Function at 0x411700
Capabilities:
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d9a6b
mov eax, dword fs:[0]
push eax
mov eax, 0x28d8
call fcn.004b4380
mov eax, dword [0x50bd24]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x28e4], ecx
mov dword [ecx + 0x10], 0
mov eax, ecx
cmp dword [ecx + 0x14], 0x10
jb 0x411749
mov eax, dword [ecx]
mov byte [eax], 0
mov dword [ebp - 0x28d8], 0
mov dword [ebp - 0x28d4], 0
mov dword [ebp - 0x28d0], 0
lea ecx, [ebp - 0x28d8]
mov dword [ebp - 4], 0
call fcn.00411e90
lea eax, [ebp - 0x28dc]
mov dword [ebp - 0x28dc], 0x2880
lea ebx, [ebp - 0x28a4]
push eax
mov eax, ebx
mov dword [ebp - 0x28c8], ebx
push eax
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x411ad8
mov dword [ebp - 0x28cc], eax
movzx eax, byte [ebx + 0x199]
push eax
movzx eax, byte [ebx + 0x198]
push eax
movzx eax, byte [ebx + 0x197]
push eax
movzx eax, byte [ebx + 0x196]
push eax
movzx eax, byte [ebx + 0x195]
push eax
movzx eax, byte [ebx + 0x194]
push eax
lea eax, [ebp - 0x24]
push str._02X_02X_02X_02X_02X_02X
push eax
call fcn.00412b30
lea edx, [ebx + 0x10c]
mov dword [ebp - 0x28ac], 0
mov ecx, edx
mov dword [ebp - 0x28a8], 0xf
add esp, 0x20
mov byte [ebp - 0x28bc], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411817
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28bc]
call fcn.00407780
mov byte [ebp - 4], 1
lea edi, [ebp - 0x28bc]
cmp dword [ebp - 0x28a8], 0x10
mov ebx, dword [ebp - 0x28bc]
cmovae edi, ebx
mov dword [ebp - 0x28c4], ebx
mov ebx, dword [ebp - 0x28ac]
cmp ebx, 3
jb 0x4118ba
lea esi, [ebx + edi]
lea eax, [esi - 2]
sub eax, edi
push eax
push 0x50
push edi
call fcn.004b66d0
add esp, 0xc
test eax, eax
je 0x4118ba
movzx ecx, byte [eax]
cmp cl, 0x50
jne 0x41188e
movzx ecx, byte [eax + 1]
cmp cl, 0x50
jne 0x41188e
movzx ecx, byte [eax + 2]
cmp cl, 0x50
jne 0x41188e
xor ecx, ecx
jmp 0x411893
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4118af
inc eax
lea ecx, [esi - 2]
sub ecx, eax
push ecx
push 0x50
push eax
call fcn.004b66d0
add esp, 0xc
test eax, eax
jne 0x411870
jmp 0x4118ba
sub eax, edi
cmp eax, 0xffffffff
jne 0x4119c5
cmp dword [ebp - 0x28a8], 0x10
lea ebx, [ebp - 0x28bc]
mov eax, dword [ebp - 0x28ac]
cmovae ebx, dword [ebp - 0x28c4]
cmp eax, 5
jb 0x411971
add eax, 0xfffffffc
add eax, ebx
mov dword [ebp - 0x28e0], eax
sub eax, ebx
push eax
push 0x56
push ebx
call fcn.004b66d0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x411971
nop dword [eax]
mov ecx, esi
mov edx, str.VMare
mov edi, 1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x41191d
add ecx, 4
mov edi, 0xfffffffd
add edx, 4
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x411944
cmp edi, 0xfffffffd
je 0x411940
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x411944
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x411944
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x411944
xor eax, eax
jmp 0x411949
sbb eax, eax
or eax, 1
test eax, eax
je 0x41196a
mov eax, dword [ebp - 0x28e0]
inc esi
sub eax, esi
push eax
push 0x56
push esi
call fcn.004b66d0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x411900
jmp 0x411971
sub esi, ebx
cmp esi, 0xffffffff
jne 0x4119c5
push ecx
push str.Virtual
lea ecx, [ebp - 0x28bc]
call fcn.00412a20
cmp eax, 0xffffffff
jne 0x4119c5
push ecx
push str.SLIP
lea ecx, [ebp - 0x28bc]
call fcn.00412a20
cmp eax, 0xffffffff
jne 0x4119c5
push ecx
push str.P.P.P
lea ecx, [ebp - 0x28bc]
call fcn.00412a20
cmp eax, 0xffffffff
jne 0x4119c5
lea edx, [ebp - 0x28d8]
lea ecx, [ebp - 0x24]
call fcn.004128a0
test al, al
je 0x411a36
mov ebx, dword [ebp - 0x28c8]
mov ebx, dword [ebx]
mov dword [ebp - 0x28c8], ebx
test ebx, ebx
je 0x411a9c
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28a8]
cmp eax, 0x10
jb 0x411a1b
mov edx, dword [ebp - 0x28c4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x411a11
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411bb0
push ecx
push edx
call fcn.004b4077
add esp, 8
mov edi, dword [ebp - 0x28cc]
inc edi
mov dword [ebp - 0x28cc], edi
cmp edi, 0x10
jb 0x4117b0
jmp 0x411ad8
lea edx, [ebp - 0x24]
lea esi, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x411a40
mov ecx, dword [ebp - 0x28e4]
lea eax, [ebp - 0x24]
sub edx, esi
push edx
push eax
call fcn.00407780
mov edx, dword [ebp - 0x28a8]
cmp edx, 0x10
jb 0x411a93
mov ecx, dword [ebp - 0x28bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411a89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411bb0
push edx
push ecx
call fcn.004b4077
add esp, 8
mov byte [ebp - 0x28bd], 1
jmp 0x411adf
mov eax, dword [ebp - 0x28a8]
cmp eax, 0x10
jb 0x411ad8
mov edx, dword [ebp - 0x28c4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x411ace
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411bb0
push ecx
push edx
call fcn.004b4077
add esp, 8
mov byte [ebp - 0x28bd], 0
mov edi, dword [ebp - 0x28d8]
test edi, edi
je 0x411b8e
mov ebx, dword [ebp - 0x28d4]
mov esi, edi
cmp esi, ebx
je 0x411b4b
nop dword [eax]
mov ecx, dword [esi + 0x14]
cmp ecx, 0x10
jb 0x411b33
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x411b29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411bb5
mov eax, edx
push ecx
push eax
call fcn.004b4077
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
add esi, 0x18
cmp esi, ebx
jne 0x411b00
mov ecx, dword [ebp - 0x28d0]
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x411b84
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411bb5
push ecx
push edi
call fcn.004b4077
add esp, 8
mov al, byte [ebp - 0x28bd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b42e4
mov esp, ebp
pop ebp
ret
call fcn.004b905f
call fcn.004b905f
int3