax, r14
ja 0x140261820
test r12b, r12b
js 0x140261a90
mov eax, r13d
or eax, 0xff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 8]
cmp rax, r14
ja 0x140261820
test r12d, 0x100
jne 0x140261a90
mov eax, r13d
or eax, 0x1ff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 9]
cmp rax, r14
ja 0x140261820
test r12d, 0x200
jne 0x140261a90
mov eax, r13d
or eax, 0x3ff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 0xa]
cmp rax, r14
ja 0x140261820
test r12d, 0x400
jne 0x140261a90
mov eax, r13d
or eax, 0x7ff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 0xb]
cmp rax, r14
ja 0x140261820
test r12d, 0x800
jne 0x140261a90
mov eax, r13d
or eax, 0xfff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 0xc]
cmp rax, r14
ja 0x140261820
test r12d, 0x1000
jne 0x140261a90
mov eax, r13d
or eax, 0x1fff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 0xd]
cmp rax, r14
ja 0x140261820
test r12d, 0x2000
jne 0x140261a90
mov eax, r13d
or eax, 0x3fff
mov word [rbp + r10 + 0x50], ax
lea rax, [r9 + 0xe]
cmp rax, r14
ja 0x140261820
test r12d, 0x4000
jne 0x140261a90
or r13d, 0x7fff
mov word [rbp + r10 + 0x50], r13w
lea rax, [r9 + 0xf]
cmp rax, r14
ja 0x140261820
cmp si, r11w
jne 0x140261a90
mov word [rbp + r10 + 0x50], 0xffff
jmp 0x140261820
mov rsi, qword [rbp - 0x48]
jmp 0x140261710
xor r14d, r14d
xor esi, esi
mov rax, qword [rbp + 0x10]
cmp rax, qword [rbp - 8]
je 0x140261ae9
jmp 0x140261b02
movdqa xmm0, xmmword [rbp + 0x50]
movdqa xmm1, xmm0
punpckhbw xmm1, xmm6
pshuflw xmm1, xmm1, 0xb1
pshufhw xmm1, xmm1, 0xb1
punpcklbw xmm0, xmm6
pshuflw xmm0, xmm0, 0xb1
pshufhw xmm8, xmm0, 0xb1
packuswb xmm8, xmm1
jmp 0x140261adc
pxor xmm8, xmm8
xor r13d, r13d
mov rax, qword [rbp + 0x10]
cmp rax, qword [rbp - 8]
jne 0x140261b02
mov qword [rbp + 0x70], rdx
lea rcx, [rbp - 8]
call fcn.140260dd0
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov rdx, qword [rbp + 0x70]
mov rcx, qword [rbp + 0x10]
lea rax, [rcx + rcx*4]
shl rax, 4
mov r8, qword [rbp + 0x20]
mov qword [r8 + rax], rdx
mov rdx, qword [rbp + 0x18]
mov qword [r8 + rax + 8], rdx
mov qword [r8 + rax + 0x10], r15
mov byte [r8 + rax + 0x18], r13b
mov byte [r8 + rax + 0x19], r14b
mov edx, dword [rbp - 0x10]
mov dword [r8 + rax + 0x1a], edx
mov dword [r8 + rax + 0x1e], r12d
mov dword [r8 + rax + 0x22], esi
mov edx, dword [rbp + 0x30]
mov word [r8 + rax + 0x29], dx
movq qword [r8 + rax + 0x2b], xmm7
mov edx, dword [rbp + 0x28]
mov word [r8 + rax + 0x33], dx
mov edx, dword [rbp + 0x2c]
mov word [r8 + rax + 0x35], dx
mov edx, dword [rbp + 0x34]
mov word [r8 + rax + 0x37], dx
movdqu xmmword [r8 + rax + 0x39], xmm8
inc rcx
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rcx
mov rsi, rcx
lea r13, [rbp - 0x30]
jmp 0x140261160
xor ecx, ecx
xor r8d, r8d
xor r14d, r14d
xor eax, eax
mov r10d, r12d
shr r10d, 8
mov r9d, r12d
shr r9d, 0x10
movzx ecx, cl
mov esi, ecx
shl esi, 0x18
movzx r8d, r8b
mov r11d, r8d
shl r11d, 0x10
or r11d, esi
movzx r14d, r14b
mov esi, r14d
shl esi, 8
or esi, r11d
movzx eax, al
or esi, eax
mov r11d, r12d
shr r11d, 0x18
not al
or al, r12b
not r14b
or r14b, r10b
not r8b
or r8b, r9b
not cl
or cl, r11b
movzx ecx, cl
movzx r8d, r8b
shl ecx, 0x18
shl r8d, 0x10
or r8d, ecx
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
or eax, r8d
mov dword [rbp - 0x10], eax
mov r14b, 1
mov rax, qword [rbp + 0x10]
cmp rax, qword [rbp - 8]
jne 0x140261b02
jmp 0x140261ae9
pxor xmm0, xmm0
jmp 0x140261aaf
xor ecx, ecx
xor r8d, r8d
xor r14d, r14d
jmp 0x140261b93
xor ecx, ecx
mov r8d, dword [rbp + 0x70]
jmp 0x140261b93
xor ecx, ecx
xor r8d, r8d
jmp 0x140261b93
mov cl, 1
jmp 0x140261c68
mov cl, 3
jmp 0x140261c68
mov cl, 7
jmp 0x140261c68
mov cl, 0xf
jmp 0x140261c68
mov cl, 0x1f
jmp 0x140261c68
mov cl, 0x3f
jmp 0x140261c68
mov cl, 0x7f
jmp 0x140261c68
mov cl, 0xff
mov r14d, esi
mov r8d, dword [rbp + 0x70]
jmp 0x140261b93
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], 8
call fcn.1402b9b20
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp - 0x38]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
jmp 0x140261cc4
mov rcx, qword [rbp - 0x40]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rax, qword [rbp + 8]
mov rcx, qword [rbp - 0x38]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp - 8]
movups xmmword [rcx], xmm0
mov rax, rcx
movaps xmm6, xmmword [rbp + 0x80]
movaps xmm7, xmmword [rbp + 0x90]
movaps xmm8, xmmword [rbp + 0xa0]
add rsp, 0x138
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r13d, r13d
mov qword [rbp + 0x40], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x38], rax
mov rcx, r13
mov rdx, r15
call fcn.1402e7960
ud2