Function at 0x1401fff20
Capabilities:
Check os version
Get local ipv4 addresses

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x14049bcb8]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r12, rcx
call fcn.140200e40
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x40], 0x3c00
lea rdx, [0x14030eea8]
mov ecx, 0x3c00
call qword [sym.imp.VBoxRT.dll_RTMemAllocTag]
mov r13, rax
test rax, rax
je 0x1402006e8
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r13
xor r8d, r8d
lea edx, [r8 + 6]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
mov r15d, eax
xor ebx, ebx
nop dword [rax + rax]
cmp r15d, 0x6f
jne 0x140200002
mov rcx, r13
call qword [sym.imp.VBoxRT.dll_RTMemFree]
mov ecx, dword [rsp + 0x40]
lea rdx, [0x14030eea8]
call qword [sym.imp.VBoxRT.dll_RTMemAllocTag]
mov r13, rax
test rax, rax
je 0x1402006e8
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r13
xor r8d, r8d
lea edx, [r15 - 0x69]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
mov r15d, eax
inc ebx
cmp ebx, 3
jl 0x1401fffb0
test r15d, r15d
je 0x140200074
mov ecx, 0x1010010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x14020004f
mov dword [rsp + 0x30], r15d
lea rcx, str.GetAdaptersAddresses_failed__0x_x__n
mov qword [rsp + 0x28], rcx
lea rcx, str.int___cdecl_NetIfList_class_std::list_class_ComObjPtr_class_HostNetworkInterface__class_std::allocator_class_ComObjPtr_class_HostNetworkInterface_______
mov qword [rsp + 0x20], rcx
lea r9, str._Rfn:__M
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x101
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
test r15d, r15d
jle 0x140200134
movzx r15d, r15w
or r15d, 0x80070000
mov rcx, r13
call qword [sym.imp.VBoxRT.dll_RTMemFree]
mov eax, r15d
jmp 0x1402006ed
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov ecx, VarR4FromUI1
call fcn.14020335c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.140200f00
mov r15d, eax
test eax, eax
je 0x140200145
mov ecx, 0x1010010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x1402000f0
mov dword [rsp + 0x30], r15d
lea rcx, str.netIfGetBoundAdapters_failed__0x_x__n
mov qword [rsp + 0x28], rcx
lea rcx, str.int___cdecl_NetIfList_class_std::list_class_ComObjPtr_class_HostNetworkInterface__class_std::allocator_class_ComObjPtr_class_HostNetworkInterface_______
mov qword [rsp + 0x20], rcx
lea r9, str._Rfn:__M
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x101
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x140200125
nop dword [rax + rax]
mov rbx, qword [rcx]
mov edx, VarR4FromUI1
call fcn.140202f90
mov rcx, rbx
test rbx, rbx
jne 0x140200110
mov edx, VarR4FromUI1
mov rcx, qword [rsp + 0x50]
call fcn.140202f90
mov rcx, r13
call qword [sym.imp.VBoxRT.dll_RTMemFree]
mov eax, r15d
jmp 0x1402006ed
mov rsi, r13
lea rbx, str.int___cdecl_NetIfList_class_std::list_class_ComObjPtr_class_HostNetworkInterface__class_std::allocator_class_ComObjPtr_class_HostNetworkInterface_______
lea r14, str.ignoring_invalid_GUID__s_n
nop word [rax + rax]
lea rdx, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxMain_src_serverwinNetIf_win.cpp
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.VBoxRT.dll_RTStrDupTag]
mov rdi, rax
test rax, rax
je 0x14020023e
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp byte [rax + rcx], 0
jne 0x140200184
cmp byte [rax], 0x7b
jne 0x1402001fe
cmp byte [rcx + rax - 1], 0x7d
jne 0x1402001fe
mov byte [rcx + rax - 1], 0
mov rax, qword [rsp + 0x50]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1402001d6
nop dword [rax]
lea rcx, [rbx + 0x20]
lea rdx, [rdi + 1]
call qword [sym.imp.VBoxRT.dll_RTUuidCompareStr]
test eax, eax
je 0x1402001f8
mov rax, qword [rbx]
mov rbx, rax
cmp rax, qword [rsp + 0x50]
jne 0x1402001b0
lea r14, str.ignoring_invalid_GUID__s_n
lea rbx, str.int___cdecl_NetIfList_class_std::list_class_ComObjPtr_class_HostNetworkInterface__class_std::allocator_class_ComObjPtr_class_HostNetworkInterface_______
mov rcx, rdi
call qword [sym.imp.VBoxRT.dll_RTStrFree]
mov rsi, qword [rsi + 8]
test rsi, rsi
jne 0x140200160
jmp 0x14020027a
mov qword [rbx + 0x30], rsi
jmp 0x1402001cf
mov ecx, 0x1010010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x1402001dd
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea r9, str._Rfn:__M
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x101
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
jmp 0x1402001dd
mov ecx, 0x1010010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x14020027a
lea rcx, str.out_of_memory_n
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, str._Rfn:__M
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x101
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rcx]
cmp rdi, rcx
je 0x1402000f5
lea r14, str.HostNetworkInterface::init_______Rrc_n
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
movups xmm0, xmmword [rdi + 0x20]
movaps xmmword [rbp], xmm0
mov dword [rbp - 0xc], 1
mov eax, dword [rdi + 0x38]
mov dword [rbp - 0x18], eax
mov rbx, qword [rdi + 0x30]
test rbx, rbx
je 0x1402005c5
xor eax, eax
cmp dword [rbx + 0x68], 1
setne al
inc eax
mov dword [rbp - 8], eax
xor eax, eax
mov r14d, dword [rsp + 0x60]
cmp dword [rbx + 4], r14d
sete al
mov dword [rbp - 0x1c], eax
mov eax, dword [rbx + 0x5c]
and eax, 4
mov dword [rbp - 0x20], eax
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp + 0x54]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x50], 0x11c
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x1402004ed
cmp dword [rbp + 0x54], 6
jae 0x1402004ed
xor r8b, r8b
xor r9b, r9b
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14020038c
nop dword [rax + rax]
mov rax, qword [rcx + 0x10]
movzx edx, word [rax]
cmp dx, 2
je 0x140200375
cmp dx, 0x17
jne 0x140200383
test r9b, r9b
jne 0x140200383
mov r9b, 1
movups xmm0, xmmword [rax + 8]
movaps xmmword [rbp - 0x40], xmm0
jmp 0x140200383
test r8b, r8b
jne 0x140200383
mov r8b, 1
mov eax, dword [rax + 4]
mov dword [rbp - 0x48], eax
mov rcx, qword [rcx + 8]
test rcx, rcx
jne 0x140200350
xor esi, esi
xor r14d, r14d
mov rbx, qword [rbx + 0xb0]
test rbx, rbx
je 0x140200416
nop dword [rax]
test esi, esi
je 0x1402003a9
test r14d, r14d
jne 0x140200416
mov rdx, qword [rbx + 0x10]
movzx eax, word [rdx]
cmp ax, 2
je 0x1402003e1
cmp ax, 0x17
jne 0x14020040d
test r14d, r14d
jne 0x14020040d
mov ecx, dword [rbx + 0x20]
lea eax, [rcx - 1]
cmp eax, 0x7e
ja 0x14020040d
cmp byte [rdx + 8], 0xff
je 0x14020040d
mov r14d, ecx
lea rdx, [rbp - 0x30]
call qword [sym.imp.VBoxRT.dll_RTNetPrefixToMaskIPv6]
jmp 0x14020040d
test esi, esi
jne 0x14020040d
mov edx, dword [rdx + 4]
mov ecx, dword [rbx + 0x20]
lea eax, [rcx - 1]
cmp eax, 0x1e
ja 0x14020040d
and edx, 0xf0
cmp edx, 0xe0
jae 0x14020040d
mov esi, ecx
lea rdx, [rbp - 0x44]
call qword [sym.imp.VBoxRT.dll_RTNetPrefixToMaskIPv4]
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1402003a0
lea r14, str.HostNetworkInterface::init_______Rrc_n
mov qword [rsp + 0x48], 0
lea rcx, [rsp + 0x48]
call fcn.140200d20
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
lea rdx, str.sun_VBoxNetAdp
mov rcx, qword [rdi + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
neg eax
sbb esi, esi
lea rax, [rbp - 0x78]
mov qword [rbp - 0x58], rax
mov rbx, qword [rdi + 0x10]
lea rcx, [rbp - 0x78]
call qword [sym.imp.VBoxRT.dll_public:_void___cdecl_RTCString::constructor_void____ptr64]
nop
lea rax, vtable.com::Utf8Str.0
mov qword [rbp - 0x78], rax
mov r8, 0xffffffffffffffff
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.140204680
nop
lea r9, [rbp - 0x50]
lea r8d, [rsi + 2]
lea rdx, [rbp - 0x78]
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140099910
mov esi, eax
test eax, eax
jns 0x1402005d1
mov ecx, 0x1010010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x140200693
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], r14
lea rcx, str.int___cdecl_NetIfList_class_std::list_class_ComObjPtr_class_HostNetworkInterface__class_std::allocator_class_ComObjPtr_class_HostNetworkInterface_______
mov qword [rsp + 0x20], rcx
lea r9, str._Rfn:__M
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x101
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
jmp 0x140200693
cmp dword [rbx + 0x58], 6
jne 0x140200501
mov eax, dword [rbx + 0x50]
mov dword [rbp - 0x14], eax
movzx eax, word [rbx + 0x54]
mov word [rbp - 0x10], ax
xor sil, sil
xor r14b, r14b
mov rbx, qword [rbx + 0x18]
test rbx, rbx
je 0x140200416
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbx + 0x10]
movzx ecx, word [rax]
cmp cx, 2
je 0x140200559
cmp cx, 0x17
jne 0x14020057b
test r14b, r14b
jne 0x14020057b
mov r14b, 1
movups xmm0, xmmword [rax + 8]
movaps xmmword [rbp - 0x40], xmm0
movzx eax, byte [rbx + 0x38]
cmp al, 0x80
ja 0x14020057b
mov ecx, eax
lea rdx, [rbp - 0x30]
call qword [sym.imp.VBoxRT.dll_RTNetPrefixToMaskIPv6]
jmp 0x14020057b
test sil, sil
jne 0x14020057b
mov sil, 1
mov eax, dword [rax + 4]
mov dword [rbp - 0x48], eax
movzx eax, byte [rbx + 0x38]
cmp al, 0x20
ja 0x14020057b
mov ecx, eax
lea rdx, [rbp - 0x44]
call qword [sym.imp.VBoxRT.dll_RTNetPrefixToMaskIPv4]
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x140200520
test sil, sil
je 0x1402005a0
mov dword [rsp + 0x48], 0xffffffff
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x44]
call qword [sym.imp.VBoxRT.dll_RTNetMaskToPrefixIPv4]
test r14b, r14b
je 0x140200416
mov dword [rsp + 0x48], 0xffffffff
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x30]
call qword [sym.imp.VBoxRT.dll_RTNetMaskToPrefixIPv6]
jmp 0x140200416
mov dword [rbp - 8], 2
jmp 0x14020041d
mov r14, qword [r12]
movabs rax, 0xaaaaaaaaaaaaaaa
cmp dword [rbp - 0x1c], 0
je 0x140200634
mov r14, qword [r14]
cmp qword [r12 + 8], rax
je 0x14020071d
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.14020335c
mov rsi, rax
mov qword [rax + 0x10], rbx
test rbx, rbx
je 0x140200629
lea rcx, [rbx + 8]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [case.0x140010858.0]
nop
mov qword [rsp + 0x70], 0
jmp 0x14020067c
cmp qword [r12 + 8], rax
je 0x14020071d
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 0
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.14020335c
mov rsi, rax
mov qword [rax + 0x10], rbx
test rbx, rbx
je 0x140200674
lea rcx, [rbx + 8]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [case.0x140010858.0]
nop
mov qword [rbp - 0x80], 0
inc qword [r12 + 8]
mov rax, qword [r14 + 8]
mov qword [rsi], r14
mov qword [rsi + 8], rax
mov qword [r14 + 8], rsi
mov qword [rax], rsi
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x1402006a2
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1402006b2
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
test rbx, rbx
je 0x1402006c8
lea rcx, [rbx + 8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140010858.0]
mov rax, qword [rdi]
mov rdi, rax
mov rcx, qword [rsp + 0x50]
cmp rax, rcx
lea r14, str.HostNetworkInterface::init_______Rrc_n
jne 0x140200292
jmp 0x1402000f5
mov eax, 0x80070008
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140202f70
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.list_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3