Function at 0x40360c
Capabilities:
Get common file path
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe8c
push ebx
push esi
push edi
lea edi, [ebp - 0x54]
mov eax, 0x4bb5b4
call fcn.00479eb8
xor esi, esi
mov ecx, 0x41
push esi
push edi
lea edi, [ebp - 0x164]
mov esi, 0x4b8862
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
lea eax, [ebp - 0x164]
push 0x104
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
mov word [edi + 0x10], 0x14
mov edx, str.drivers_ntfsext.sys
lea eax, [ebp - 0xc]
call fcn.00488be4
inc dword [edi + 0x1c]
lea edx, [ebp - 0xc]
push edx
lea edx, [ebp - 0x164]
lea eax, [ebp - 8]
call fcn.00488be4
inc dword [edi + 0x1c]
xor ecx, ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 4]
inc dword [edi + 0x1c]
pop edx
call fcn.00488e28
dec dword [edi + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00488dd0
dec dword [edi + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00488dd0
mov word [edi + 0x10], 8
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], ecx
push esi
push edi
lea edi, [ebp - 0x174]
mov esi, 0x4b8966
mov ecx, 4
lea eax, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov dword [ebp - 0x5c], 0x280
push eax
push 0
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov edx, dword [ebp - 0x5c]
push edx
call fcn.00477c2c
pop ecx
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x5c]
push ecx
push 0
mov eax, dword [ebp - 0x60]
push eax
call fcn.004798f8
add esp, 0xc
mov ebx, dword [ebp - 0x60]
lea eax, [ebp - 0x5c]
push eax
push ebx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
je 0x40373e
mov edx, dword [ebp - 0x60]
push edx
call fcn.00477a64
pop ecx
xor eax, eax
push eax
dec dword [edi + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00488dd0
pop eax
mov edx, dword [edi]
mov dword fs:[0], edx
jmp 0x403a0f
xor ecx, ecx
xor eax, eax
mov cl, byte [ebx + 0x199]
xor edx, edx
push ecx
xor ecx, ecx
mov al, byte [ebx + 0x198]
push eax
xor eax, eax
mov dl, byte [ebx + 0x197]
push edx
xor edx, edx
mov cl, byte [ebx + 0x196]
push ecx
lea ecx, [ebp - 0x174]
mov al, byte [ebx + 0x195]
push eax
mov dl, byte [ebx + 0x194]
push edx
push 0x4b9ee9
push ecx
call fcn.0047d588
mov word [edi + 0x10], 0x20
add esp, 0x20
lea edx, [ebx + 0x10c]
lea eax, [ebp - 0x10]
call fcn.00488be4
mov edx, eax
inc dword [edi + 0x1c]
mov eax, 0x4e9f78
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00488dd0
mov word [edi + 0x10], 0x2c
lea edx, [ebx + 8]
lea eax, [ebp - 0x14]
call fcn.00488be4
mov edx, eax
inc dword [edi + 0x1c]
mov eax, 0x4e9f7c
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00488dd0
mov word [edi + 0x10], 0x38
lea edx, [ebp - 0x174]
lea eax, [ebp - 0x18]
call fcn.00488be4
inc dword [edi + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
lea edx, [ebp - 0x1c]
inc dword [edi + 0x1c]
call fcn.0048901c
lea edx, [ebp - 0x1c]
mov eax, 0x4e9f80
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00488dd0
dec dword [edi + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00488dd0
xor ecx, ecx
mov dword [0x4e9f84], ecx
mov word [edi + 0x10], 0x44
lea edx, [ebx + 8]
lea eax, [ebp - 0x20]
call fcn.00488be4
inc dword [edi + 0x1c]
mov eax, dword [eax]
call fcn.00403394
push eax
dec dword [edi + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00488dd0
pop ecx
test ecx, ecx
je 0x403986
xor eax, eax
xor edx, edx
mov al, byte [ebx + 0x199]
xor ecx, ecx
push eax
xor eax, eax
mov dl, byte [ebx + 0x198]
push edx
xor edx, edx
mov cl, byte [ebx + 0x197]
push ecx
xor ecx, ecx
mov al, byte [ebx + 0x196]
push eax
lea eax, [ebp - 0x174]
mov dl, byte [ebx + 0x195]
push edx
mov cl, byte [ebx + 0x194]
push ecx
push 0x4b9f02
push eax
call fcn.0047d588
mov word [edi + 0x10], 0x50
add esp, 0x20
lea edx, [ebx + 0x10c]
lea eax, [ebp - 0x24]
call fcn.00488be4
mov edx, eax
inc dword [edi + 0x1c]
mov eax, 0x4e9f78
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00488dd0
mov word [edi + 0x10], 0x5c
lea edx, [ebx + 8]
lea eax, [ebp - 0x28]
call fcn.00488be4
mov edx, eax
inc dword [edi + 0x1c]
mov eax, 0x4e9f7c
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00488dd0
mov word [edi + 0x10], 0x68
lea edx, [ebp - 0x174]
lea eax, [ebp - 0x2c]
call fcn.00488be4
inc dword [edi + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
lea edx, [ebp - 0x30]
inc dword [edi + 0x1c]
call fcn.0048901c
lea edx, [ebp - 0x30]
mov eax, 0x4e9f80
call fcn.00488e00
dec dword [edi + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00488dd0
dec dword [edi + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00488dd0
mov dword [ebp - 0x58], 1
jmp 0x403990
mov ebx, dword [ebx]
test ebx, ebx
jne 0x403847
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00477a64
cmp dword [ebp - 0x58], 0
pop ecx
jne 0x4039bf
mov eax, esi
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [edi + 0x1c]
call fcn.00488dd0
pop eax
mov edx, dword [edi]
mov dword fs:[0], edx
jmp 0x403a0f
call fcn.00402fd8
mov esi, eax
test esi, esi
jne 0x4039f2
mov eax, dword [ebp - 4]
call fcn.004334fc
test al, al
jne 0x4039e0
mov eax, dword [ebp - 4]
call fcn.00402b68
jmp 0x4039f2
mov eax, dword [ebp - 4]
call fcn.00402ce4
test eax, eax
sete dl
and edx, 1
mov esi, edx
mov eax, esi
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [edi + 0x1c]
call fcn.00488dd0
pop eax
mov edx, dword [edi]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret