Function at 0x4dc5f0
Capabilities:
Get local ipv4 addresses

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
xor r8d, r8d
mov ebx, 0xe
mov qword [rcx], 0
mov rdi, rcx
mov r13, rdx
mov ecx, 6
mov dword [rdx], 0
xor edx, edx
call fcn.004dbb10
mov r15d, eax
test eax, eax
je 0x4dc6d0
mov dword [rsp + 0x7c], 0
xor r14d, r14d
lea rsi, [rsp + 0x7c]
mov qword [rsp + 0x20], rsi
mov r9, r14
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
mov r12d, eax
test eax, eax
je 0x4dc738
mov rcx, r14
call fcn.004b75f0
cmp r12d, 0xe8
je 0x4dc710
ja 0x4dc6a0
cmp r12d, 0x57
je 0x4dc6c8
cmp r12d, 0x6f
jne 0x4dc700
mov ecx, dword [rsp + 0x7c]
call fcn.004b75d0
mov r14, rax
test rax, rax
jne 0x4dc645
mov eax, 0xfffff027
jmp 0x4dc6ae
mov eax, 0xfffff008
cmp r12d, 0x4cc
jne 0x4dc700
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 0xfffff024
jmp 0x4dc6ae
mov r8d, 1
mov edx, 1
mov ecx, 5
call fcn.004dbb10
test eax, eax
je 0x4dcbc7
mov ebx, 0x1e
jmp 0x4dc635
mov ecx, r12d
call fcn.004bb150
jmp 0x4dc6ae
mov ecx, 1
call fcn.004b75d0
test rax, rax
je 0x4dc698
mov dword [r13], 0
mov qword [rdi], rax
xor eax, eax
jmp 0x4dc6ae
mov dword [rsp + 0x64], 0
mov rsi, r14
xor r12d, r12d
xor ebp, ebp
mov qword [rsp + 0x50], 0
mov rbx, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test r14, r14
jne 0x4dc771
jmp 0x4dcbd1
mov rsi, qword [rsi + 8]
test rsi, rsi
je 0x4dc7e8
cmp dword [rsi + 0x68], 1
jne 0x4dc768
cmp qword [rsi + 0x18], 0
je 0x4dc768
mov r8, qword [rsi + 0x48]
xor edx, edx
mov qword [rsp + 0x38], 0
mov r9d, 0xffffffff
mov qword [rsp + 0x30], 0
mov ecx, 0xfde9
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rbx
test eax, eax
jle 0x4dcb84
cdqe
add rbp, rax
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x4dc768
nop word [rax + rax]
mov rax, qword [rax + 8]
add r12d, 1
add rbp, 0x50
test rax, rax
jne 0x4dc7d0
jmp 0x4dc768
mov rcx, rbp
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x50], rbp
call fcn.004b75d0
mov qword [rsp + 0x58], rax
test rax, rax
je 0x4dcbe2
movsxd rax, dword [rsp + 0x64]
mov rbp, qword [rsp + 0x58]
mov qword [rsp + 0x68], r14
mov r12, r14
mov qword [rsp + 0xd8], r13
mov r13d, r15d
lea rax, [rax + rax*4]
mov qword [rsp + 0xd0], rdi
shl rax, 4
add rax, rbp
mov r14, rax
jmp 0x4dc84e
mov r12, qword [r12 + 8]
test r12, r12
je 0x4dcb50
cmp dword [r12 + 0x68], 1
jne 0x4dc840
cmp qword [r12 + 0x18], 0
je 0x4dc840
mov rax, qword [rsp + 0x58]
add rax, qword [rsp + 0x50]
mov edx, 0x7fffffff
mov r9d, 0xffffffff
sub rax, r14
mov r8, qword [r12 + 0x48]
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
cmp rax, 0x7fffffff
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], 0
cmova rax, rdx
xor edx, edx
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rsp + 0x60], eax
test eax, eax
jle 0x4dcb9e
mov rdi, qword [r12 + 0x18]
test rdi, rdi
jne 0x4dc973
jmp 0x4dcb00
movzx ebx, byte [rdi + 0x38]
mov qword [rbp + 8], 0
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], 0
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
cmp dword [r12 + 0x58], 6
mov qword [rbp], r14
je 0x4dcae0
xor eax, eax
cmp dword [r12 + 0x64], 0x18
sete al
cmp word [r8], 0x17
mov dword [rbp + 0x10], eax
je 0x4dca80
movdqu xmm0, xmmword [r8]
mov eax, 2
mov word [rbp + 0x30], ax
movups xmmword [rbp + 0x14], xmm0
test ebx, ebx
jne 0x4dca60
mov dword [rbp + 0x34], ebx
mov rdi, qword [rdi + 8]
add rbp, 0x50
test rdi, rdi
je 0x4dcb00
mov r8, qword [rdi + 0x10]
test r13d, r13d
jne 0x4dc8d0
mov rdx, qword [r12 + 0xb0]
test rdx, rdx
je 0x4dca29
lea rax, [r8 + 4]
movzx esi, word [r8]
xor ebx, ebx
mov qword [rsp + 0x40], rax
lea rax, [r8 + 8]
mov qword [rsp + 0x48], rax
nop dword [rax]
mov rax, qword [rdx + 0x10]
cmp word [rax], si
jne 0x4dca18
mov r9d, dword [rdx + 0x20]
cmp r9d, ebx
jbe 0x4dca18
mov r10, qword [rsp + 0x40]
lea r11, [rax + 4]
cmp si, 0x17
jne 0x4dc9da
mov r10, qword [rsp + 0x48]
lea r11, [rax + 8]
mov eax, r9d
sar eax, 3
test eax, eax
jle 0x4dca40
lea ecx, [rax - 1]
mov eax, 1
add rcx, 2
jmp 0x4dca04
movsxd r15, eax
add rax, 1
cmp rcx, rax
je 0x4dca48
movzx r15d, byte [r11 + rax - 1]
cmp byte [r10 + rax - 1], r15b
je 0x4dc9f8
nop dword [rax]
mov rdx, qword [rdx + 8]
test rdx, rdx
jne 0x4dc9b0
test ebx, ebx
jne 0x4dc8d4
cmp word [r8], 0x17
mov ebx, pe_nt_image_headers64
mov eax, 0x20
cmovne ebx, eax
jmp 0x4dc8d4
xor r15d, r15d
nop dword [rax + rax]
test r9b, 7
jne 0x4dcb10
mov ebx, r9d
jmp 0x4dca18
mov ecx, 0x20
mov eax, 0xffffffff
sub ecx, ebx
shl eax, cl
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ebx, eax
jmp 0x4dc95f
movdqu xmm1, xmmword [r8]
mov edx, 0x17
mov esi, ebx
lea rcx, [rbp + 0x38]
shr esi, 3
movups xmmword [rbp + 0x14], xmm1
mov rax, qword [r8 + 0x10]
mov qword [rbp + 0x24], rax
mov eax, dword [r8 + 0x18]
mov r8, rsi
mov word [rbp + 0x30], dx
mov edx, 0xff
mov dword [rbp + 0x2c], eax
call sub.msvcrt.dll_memset
and ebx, 7
je 0x4dc962
mov ecx, 8
mov eax, 0xff
sub ecx, ebx
shl eax, cl
mov byte [rbp + rsi + 0x38], al
jmp 0x4dc962
mov edx, dword [r12 + 0x50]
mov dword [rbp + 8], edx
movzx edx, word [r12 + 0x54]
mov word [rbp + 0xc], dx
jmp 0x4dc92c
movsxd rax, dword [rsp + 0x60]
add r14, rax
jmp 0x4dc840
mov ecx, r9d
movzx r11d, byte [r11 + r15]
sar ecx, 0x1f
shr ecx, 0x1d
lea eax, [r9 + rcx]
and eax, 7
sub eax, ecx
mov ecx, 8
sub ecx, eax
mov eax, 0xff
shl eax, cl
movzx ecx, byte [r10 + r15]
and eax, ecx
cmp r11d, eax
je 0x4dca52
jmp 0x4dca18
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xd8]
mov rcx, r14
call fcn.004b75f0
mov rax, qword [rsp + 0x58]
mov qword [rdi], rax
mov eax, dword [rsp + 0x64]
mov dword [r13], eax
xor eax, eax
jmp 0x4dc6ae
mov rcx, r14
call fcn.004b75f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.004bb150
jmp 0x4dc6ae
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.004b75f0
mov rcx, qword [rsp + 0x58]
call fcn.004b75f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.004bb150
jmp 0x4dc6ae
mov eax, 0xfffff02f
jmp 0x4dc6ae
xor ecx, ecx
call fcn.004b75d0
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x4dcb65
mov rcx, r14
call fcn.004b75f0
jmp 0x4dc698