Function at 0x180005d40
Capabilities:
Get mac address on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x350
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x390], rbx
mov rax, qword [0x18001b068]
xor rax, rsp
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x50], r9
mov rbp, r8
mov qword [rsp + 0x48], r8
mov r15, qword [rsp + 0x3b0]
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x60], rax
xor r14d, r14d
mov dword [rsp + 0x20], r14d
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x70]
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov edi, eax
lea rcx, section..data
mov rdx, qword [section..data]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rcx, section..data
mov rdx, qword [section..data]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x330], r14b
xor eax, eax
mov qword [rsp + 0x331], rax
mov qword [rsp + 0x339], rax
mov word [rsp + 0x341], ax
mov byte [rsp + 0x343], al
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x38], rsi
or r13, 0xffffffffffffffff
cmp edi, 0x6f
jne 0x1800061c7
mov edi, dword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
mov qword [rsp + 0x58], rax
mov r8d, dword [rsp + 0x20]
xor edx, edx
mov rcx, rax
call fcn.180009650
test rdi, rdi
je 0x180006162
lea rdx, [rsp + 0x20]
mov rcx, rdi
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov dword [rsp + 0x40], eax
mov r12, rdi
lea rdx, [r12 + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.180004760
lea rdx, [r12 + 0x1d0]
lea rcx, [rsp + 0x28]
call fcn.180004760
mov byte [rsp + 0x330], 0
test r15, r15
je 0x180005f08
mov ebp, r14d
cmp dword [r12 + 0x194], r14d
jbe 0x180005f03
mov edi, r14d
lea rbx, [r12 + 0x198]
nop word [rax + rax]
movzx r8d, byte [rbx]
mov eax, edi
lea rcx, [rsp + rax + 0x330]
lea rdx, str._02x
call fcn.180007c50
inc ebp
add edi, 2
inc rbx
cmp ebp, dword [r12 + 0x194]
jb 0x180005ed0
mov rbp, qword [rsp + 0x48]
jmp 0x180005f08
mov rbp, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x30]
cmp dword [rdi - 0x10], 0
jl 0x180005f35
lea rdx, str.0.1.0.
mov rcx, rdi
call fcn.180008030
test rax, rax
je 0x180005f35
sub rax, rdi
sar rax, 1
test eax, eax
jns 0x1800060c9
cmp dword [rdi - 0x10], 0
jl 0x180005f5d
lea rdx, str.0.0.0.0
mov rcx, rdi
call fcn.180008030
test rax, rax
je 0x180005f5d
sub rax, rdi
sar rax, 1
test eax, eax
jns 0x1800060c9
lea rdx, str.00000000000
lea rcx, [rsp + 0x330]
call fcn.180007fd4
test rax, rax
jne 0x1800060c9
mov rbx, qword [rsp + 0x28]
cmp dword [rdi - 0x10], eax
jl 0x180005fa2
lea rdx, str.192.
mov rcx, rdi
call fcn.180008030
test rax, rax
je 0x180005fa2
sub rax, rdi
sar rax, 1
test eax, eax
jns 0x18000601a
cmp dword [rdi - 0x10], 0
jl 0x180005fc6
lea rdx, [0x1800175d0]
mov rcx, rdi
call fcn.180008030
test rax, rax
je 0x180005fc6
sub rax, rdi
sar rax, 1
test eax, eax
jns 0x18000601a
cmp dword [rdi - 0x10], 0
jl 0x180005fea
lea rdx, str.172.
mov rcx, rdi
call fcn.180008030
test rax, rax
je 0x180005fea
sub rax, rdi
sar rax, 1
test eax, eax
jns 0x18000601a
cmp dword [rbx - 0x10], 0
jl 0x1800060c3
lea rdx, str.255.255.
mov rcx, rbx
call fcn.180008030
test rax, rax
je 0x1800060c3
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1800060c3
test r15, r15
je 0x18000604d
lea rcx, [rsp + 0x330]
lea rax, [rsp + 0x330]
mov rdx, r15
sub rdx, rax
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
inc rcx
test al, al
jne 0x180006040
cmp qword [rsp + 0x50], 0
je 0x180006077
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.180006490
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_inet_addr]
mov rcx, qword [rsp + 0x50]
mov dword [rcx], eax
test rbp, rbp
je 0x18000609a
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.180006490
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rbp], eax
lea rdx, [r12 + 0x1f0]
xor eax, eax
mov rcx, r13
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rcx, qword [rsp + 0x60]
call fcn.180002930
cmp byte [rbp], 0xc0
je 0x1800060d6
mov r12, qword [r12]
jmp 0x1800060cd
mov r12, qword [r12]
test r12, r12
jne 0x180005e81
mov edi, dword [rsp + 0x40]
add edi, 0xf0000000
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x58]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
jne 0x1800061cd
lea rdx, [rsi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18000611a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18000613b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x18000615b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
xor eax, eax
jmp 0x180006233
lea rdx, [rsi - 0x18]
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180006182
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800061a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x1800061c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
xor eax, eax
jmp 0x180006233
add edi, 0xe0000000
test edi, edi
sete r14b
lea rdx, [rsi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800061ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180006210
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180006230
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, r14d
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.180006a80
mov rbx, qword [rsp + 0x390]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret