Function at 0x14001b2d0
Capabilities:
Get local ipv4 addresses
Get mac address on windows

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x558
mov rax, qword [0x140325ed8]
xor rax, rsp
mov qword [rsp + 0x540], rax
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x88], 0
mov dword [rsp + 0x50], 0
mov ecx, 0x2c0
call fcn.14027bb94
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x14001b32d
xor eax, eax
jmp 0x14001bd6f
mov dword [rsp + 0x58], 0x2c0
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
je 0x14001b371
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
cmp dword [rsp + 0x58], 0
jne 0x14001b361
xor eax, eax
jmp 0x14001bd6f
mov eax, dword [rsp + 0x58]
mov ecx, eax
call fcn.14027bb94
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x80], 0
jne 0x14001b399
cmp dword [rsp + 0x58], 0
jne 0x14001b3aa
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
xor eax, eax
jmp 0x14001bd6f
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14001b3db
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
jmp 0x14001b3b4
mov ecx, 0x1c0
call fcn.14027bb94
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x14001b403
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
xor eax, eax
jmp 0x14001bd6f
mov dword [rsp + 0x58], 0x1c0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x78]
xor r8d, r8d
mov edx, 0x90
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
test eax, eax
je 0x14001b468
mov rcx, qword [rsp + 0x78]
call fcn.14027a7c0
cmp dword [rsp + 0x58], 0
jne 0x14001b458
cmp qword [rsp + 0x70], 0
je 0x14001b451
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
xor eax, eax
jmp 0x14001bd6f
mov eax, dword [rsp + 0x58]
mov ecx, eax
call fcn.14027bb94
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x78]
xor r8d, r8d
mov edx, 0x90
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x80], 0
jne 0x14001b49f
cmp dword [rsp + 0x58], 0
jne 0x14001b4ba
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
mov rcx, qword [rsp + 0x78]
call fcn.14027a7c0
xor eax, eax
jmp 0x14001bd6f
mov dword [rsp + 0x54], 0
mov dword [rsp + 0x84], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14001bd35
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x14001b51a
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov ecx, dword [rcx + 0x1a0]
cmp dword [rax + 4], ecx
je 0x14001b51a
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 8]
mov qword [rsp + 0x68], rax
jmp 0x14001b4ed
cmp qword [rsp + 0x68], 0
jne 0x14001b53d
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
mov rcx, qword [rsp + 0x78]
call fcn.14027a7c0
xor eax, eax
jmp 0x14001bd6f
cmp dword [rsp + 0x84], 0
jbe 0x14001b58e
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r8, [0x14032da4c]
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r8, [0x14032da14]
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0x60]
mov r9d, dword [rdx + 0x1a4]
lea r8, str._type_:_d
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xa8], 0xffffffffffffffff
inc qword [rsp + 0xa8]
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xa8]
cmp word [rax + rcx*2], 0
jne 0x14001b645
mov rax, qword [rsp + 0xa8]
test rax, rax
jbe 0x14001b731
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xb0], 0xffffffffffffffff
inc qword [rsp + 0xb0]
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xb0]
cmp word [rax + rcx*2], 0
jne 0x14001b692
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x48]
mov r8d, 0x3ff
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xd0]
call fcn.140281464
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x140]
lea r8, str.__name_:__s_
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xb8], 0xffffffffffffffff
inc qword [rsp + 0xb8]
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xb8]
cmp word [rax + rcx*2], 0
jne 0x14001b74e
mov rax, qword [rsp + 0xb8]
test rax, rax
jbe 0x14001b83a
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x90], 0xffffffffffffffff
inc qword [rsp + 0x90]
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x90]
cmp word [rax + rcx*2], 0
jne 0x14001b79b
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x40]
mov r8d, 0x3ff
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xd0]
call fcn.140281464
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x140]
lea r8, str.__desc_:__s_
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0x194], 6
jne 0x14001b938
mov eax, 1
imul rax, rax, 5
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax + 0x198]
mov ecx, 1
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 0x198]
mov edx, 1
imul rdx, rdx, 3
mov r8, qword [rsp + 0x60]
movzx edx, byte [r8 + rdx + 0x198]
mov r8d, 1
imul r8, r8, 2
mov r9, qword [rsp + 0x60]
movzx r8d, byte [r9 + r8 + 0x198]
mov r9d, 1
imul r9, r9, 1
mov r10, qword [rsp + 0x60]
movzx r9d, byte [r10 + r9 + 0x198]
mov r10d, 1
imul r10, r10, 0
mov r11, qword [rsp + 0x60]
movzx r10d, byte [r11 + r10 + 0x198]
mov r11d, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x578]
sub ebx, r11d
movsxd rbx, ebx
movsxd r11, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x570]
add rdi, r11
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r9d
mov r9d, r10d
lea r8, str.__mac_:__02x_02x_02x_02x_02x_02x_
mov rdx, rbx
mov rcx, rdi
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x98], 0xffffffffffffffff
inc qword [rsp + 0x98]
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x98]
cmp word [rax + rcx*2], 0
jne 0x14001b955
mov rax, qword [rsp + 0x98]
test rax, rax
jbe 0x14001ba41
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0xa0], 0xffffffffffffffff
inc qword [rsp + 0xa0]
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xa0]
cmp word [rax + rcx*2], 0
jne 0x14001b9a2
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x38]
mov r8d, 0x3ff
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xd0]
call fcn.140281464
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x140]
lea r8, str.__dnssuffix_:__s_
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1c0
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x578]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0x50]
mov rbx, qword [rsp + 0x570]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x108], rdx
mov r9, rax
lea r8, str.__v4addr_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x108]
mov rcx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1d0
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x578]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0x50]
mov rbx, qword [rsp + 0x570]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x110], rdx
mov r9, rax
lea r8, str.__v4mask_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x110]
mov rcx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1f0
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x578]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0x50]
mov rbx, qword [rsp + 0x570]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x118], rdx
mov r9, rax
lea r8, str.__v4gateway_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x118]
mov rcx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1c0
lea r8, [rsp + 0xc0]
mov rdx, rax
mov ecx, 2
call fcn.140124780
mov rax, qword [rsp + 0x60]
add rax, 0x1f0
lea r8, [rsp + 0xc4]
mov rdx, rax
mov ecx, 2
call fcn.140124780
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0x128]
mov edx, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0xc4]
call qword [sym.imp.IPHLPAPI.DLL_SendARP]
cmp dword [rsp + 0xc8], 6
jne 0x14001bccc
mov eax, 1
imul rax, rax, 5
movzx eax, byte [rsp + rax + 0x128]
mov ecx, 1
imul rcx, rcx, 4
movzx ecx, byte [rsp + rcx + 0x128]
mov edx, 1
imul rdx, rdx, 3
movzx edx, byte [rsp + rdx + 0x128]
mov ebx, 1
imul rbx, rbx, 2
movzx ebx, byte [rsp + rbx + 0x128]
mov edi, 1
imul rdi, rdi, 1
movzx edi, byte [rsp + rdi + 0x128]
mov r8d, 1
imul r8, r8, 0
movzx r8d, byte [rsp + r8 + 0x128]
mov r9d, dword [rsp + 0x50]
mov r10d, dword [rsp + 0x578]
sub r10d, r9d
mov r9d, r10d
movsxd r9, r9d
mov qword [rsp + 0x120], r9
movsxd r10, dword [rsp + 0x50]
mov r11, qword [rsp + 0x570]
add r11, r10
mov r10, r11
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
mov r9d, r8d
lea r8, str.__gatewaymac_:__02x_02x_02x_02x_02x_02x_
mov rax, qword [rsp + 0x120]
mov rdx, rax
mov rcx, r10
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x578]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x570]
add rdx, rcx
mov rcx, rdx
lea r8, [0x14032d9f4]
mov rdx, rax
call fcn.140001420
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
jmp 0x14001b4d7
mov rcx, qword [rsp + 0x70]
call fcn.14027a7c0
mov rcx, qword [rsp + 0x78]
call fcn.14027a7c0
cmp dword [rsp + 0x54], 0
jge 0x14001bd5d
mov dword [rsp + 0x8c], 0
jmp 0x14001bd68
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x8c], eax
mov eax, dword [rsp + 0x8c]
mov rcx, qword [rsp + 0x540]
xor rcx, rsp
call fcn.14026d940
add rsp, 0x558
pop rdi
pop rbx
ret