MicrosoftMacroAssembler/NSI-MAC-Spoofing — reverse-engineered prompt

I want a small Windows research demo in C++ that shows how NSI network adapter queries work, but keeps it safe and read only. It should inspect the adapter information that user mode apps normally see, log the query flow clearly, and print the real MAC addresses and related adapter details for learning and troubleshooting. If you need to, look up current Windows driver docs online.

Please keep it educational and self contained. Include the missing structures from the header, wire up the basic request handling, and make the code easy to follow with comments so I can understand what each part is doing. I do not want anything that spoofs, hides, changes, or fakes hardware addresses. A simple test path that runs in a lab VM and shows before and after logging of the intercepted data is enough, plus short build and usage notes so I can try it locally.