Function at 0x1400b5020
Capabilities:
Get local ipv4 addresses

Disassembly:
push rbx
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
mov rax, qword [0x140263a80]
xor rax, rsp
mov qword [rsp + 0x190], rax
xor r13d, r13d
mov r12d, r8d
mov dword [rsp + 0x30], r13d
mov r14, rdx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
lea r8d, [r13 + 0x1c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
test rax, rax
je 0x1400b5609
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetIpAddrTable]
cmp eax, 0x7a
jne 0x1400b50c0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, ebx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
test rax, rax
je 0x1400b5609
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.IPHLPAPI.DLL_GetIpAddrTable]
test eax, eax
jne 0x1400b55f5
mov qword [rsp + 0x1d0], rbp
mov ebp, r13d
cmp dword [r15], r13d
jbe 0x1400b5274
mov qword [rsp + 0x1e0], rsi
mov qword [rsp + 0x1e8], rdi
nop dword [rax]
xorps xmm1, xmm1
lea r8, [rsp + 0x40]
xor eax, eax
mov r9d, Ordinal_27
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
mov eax, ebp
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x58], xmm1
lea rcx, [rax + rax*2]
lea rsi, [r15 + rcx*8]
lea rdx, [rsi + 4]
lea ecx, [r9 - 0x16]
movups xmmword [rsp + 0x68], xmm1
movups xmmword [rsp + 0x78], xmm1
call qword [sym.imp.WS2_32.dll_inet_ntop]
lea rdx, str.127.0.0.1
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1400b5259
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], Ordinal_32
mov r8d, Ordinal_27
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
mov esi, dword [rsi + 8]
lea rcx, [rsp + 0x90]
xor edx, edx
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x34], r13d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x1400b5259
xor r8d, r8d
lea rax, [rsp + 0x34]
mov r9, rdi
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r8 + 0x10]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
cmp eax, 0x6f
jne 0x1400b5214
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [rsp + 0x34]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, ebx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x1400b5259
xor r8d, r8d
lea rax, [rsp + 0x34]
mov r9, rdi
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r8 + 0x10]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
test eax, eax
jne 0x1400b5245
mov rbx, rdi
cmp dword [rbx + 4], esi
je 0x1400b529a
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1400b5237
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
inc ebp
cmp ebp, dword [r15]
jb 0x1400b5100
mov rdi, qword [rsp + 0x1e8]
mov rsi, qword [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, qword [rsp + 0x1d0]
mov eax, 1
jmp 0x1400b560b
mov rcx, qword [rbx + 0x48]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
cmp rax, 0x80
ja 0x1400b5245
mov rdx, qword [rbx + 0x48]
lea r8, [rax + rax]
lea rcx, [rsp + 0x90]
call sub.VCRUNTIME140.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, r12
test r12d, r12d
je 0x1400b537b
cmp r12, 0x7fffffff
ja 0x1400b5259
mov rcx, r12
mov rax, r14
nop dword [rax]
cmp word [rax], r13w
je 0x1400b5310
add rax, 2
sub rcx, 1
jne 0x1400b5300
test rcx, rcx
je 0x1400b531d
mov rax, r12
sub rax, rcx
jmp 0x1400b5320
mov rax, r13
test rcx, rcx
je 0x1400b537b
mov rdx, r12
lea rcx, [r14 + rax*2]
sub rdx, rax
je 0x1400b5367
sub rax, r12
lea r10, [0x140248ff4]
lea r8, [rax + 0x7ffffffe]
add r8, rdx
sub r10, rcx
test r8, r8
je 0x1400b5367
movzx eax, word [r10 + rcx]
test ax, ax
je 0x1400b5367
mov word [rcx], ax
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400b5348
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
mov rax, r12
jmp 0x1400b5393
mov rax, r12
test r12d, r12d
je 0x1400b5423
cmp rax, 0x7fffffff
ja 0x1400b5259
mov rcx, r14
mov r10, rax
nop dword [rax]
cmp word [rcx], r13w
je 0x1400b53b0
add rcx, 2
sub rax, 1
jne 0x1400b53a0
test rax, rax
je 0x1400b53bd
mov r8, r10
sub r8, rax
jmp 0x1400b53c0
mov r8, r13
test rax, rax
je 0x1400b5423
mov rdx, r10
lea rcx, [r14 + r8*2]
sub rdx, r8
je 0x1400b540f
sub r8, r10
lea r10, [rsp + 0x90]
add r8, 0x7ffffffe
add r8, rdx
sub r10, rcx
nop dword [rax]
test r8, r8
je 0x1400b540f
movzx eax, word [r10 + rcx]
test ax, ax
je 0x1400b540f
mov word [rcx], ax
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400b53f0
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
mov rax, r12
jmp 0x1400b543b
mov rax, r12
test r12d, r12d
je 0x1400b54c3
cmp rax, 0x7fffffff
ja 0x1400b5259
mov rcx, r14
mov r10, rax
cmp word [rcx], r13w
je 0x1400b5451
add rcx, 2
sub rax, 1
jne 0x1400b5441
test rax, rax
je 0x1400b545e
mov r8, r10
sub r8, rax
jmp 0x1400b5461
mov r8, r13
test rax, rax
je 0x1400b54c3
mov rdx, r10
lea rcx, [r14 + r8*2]
sub rdx, r8
je 0x1400b54af
sub r8, r10
lea r10, [0x140248ff8]
add r8, 0x7ffffffe
add r8, rdx
sub r10, rcx
nop dword [rax]
test r8, r8
je 0x1400b54af
movzx eax, word [r10 + rcx]
test ax, ax
je 0x1400b54af
mov word [rcx], ax
dec r8
add rcx, 2
sub rdx, 1
jne 0x1400b5490
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
mov rax, r12
jmp 0x1400b54db
mov rax, r12
test r12d, r12d
je 0x1400b5259
cmp rax, 0x7fffffff
ja 0x1400b5259
mov rcx, r14
mov r10, rax
cmp word [rcx], r13w
je 0x1400b54f1
add rcx, 2
sub rax, 1
jne 0x1400b54e1
test rax, rax
je 0x1400b54fe
mov r8, r10
sub r8, rax
jmp 0x1400b5501
mov r8, r13
test rax, rax
je 0x1400b5559
mov rdx, r10
lea rcx, [r14 + r8*2]
sub rdx, r8
je 0x1400b5548
sub r8, r10
lea r10, [rsp + 0x58]
lea rax, [r8 + 0x7ffffffe]
add rax, rdx
sub r10, rcx
test rax, rax
je 0x1400b5548
movzx r8d, word [r10 + rcx]
test r8w, r8w
je 0x1400b5548
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400b5527
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
jmp 0x1400b556f
test r12d, r12d
je 0x1400b5259
cmp r12, 0x7fffffff
ja 0x1400b5259
mov rax, r14
cmp word [rax], r13w
je 0x1400b5582
add rax, 2
sub r9, 1
jne 0x1400b5572
test r9, r9
je 0x1400b558f
mov rax, r12
sub rax, r9
jmp 0x1400b5592
mov rax, r13
test r9, r9
je 0x1400b5259
mov rdx, r12
lea rcx, [r14 + rax*2]
sub rdx, rax
je 0x1400b55e1
sub rax, r12
lea r9, reloc.WS2_32.dll_ioctlsocket
add rax, 0x7ffffffe
add rax, rdx
sub r9, rcx
nop dword [rax]
test rax, rax
je 0x1400b55e1
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x1400b55e1
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x1400b55c0
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
jmp 0x1400b5259
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1401d0310
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rbx
ret