Function at 0x6ef300
Capabilities:
Get local ipv4 addresses
Get mac address on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
xor r8d, r8d
mov ebx, 0xe
mov qword [rcx], 0
mov rdi, rcx
mov r13, rdx
mov ecx, 6
mov dword [rdx], 0
xor edx, edx
call fcn.006ee6c0
mov ebp, eax
test eax, eax
je 0x6ef3e0
mov dword [rsp + 0x7c], 0
xor r14d, r14d
lea rsi, [rsp + 0x7c]
mov qword [rsp + 0x20], rsi
mov r9, r14
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
mov r12d, eax
test eax, eax
je 0x6ef445
mov rcx, r14
call fcn.006cb320
cmp r12d, 0xe8
je 0x6ef420
ja 0x6ef3b0
cmp r12d, 0x57
je 0x6ef3d8
cmp r12d, 0x6f
jne 0x6ef410
mov ecx, dword [rsp + 0x7c]
call fcn.006cb300
mov r14, rax
test rax, rax
jne 0x6ef354
mov eax, 0xfffff027
jmp 0x6ef3be
mov eax, 0xfffff008
cmp r12d, 0x4cc
jne 0x6ef410
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 0xfffff024
jmp 0x6ef3be
mov r8d, 1
mov edx, 1
mov ecx, 5
call fcn.006ee6c0
test eax, eax
je 0x6ef8b1
mov ebx, 0x1e
jmp 0x6ef344
mov ecx, r12d
call fcn.006cf860
jmp 0x6ef3be
mov ecx, 1
call fcn.006cb300
test rax, rax
je 0x6ef3a7
mov dword [r13], 0
mov qword [rdi], rax
xor eax, eax
jmp 0x6ef3be
mov rbx, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rsi, r14
xor r15d, r15d
xor r12d, r12d
mov dword [rsp + 0x64], 0
mov qword [rsp + 0x50], 0
test r14, r14
jne 0x6ef479
jmp 0x6ef8bb
mov rsi, qword [rsi + 8]
test rsi, rsi
je 0x6ef4eb
cmp dword [rsi + 0x68], 1
jne 0x6ef470
cmp qword [rsi + 0x18], 0
je 0x6ef470
mov r8, qword [rsi + 0x48]
xor edx, edx
mov qword [rsp + 0x38], 0
mov r9d, 0xffffffff
mov qword [rsp + 0x30], 0
mov ecx, 0xfde9
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rbx
test eax, eax
jle 0x6ef86e
cdqe
add r12, rax
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x6ef470
nop word [rax + rax]
mov rax, qword [rax + 8]
add r15d, 1
add r12, 0x50
test rax, rax
jne 0x6ef4d8
jmp 0x6ef470
mov rcx, r12
mov dword [rsp + 0x64], r15d
mov qword [rsp + 0x50], r12
call fcn.006cb300
mov qword [rsp + 0x58], rax
test rax, rax
je 0x6ef8cc
movsxd rax, dword [rsp + 0x64]
mov r11, qword [rsp + 0x58]
mov qword [rsp + 0x68], r14
mov r12, r14
mov qword [rsp + 0xd8], r13
mov r13d, ebp
lea rax, [rax + rax*4]
mov qword [rsp + 0xd0], rdi
mov rbx, r11
shl rax, 4
add rax, r11
mov r14, rax
jmp 0x6ef556
mov r12, qword [r12 + 8]
test r12, r12
je 0x6ef83a
cmp dword [r12 + 0x68], 1
jne 0x6ef548
cmp qword [r12 + 0x18], 0
je 0x6ef548
mov rax, qword [rsp + 0x58]
add rax, qword [rsp + 0x50]
mov edx, 0x7fffffff
mov r9d, 0xffffffff
sub rax, r14
mov r8, qword [r12 + 0x48]
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
cmp rax, 0x7fffffff
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], 0
cmova rax, rdx
xor edx, edx
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rsp + 0x60], eax
test eax, eax
jle 0x6ef888
mov rbp, qword [r12 + 0x18]
test rbp, rbp
jne 0x6ef67a
jmp 0x6ef7f0
movzx esi, byte [rbp + 0x38]
mov qword [rbx + 8], 0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0
mov qword [rbx + 0x38], 0
mov qword [rbx + 0x40], 0
mov qword [rbx + 0x48], 0
cmp dword [r12 + 0x58], 6
mov qword [rbx], r14
je 0x6ef7d0
xor eax, eax
cmp dword [r12 + 0x64], 0x18
sete al
cmp word [r10], 0x17
mov dword [rbx + 0x10], eax
je 0x6ef770
movdqu xmm0, xmmword [r10]
mov eax, 2
mov word [rbx + 0x30], ax
movups xmmword [rbx + 0x14], xmm0
test esi, esi
jne 0x6ef750
mov dword [rbx + 0x34], esi
mov rbp, qword [rbp + 8]
add rbx, 0x50
test rbp, rbp
je 0x6ef7f0
mov r10, qword [rbp + 0x10]
test r13d, r13d
jne 0x6ef5d8
mov rdx, qword [r12 + 0xb0]
test rdx, rdx
je 0x6ef721
lea rax, [r10 + 4]
movzx edi, word [r10]
xor esi, esi
mov qword [rsp + 0x40], rax
lea rax, [r10 + 8]
mov qword [rsp + 0x48], rax
mov rax, qword [rdx + 0x10]
cmp word [rax], di
jne 0x6ef710
mov r11d, dword [rdx + 0x20]
cmp r11d, esi
jbe 0x6ef710
mov r8, qword [rsp + 0x40]
lea rcx, [rax + 4]
cmp di, 0x17
jne 0x6ef6da
mov r8, qword [rsp + 0x48]
lea rcx, [rax + 8]
mov eax, r11d
sar eax, 3
test eax, eax
jle 0x6ef738
lea r9d, [rax + 1]
mov eax, 1
jmp 0x6ef6fc
movsxd r15, eax
add rax, 1
cmp r9, rax
je 0x6ef740
movzx r15d, byte [rcx + rax - 1]
cmp byte [r8 + rax - 1], r15b
je 0x6ef6f0
nop dword [rax]
mov rdx, qword [rdx + 8]
test rdx, rdx
jne 0x6ef6b0
test esi, esi
jne 0x6ef5dc
cmp word [r10], 0x17
mov esi, pe_nt_image_headers64
mov eax, 0x20
cmovne esi, eax
jmp 0x6ef5dc
xor r15d, r15d
nop dword [rax + rax]
test r11b, 7
jne 0x6ef800
mov esi, r11d
jmp 0x6ef710
mov ecx, 0x20
mov eax, 0xffffffff
sub ecx, esi
shl eax, cl
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htonl]
mov esi, eax
jmp 0x6ef666
movdqu xmm1, xmmword [r10]
mov edx, 0x17
mov edi, esi
lea rcx, [rbx + 0x38]
shr edi, 3
movups xmmword [rbx + 0x14], xmm1
mov rax, qword [r10 + 0x10]
mov r8, rdi
mov qword [rbx + 0x24], rax
mov eax, dword [r10 + 0x18]
mov word [rbx + 0x30], dx
mov edx, 0xff
mov dword [rbx + 0x2c], eax
call sub.msvcrt.dll_memset
and esi, 7
je 0x6ef669
mov ecx, 8
mov eax, 0xff
sub ecx, esi
shl eax, cl
mov byte [rbx + rdi + 0x38], al
jmp 0x6ef669
mov edx, dword [r12 + 0x50]
mov dword [rbx + 8], edx
movzx edx, word [r12 + 0x54]
mov word [rbx + 0xc], dx
jmp 0x6ef633
movsxd rax, dword [rsp + 0x60]
add r14, rax
jmp 0x6ef548
movzx r9d, byte [rcx + r15]
mov ecx, r11d
sar ecx, 0x1f
shr ecx, 0x1d
lea eax, [r11 + rcx]
and eax, 7
sub eax, ecx
mov ecx, 8
sub ecx, eax
mov eax, 0xff
shl eax, cl
movzx ecx, byte [r8 + r15]
and eax, ecx
cmp r9d, eax
je 0x6ef74a
jmp 0x6ef710
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xd8]
mov rcx, r14
call fcn.006cb320
mov rax, qword [rsp + 0x58]
mov qword [rdi], rax
mov eax, dword [rsp + 0x64]
mov dword [r13], eax
xor eax, eax
jmp 0x6ef3be
mov rcx, r14
call fcn.006cb320
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.006cf860
jmp 0x6ef3be
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.006cb320
mov rcx, qword [rsp + 0x58]
call fcn.006cb320
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.006cf860
jmp 0x6ef3be
mov eax, 0xfffff02f
jmp 0x6ef3be
xor ecx, ecx
call fcn.006cb300
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x6ef84f
mov rcx, r14
call fcn.006cb320
jmp 0x6ef3a7