Function at 0x416e00
Capabilities:
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7f74
mov eax, dword fs:[0]
push eax
mov eax, 0x2c64
call fcn.004aa8c0
mov eax, dword [0x524ee0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0
lea ecx, [ebp - 0x2c70]
mov dword [ebp - 0x2c50], eax
call fcn.00444480
push str.success
lea ecx, [ebp - 0x2c04]
mov dword [ebp - 4], 0
call fcn.00444440
lea eax, [ebp - 0x2c04]
push eax
push 0x4dfc64
lea ecx, [ebp - 0x2c70]
mov byte [ebp - 4], 1
call fcn.00444920
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x2c04]
mov byte [ebp - 4], 0
call fcn.00444690
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c44], eax
lea eax, [ebp - 0x2c04]
push eax
mov byte [ebp - 4], 2
xor ebx, ebx
call dword [sym.imp.RPCRT4.dll_UuidCreateSequential]
mov esi, eax
mov dword [ebp - 0x2c40], esi
test esi, esi
jne 0x416f0e
movzx ecx, byte [ebp - 0x2bf5]
movzx eax, byte [ebp - 0x2bf8]
push ecx
movzx ecx, byte [ebp - 0x2bf6]
push ecx
movzx ecx, byte [ebp - 0x2bf7]
push ecx
push eax
movzx eax, byte [ebp - 0x2bf9]
push eax
movzx eax, byte [ebp - 0x2bfa]
push eax
lea eax, [ebp - 0x2c44]
push str._d__d__d__d__d__d
push eax
call fcn.00406040
add esp, 0x20
jmp 0x41706e
call fcn.00418910
test al, al
jne 0x416f36
mov eax, dword [0x526340]
xor esi, esi
test eax, eax
je 0x416f30
mov ecx, eax
cdq
and ecx, 1
sub eax, edx
add esi, ecx
sar eax, 1
jne 0x416f22
mov dword [0x526340], esi
lea eax, [ebp - 0x2c4c]
push eax
lea eax, [ebp - 0x2bf4]
push eax
mov dword [ebp - 0x2c4c], 0x2880
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov ebx, eax
mov dword [ebp - 0x2c48], ebx
test ebx, ebx
jne 0x417059
mov edx, dword [0x526340]
lea esi, [ebp - 0x2bf4]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x14
idiv ecx
cmp edx, 0xf
jne 0x416fa8
mov esi, dword [0x526340]
xor edi, edi
mov ebx, esi
inc edi
dec ebx
cmp edi, 0xd9
jb 0x416f92
mov ebx, dword [ebp - 0x2c48]
lea esi, [ebp - 0x2bf4]
movzx eax, byte [ebp - 0x2a5b]
push eax
movzx eax, byte [ebp - 0x2a5c]
push eax
movzx eax, byte [ebp - 0x2a5d]
push eax
movzx eax, byte [ebp - 0x2a5e]
push eax
movzx eax, byte [ebp - 0x2a5f]
push eax
movzx eax, byte [ebp - 0x2a60]
push eax
lea eax, [ebp - 0x2c44]
push str._d__d__d__d__d__d
push eax
call fcn.00406040
add esp, 0x20
lea esp, [esp]
call fcn.00418970
cmp dword [esi + 0x1a0], 6
je 0x417006
mov esi, dword [esi]
test esi, esi
jne 0x416ff0
jmp 0x41704a
movzx eax, byte [esi + 0x199]
push eax
movzx eax, byte [esi + 0x198]
push eax
movzx eax, byte [esi + 0x197]
push eax
movzx eax, byte [esi + 0x196]
push eax
movzx eax, byte [esi + 0x195]
push eax
movzx eax, byte [esi + 0x194]
push eax
lea eax, [ebp - 0x2c44]
push str._d__d__d__d__d__d
push eax
call fcn.00406040
add esp, 0x20
call fcn.00450de0
test al, al
jne 0x417059
inc dword [0x5265f4]
call fcn.00418970
mov esi, dword [ebp - 0x2c40]
test al, al
jne 0x41706e
inc dword [0x526340]
mov eax, dword [ebp - 0x2c44]
cmp dword [eax - 0xc], 0
jne 0x41715d
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c40], eax
push ebx
push esi
lea eax, [ebp - 0x2c40]
push str.getMac_error_getmac__d__d
push eax
mov byte [ebp - 4], 3
call fcn.00406040
lea eax, [ebp - 0x2c40]
push eax
lea eax, [ebp - 0x2c1c]
push eax
call fcn.00451390
add esp, 0x18
push eax
lea ecx, [ebp - 0x2c60]
mov byte [ebp - 4], 4
call fcn.004443a0
lea eax, [ebp - 0x2c60]
push eax
push 0x4dfc64
lea ecx, [ebp - 0x2c70]
mov byte [ebp - 4], 5
call fcn.00444920
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x2c60]
mov byte [ebp - 4], 4
call fcn.00444690
cmp dword [ebp - 0x2c08], 0x10
jb 0x417119
push dword [ebp - 0x2c1c]
call fcn.004a831e
add esp, 4
mov edx, dword [ebp - 0x2c40]
add edx, 0xfffffff0
or ebx, 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x41713f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c44]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jmp 0x4171e7
lea eax, [ebp - 0x2c44]
push eax
lea eax, [ebp - 0x2c1c]
push eax
call fcn.00451390
add esp, 8
push eax
lea ecx, [ebp - 0x2c60]
mov byte [ebp - 4], 6
call fcn.004443a0
lea eax, [ebp - 0x2c60]
push eax
push 0x4e0f10
lea ecx, [ebp - 0x2c70]
mov byte [ebp - 4], 7
call fcn.00444920
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x2c60]
mov byte [ebp - 4], 6
call fcn.00444690
cmp dword [ebp - 0x2c08], 0x10
jb 0x4171cb
push dword [ebp - 0x2c1c]
call fcn.004a831e
add esp, 4
mov edx, dword [ebp - 0x2c44]
add edx, 0xfffffff0
or ebx, 0xffffffff
mov byte [ebp - 4], 0
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4171f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [0x526340]
mov eax, esi
imul eax, esi
imul eax, esi
cdq
mov ecx, 0x15
idiv ecx
cmp edx, 2
jne 0x41722a
xor edi, edi
test esi, esi
je 0x417224
mov eax, esi
mov ecx, esi
cdq
sub eax, edx
and ecx, 1
mov esi, eax
add edi, ecx
sar esi, 1
jne 0x417212
mov dword [0x526340], edi
lea ecx, [ebp - 0x2c3c]
call fcn.004465d0
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
mov byte [ebp - 4], 8
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c40], esi
lea eax, [ebp - 0x2c70]
push eax
lea eax, [ebp - 0x2c1c]
push eax
lea ecx, [ebp - 0x2c3c]
mov byte [ebp - 4], 9
call fcn.00449500
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0xa
jb 0x41727a
mov edx, dword [edx]
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
mov byte [edi], 0
cmp byte [edx], 0
jne 0x417299
xor ecx, ecx
jmp 0x4172b1
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x2c48], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4172a4
sub ecx, dword [ebp - 0x2c48]
push ecx
push edx
mov ecx, edi
call fcn.00401460
lea eax, [ebp - 0x2c4c]
push eax
call fcn.004512c0
add esp, 0x1c
mov ecx, dword [eax]
lea edi, [esi - 0x10]
lea edx, [ecx - 0x10]
mov byte [ebp - 4], 0xb
cmp edx, edi
je 0x417330
cmp dword [edi + 0xc], 0
lea esi, [edi + 0xc]
jl 0x41731b
mov eax, dword [edx]
cmp eax, dword [edi]
jne 0x41731b
push edx
call fcn.004047d0
add esp, 4
mov dword [ebp - 0x2c48], eax
mov ecx, ebx
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x417310
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x2c48]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c40], esi
jmp 0x417330
push dword [ecx - 0xc]
push ecx
lea ecx, [ebp - 0x2c40]
call fcn.00409670
mov esi, dword [ebp - 0x2c40]
mov edx, dword [ebp - 0x2c4c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xa
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x417353
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c08], 0x10
mov byte [ebp - 4], 9
jb 0x41736e
push dword [ebp - 0x2c1c]
call fcn.004a831e
add esp, 4
call fcn.00418830
test al, al
jne 0x417399
mov eax, 0xc9
mov edi, 0x13
test edi, edi
je 0x417392
cdq
idiv edi
mov ecx, edi
mov eax, ecx
mov edi, edx
test ecx, ecx
jne 0x417381
add eax, edi
mov dword [0x526340], eax
mov edi, dword [ebp - 0x2c50]
mov eax, 8
mov word [edi], ax
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x4173ba
call fcn.00409970
mov dword [edi + 8], eax
call fcn.00418800
test al, al
jne 0x4173ce
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
add esi, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x4173e9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x2c24], 0x10
mov byte [ebp - 4], 0
mov dword [ebp - 0x2c3c], 0x4dfc5c
jb 0x41740e
push dword [ebp - 0x2c38]
call fcn.004a831e
add esp, 4
lea ecx, [ebp - 0x2c3c]
mov dword [ebp - 0x2c24], 0xf
mov dword [ebp - 0x2c28], 0
mov byte [ebp - 0x2c38], 0
call fcn.004466d0
lea ecx, [ebp - 0x2c70]
mov dword [ebp - 4], 0xffffffff
call fcn.00444690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a8b24
mov esp, ebp
pop ebp
ret