Function at 0x140072e30
Capabilities:
Get local ipv4 addresses

Disassembly:
push rbx
push rbp
push rdi
push r12
push r13
push r15
sub rsp, 0x78
mov rax, qword [0x140164030]
xor rax, rsp
mov qword [rsp + 0x60], rax
lea rdi, [rcx + 0xe18]
mov qword [rsp + 0x50], rdx
mov rbp, rcx
mov qword [rsp + 0x40], rdi
mov rcx, rdi
xor r12b, r12b
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
xor r15d, r15d
mov qword [rsp + 0xc0], rsi
mov r13, rax
mov dword [rsp + 0x58], r15d
xor ebx, ebx
mov qword [rsp + 0x70], r14
nop dword [rax]
lea rax, [rsp + 0x58]
mov r9, r15
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8e
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
cmp eax, 0x6f
jne 0x140072f1e
test r15, r15
je 0x140072ec4
mov edx, 0x1c0
mov rcx, r15
call fcn.1400c2470
mov ecx, dword [rsp + 0x58]
call fcn.1400c26fc
inc ebx
mov r15, rax
cmp ebx, 5
jb 0x140072e90
test r15, r15
je 0x140072ee9
mov edx, 0x1c0
mov rcx, r15
call fcn.1400c2470
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov r14, qword [rsp + 0x70]
movzx eax, r12b
mov rsi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400c2450
add rsp, 0x78
pop r15
pop r13
pop r12
pop rdi
pop rbp
pop rbx
ret
test eax, eax
jne 0x140072ed7
test r15, r15
je 0x140072ee9
mov rbx, r15
nop word [rax + rax]
cmp dword [rbx + 0x68], 1
jne 0x1400732b2
mov rax, qword [rbx + 0x18]
xor edi, edi
xor r14d, r14d
mov dword [rsp + 0x5c], edi
test rax, rax
je 0x140072f6a
nop dword [rax]
mov rcx, qword [rax + 0x10]
cmp word [rcx], 2
jne 0x140072f5d
mov edi, dword [rcx + 4]
mov rax, qword [rax + 8]
test rax, rax
jne 0x140072f50
mov dword [rsp + 0x5c], edi
mov rax, qword [rbx + 0xd0]
test rax, rax
je 0x140072f8f
mov rcx, qword [rax + 0x10]
cmp word [rcx], 2
jne 0x140072f84
mov r14d, dword [rcx + 4]
mov rax, qword [rax + 8]
test rax, rax
jne 0x140072f76
jmp 0x140072fbb
mov rcx, qword [rbx + 0x40]
lea rdx, str.Microsoft_Wi_Fi_Direct_Virtual_Adapter
call fcn.1400c476c
test rax, rax
je 0x140072fae
cmp word [rbx + 0xe6], 0x47
je 0x140072fb8
cmp word [rbx + 0xe6], 6
jne 0x140072fbb
mov r14d, edi
test edi, edi
je 0x1400732b2
test r14d, r14d
je 0x1400732b2
cmp dil, r14b
jne 0x1400732b2
mov eax, r14d
shr eax, 8
cmp byte [rsp + 0x5d], al
jne 0x1400732b2
mov r9, qword [rbp + 0xf90]
xor esi, esi
xor edx, edx
mov r10, qword [r9]
mov r8, qword [r9 + 8]
sub r8, r10
sar r8, 3
test r8, r8
je 0x1400731dc
cmp r8, rdx
jbe 0x1400733b2
lfence
mov rax, qword [r10 + rdx*8]
mov rcx, qword [rax]
cmp qword [rbx + 0xe0], rcx
je 0x140073040
mov rcx, qword [r9 + 8]
inc esi
sub rcx, qword [r9]
inc rdx
sar rcx, 3
movsxd rax, esi
cmp rax, rcx
jb 0x140073007
jmp 0x1400731dc
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
mov rax, qword [rbx + 0xc0]
mov qword [rcx + 0x18], rax
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
mov rax, qword [rbx + 0xb8]
mov qword [rcx + 0x10], rax
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
mov qword [rcx + 0x20], r13
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
cmp edi, dword [rcx + 8]
jne 0x140073122
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
cmp r14d, dword [rcx + 0xc]
je 0x1400731dc
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdx*8]
mov dword [rcx + 8], edi
mov rcx, qword [rbp + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov rax, qword [rcx]
mov r12b, 1
mov rcx, qword [rax + rdx*8]
mov dword [rcx + 0xc], r14d
cmp byte [rbp + 0x208], 0
je 0x1400731dc
mov rcx, qword [rbp + 0xf90]
mov r8, qword [rcx]
mov rax, qword [rcx + 8]
sub rax, r8
sar rax, 3
cmp rax, rdx
jbe 0x1400733b2
lfence
mov r8, qword [r8 + rdx*8]
mov rax, qword [rcx]
lea rcx, str._AsusSync_MdnsMgr__IsNetworkInterfacesChanged___Connected_and_Update_Type:_lld__NetLuid:_llX__IP:_08X__Gateway:_08X__Tx:_I64u__Rx:_I64u_n
mov r9d, dword [r8 + 8]
mov rax, qword [rax + rdx*8]
movzx edx, word [rax + 6]
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [r8 + 0x10]
mov qword [rsp + 0x28], rax
mov eax, dword [r8 + 0xc]
mov r8, qword [r8]
mov dword [rsp + 0x20], eax
call fcn.140095ab0
mov rax, qword [rbp + 0xf90]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
movsxd rax, esi
cmp rax, rcx
jne 0x1400732b2
movzx eax, word [rbx + 0xe6]
cmp ax, 6
je 0x140073211
cmp ax, 0x47
jne 0x1400732b2
mov ecx, 0x28
call fcn.1400c2704
mov rsi, rax
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0xe0]
mov qword [rsi], rax
mov dword [rsi + 8], edi
mov dword [rsi + 0xc], r14d
mov rax, qword [rbx + 0xc0]
mov qword [rsi + 0x18], rax
mov rax, qword [rbx + 0xb8]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x20], r13
mov rcx, qword [rbp + 0xf90]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140073269
mov qword [rdx], rsi
add qword [rcx + 8], 8
jmp 0x140073273
lea r8, [rsp + 0x48]
call fcn.14000a170
cmp byte [rbp + 0x208], 0
mov r12b, 1
je 0x1400732b2
mov rax, qword [rsi + 0x18]
lea rcx, str._AsusSync_MdnsMgr__IsNetworkInterfacesChanged___Connected_Type:_lld__NetLuid:_llX__IP:_08X__Gateway:_08X__Tx:_I64u__Rx:_I64u_n
mov r8, qword [rsi]
mov r9d, dword [rsi + 8]
mov rdx, r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 0xc]
shr rdx, 0x30
mov dword [rsp + 0x20], eax
call fcn.140095ab0
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x140072f30
mov rax, qword [rbp + 0xf90]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
sub ecx, 1
js 0x140073386
nop word [rax + rax]
mov rdx, qword [rbp + 0xf90]
movsxd r8, ecx
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, r8
jbe 0x1400733b2
lfence
mov rax, qword [rdx]
lea rsi, [r8*8]
mov rdi, qword [rsi + rax]
test rdi, rdi
je 0x14007337d
cmp qword [rdi + 0x20], r13
je 0x14007337d
cmp byte [rbp + 0x208], 0
je 0x14007333a
mov r8, qword [rdi]
lea rcx, str._AsusSync_MdnsMgr__IsNetworkInterfacesChanged___Disconnected_Type:_llX__NetLuid:_llX_n
mov rdx, r8
shr rdx, 0x30
call fcn.140095ab0
mov rbx, qword [rbp + 0xf90]
mov rcx, qword [rbx]
mov r8, qword [rbx + 8]
add rcx, rsi
lea rdx, [rcx + 8]
sub r8, rdx
call fcn.1400c4a50
add qword [rbx + 8], 0xfffffffffffffff8
mov edx, 0x28
mov rcx, rdi
call fcn.1400c2470
mov rax, qword [rbp + 0xf90]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
dec ecx
sub ecx, 1
jns 0x1400732e0
mov rdx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x40]
test rdx, rdx
je 0x140072edc
mov rax, qword [rbp + 0xf90]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
mov dword [rdx], ecx
jmp 0x140072edc
call fcn.14000a150
int3