Function at 0x2000d180
Capabilities:
Contain obfuscated stackstrings
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x464
mov eax, dword [0x20001284]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0x110], 0
push 0x103
push 0
lea eax, [ebp - 0x10f]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov byte [ebp - 0x2c0], 0
push 0x7f
push 0
lea ecx, [ebp - 0x2bf]
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
mov byte [ebp - 0x350], 0
push 0x7f
push 0
lea edx, [ebp - 0x34f]
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
mov byte [ebp - 0x3e8], 0
push 0x7f
push 0
lea eax, [ebp - 0x3e7]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov byte [ebp - 0x218], 0
push 0x7f
push 0
lea ecx, [ebp - 0x217]
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x200029c7
mov ecx, 0x2000faa0
call fcn.2000cb50
xor edx, edx
mov dword [ebp - 0x368], edx
mov dword [ebp - 0x364], edx
mov dword [ebp - 0x360], edx
mov dword [ebp - 0x35c], edx
mov dword [ebp - 0x358], edx
mov dword [ebp - 0x354], edx
mov byte [ebp - 0x44d], 0
jmp 0x2000d267
mov al, byte [ebp - 0x44d]
add al, 1
mov byte [ebp - 0x44d], al
movzx ecx, byte [ebp - 0x44d]
cmp ecx, 4
jge 0x2000d59b
mov byte [ebp - 0x464], 0x5c
mov byte [ebp - 0x463], 0x5c
mov byte [ebp - 0x462], 0x2e
mov byte [ebp - 0x461], 0x5c
mov byte [ebp - 0x460], 0x50
mov byte [ebp - 0x45f], 0x68
mov byte [ebp - 0x45e], 0x79
mov byte [ebp - 0x45d], 0x73
mov byte [ebp - 0x45c], 0x69
mov byte [ebp - 0x45b], 0x63
mov byte [ebp - 0x45a], 0x61
mov byte [ebp - 0x459], 0x6c
mov byte [ebp - 0x458], 0x44
mov byte [ebp - 0x457], 0x72
mov byte [ebp - 0x456], 0x69
mov byte [ebp - 0x455], 0x76
mov byte [ebp - 0x454], 0x65
mov byte [ebp - 0x453], 0x25
mov byte [ebp - 0x452], 0x64
mov byte [ebp - 0x451], 0
movzx edx, byte [ebp - 0x44d]
push edx
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x438]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x438]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x2000d352
jmp 0x2000d259
push 0
lea eax, [ebp - 0x11c]
push eax
push 0x18
lea ecx, [ebp - 0x368]
push ecx
push 0
push 0
push 0x74080
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x2000d390
mov eax, dword [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x2000d259
mov ecx, dword [ebp - 0x364]
and ecx, 1
jne 0x2000d3ad
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x2000d59b
xor eax, eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], al
xor ecx, ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x448], ecx
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x440], ecx
mov byte [ebp - 0x43c], cl
movzx edx, byte [ebp - 0x44d]
and edx, 1
je 0x2000d41a
mov byte [ebp - 0x233], 0xb0
jmp 0x2000d421
mov byte [ebp - 0x233], 0xa0
movzx ecx, byte [ebp - 0x44d]
mov eax, 0x10
sar eax, cl
and eax, dword [ebp - 0x364]
je 0x2000d43e
jmp 0x2000d259
mov byte [ebp - 0x232], 0xec
mov cl, byte [ebp - 0x44d]
mov byte [ebp - 0x230], cl
mov byte [ebp - 0x237], 1
mov byte [ebp - 0x236], 1
mov dword [ebp - 0x23c], 0x200
push 0
lea edx, [ebp - 0x11c]
push edx
push 0x11
lea eax, [ebp - 0x44c]
push eax
push 0x21
lea ecx, [ebp - 0x23c]
push ecx
push 0x7c088
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x2000d4ac
mov eax, dword [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x2000d59b
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x240], ecx
mov esi, dword [ebp - 0x240]
add esi, 0x36
mov ecx, 0xa
lea edi, [ebp - 0x154]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x12c], 0
push 0x28
lea edx, [ebp - 0x154]
push edx
call fcn.2000d120
add esp, 8
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x2000faa0
call fcn.2000ca30
mov esi, dword [ebp - 0x240]
add esi, 0x2e
mov ecx, 0xa
lea edi, [ebp - 0x154]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x12c], 0
push 0x28
lea ecx, [ebp - 0x154]
push ecx
call fcn.2000d120
add esp, 8
lea edx, [ebp - 0x154]
push edx
mov ecx, 0x2000faa0
call fcn.2000ca30
mov esi, dword [ebp - 0x240]
add esi, 0x14
mov ecx, 0xa
lea edi, [ebp - 0x154]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x12c], 0
push 0x28
lea eax, [ebp - 0x154]
push eax
call fcn.2000d120
add esp, 8
lea ecx, [ebp - 0x154]
push ecx
mov ecx, 0x2000faa0
call fcn.2000ca30
push 0x20002a19
push 0x20002f5c
mov ecx, 0x2000faa0
call fcn.2000d890
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x2000d259
mov eax, 1
xor edx, edx
cpuid
mov dword [ebp - 0x2c8], edx
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
push eax
mov ecx, dword [ebp - 0x2c8]
push ecx
push 0x20002f60
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
mov byte [ebp - 0x128], 0x25
mov byte [ebp - 0x127], 0x30
mov byte [ebp - 0x126], 0x38
mov byte [ebp - 0x125], 0x78
mov byte [ebp - 0x124], 0x25
mov byte [ebp - 0x123], 0x30
mov byte [ebp - 0x122], 0x38
mov byte [ebp - 0x121], 0x78
mov byte [ebp - 0x120], 0
mov eax, dword [ebp - 0x2c4]
push eax
mov ecx, dword [ebp - 0x2c8]
push ecx
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x110]
push ecx
mov ecx, 0x2000faa0
call fcn.2000ca30
mov byte [ebp - 0x174], 0
xor edx, edx
mov dword [ebp - 0x173], edx
mov dword [ebp - 0x16f], edx
mov dword [ebp - 0x16b], edx
mov dword [ebp - 0x167], edx
mov dword [ebp - 0x163], edx
mov dword [ebp - 0x15f], edx
mov dword [ebp - 0x15b], edx
mov word [ebp - 0x157], dx
mov byte [ebp - 0x155], dl
mov dword [ebp - 0x194], 0
lea eax, [ebp - 0x194]
push eax
push 0
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
je 0x2000d6c0
cmp dword [ebp - 0x2cc], 0x6f
je 0x2000d6c0
xor al, al
jmp 0x2000d846
mov ecx, dword [ebp - 0x194]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jne 0x2000d6e5
xor al, al
jmp 0x2000d846
lea edx, [ebp - 0x194]
push edx
mov eax, dword [ebp - 0x118]
push eax
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
je 0x2000d711
mov ecx, dword [ebp - 0x118]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor al, al
jmp 0x2000d846
mov byte [ebp - 0x190], 0x25
mov byte [ebp - 0x18f], 0x30
mov byte [ebp - 0x18e], 0x32
mov byte [ebp - 0x18d], 0x58
mov byte [ebp - 0x18c], 0x25
mov byte [ebp - 0x18b], 0x30
mov byte [ebp - 0x18a], 0x32
mov byte [ebp - 0x189], 0x58
mov byte [ebp - 0x188], 0x25
mov byte [ebp - 0x187], 0x30
mov byte [ebp - 0x186], 0x32
mov byte [ebp - 0x185], 0x58
mov byte [ebp - 0x184], 0x25
mov byte [ebp - 0x183], 0x30
mov byte [ebp - 0x182], 0x32
mov byte [ebp - 0x181], 0x58
mov byte [ebp - 0x180], 0x25
mov byte [ebp - 0x17f], 0x30
mov byte [ebp - 0x17e], 0x32
mov byte [ebp - 0x17d], 0x58
mov byte [ebp - 0x17c], 0x25
mov byte [ebp - 0x17b], 0x30
mov byte [ebp - 0x17a], 0x32
mov byte [ebp - 0x179], 0x58
mov byte [ebp - 0x178], 0
mov edx, dword [ebp - 0x118]
movzx eax, byte [edx + 0x199]
push eax
mov ecx, dword [ebp - 0x118]
movzx edx, byte [ecx + 0x198]
push edx
mov eax, dword [ebp - 0x118]
movzx ecx, byte [eax + 0x197]
push ecx
mov edx, dword [ebp - 0x118]
movzx eax, byte [edx + 0x196]
push eax
mov ecx, dword [ebp - 0x118]
movzx edx, byte [ecx + 0x195]
push edx
mov eax, dword [ebp - 0x118]
movzx ecx, byte [eax + 0x194]
push ecx
lea edx, [ebp - 0x190]
push edx
push 0x2000faa4
call fcn.2000aac0
add esp, 0x20
mov eax, dword [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x2000faa4
mov ecx, 0x2000faa0
call fcn.2000a540
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.2000e122
mov esp, ebp
pop ebp
ret