Function at 0x10172d00
Capabilities:
Get local ipv4 addresses
Get mac address on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x120
mov dword [esp + 0x98], 0
lea eax, [esp + 0x98]
push eax
call sub.iphlpapi.dll_GetIfTable2
test eax, eax
je 0x10172d33
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x10172d8a
mov eax, dword [eax]
movdqa xmm0, xmmword [eax]
lea edx, [eax + 0x10]
pmovmskb esi, xmm0
not esi
jmp 0x10172d69
tzcnt edi, esi
mov ebx, eax
shl edi, 7
sub ebx, edi
lea edi, [esi - 1]
and edi, esi
dec ecx
mov byte [ebx - 2], 0
mov esi, edi
je 0x10172d8a
test si, si
jne 0x10172d50
nop
movdqa xmm0, xmmword [edx]
add eax, 0xfffff800
add edx, 0x10
pmovmskb esi, xmm0
cmp si, 0xffff
je 0x10172d70
not esi
jmp 0x10172d50
push 0
call fcn.10168810
add esp, 4
test eax, eax
je 0x1017405f
mov dword [esp + 0x38], 0x1034d630
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
movdqu xmm0, xmmword [eax]
movd edx, xmm0
pshufd xmm1, xmm0, 0x55
add edx, 1
movd ecx, xmm1
adc ecx, 0
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [esp + 0x2c], 4
mov dword [esp + 0x30], 0
movdqu xmmword [esp + 0x48], xmm0
mov dword [esp + 0x34], 0
mov ebx, dword [esp + 0x98]
mov ecx, dword [ebx]
test ecx, ecx
je 0x101739bd
mov edi, dword [0x1035648c]
add ebx, 8
xor edx, edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x1c], ebx
jmp 0x10172e49
push dword [esp + 0x70]
push 0
push dword [edi]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xc0]
nop word [eax + eax]
inc edx
cmp edx, ecx
je 0x10173197
imul esi, edx, 0x548
mov eax, dword [ebx + esi + 0x4a8]
or eax, dword [ebx + esi + 0x4ac]
jne 0x10172e6f
mov eax, dword [ebx + esi + 0x4b0]
or eax, dword [ebx + esi + 0x4b4]
je 0x10172e40
cmp dword [ebx + esi + 0x48c], 2
je 0x10172e40
cmp dword [ebx + esi + 0x420], 0
je 0x10172e40
mov eax, dword [0x103564a0]
mov dword [esp + 0xc0], edx
movzx eax, byte [eax]
mov eax, dword [edi]
test eax, eax
jne 0x10172ea7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10174026
mov dword [edi], eax
push 0x14
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10174026
mov ecx, eax
mov eax, dword [ebx + esi + 0x10]
movq xmm0, qword [ebx + esi + 0x14]
pxor xmm1, xmm1
mov esi, ecx
mov dword [ecx], eax
mov eax, dword [0x103564a0]
punpcklbw xmm0, xmm1
movdqu xmmword [ecx + 4], xmm0
movzx eax, byte [eax]
mov eax, dword [edi]
mov dword [esp + 0x70], ecx
test eax, eax
jne 0x10172ef7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10174034
mov dword [edi], eax
push 0x14
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10174034
mov ecx, dword [esi + 0x10]
mov dword [eax + 0x10], ecx
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
push 0xa
mov dword [esp + 0x18], eax
push eax
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.1016c3b0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x10], 0
mov ecx, edi
mov dword [esp + 0xd0], edi
shr ecx, 0x19
movd xmm0, ecx
mov dword [esp + 0xb0], ecx
punpcklbw xmm0, xmm0
lea ecx, [eax - 0x10]
mov dword [esp + 0x18], eax
pshuflw xmm0, xmm0, 0
mov dword [esp + 0xc], ecx
pshufd xmm0, xmm0, 0
and edi, ebx
movdqa xmm2, xmm0
movdqu xmm1, xmmword [eax + edi]
pcmpeqb xmm2, xmm1
pmovmskb edx, xmm2
test edx, edx
jne 0x10172fde
pcmpeqd xmm2, xmm2
pcmpeqb xmm1, xmm2
pmovmskb ecx, xmm1
test ecx, ecx
jne 0x101730b8
mov eax, dword [esp + 0x10]
lea edi, [edi + eax + 0x10]
add eax, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
jmp 0x10172f82
lea eax, [edx - 1]
mov ebx, esi
and eax, edx
test ax, ax
mov edx, eax
je 0x10172f99
tzcnt eax, edx
mov ecx, dword [esp + 0xc]
mov esi, ebx
add eax, edi
and eax, ebx
mov ebx, eax
shl ebx, 4
sub ecx, ebx
cmp dword [ecx + 8], 0xa
jne 0x10172fd0
mov ecx, dword [ecx]
mov ebx, dword [esp + 0x14]
movdqu xmm2, xmmword [ecx]
movdqu xmm3, xmmword [ebx]
movd xmm5, dword [ecx + 0x10]
movd xmm4, dword [ebx + 0x10]
pcmpeqb xmm3, xmm2
pcmpeqb xmm4, xmm5
pand xmm4, xmm3
pmovmskb ecx, xmm4
cmp ecx, 0xffff
jne 0x10172fd0
mov esi, dword [esp + 0x18]
neg eax
shl eax, 4
add esi, eax
push dword [esp + 0x14]
push 0
mov edi, dword [0x1035648c]
push dword [edi]
call sub.KERNEL32.dll_HeapFree
mov ebx, dword [esp + 0x1c]
mov eax, esi
mov ecx, dword [eax - 4]
inc ecx
cmp ecx, 1
mov dword [eax - 4], ecx
jg 0x10172e1f
mov edx, dword [esp + 0x34]
cmp edx, dword [esp + 0x30]
jne 0x10173074
lea ecx, [esp + 0x2c]
call fcn.1016d490
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0x70]
mov ecx, edx
inc edx
shl ecx, 4
mov dword [eax + ecx], esi
mov dword [eax + ecx + 4], edi
mov dword [eax + ecx + 8], 0xa
mov dword [eax + ecx + 0xc], 0xa
mov ecx, dword [esp + 0xa0]
mov edi, dword [0x1035648c]
mov dword [esp + 0x34], edx
mov edx, esi
jmp 0x10172e40
cmp dword [esp + 0x40], 0
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0xd0]
jne 0x101730df
lea ecx, [esp + 0x38]
lea edx, [esp + 0x48]
call fcn.1016ffb0
mov esi, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
and edi, ebx
mov dword [esp + 0xc], ebx
movdqu xmm0, xmmword [esi + edi]
mov eax, edi
mov edi, dword [0x1035648c]
pmovmskb ecx, xmm0
test ecx, ecx
jne 0x10173114
mov edx, 0x10
nop
add eax, edx
add edx, 0x10
and eax, ebx
movdqu xmm0, xmmword [esi + eax]
pmovmskb ecx, xmm0
test ecx, ecx
je 0x10173100
tzcnt ecx, ecx
mov ebx, dword [esp + 0x1c]
add ecx, eax
and ecx, dword [esp + 0xc]
movzx eax, byte [esi + ecx]
test al, al
js 0x1017313a
movdqa xmm0, xmmword [esi]
pmovmskb eax, xmm0
tzcnt ecx, eax
movzx eax, byte [esi + ecx]
mov edx, dword [esp + 0xb0]
mov byte [esp + 0x10], al
lea eax, [ecx - 0x10]
and eax, dword [esp + 0xc]
mov byte [esi + ecx], dl
mov edx, dword [esp + 0xb0]
shl ecx, 4
mov byte [eax + esi + 0x10], dl
movzx eax, byte [esp + 0x10]
mov edx, dword [esp + 0x14]
and al, 1
movzx eax, al
sub dword [esp + 0x40], eax
mov eax, esi
sub eax, ecx
neg ecx
mov dword [esi + ecx - 0x10], edx
mov dword [eax - 0xc], 0xa
mov dword [eax - 8], 0xa
mov dword [eax - 4], 0
inc dword [esp + 0x44]
jmp 0x1017304d
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov esi, eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x84], edx
mov dword [esp + 0x60], edx
mov dword [esp + 0x88], ecx
shl esi, 4
add esi, ecx
test eax, eax
mov dword [esp + 0x94], esi
mov dword [esp + 0x68], esi
je 0x10173977
mov eax, dword [ebp + 8]
add eax, 0x10
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x88]
jmp 0x10173212
test esi, esi
je 0x10173201
push dword [esp + 0x18]
push 0
push dword [edi]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x94]
je 0x10173fb7
mov edx, dword [eax + 4]
lea ecx, [eax + 0x10]
test edx, edx
mov dword [esp + 0x18], edx
je 0x10173977
mov edx, dword [eax]
mov esi, dword [eax + 8]
cmp dword [esp + 0x44], 0
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x28], esi
je 0x10173390
mov esi, dword [eax + 0xc]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
push esi
push dword [esp + 0x1c]
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.1016c3b0
mov edx, esi
add esp, 0x10
mov esi, eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xb0], 0
mov dword [esp + 0xc], eax
mov eax, esi
mov dword [esp + 0xd0], ecx
shr eax, 0x19
movd xmm0, eax
lea eax, [ecx - 0x10]
punpcklbw xmm0, xmm0
mov dword [esp + 0x14], eax
lea eax, [edx + edx]
pshuflw xmm0, xmm0, 0
mov dword [esp + 0x70], eax
pshufd xmm0, xmm0, 0
movdqa xmmword [esp + 0xa0], xmm0
and esi, dword [esp + 0xc]
movdqa xmm0, xmmword [esp + 0xa0]
movdqu xmm1, xmmword [ecx + esi]
mov dword [esp + 0x10], esi
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0xc0], xmm1
pmovmskb ebx, xmm0
test ebx, ebx
jne 0x1017332c
movdqa xmm1, xmmword [esp + 0xc0]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x101736a6
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xd0]
lea esi, [esi + eax + 0x10]
add eax, 0x10
mov dword [esp + 0xb0], eax
jmp 0x101732b0
lea eax, [ebx - 1]
and eax, ebx
test ax, ax
mov ebx, eax
je 0x101732db
tzcnt edi, ebx
mov eax, dword [esp + 0x14]
add edi, esi
and edi, dword [esp + 0xc]
mov ecx, edi
shl ecx, 4
sub eax, ecx
cmp dword [eax + 8], edx
jne 0x10173320
push dword [esp + 0x70]
push dword [eax]
push dword [esp + 0x20]
mov esi, edx
call sub.msvcrt.dll_memcmp
mov edx, esi
mov esi, dword [esp + 0x1c]
add esp, 0xc
test eax, eax
jne 0x10173320
mov ecx, dword [esp + 0xd0]
neg edi
shl edi, 4
add ecx, edi
mov edi, dword [0x1035648c]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x28]
lea eax, [ecx - 0x10]
test ecx, ecx
cmove eax, ecx
jmp 0x10173392
xor eax, eax
lea ecx, [eax + 0xc]
test eax, eax
mov edx, 0x1034d724
cmove ecx, edx
cmp dword [ecx], 1
jg 0x101731f0
imul eax, dword [esp + 0x20], 0x548
lea ecx, [ebx + eax]
mov dword [esp + 0x20], eax
mov dword [esp + 0x6c], ecx
lea ecx, [ebx + eax + 0x1c]
xor eax, eax
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp word [ecx + eax*2], 0
je 0x101733f0
inc eax
cmp eax, 0x101
jne 0x101733d0
mov eax, 0x101
jmp 0x101733fb
cmp eax, 0x102
jae 0x10174042
push eax
push ecx
lea eax, [esp + 0xf4]
push eax
call fcn.1001b610
add esp, 0xc
mov eax, dword [esp + 0xec]
test eax, eax
je 0x101731f0
mov ecx, dword [esp + 0xf0]
mov esi, dword [ebp + 8]
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x90], ecx
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov dword [esp + 0x14], edi
push edi
mov dword [esp + 0x14], eax
push eax
push dword [esi + 0x1c]
push dword [esi + 0x18]
call fcn.1016c6c0
add esp, 0x10
mov ecx, eax
mov edi, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 0xb0], 0
mov dword [esp + 0x8c], eax
shr ecx, 0x19
movd xmm0, ecx
mov dword [esp + 0x118], ecx
mov ecx, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
lea esi, [edi - 0x80]
mov dword [esp + 0xa0], edi
pshufd xmm0, xmm0, 0
mov dword [esp + 0x70], esi
movdqa xmmword [esp + 0xd0], xmm0
and ecx, edx
movdqa xmm0, xmmword [esp + 0xd0]
movdqu xmm1, xmmword [edi + ecx]
mov dword [esp + 0xc], ecx
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0xc0], xmm1
pmovmskb ebx, xmm0
test ebx, ebx
jne 0x10173520
movdqa xmm1, xmmword [esp + 0xc0]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x101736ad
mov eax, dword [esp + 0xb0]
mov edi, dword [esp + 0xa0]
lea ecx, [ecx + eax + 0x10]
add eax, 0x10
mov dword [esp + 0xb0], eax
jmp 0x101734a0
mov ecx, dword [esp + 0xc]
lea eax, [ebx - 1]
and eax, ebx
test ax, ax
mov ebx, eax
je 0x101734c9
tzcnt edi, ebx
mov eax, esi
add edi, ecx
and edi, edx
mov ecx, edi
shl ecx, 7
sub eax, ecx
mov ecx, dword [esp + 0x14]
cmp ecx, dword [eax + 8]
jne 0x10173510
push ecx
push dword [esp + 0x14]
push dword [eax]
mov esi, edx
call sub.msvcrt.dll_memcmp
mov edx, esi
mov esi, dword [esp + 0x7c]
add esp, 0xc
test eax, eax
jne 0x10173510
mov eax, dword [esp + 0xa0]
neg edi
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
shl edi, 7
mov edx, dword [eax + edi - 0x68]
mov ecx, dword [eax + edi - 0x64]
mov dword [eax + edi - 0x5c], ecx
mov dword [eax + edi - 0x60], edx
mov edx, dword [ebx + esi + 0x504]
mov ecx, dword [ebx + esi + 0x500]
mov dword [eax + edi - 0x68], ecx
mov dword [eax + edi - 0x64], edx
mov edx, dword [eax + edi - 0x54]
mov ecx, dword [eax + edi - 0x58]
mov dword [eax + edi - 0x4c], edx
mov dword [eax + edi - 0x50], ecx
mov edx, 0xffffffff
movsd xmm0, qword [ebx + esi + 0x4b8]
movsd qword [eax + edi - 0x58], xmm0
movsd xmm0, qword [eax + edi - 0x48]
movsd qword [eax + edi - 0x40], xmm0
mov ecx, dword [ebx + esi + 0x4c0]
add ecx, dword [ebx + esi + 0x4c8]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebx + esi + 0x4c4]
adc ecx, dword [ebx + esi + 0x4cc]
cmovb ecx, edx
mov edx, dword [esp + 0xc]
mov dword [eax + edi - 0x44], ecx
mov ecx, 0xffffffff
cmovb edx, ecx
mov dword [eax + edi - 0x48], edx
mov edx, 0xffffffff
movsd xmm0, qword [eax + edi - 0x38]
movsd qword [eax + edi - 0x30], xmm0
mov ecx, dword [ebx + esi + 0x508]
add ecx, dword [ebx + esi + 0x510]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebx + esi + 0x50c]
adc ecx, dword [ebx + esi + 0x514]
cmovb ecx, edx
mov edx, dword [esp + 0xc]
mov dword [eax + edi - 0x34], ecx
mov ecx, 0xffffffff
cmovb edx, ecx
cmp dword [esp + 0x90], 0
mov dword [eax + edi - 0x38], edx
movsd xmm0, qword [eax + edi - 0x28]
movsd qword [eax + edi - 0x20], xmm0
movsd xmm0, qword [ebx + esi + 0x4d8]
movsd qword [eax + edi - 0x28], xmm0
movsd xmm0, qword [eax + edi - 0x18]
movsd qword [eax + edi - 0x10], xmm0
movq xmm0, qword [ebx + esi + 0x520]
movq qword [eax + edi - 0x18], xmm0
mov byte [eax + edi - 2], 1
mov edi, dword [0x1035648c]
je 0x10173696
push dword [esp + 0x10]
push 0
push dword [edi]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x28], 0
jne 0x101731f4
jmp 0x10173201
xor ecx, ecx
jmp 0x10173372
mov esi, dword [ebp + 8]
mov edi, dword [esp + 0x1c]
cmp dword [esi + 8], 0
jne 0x101736d4
mov edx, dword [esp + 0x114]
mov ecx, esi
call fcn.1016f9c0
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0x20]
mov ebx, 0xffffffff
mov dword [esp + 0xc], edx
mov ecx, dword [edi + esi + 0x4c0]
mov eax, dword [edi + esi + 0x4c4]
add ecx, dword [edi + esi + 0x4c8]
adc eax, dword [edi + esi + 0x4cc]
cmovb ecx, ebx
cmovb eax, ebx
mov dword [esp + 0xc0], ecx
mov ecx, dword [edi + esi + 0x508]
mov dword [esp + 0x70], eax
mov eax, dword [edi + esi + 0x50c]
add ecx, dword [edi + esi + 0x510]
adc eax, dword [edi + esi + 0x514]
mov esi, 0xffffffff
cmovb ecx, esi
cmovb eax, esi
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xb0], eax
and ecx, edx
mov edx, dword [esp + 0xa0]
mov eax, ecx
movdqu xmm0, xmmword [edx + ecx]
pmovmskb esi, xmm0
test esi, esi
je 0x10173768
mov edi, dword [esp + 0x6c]
jmp 0x10173794
mov edi, dword [esp + 0x6c]
mov ebx, dword [esp + 0xc]
mov ecx, 0x10
nop word cs:[eax + eax]
nop
add eax, ecx
add ecx, 0x10
and eax, ebx
movdqu xmm0, xmmword [edx + eax]
pmovmskb esi, xmm0
test esi, esi
je 0x10173780
mov ecx, dword [edi]
tzcnt ebx, esi
mov esi, dword [esp + 0x20]
add ebx, eax
and ebx, dword [esp + 0xc]
mov dword [esp + 0x10c], ecx
mov ecx, dword [edi + 4]
mov dword [esp + 0x108], ecx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + esi + 0x504]
mov edi, dword [ecx + esi + 0x524]
mov dword [esp + 0xfc], eax
mov eax, dword [ecx + esi + 0x500]
mov dword [esp + 0x6c], edi
mov dword [esp + 0xf8], eax
mov eax, dword [ecx + esi + 0x4b8]
mov dword [esp + 0x100], eax
mov eax, dword [ecx + esi + 0x4bc]
mov dword [esp + 0x104], eax
mov eax, dword [ecx + esi + 0x4dc]
mov dword [esp + 0x8c], eax
mov eax, dword [ecx + esi + 0x4d8]
mov esi, dword [ecx + esi + 0x520]
movzx ecx, byte [edx + ebx]
test cl, cl
mov dword [esp + 0x110], eax
mov dword [esp + 0x20], esi
js 0x1017383b
movdqa xmm0, xmmword [edx]
pmovmskb ecx, xmm0
tzcnt ebx, ecx
movzx ecx, byte [edx + ebx]
lea edi, [ebx - 0x10]
mov eax, dword [esp + 0x118]
mov esi, dword [ebp + 8]
and cl, 1
movd xmm0, dword [esp + 0xf8]
movd xmm3, dword [esp + 0xfc]
movd xmm1, dword [esp + 0x100]
movd xmm4, dword [esp + 0x104]
movd xmm2, dword [esp + 0xc0]
movd xmm5, dword [esp + 0x70]
movd xmm6, dword [esp + 0xd0]
movd xmm7, dword [esp + 0xb0]
and edi, dword [esp + 0xc]
movzx ecx, cl
mov byte [edx + ebx], al
shl ebx, 7
punpckldq xmm0, xmm3
punpckldq xmm1, xmm4
movd xmm3, dword [esp + 0x110]
movd xmm4, dword [esp + 0x20]
punpckldq xmm2, xmm5
punpckldq xmm6, xmm7
mov byte [edi + edx + 0x10], al
sub dword [esi + 8], ecx
mov ecx, dword [esp + 0x10]
mov edi, edx
mov eax, dword [esp + 0x108]
pshufd xmm0, xmm0, 0x44
pshufd xmm1, xmm1, 0x44
pshufd xmm2, xmm2, 0x44
sub edi, ebx
neg ebx
mov dword [edx + ebx - 0x80], ecx
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x1c]
mov dword [edi - 0x7c], ecx
mov ecx, dword [esp + 0x14]
mov dword [edi - 0x78], ecx
mov ecx, dword [esp + 0x10c]
mov dword [edi - 0x6c], eax
mov dword [edi - 0x70], ecx
movdqu xmmword [edi - 0x68], xmm0
movdqu xmmword [edi - 0x58], xmm1
movd xmm0, dword [esp + 0x8c]
movd xmm1, dword [esp + 0x6c]
movdqu xmmword [edi - 0x48], xmm2
pshufd xmm2, xmm6, 0x44
movdqu xmmword [edi - 0x38], xmm2
punpckldq xmm3, xmm0
punpckldq xmm4, xmm1
pshufd xmm0, xmm3, 0x44
pshufd xmm1, xmm4, 0x44
movdqu xmmword [edi - 0x28], xmm0
movdqu xmmword [edi - 0x18], xmm1
mov dword [edi - 8], 0
mov word [edi - 4], 0
mov byte [edi - 2], 1
inc dword [esi + 0xc]
mov edi, dword [0x1035648c]
cmp dword [esp + 0x28], 0
jne 0x101731f4
jmp 0x10173201
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x64], ecx
sub ebx, ecx
je 0x101739ad
shr ebx, 4
add ecx, 8
jmp 0x10173996
add ecx, 0x10
dec ebx
je 0x101739ad
cmp dword [ecx], 0
je 0x10173990
push dword [ecx - 4]
push 0
push dword [edi]
mov esi, ecx
call sub.KERNEL32.dll_HeapFree
mov ecx, esi
jmp 0x10173990
mov eax, dword [esp + 0x84]
mov esi, dword [ebp + 8]
test eax, eax
jne 0x101739ea
jmp 0x101739ff
xor eax, eax
mov ecx, 4
mov dword [esp + 0x5c], 4
mov dword [esp + 0x60], 0
mov dword [esp + 0x88], 4
mov esi, dword [ebp + 8]
mov dword [esp + 0x64], ecx
test eax, eax
je 0x101739ff
mov eax, dword [0x1035648c]
push dword [esp + 0x88]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
push dword [esp + 0x98]
call sub.iphlpapi.dll_FreeMibTable
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x10173acb
mov edx, dword [esp + 0x44]
test edx, edx
je 0x10173aa8
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], ecx
movdqa xmm0, xmmword [esi]
lea edi, [esi + 0x10]
mov dword [esp + 0x10], esi
pmovmskb eax, xmm0
not eax
jmp 0x10173a46
test edx, edx
mov eax, ebx
je 0x10173a9b
test ax, ax
jne 0x10173a69
nop dword [eax + eax]
movdqa xmm0, xmmword [edi]
add esi, 0xffffff00
add edi, 0x10
pmovmskb eax, xmm0
cmp ax, 0xffff
je 0x10173a50
not eax
lea ebx, [eax - 1]
tzcnt ecx, eax
dec edx
and ebx, eax
shl ecx, 4
mov eax, esi
sub eax, ecx
cmp dword [eax - 0xc], 0
je 0x10173a40
push dword [eax - 0x10]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
mov dword [esp + 0x18], edx
call sub.KERNEL32.dll_HeapFree
mov edx, dword [esp + 0xc]
jmp 0x10173a40
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
jmp 0x10173aac
mov edx, dword [esp + 0x38]
mov eax, ecx
shl eax, 4
add ecx, eax
cmp ecx, 0xffffffdf
je 0x10173acb
sub edx, eax
mov eax, dword [0x1035648c]
push dword [edx - 0x14]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov edx, dword [esi + 0xc]
test edx, edx
je 0x10173c61
mov eax, dword [ebp + 8]
pcmpeqd xmm1, xmm1
mov dword [esp + 0x18], edx
mov esi, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
movdqa xmm0, xmmword [esi]
lea ebx, [esi + 0x10]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 0xc], esi
pmovmskb edi, xmm0
not edi
jmp 0x10173b31
push dword [eax - 0x80]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov edx, dword [esp + 0x70]
pcmpeqd xmm1, xmm1
test edx, edx
je 0x10173c61
test di, di
jne 0x10173b59
nop word cs:[eax + eax]
movdqa xmm0, xmmword [ebx]
add esi, 0xfffff800
add ebx, 0x10
pmovmskb edi, xmm0
cmp di, 0xffff
je 0x10173b40
not edi
mov eax, edi
dec edx
lea edi, [eax - 1]
tzcnt ecx, eax
and edi, eax
shl ecx, 7
mov eax, esi
sub eax, ecx
cmp byte [eax - 2], 0
jne 0x10173b29
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], edx
sub ecx, eax
sar ecx, 7
mov edx, ecx
mov dword [esp + 0x14], ecx
add ecx, 0xfffffff0
mov edx, dword [esp + 0xc]
and ecx, dword [esp + 0xd0]
movdqu xmm0, xmmword [edx + ecx]
mov dword [esp + 0xc0], ecx
pcmpeqb xmm0, xmm1
psllw xmm0, 7
pmovmskb edx, xmm0
test edx, edx
je 0x10173bb9
bsr cx, dx
xor ecx, 0xf
jmp 0x10173bbd
mov cx, 0x10
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb0], eax
movdqu xmm0, xmmword [ecx + edx]
mov edx, dword [esp + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb ecx, xmm0
or ecx, 0x10000
tzcnt ecx, ecx
add edx, ecx
cmp dx, 0xf
jbe 0x10173bfa
mov byte [esp + 0x10], pe_nt_image_headers32
jmp 0x10173c14
mov edx, dword [esp + 0xa0]
mov ecx, dword [ebp + 8]
mov byte [esp + 0x10], 0xff
inc edx
mov dword [esp + 0xa0], edx
mov dword [ecx + 8], edx
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x10]
mov eax, dword [esp + 0xc]
mov byte [eax + ecx], dl
mov ecx, dword [esp + 0xc0]
movzx edx, byte [esp + 0x10]
mov eax, dword [esp + 0xc]
mov byte [ecx + eax + 0x10], dl
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
dec eax
mov dword [esp + 0x18], eax
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0xb0]
cmp dword [eax - 0x7c], 0
jne 0x10173b10
mov edx, dword [esp + 0x70]
jmp 0x10173b29
mov dword [esp + 0x9c], 0x3c00
push 0x3c00
call sub.msvcrt.dll_malloc
add esp, 4
test eax, eax
je 0x10173f35
mov esi, eax
lea edi, [esp + 0x9c]
push edi
push eax
push 0
push 0xe
push 0
call sub.iphlpapi.dll_GetAdaptersAddresses
test eax, eax
mov dword [esp + 0x2c], eax
je 0x10173faa
cmp eax, 0x6f
jne 0x10173d23
push esi
call sub.msvcrt.dll_free
add esp, 4
push dword [esp + 0x9c]
call sub.msvcrt.dll_malloc
add esp, 4
test eax, eax
je 0x10173f35
mov esi, eax
push edi
push eax
push 0
push 0xe
push 0
call sub.iphlpapi.dll_GetAdaptersAddresses
test eax, eax
mov dword [esp + 0x2c], eax
je 0x10173faa
cmp eax, 0x6f
jne 0x10173d23
push esi
call sub.msvcrt.dll_free
add esp, 4
push dword [esp + 0x9c]
call sub.msvcrt.dll_malloc
add esp, 4
test eax, eax
je 0x10173f35
mov esi, eax
push edi
push eax
push 0
push 0xe
push 0
call sub.iphlpapi.dll_GetAdaptersAddresses
test eax, eax
mov dword [esp + 0x2c], eax
je 0x10173faa
push esi
call sub.msvcrt.dll_free
add esp, 4
lea eax, [esp + 0x2c]
mov dword [esp + 0x38], 0x1034db70
mov dword [esp + 0x3c], 1
mov dword [esp + 0x48], 0
mov dword [esp + 0xec], eax
lea eax, [esp + 0xec]
mov dword [esp + 0xf0], 0x1002d590
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 1
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5c]
push eax
push ecx
call fcn.1001ac00
add esp, 8
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
mov esi, dword [esp + 0x64]
test edi, edi
jne 0x10173f8e
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x60], esi
cmp dword [eax + 0xc], 0
je 0x10173fd9
mov esi, dword [eax + 0x14]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [eax + 0x10]
mov dword [esp + 0x24], esi
mov esi, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
mov dword [esp + 0xa0], ecx
add ecx, 0xffffff80
mov dword [esp + 0xc], edx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x20], eax
nop dword [eax + eax]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.10178890
add esp, 8
mov eax, dword [esp + 0x38]
test eax, eax
je 0x10174015
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
push esi
mov dword [esp + 0x14], eax
push eax
push dword [esp + 0x30]
push dword [esp + 0x2c]
call fcn.1016c6c0
add esp, 0x10
mov ecx, eax
shr eax, 0x19
mov dword [esp + 0xc0], 0
mov dword [esp + 0x18], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
movdqa xmmword [esp + 0xb0], xmm0
and ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
movdqa xmm0, xmmword [esp + 0xb0]
movdqu xmm1, xmmword [eax + ecx]
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0x70], xmm1
pmovmskb edi, xmm0
test edi, edi
jne 0x10173ecc
movdqa xmm1, xmmword [esp + 0x70]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x10173f10
mov eax, dword [esp + 0xc0]
lea ecx, [ecx + eax + 0x10]
add eax, 0x10
mov dword [esp + 0xc0], eax
jmp 0x10173e5a
lea eax, [edi - 1]
and eax, edi
test ax, ax
mov edi, eax
je 0x10173e85
tzcnt eax, edi
mov ebx, dword [esp + 0x14]
add eax, ecx
and eax, dword [esp + 0xc]
shl eax, 7
sub ebx, eax
cmp dword [ebx + 8], esi
jne 0x10173ec0
push esi
push dword [ebx]
push dword [esp + 0x18]
mov esi, ecx
call sub.msvcrt.dll_memcmp
mov ecx, esi
mov esi, dword [esp + 0x24]
add esp, 0xc
test eax, eax
jne 0x10173ec0
lea ecx, [esp + 0x44]
movzx eax, word [ecx + 4]
mov word [ebx + 0x7c], ax
mov eax, dword [ecx]
mov dword [ebx + 0x78], eax
cmp dword [esp + 0xd0], 0
je 0x10173de0
push dword [esp + 0x10]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x10173de0
mov eax, dword [0x103564a0]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x10173f58
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1017407f
mov dword [esi], eax
push 0x32
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1017407f
mov edi, eax
push 0x32
push str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code_H
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov esi, 0x32
mov eax, 0x32
test edi, edi
je 0x10173d93
test eax, eax
je 0x10172d2b
mov eax, dword [0x1035648c]
push edi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x10172d2b
xor edi, edi
mov eax, esi
test edi, edi
jne 0x10173f8e
jmp 0x10173d93
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov esi, dword [ebp + 8]
mov dword [esp + 0x64], ecx
test eax, eax
jne 0x101739ea
jmp 0x101739ff
mov ebx, dword [0x1035648c]
lea esi, [esp + 0x5c]
lea edi, [esp + 0x38]
nop word [eax + eax]
push esi
push edi
call fcn.10178890
add esp, 8
mov eax, dword [esp + 0x38]
test eax, eax
je 0x10174015
cmp dword [esp + 0x3c], 0
je 0x10173ff0
push eax
push 0
push dword [ebx]
call sub.KERNEL32.dll_HeapFree
jmp 0x10173ff0
push dword [esp + 0x5c]
call sub.msvcrt.dll_free
add esp, 4
jmp 0x10172d2b
push 0x14
push 2
call fcn.1001a7e0
add esp, 8
jmp 0x1017408b
push 0x14
push 2
call fcn.1001a7e0
add esp, 8
jmp 0x1017408b
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x64], ecx
push 0x1034d90c
push 0x101
push eax
call fcn.1002a190
add esp, 0xc
jmp 0x1017408b
lea eax, [esp + 0x38]
push 0x1034d204
push 0x1034d458
push eax
push 0x46
push 0x1034d16c
call fcn.10026bb0
add esp, 0x14
ud2
push 0x32
push 1
call fcn.1001a7e0
add esp, 8
ud2