Function at 0x10026d60
Capabilities:
Get mac address on windows

Disassembly:
mov rax, rsp
sub rsp, 0x358
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax - 8], r12
mov qword [rax - 0x10], r13
mov rax, qword [0x10058650]
mov qword [rsp + 0x330], rax
mov r13, rcx
mov dword [rsp + 0x44], 0x2c0
xor esi, esi
mov qword [rsp + 0x70], rsi
xor edx, edx
mov r8d, 0x2b8
lea rcx, [rsp + 0x78]
call sub.msvcrt.dll_memset
mov r12, rsi
mov qword [rsp + 0x50], rsi
mov dword [r13], esi
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x70]
call sub.iphlpapi.dll_GetAdaptersInfo
cmp eax, 0x6f
jne 0x10026fc6
mov ecx, dword [rsp + 0x44]
call qword [sym.imp.msvcrt.dll_malloc]
mov r12, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x10026e1c
lea rdx, [0x10048da8]
lea rcx, [rsp + 0x58]
call fcn.10027af0
mov rcx, rax
lea rdx, str._comm__detectMacAddress2k___malloc_adapter_list_failed_
call fcn.10027bf0
xor al, al
jmp 0x100270a9
lea rdx, [rsp + 0x44]
mov rcx, rax
call sub.iphlpapi.dll_GetAdaptersInfo
test eax, eax
jne 0x10026f8e
mov rdi, r12
mov qword [rsp + 0x60], r12
nop
nop
test rdi, rdi
je 0x10026f83
cmp esi, 0x20
jae 0x10026f83
movzx ecx, byte [rdi + 0x198]
test cl, cl
jne 0x10026e8e
cmp byte [rdi + 0x199], 0xff
jne 0x10026e8e
cmp byte [rdi + 0x19a], 0x2a
jne 0x10026e8e
cmp byte [rdi + 0x19b], 0x3a
jne 0x10026e8e
cmp byte [rdi + 0x19c], 0x4b
jne 0x10026e8e
cmp byte [rdi + 0x19d], 0x5b
je 0x10026f76
test cl, cl
jne 0x10026ebe
cmp byte [rdi + 0x199], cl
jne 0x10026ebe
cmp byte [rdi + 0x19a], cl
jne 0x10026ebe
cmp byte [rdi + 0x19b], cl
jne 0x10026ebe
cmp byte [rdi + 0x19c], cl
jne 0x10026ebe
cmp byte [rdi + 0x19d], cl
je 0x10026f76
mov ebx, esi
imul rbx, rbx, 0x86
movzx eax, byte [rdi + 0x19d]
movzx edx, byte [rdi + 0x19c]
movzx r10d, byte [rdi + 0x19b]
movzx r11d, byte [rdi + 0x19a]
movzx r9d, byte [rdi + 0x199]
movzx r8d, cl
lea rcx, [rbx + r13 + 4]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
lea rdx, [0x10048de8]
call qword [sym.imp.msvcrt.dll_sprintf]
movzx r11d, byte [rdi + 0x198]
mov byte [rbx + r13 + 0x84], r11b
movzx eax, byte [rdi + 0x199]
mov byte [rbx + r13 + 0x85], al
movzx eax, byte [rdi + 0x19a]
mov byte [rbx + r13 + 0x86], al
movzx eax, byte [rdi + 0x19b]
mov byte [rbx + r13 + 0x87], al
movzx eax, byte [rdi + 0x19c]
mov byte [rbx + r13 + 0x88], al
movzx eax, byte [rdi + 0x19d]
mov byte [rbx + r13 + 0x89], al
inc esi
mov dword [rsp + 0x48], esi
mov rdi, qword [rdi]
mov qword [rsp + 0x60], rdi
jmp 0x10026e40
mov bl, 1
mov byte [rsp + 0x40], bl
jmp 0x1002708a
xor ecx, ecx
call fcn.100205e0
mov rbx, rax
lea rdx, [0x10048e08]
lea rcx, [rsp + 0x58]
call fcn.10027af0
mov rcx, rax
mov r8, rbx
lea rdx, str._comm__detectMacAddress2k___failed:__s
call fcn.10027bf0
xor bl, bl
mov byte [rsp + 0x40], bl
jmp 0x1002708a
movzx eax, byte [rsp + 0x20d]
movzx edx, byte [rsp + 0x20c]
movzx r10d, byte [rsp + 0x20b]
movzx r11d, byte [rsp + 0x20a]
movzx r9d, byte [rsp + 0x209]
movzx r8d, byte [rsp + 0x208]
lea rcx, [r13 + 4]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
lea rdx, [0x10048e38]
call qword [sym.imp.msvcrt.dll_sprintf]
movzx r11d, byte [rsp + 0x208]
mov byte [r13 + 0x84], r11b
movzx eax, byte [rsp + 0x209]
mov byte [r13 + 0x85], al
movzx eax, byte [rsp + 0x20a]
mov byte [r13 + 0x86], al
movzx eax, byte [rsp + 0x20b]
mov byte [r13 + 0x87], al
movzx eax, byte [rsp + 0x20c]
mov byte [r13 + 0x88], al
movzx eax, byte [rsp + 0x20d]
mov byte [r13 + 0x89], al
mov esi, 1
mov dword [rsp + 0x48], esi
movzx ebx, sil
mov byte [rsp + 0x40], sil
mov dword [r13], esi
jmp 0x10027099
test r12, r12
je 0x100270a7
mov rcx, r12
call qword [sym.imp.msvcrt.dll_free]
mov al, bl
mov rcx, qword [rsp + 0x330]
call fcn.10042170
mov rbx, qword [rsp + 0x368]
mov rsi, qword [rsp + 0x370]
mov rdi, qword [rsp + 0x378]
mov r12, qword [rsp + 0x350]
mov r13, qword [rsp + 0x348]
add rsp, 0x358
ret