Function at 0x411be8
Capabilities:
Get disk information
Get mac address on windows

Disassembly:
push 0x68
mov eax, 0x44b337
call fcn.00439970
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x74]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], ebx
call fcn.00412040
lea esi, [ebp - 0x68]
mov dword [ebp - 4], 1
call fcn.00412040
lea esi, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.00412040
mov eax, 0x288
mov byte [ebp - 4], 3
push eax
mov dword [ebp - 0x40], eax
call fcn.004351d9
pop ecx
lea ecx, [ebp - 0x40]
push ecx
push eax
mov dword [ebp - 0x3c], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x411c69
push dword [ebp - 0x3c]
call fcn.00434d1f
pop ecx
push dword [ebp - 0x40]
call fcn.004351d9
pop ecx
lea ecx, [ebp - 0x40]
push ecx
push eax
mov dword [ebp - 0x3c], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, ebx
jne 0x411d43
mov edi, dword [ebp - 0x3c]
cmp edi, ebx
je 0x411d51
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xf
call fcn.00401353
push 6
lea eax, [edi + 0x194]
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.00404b75
mov eax, dword [edi + 0x1a0]
cmp eax, 6
jne 0x411cff
lea eax, [ebp - 0x48]
lea ecx, [edi + 0x10c]
push eax
call fcn.00411fc4
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.00412020
cmp eax, 0xffffffff
mov eax, dword [edi + 0x19c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x74]
je 0x411cdf
lea ecx, [ebp - 0x5c]
call fcn.00412063
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.00401038
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
call fcn.00402f9a
jmp 0x411d2a
cmp eax, 0x47
mov eax, dword [edi + 0x19c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x68]
je 0x411d17
lea ecx, [ebp - 0x5c]
call fcn.00412063
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.00401038
mov edi, dword [edi]
push ebx
push 1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.00401308
cmp edi, ebx
jne 0x411c7c
cmp dword [ebp - 0x3c], ebx
je 0x411d51
push dword [ebp - 0x3c]
call fcn.00434d1f
pop ecx
push ebx
push ebx
xor eax, eax
mov byte [ebp - 0x18], bl
lea edi, [ebp - 0x17]
stosd dword es:[edi], eax
push ebx
push ebx
stosb byte es:[edi], al
lea eax, [ebp - 0x44]
push eax
push ebx
push ebx
push 0x454de0
mov dword [ebp - 0x44], ebx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
push 4
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00434880
add esp, 0xc
cmp dword [ebp - 0x6c], ebx
je 0x411d8f
mov eax, dword [ebp - 0x70]
jmp 0x411da1
cmp dword [ebp - 0x60], ebx
je 0x411d99
mov eax, dword [ebp - 0x64]
jmp 0x411da1
cmp dword [ebp - 0x54], ebx
je 0x411dc9
mov eax, dword [ebp - 0x58]
mov esi, dword [eax]
cmp esi, eax
jne 0x411dac
call fcn.00434d0f
cmp dword [esi + 0x28], 0x10
jb 0x411db7
mov esi, dword [esi + 0x14]
jmp 0x411dba
add esi, 0x14
push 6
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00434880
add esp, 0xc
mov eax, dword [0x45fb34]
mov ecx, 0x45fb34
call dword [eax + 0xc]
mov esi, dword [ebp - 0x4c]
add eax, 0x10
mov dword [esi], eax
movzx eax, byte [ebp - 0x13]
push eax
movzx eax, byte [ebp - 0x14]
push eax
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
movzx eax, byte [ebp - 0x17]
push eax
movzx eax, byte [ebp - 0x18]
push eax
push str._02X_02X_02X_02X_02X_02X
push esi
mov dword [ebp - 0x50], 1
call fcn.00410110
add esp, 0x20
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.004122ca
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 1
call fcn.004122ca
lea eax, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.004122ca
mov eax, esi
call fcn.004399ba
ret 4