Function at 0x4342f0
Capabilities:
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
mov eax, dword [0x50d080]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x224]
mov dword [ebp - 0x22c], ecx
xor edi, edi
mov ebx, edx
push eax
push edi
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x224], edi
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x4344c7
push dword [ebp - 0x224]
call fcn.0047d739
push dword [ebp - 0x224]
mov esi, eax
push edi
push esi
mov dword [ebp - 0x228], esi
call fcn.0047f230
add esp, 0x10
lea eax, [ebp - 0x224]
push eax
push esi
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x4344b1
test esi, esi
je 0x4344b1
mov eax, dword [esi + 0x190]
mov edx, eax
cmp eax, 8
jbe 0x434392
mov eax, 8
mov dword [esi + 0x190], 8
mov edx, eax
test eax, eax
je 0x4343c4
mov cl, byte [esi + 0x194]
test cl, cl
jne 0x4343c4
mov al, byte [esi + 0x195]
cmp al, 0x50
jne 0x4343b3
cmp byte [esi + 0x196], 0x56
je 0x4343c4
cmp al, 0xc
jne 0x4343c0
cmp byte [esi + 0x196], 0x29
je 0x4343c4
test cl, cl
je 0x4343cf
mov esi, dword [esi]
test esi, esi
jne 0x434374
jmp 0x4344b1
mov eax, dword [ebp - 0x22c]
mov ecx, eax
push eax
push edx
call fcn.00417a50
xor edi, edi
cmp dword [esi + 0x190], edi
jbe 0x4344ac
nop dword [eax]
mov edx, dword [ebp - 0x22c]
mov al, byte [esi + edi + 0x194]
mov ecx, dword [edx]
mov byte [edi + ecx], al
mov eax, dword [edx]
movzx eax, byte [edi + eax]
push eax
lea eax, [ebp - 0x18]
push 0x4fb444
push eax
call fcn.0041bbe0
lea eax, [ebp - 0x18]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x434420
mov ecx, dword [ebx + 0x14]
sub eax, edx
mov edx, dword [ebx + 0x10]
mov dword [ebp - 0x23c], ecx
sub ecx, edx
sar eax, 1
cmp eax, ecx
ja 0x434485
cmp dword [ebp - 0x23c], 8
lea ecx, [edx + eax]
mov dword [ebp - 0x240], ecx
mov dword [ebx + 0x10], ecx
jb 0x43445e
mov ebx, dword [ebp - 0x230]
mov ebx, dword [ebx]
add eax, eax
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebx + edx*2]
push eax
call fcn.0047ecb0
mov eax, dword [ebp - 0x240]
add esp, 0xc
xor ecx, ecx
mov word [ebx + eax*2], cx
mov ebx, dword [ebp - 0x230]
jmp 0x43449f
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 0x234], 0
push ecx
push dword [ebp - 0x234]
mov ecx, ebx
push eax
call fcn.0040a8f0
inc edi
cmp edi, dword [esi + 0x190]
jb 0x4343f0
mov edi, 1
push dword [ebp - 0x228]
call fcn.0047ce1d
add esp, 4
test edi, edi
jne 0x43455b
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x43455b
push 0x104
lea ecx, [ebp - 0x220]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0
push 3
push 0
push 3
push SysReAllocString
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x43455b
push 0
push 0
lea eax, [ebp - 0x238]
xorps xmm0, xmm0
push eax
push esi
movlpd qword [ebp - 0x238], xmm0
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x434554
mov ebx, dword [ebp - 0x22c]
mov ecx, ebx
push ebx
push 8
call fcn.00417a50
mov ecx, dword [ebx]
mov eax, dword [ebp - 0x238]
mov dword [ecx], eax
mov eax, dword [ebp - 0x234]
mov dword [ecx + 4], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047ce22
mov esp, ebp
pop ebp
ret