Function at 0x14001e330
Capabilities:
Get local ipv4 addresses
Get mac address on windows

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x598
lea rdi, [rsp + 0x50]
mov ecx, 0x152
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x5b0]
mov rax, qword [0x140575740]
xor rax, rsp
mov qword [rsp + 0x588], rax
mov dword [rsp + 0x74], 0
mov dword [rsp + 0x8c], 0
mov dword [rsp + 0xd4], 0
mov r9d, 0x55
lea r8, [0x1404dd180]
mov edx, 1
mov ecx, 0x2c0
call fcn.1403ba980
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x14001e3bb
xor eax, eax
jmp 0x14001ee08
mov dword [rsp + 0x74], 0x2c0
lea rdx, [rsp + 0x74]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
je 0x14001e416
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
cmp dword [rsp + 0x74], 0
jne 0x14001e3f4
xor eax, eax
jmp 0x14001ee08
mov eax, dword [rsp + 0x74]
mov r9d, 0x58
lea r8, [0x1404dd1c0]
mov edx, 1
mov ecx, eax
call fcn.1403ba980
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x74]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [rsp + 0x84], eax
cmp dword [rsp + 0x84], 0
jne 0x14001e43e
cmp dword [rsp + 0x74], 0
jne 0x14001e454
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
xor eax, eax
jmp 0x14001ee08
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14001e485
mov eax, dword [rsp + 0x8c]
inc eax
mov dword [rsp + 0x8c], eax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
jmp 0x14001e45e
mov r9d, 0x62
lea r8, [0x1404dd200]
mov edx, 1
mov ecx, 0x1c0
call fcn.1403ba980
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x14001e4c4
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
xor eax, eax
jmp 0x14001ee08
mov dword [rsp + 0x74], 0x1c0
lea rax, [rsp + 0x74]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x58]
xor r8d, r8d
mov edx, 0x90
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
test eax, eax
je 0x14001e546
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.1403ba8b0
cmp dword [rsp + 0x74], 0
jne 0x14001e524
cmp qword [rsp + 0x50], 0
je 0x14001e51d
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
xor eax, eax
jmp 0x14001ee08
mov eax, dword [rsp + 0x74]
mov r9d, WSASetLastError
lea r8, [0x1404dd240]
mov edx, 1
mov ecx, eax
call fcn.1403ba980
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x58]
xor r8d, r8d
mov edx, 0x90
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
mov dword [rsp + 0x84], eax
cmp dword [rsp + 0x84], 0
jne 0x14001e57d
cmp dword [rsp + 0x74], 0
jne 0x14001e5a2
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.1403ba8b0
xor eax, eax
jmp 0x14001ee08
mov dword [rsp + 0x554], 0
mov dword [rsp + 0x88], 0
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14001edbe
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x14001e605
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov ecx, dword [rcx + 0x1a0]
cmp dword [rax + 4], ecx
je 0x14001e605
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 8]
mov qword [rsp + 0x68], rax
jmp 0x14001e5d8
cmp qword [rsp + 0x68], 0
jne 0x14001e632
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.1403ba8b0
xor eax, eax
jmp 0x14001ee08
cmp dword [rsp + 0x88], 0
jbe 0x14001e695
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r8, [0x1404dd280]
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r8, [0x1404dd284]
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0x60]
mov r9d, dword [rdx + 0x1a4]
lea r8, str._type_:_d
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x48]
call fcn.14038cd80
test rax, rax
jbe 0x14001e802
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x48]
call fcn.14038cd80
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x48]
mov r8d, 0x3ff
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xe8]
call fcn.1403c4d80
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x110]
lea r8, str.__name_:__s_
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x40]
call fcn.14038cd80
test rax, rax
jbe 0x14001e8b1
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x40]
call fcn.14038cd80
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x40]
mov r8d, 0x3ff
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xe8]
call fcn.1403c4d80
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x110]
lea r8, str.__desc_:__s_
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0x194], 6
jne 0x14001e9c1
mov eax, 1
imul rax, rax, 5
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax + 0x198]
mov ecx, 1
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 0x198]
mov edx, 1
imul rdx, rdx, 3
mov r8, qword [rsp + 0x60]
movzx edx, byte [r8 + rdx + 0x198]
mov r8d, 1
imul r8, r8, 2
mov r9, qword [rsp + 0x60]
movzx r8d, byte [r9 + r8 + 0x198]
mov r9d, 1
imul r9, r9, 1
mov r10, qword [rsp + 0x60]
movzx r9d, byte [r10 + r9 + 0x198]
mov r10d, 1
imul r10, r10, 0
mov r11, qword [rsp + 0x60]
movzx r10d, byte [r11 + r10 + 0x198]
mov r11d, dword [rsp + 0xd4]
mov ebx, dword [rsp + 0x5b8]
sub ebx, r11d
movsxd rbx, ebx
movsxd r11, dword [rsp + 0xd4]
mov rdi, qword [rsp + 0x5b0]
add rdi, r11
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r9d
mov r9d, r10d
lea r8, str.__mac_:__02x_02x_02x_02x_02x_02x_
mov rdx, rbx
mov rcx, rdi
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x38]
call fcn.14038cd80
test rax, rax
jbe 0x14001ea70
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x38]
call fcn.14038cd80
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov r9, qword [rax + 0x38]
mov r8d, 0x3ff
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xe8]
call fcn.1403c4d80
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r9, [rsp + 0x110]
lea r8, str.__dnssuffix_:__s_
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1c0
mov ecx, dword [rsp + 0xd4]
mov edx, dword [rsp + 0x5b8]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0xd4]
mov rbx, qword [rsp + 0x5b0]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x560], rdx
mov r9, rax
lea r8, str.__v4addr_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x560]
mov rcx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1d0
mov ecx, dword [rsp + 0xd4]
mov edx, dword [rsp + 0x5b8]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0xd4]
mov rbx, qword [rsp + 0x5b0]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x568], rdx
mov r9, rax
lea r8, str.__v4mask_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x568]
mov rcx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1f0
mov ecx, dword [rsp + 0xd4]
mov edx, dword [rsp + 0x5b8]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
movsxd rdx, dword [rsp + 0xd4]
mov rbx, qword [rsp + 0x5b0]
add rbx, rdx
mov rdx, rbx
mov qword [rsp + 0x570], rdx
mov r9, rax
lea r8, str.__v4gateway_:__s_
mov rdx, rcx
mov rax, qword [rsp + 0x570]
mov rcx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov rax, qword [rsp + 0x60]
add rax, 0x1c0
lea r8, [rsp + 0x524]
mov rdx, rax
mov ecx, 2
call fcn.14014bec0
mov rax, qword [rsp + 0x60]
add rax, 0x1f0
lea r8, [rsp + 0x544]
mov rdx, rax
mov ecx, 2
call fcn.14014bec0
lea r9, [rsp + 0x94]
lea r8, [rsp + 0xb8]
mov edx, dword [rsp + 0x524]
mov ecx, dword [rsp + 0x544]
call qword [sym.imp.IPHLPAPI.DLL_SendARP]
cmp dword [rsp + 0x94], 6
jne 0x14001ed43
mov eax, 1
imul rax, rax, 5
movzx eax, byte [rsp + rax + 0xb8]
mov ecx, 1
imul rcx, rcx, 4
movzx ecx, byte [rsp + rcx + 0xb8]
mov edx, 1
imul rdx, rdx, 3
movzx edx, byte [rsp + rdx + 0xb8]
mov ebx, 1
imul rbx, rbx, 2
movzx ebx, byte [rsp + rbx + 0xb8]
mov edi, 1
imul rdi, rdi, 1
movzx edi, byte [rsp + rdi + 0xb8]
mov r8d, 1
imul r8, r8, 0
movzx r8d, byte [rsp + r8 + 0xb8]
mov r9d, dword [rsp + 0xd4]
mov r10d, dword [rsp + 0x5b8]
sub r10d, r9d
mov r9d, r10d
movsxd r9, r9d
mov qword [rsp + 0x578], r9
movsxd r10, dword [rsp + 0xd4]
mov r11, qword [rsp + 0x5b0]
add r11, r10
mov r10, r11
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
mov r9d, r8d
lea r8, str.__gatewaymac_:__02x_02x_02x_02x_02x_02x_
mov rax, qword [rsp + 0x578]
mov rdx, rax
mov rcx, r10
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rsp + 0x5b8]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rsp + 0xd4]
mov rdx, qword [rsp + 0x5b0]
add rdx, rcx
mov rcx, rdx
lea r8, [0x1404dd35c]
mov rdx, rax
call fcn.140015f80
mov dword [rsp + 0x554], eax
mov eax, dword [rsp + 0x554]
mov ecx, dword [rsp + 0xd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
jmp 0x14001e5c2
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.1403ba8b0
cmp dword [rsp + 0x554], 0
jge 0x14001edf3
mov dword [rsp + 0x580], 0
jmp 0x14001ee01
mov eax, dword [rsp + 0xd4]
mov dword [rsp + 0x580], eax
mov eax, dword [rsp + 0x580]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_getsockopt
call fcn.14037c300
mov rax, rdi
mov rcx, qword [rsp + 0x588]
xor rcx, rsp
call fcn.14037c650
add rsp, 0x598
pop rdi
pop rbx
ret