Function at 0x40aa90
Capabilities:
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x43055c]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
mov ebx, dword [ebp + 8]
push esi
lea esi, [ebp - 0x24]
mov dword [ebp - 0x38], 0x288
mov byte [ebp - 0x24], 0
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
call fcn.0040a8a0
test eax, eax
je 0x40ab17
mov eax, esi
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40aaf0
sub eax, edx
push eax
lea eax, [ebp - 0x24]
push eax
mov ecx, ebx
call fcn.004016b0
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004138ed
mov esp, ebp
pop ebp
ret
push edi
push 0x288
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call esi
mov edi, eax
test edi, edi
je 0x40aca3
lea ecx, [ebp - 0x38]
push ecx
push edi
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x40ab6e
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, dword [ebp - 0x38]
push edx
push 0
call edi
push eax
call esi
mov edi, eax
test edi, edi
je 0x40aca3
lea eax, [ebp - 0x38]
push eax
push edi
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x40aca3
mov esi, edi
test edi, edi
je 0x40ac79
lea ebx, [ebx]
lea ecx, [esi + 0x1d8]
mov eax, str.0.0.0.0
jmp 0x40aba0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40abc0
test dl, dl
je 0x40abbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40abc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40aba0
xor eax, eax
jmp 0x40abc5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40ac1f
cmp dword [esi + 0x190], 6
jne 0x40ac13
movzx ecx, byte [esi + 0x199]
movzx edx, byte [esi + 0x198]
movzx eax, byte [esi + 0x197]
push ecx
movzx ecx, byte [esi + 0x196]
push edx
movzx edx, byte [esi + 0x195]
push eax
movzx eax, byte [esi + 0x194]
push ecx
push edx
push eax
lea ecx, [ebp - 0x24]
push str._02X_02X_02X_02X_02X_02X
push ecx
call fcn.00414004
add esp, 0x20
mov esi, dword [esi]
test esi, esi
jne 0x40ab90
jmp 0x40ac69
cmp dword [esi + 0x190], 6
jne 0x40ac69
movzx edx, byte [esi + 0x199]
movzx eax, byte [esi + 0x198]
movzx ecx, byte [esi + 0x197]
push edx
movzx edx, byte [esi + 0x196]
push eax
movzx eax, byte [esi + 0x195]
push ecx
movzx ecx, byte [esi + 0x194]
push edx
push eax
push ecx
lea edx, [ebp - 0x24]
push str._02X_02X_02X_02X_02X_02X
push edx
call fcn.00414004
add esp, 0x20
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x24]
push eax
call fcn.0040a960
add esp, 4
lea ecx, [ebp - 0x24]
push ecx
mov ecx, ebx
call fcn.00401250
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004138ed
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0x40]
push eax
call fcn.0041524c
movzx ecx, word [ebp - 0x26]
push ecx
push eax
lea edx, [ebp - 0x24]
push str._d_d
push edx
call fcn.00414004
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x18], 0
call fcn.0040a960
lea eax, [ebp - 0x24]
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], 0
add esp, 0x18
mov byte [ebx], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40acf1
sub eax, edx
push eax
lea ecx, [ebp - 0x24]
push ecx
mov ecx, ebx
call fcn.004016b0
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.004138ed
mov esp, ebp
pop ebp
ret