Function at 0x43bea0
Capabilities:
Check os version
Get local ipv4 addresses
Get mac address on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
xor r12d, r12d
mov rbx, qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov r8d, 3
lea rsi, [rsp + 0x70]
mov qword [rcx], 0
mov qword [rsp + 0x160], rcx
mov rax, r12
mov ecx, 0x13
mov qword [rsp + 0x168], rdx
mov rdi, rsi
mov dword [rdx], 0
mov edx, 2
rep stosq qword [rdi], rax
mov dword [rdi], 0
mov dword [rsp + 0x70], 0x9c
mov edi, 0xe
mov dword [rsp + 0x74], 6
call rbx
mov r8d, 3
mov edx, 1
mov rcx, rax
call rbx
mov r8d, 3
mov edx, 0x20
mov rcx, rax
call rbx
mov r8d, 3
mov edx, 0x10
mov rcx, rax
call rbx
mov edx, 0x33
mov r8, rax
mov rcx, rsi
mov rbp, qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
call rbp
test eax, eax
mov r13d, eax
je 0x43c013
mov dword [rsp + 0x70], 0
xor r14d, r14d
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rsi
mov r9, r14
mov edx, edi
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
test eax, eax
mov ebx, eax
je 0x43c0cf
mov rcx, r14
call fcn.00410a10
cmp ebx, 0x6f
je 0x43c0b0
jbe 0x43c000
cmp ebx, 0xe8
je 0x43bfd0
cmp ebx, 0x4cc
mov eax, 0xfffff008
jne 0x43c00a
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 1
call fcn.004109f0
test rax, rax
je 0x43c0c5
mov rsi, qword [rsp + 0x168]
mov dword [rsi], 0
mov rsi, qword [rsp + 0x160]
mov qword [rsi], rax
xor eax, eax
jmp 0x43bfb5
cmp ebx, 0x57
mov eax, 0xfffff024
je 0x43bfb5
mov ecx, ebx
call fcn.00416500
jmp 0x43bfb5
mov rax, r12
mov ecx, 0x13
mov rdi, rsi
rep stosq qword [rdi], rax
mov r8d, 1
mov edx, 2
mov dword [rdi], 0
mov word [rsp + 0x104], r8w
mov r8d, 3
mov dword [rsp + 0x70], 0x9c
mov dword [rsp + 0x74], 5
mov dword [rsp + 0x78], 1
call rbx
mov r8d, 3
mov edx, 1
mov rcx, rax
call rbx
mov r8d, 3
mov edx, 0x20
mov rcx, rax
call rbx
mov r8d, 3
mov edx, 0x10
mov rcx, rax
call rbx
mov edx, 0x33
mov r8, rax
mov rcx, rsi
call rbp
test eax, eax
je 0x43c506
mov edi, 0x1e
jmp 0x43bf64
mov ecx, dword [rsp + 0x70]
call fcn.004109f0
test rax, rax
mov r14, rax
jne 0x43bf6f
mov eax, 0xfffff027
jmp 0x43bfb5
xor ebp, ebp
xor r12d, r12d
test r14, r14
mov rdi, r14
mov dword [rsp + 0x64], 0
mov qword [rsp + 0x58], 0
mov esi, 0xffffffff
mov rbx, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jne 0x43c109
jmp 0x43c553
mov rdi, qword [rdi + 8]
test rdi, rdi
je 0x43c173
cmp dword [rdi + 0x68], 1
jne 0x43c100
cmp qword [rdi + 0x18], 0
je 0x43c100
mov r8, qword [rdi + 0x48]
xor edx, edx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov r9d, esi
mov qword [rsp + 0x20], 0
mov ecx, 0xfde9
call rbx
test eax, eax
jle 0x43c510
cdqe
add rbp, rax
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x43c100
nop
mov rax, qword [rax + 8]
add r12d, 1
add rbp, 0x50
test rax, rax
jne 0x43c160
jmp 0x43c100
mov rcx, rbp
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x64], r12d
call fcn.004109f0
test rax, rax
mov qword [rsp + 0x50], rax
je 0x43c568
mov rsi, rax
movsxd rax, dword [rsp + 0x64]
mov rbx, r14
mov qword [rsp + 0x68], r14
mov r12, rsi
lea rax, [rax + rax*4]
shl rax, 4
add rax, rsi
mov r14, rax
jmp 0x43c1cd
mov rbx, qword [rbx + 8]
test rbx, rbx
je 0x43c4d4
cmp dword [rbx + 0x68], 1
jne 0x43c1c0
cmp qword [rbx + 0x18], 0
je 0x43c1c0
mov rax, qword [rsp + 0x50]
add rax, qword [rsp + 0x58]
mov edx, 0x7fffffff
mov r8, qword [rbx + 0x48]
mov r9d, 0xffffffff
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x20], r14
mov ecx, 0xfde9
sub rax, r14
cmp rax, 0x7fffffff
cmova rax, rdx
xor edx, edx
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
mov dword [rsp + 0x60], eax
jle 0x43c52a
mov rbp, qword [rbx + 0x18]
test rbp, rbp
jne 0x43c2dd
jmp 0x43c4c0
movzx esi, byte [rbp + 0x38]
lea rdx, [r12 + 8]
mov rcx, r12
xor eax, eax
mov qword [r12 + 0x48], 0
mov rdi, rdx
and rdi, 0xfffffffffffffff8
sub rcx, rdi
add ecx, 0x50
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [r12], r14
cmp dword [rbx + 0x58], 6
je 0x43c4a3
xor eax, eax
cmp dword [rbx + 0x64], 0x18
sete al
mov dword [r12 + 0x10], eax
cmp word [r11], 0x17
mov rax, qword [r11]
je 0x43c440
mov rdx, qword [r11 + 8]
mov qword [r12 + 0x14], rax
mov eax, 2
mov word [r12 + 0x30], ax
xor eax, eax
test esi, esi
mov qword [r12 + 0x1c], rdx
jne 0x43c400
mov dword [r12 + 0x34], eax
mov rbp, qword [rbp + 8]
add r12, 0x50
test rbp, rbp
je 0x43c4c0
test r13d, r13d
mov r11, qword [rbp + 0x10]
jne 0x43c250
mov rdx, qword [rbx + 0xb0]
movzx r10d, word [r11]
test rdx, rdx
je 0x43c3e8
lea rax, [r11 + 4]
xor esi, esi
mov qword [rsp + 0x40], rax
lea rax, [r11 + 8]
mov qword [rsp + 0x48], rax
jmp 0x43c321
mov rdx, qword [rdx + 8]
test rdx, rdx
je 0x43c3e0
mov rax, qword [rdx + 0x10]
cmp r10w, word [rax]
jne 0x43c314
mov edi, dword [rdx + 0x20]
cmp edi, esi
jbe 0x43c314
cmp r10w, 0x17
mov r8, qword [rsp + 0x40]
lea r9, [rax + 4]
je 0x43c420
mov r15d, edi
sar r15d, 3
test r15d, r15d
jle 0x43c4cd
movzx eax, byte [r9]
cmp byte [r8], al
jne 0x43c314
mov eax, 1
jmp 0x43c380
movzx ecx, byte [r8 + rax]
add rax, 1
cmp cl, byte [r9 + rax - 1]
jne 0x43c314
cmp eax, r15d
mov ecx, eax
jl 0x43c370
test dil, 7
je 0x43c430
mov r15d, edi
movsxd rax, ecx
mov rdx, qword [rdx + 8]
sar r15d, 0x1f
movzx r9d, byte [r9 + rax]
movzx eax, byte [r8 + rax]
shr r15d, 0x1d
lea ecx, [rdi + r15]
and ecx, 7
sub ecx, r15d
mov r15d, 8
sub r15d, ecx
mov ecx, r15d
mov r15d, 0xff
shl r15d, cl
and eax, r15d
cmp r9d, eax
cmove esi, edi
test rdx, rdx
jne 0x43c321
nop
test esi, esi
jne 0x43c254
cmp r10w, 0x17
mov eax, pe_nt_image_headers64
mov esi, 0x20
cmove esi, eax
jmp 0x43c254
mov ecx, 0x20
mov eax, 0xffffffff
sub ecx, esi
shl eax, cl
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htonl]
jmp 0x43c2c7
mov r8, qword [rsp + 0x48]
lea r9, [rax + 8]
jmp 0x43c346
mov esi, edi
jmp 0x43c314
mov qword [r12 + 0x14], rax
mov rax, qword [r11 + 8]
mov edi, esi
mov edx, 0x17
shr edi, 3
lea rcx, [r12 + 0x38]
mov r8, rdi
mov qword [r12 + 0x1c], rax
mov rax, qword [r11 + 0x10]
mov qword [r12 + 0x24], rax
mov eax, dword [r11 + 0x18]
mov word [r12 + 0x30], dx
mov edx, 0xff
mov dword [r12 + 0x2c], eax
call sub.msvcrt.dll_memset
and esi, 7
je 0x43c2cc
mov ecx, 8
mov eax, 0xff
sub ecx, esi
shl eax, cl
mov byte [r12 + rdi + 0x38], al
jmp 0x43c2cc
mov eax, dword [rbx + 0x50]
mov dword [r12 + 8], eax
movzx eax, word [rbx + 0x54]
mov word [r12 + 0xc], ax
jmp 0x43c288
movsxd rax, dword [rsp + 0x60]
add r14, rax
jmp 0x43c1c0
xor ecx, ecx
jmp 0x43c387
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.00410a10
mov rax, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x50]
mov qword [rax], rsi
mov rax, qword [rsp + 0x168]
mov esi, dword [rsp + 0x64]
mov dword [rax], esi
xor eax, eax
jmp 0x43bfb5
mov eax, 0xfffff02f
jmp 0x43bfb5
mov rcx, r14
call fcn.00410a10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.00416500
jmp 0x43bfb5
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.00410a10
mov rcx, qword [rsp + 0x50]
call fcn.00410a10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.00416500
jmp 0x43bfb5
xor ecx, ecx
call fcn.004109f0
test rax, rax
mov qword [rsp + 0x50], rax
jne 0x43c4d9
mov rcx, r14
call fcn.00410a10
jmp 0x43c0c5