Function at 0x1400819b0
Capabilities:
Get local ipv4 addresses
Get mac address on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x230
mov rax, qword [0x1401ef010]
xor rax, rsp
mov qword [rsp + 0x220], rax
mov r14, rcx
mov qword [rsp + 0x40], rcx
lea rax, vtable.vncServer.0
mov qword [rcx], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx + 0x10], xmm0
mov word [rcx + 0x20], ax
lea rsi, [rcx + 0x28]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rcx, [r14 + 0x50]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rcx, [r14 + 0x78]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rax, vtable.vncServer::ServerUpdateTracker.0
mov qword [r14 + 0xe0], rax
xor ebp, ebp
mov qword [r14 + 0xe8], rbp
mov qword [r14 + 0x120], rbp
mov qword [r14 + 0x128], rbp
lea ecx, [rbp + 0x18]
call fcn.140132648
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [r14 + 0x120], rax
mov qword [r14 + 0x130], rbp
mov qword [r14 + 0x138], rbp
lea ecx, [rbp + 0x18]
call fcn.140132648
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [r14 + 0x130], rax
lea rcx, [r14 + 0x548]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [r14 + 0x578], rbp
mov qword [r14 + 0x580], rbp
lea ecx, [rbp + 0x18]
call fcn.140132648
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [r14 + 0x578], rax
mov qword [0x1401fb650], r14
mov dword [r14 + 0xb8], ebp
mov qword [r14 + 0xf0], rbp
mov qword [r14 + 0xf8], rbp
mov dword [r14 + 0x100], ebp
mov qword [r14 + 0x108], rbp
mov qword [r14 + 0x110], rbp
mov dword [r14 + 0xa0], 0x170c
mov dword [r14 + 0xa4], 0x16a8
mov qword [r14 + 0x118], rbp
mov qword [rsp + 0x50], rbp
mov rbx, qword [0x1401fdf80]
lea rax, [0x1401efc48]
lea rcx, [0x1401efd50]
cmp dword [rbx + 0x7a8], ebp
cmove rcx, rax
xor edx, edx
call fcn.140017490
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140018200
mov rax, qword [rsp + 0x50]
mov qword [rbx + 0x734], rax
mov qword [r14 + 0x140], rbp
mov qword [r14 + 0x148], rbp
mov qword [r14 + 0x150], rbp
mov qword [r14 + 0x158], rbp
mov qword [r14 + 0x160], rbp
mov qword [r14 + 0x168], rbp
mov qword [r14 + 0x170], rbp
mov qword [r14 + 0x178], rbp
mov qword [r14 + 0x180], rbp
mov qword [r14 + 0x188], rbp
mov qword [r14 + 0x190], rbp
mov qword [r14 + 0x198], rbp
mov qword [r14 + 0x1a0], rbp
mov qword [r14 + 0x1a8], rbp
mov qword [r14 + 0x1b0], rbp
mov qword [r14 + 0x1b8], rbp
mov qword [r14 + 0x1c0], rbp
mov qword [r14 + 0x1c8], rbp
mov qword [r14 + 0x1d0], rbp
mov qword [r14 + 0x1d8], rbp
mov qword [r14 + 0x1e0], rbp
mov qword [r14 + 0x1e8], rbp
mov qword [r14 + 0x1f0], rbp
mov qword [r14 + 0x1f8], rbp
mov qword [r14 + 0x200], rbp
mov qword [r14 + 0x208], rbp
mov qword [r14 + 0x210], rbp
mov qword [r14 + 0x218], rbp
mov qword [r14 + 0x220], rbp
mov qword [r14 + 0x228], rbp
mov qword [r14 + 0x230], rbp
mov qword [r14 + 0x238], rbp
mov qword [r14 + 0x240], rbp
mov qword [r14 + 0x248], rbp
mov qword [r14 + 0x250], rbp
mov qword [r14 + 0x258], rbp
mov qword [r14 + 0x260], rbp
mov qword [r14 + 0x268], rbp
mov qword [r14 + 0x270], rbp
mov qword [r14 + 0x278], rbp
mov qword [r14 + 0x280], rbp
mov qword [r14 + 0x288], rbp
mov qword [r14 + 0x290], rbp
mov qword [r14 + 0x298], rbp
mov qword [r14 + 0x2a0], rbp
mov qword [r14 + 0x2a8], rbp
mov qword [r14 + 0x2b0], rbp
mov qword [r14 + 0x2b8], rbp
mov qword [r14 + 0x2c0], rbp
mov qword [r14 + 0x2c8], rbp
mov qword [r14 + 0x2d0], rbp
mov qword [r14 + 0x2d8], rbp
mov qword [r14 + 0x2e0], rbp
mov qword [r14 + 0x2e8], rbp
mov qword [r14 + 0x2f0], rbp
mov qword [r14 + 0x2f8], rbp
mov qword [r14 + 0x300], rbp
mov qword [r14 + 0x308], rbp
mov qword [r14 + 0x310], rbp
mov qword [r14 + 0x318], rbp
mov qword [r14 + 0x320], rbp
mov qword [r14 + 0x328], rbp
mov qword [r14 + 0x330], rbp
mov qword [r14 + 0x338], rbp
mov qword [r14 + 0x340], rbp
mov qword [r14 + 0x348], rbp
mov qword [r14 + 0x350], rbp
mov qword [r14 + 0x358], rbp
mov qword [r14 + 0x360], rbp
mov qword [r14 + 0x368], rbp
mov qword [r14 + 0x370], rbp
mov qword [r14 + 0x378], rbp
mov qword [r14 + 0x380], rbp
mov qword [r14 + 0x388], rbp
mov qword [r14 + 0x390], rbp
mov qword [r14 + 0x398], rbp
mov qword [r14 + 0x3a0], rbp
mov qword [r14 + 0x3a8], rbp
mov qword [r14 + 0x3b0], rbp
mov qword [r14 + 0x3b8], rbp
mov qword [r14 + 0x3c0], rbp
mov qword [r14 + 0x3c8], rbp
mov qword [r14 + 0x3d0], rbp
mov qword [r14 + 0x3d8], rbp
mov qword [r14 + 0x3e0], rbp
mov qword [r14 + 0x3e8], rbp
mov qword [r14 + 0x3f0], rbp
mov qword [r14 + 0x3f8], rbp
mov qword [r14 + 0x400], rbp
mov qword [r14 + 0x408], rbp
mov qword [r14 + 0x410], rbp
mov qword [r14 + 0x418], rbp
mov qword [r14 + 0x420], rbp
mov qword [r14 + 0x428], rbp
mov qword [r14 + 0x430], rbp
mov qword [r14 + 0x438], rbp
mov qword [r14 + 0x440], rbp
mov qword [r14 + 0x448], rbp
mov qword [r14 + 0x450], rbp
mov qword [r14 + 0x458], rbp
mov qword [r14 + 0x460], rbp
mov qword [r14 + 0x468], rbp
mov qword [r14 + 0x470], rbp
mov qword [r14 + 0x478], rbp
mov qword [r14 + 0x480], rbp
mov qword [r14 + 0x488], rbp
mov qword [r14 + 0x490], rbp
mov qword [r14 + 0x498], rbp
mov qword [r14 + 0x4a0], rbp
mov qword [r14 + 0x4a8], rbp
mov qword [r14 + 0x4b0], rbp
mov qword [r14 + 0x4b8], rbp
mov qword [r14 + 0x4c0], rbp
mov qword [r14 + 0x4c8], rbp
mov qword [r14 + 0x4d0], rbp
mov qword [r14 + 0x4d8], rbp
mov qword [r14 + 0x4e0], rbp
mov qword [r14 + 0x4e8], rbp
mov qword [r14 + 0x4f0], rbp
mov qword [r14 + 0x4f8], rbp
mov qword [r14 + 0x500], rbp
mov qword [r14 + 0x508], rbp
mov qword [r14 + 0x510], rbp
mov qword [r14 + 0x518], rbp
mov qword [r14 + 0x520], rbp
mov qword [r14 + 0x528], rbp
mov qword [r14 + 0x530], rbp
mov qword [r14 + 0x538], rbp
mov word [r14 + 0x540], bp
mov rax, qword [r14 + 0xe0]
mov rdx, r14
lea rcx, [r14 + 0xe0]
call qword [rax + 0x20]
lea ecx, [rbp + 0x40]
call fcn.140132648
mov rbx, rax
mov qword [rsp + 0x50], rax
mov qword [rax], rsi
lea rcx, [rax + 8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov qword [rbx + 0x38], rbp
mov qword [rbx + 0x30], rbp
mov qword [r14 + 0x570], rbx
mov ecx, 0x348
call fcn.140132648
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.140019c40
mov qword [r14 + 0x588], rax
mov qword [r14 + 0x590], rbp
mov qword [r14 + 0x598], rbp
lea rcx, [r14 + 0x5a0]
lea r8, [0x14019528c]
mov edx, 0xff
call fcn.14013b330
lea rcx, [r14 + 0x69f]
lea r8, [0x14019528c]
mov edx, 0x104
call fcn.14013b330
mov qword [r14 + 8], rbp
mov byte [r14 + 0xd0], bpl
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [r14 + 0x7b0], eax
mov dword [r14 + 0x7b4], 1
mov qword [r14 + 0xb0], rbp
mov qword [r14 + 0xc8], rbp
mov qword [r14 + 0xd8], rbp
lea rcx, [0x1401c3180]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140081fdb
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x140082154
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [r14 + 0xd4], ebp
mov qword [r14 + 0xbc], rbp
mov dword [r14 + 0xc4], ebp
mov dword [r14 + 0x7bc], ebp
mov dword [rsp + 0x50], 0x2c0
mov ecx, reloc.WS2_32.dll_select
call fcn.14013b328
mov rdi, rax
mov ecx, 0x2c0
call fcn.14013b328
mov rsi, rax
test rax, rax
je 0x140082102
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x140082052
mov rcx, rsi
call fcn.140139270
mov ecx, dword [rsp + 0x50]
call fcn.14013b328
mov rsi, rax
test rax, rax
je 0x140082102
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x1400820fc
mov rbx, rsi
nop dword [rax + rax]
movzx eax, byte [rbx + 0x19d]
movzx ecx, byte [rbx + 0x19a]
movzx edx, byte [rbx + 0x19b]
movzx r8d, byte [rbx + 0x19c]
movzx r9d, byte [rbx + 0x198]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r8d
lea r8, str._02X_02X_02X_02X_02X
mov edx, reloc.WS2_32.dll_select
mov rcx, rdi
call fcn.1400372d0
cmp byte [rbx + 0x198], 0
jne 0x1400820fc
cmp byte [rbx + 0x19c], 0
jne 0x1400820fc
cmp byte [rbx + 0x19b], 0
jne 0x1400820fc
cmp byte [rbx + 0x19a], 0
jne 0x1400820fc
cmp byte [rbx + 0x19d], 0
jne 0x1400820fc
mov rbx, qword [rbx]
test rbx, rbx
je 0x1400820fc
cmp byte [rbx + 0x198], 0
je 0x140082070
mov rbp, rdi
mov rdi, rsi
mov rcx, rdi
call fcn.140139270
mov r8, rbp
mov edx, reloc.WS2_32.dll_select
lea rcx, [r14 + 0x10]
call fcn.14013b330
mov rcx, rbp
call fcn.140139270
nop
mov rax, r14
mov rcx, qword [rsp + 0x220]
xor rcx, rsp
call fcn.140132620
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
xor edx, edx
mov r8d, 0x118
lea rcx, [rsp + 0x104]
call fcn.140135010
mov dword [rsp + 0x100], 0x11c
lea rcx, [rsp + 0x100]
call rdi
mov eax, dword [rsp + 0x10c]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x64], eax
lea rdx, [rsp + 0x114]
lea rax, [rsp + 0x74]
cmp word [rsp + 0x114], 0
je 0x1400821d1
movzx ecx, byte [rsp + 0x114]
nop dword [rax]
nop dword [rax + rax]
mov byte [rax], cl
inc rax
lea rdx, [rdx + 2]
movzx ecx, word [rdx]
test cx, cx
jne 0x1400821c0
mov byte [rax], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [rsp + 0x64], 0xa
jne 0x140081fdb
cmp dword [rsp + 0x6c], 0x47ba
jb 0x140081fdb
mov dword [r14 + 0xd4], 1
mov ecx, 0x68
call fcn.140132648
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400320d0
nop
mov qword [r14 + 0xd8], rax
jmp 0x140081fe2