Function at 0x100a65f
Capabilities:
Get hostname

Disassembly:
push 0xd54
mov eax, 0x101a63a
call fcn.01014600
mov esi, ecx
mov dword [ebp - 0xcb4], esi
xor ebx, ebx
mov dword [ebp - 0xc24], ebx
mov dword [ebp - 0xc2c], ebx
mov dword [ebp - 0xc84], ebx
mov dword [ebp - 0xc40], 1
mov edi, 0x1001378
push edi
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_void___thiscall_CHString::constructor_unsigned_short_int_const__
mov dword [ebp - 4], ebx
push edi
lea ecx, [ebp - 0xc20]
call sub.framedynos.dll_public:_void___thiscall_CHString::constructor_unsigned_short_int_const__
mov byte [ebp - 4], 1
mov dword [ebp - 0xc1c], ebx
mov dword [ebp - 0xc08], ebx
mov dword [ebp - 0xc18], ebx
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xc0c], ebx
mov dword [ebp - 0xc48], ebx
mov dword [ebp - 0xc30], ebx
mov dword [ebp - 0xc34], ebx
mov dword [ebp - 0xc44], ebx
mov edi, 0xfe
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc6c], edi
mov dword [ebp - 0xc3c], edi
push 0x34
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0xc8c], eax
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x100a724
mov ecx, eax
call fcn.01006720
jmp 0x100a726
xor eax, eax
mov byte [ebp - 4], 1
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc28], ebx
mov dword [ebp - 0xc38], ebx
push 4
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0xc00], eax
mov byte [ebp - 4], 3
mov eax, 0x1fc
mov dword [ebp - 0xc68], eax
lea ecx, [ebp - 0xa00]
mov dword [ebp - 0xcec], ecx
cmp dword [ebp - 0xc68], ebx
je 0x100a77e
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xcec], ecx
dec dword [ebp - 0xc68]
jmp 0x100a765
mov dword [ebp - 0xc70], eax
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0xcf0], ecx
cmp dword [ebp - 0xc70], ebx
je 0x100a7a9
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xcf0], ecx
dec dword [ebp - 0xc70]
jmp 0x100a790
mov dword [ebp - 0xc64], eax
lea ecx, [ebp - 0x210]
mov dword [ebp - 0xccc], ecx
cmp dword [ebp - 0xc64], ebx
je 0x100a7d4
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xccc], ecx
dec dword [ebp - 0xc64]
jmp 0x100a7bb
mov dword [ebp - 0xc58], eax
lea ecx, [ebp - 0x804]
mov dword [ebp - 0xcd4], ecx
cmp dword [ebp - 0xc58], ebx
je 0x100a7ff
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xcd4], ecx
dec dword [ebp - 0xc58]
jmp 0x100a7e6
mov dword [ebp - 0xc60], eax
lea eax, [ebp - 0x608]
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0xc60], ebx
je 0x100a82a
mov byte [eax], bl
inc eax
mov dword [ebp - 0xcdc], eax
dec dword [ebp - 0xc60]
jmp 0x100a811
lea eax, [esi + 0x78]
push eax
push 0x162
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push 0x1001f40
lea ecx, [ebp - 0xc88]
call fcn.01004986
mov dword [ebp - 0xd0c], eax
mov byte [ebp - 4], 4
cmp dword [eax], ebx
je 0x100a871
mov eax, dword [eax]
mov dword [ebp - 0xd18], eax
mov eax, dword [eax]
mov dword [ebp - 0xc28], eax
jmp 0x100a877
mov dword [ebp - 0xc28], ebx
mov eax, dword [esi + 0x18]
mov dword [ebp - 0xd30], eax
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0xd38], ecx
push ebx
lea edx, [ebp - 0xc24]
push edx
push dword [ebp - 0xc28]
push ebx
lea edx, [esi + 0x14]
push edx
push dword [esi + 0x30]
push eax
push ecx
lea eax, [ebp - 0xc08]
push eax
push dword [esi]
call fcn.01005276
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc88]
cmp ecx, ebx
je 0x100a8c8
call fcn.0100506e
mov dword [ebp - 0xc88], ebx
cmp dword [ebp - 0xc24], ebx
jge 0x100a8db
push dword [ebp - 0xc24]
call fcn.01014187
push 0x1001890
lea ecx, [ebp - 0xc98]
call fcn.01004986
mov dword [ebp - 0xd40], eax
mov byte [ebp - 4], 5
cmp dword [eax], ebx
je 0x100a90b
mov eax, dword [eax]
mov dword [ebp - 0xd48], eax
mov eax, dword [eax]
mov dword [ebp - 0xc28], eax
jmp 0x100a911
mov dword [ebp - 0xc28], ebx
mov eax, dword [ebp - 0xc08]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xc18]
push edx
push ebx
push ebx
push dword [ebp - 0xc28]
push eax
call dword [ecx + 0x18]
mov dword [ebp - 0xc24], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc98]
cmp ecx, ebx
je 0x100a94c
call fcn.0100506e
mov dword [ebp - 0xc98], ebx
cmp dword [ebp - 0xc24], ebx
jge 0x100a95f
push dword [ebp - 0xc24]
call fcn.01014187
lea eax, [esi + 0x78]
push eax
push 0x16a
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push 0x1001f18
lea ecx, [ebp - 0xc94]
call fcn.01004986
mov dword [ebp - 0xd50], eax
mov byte [ebp - 4], 6
cmp dword [eax], ebx
je 0x100a9a6
mov eax, dword [eax]
mov dword [ebp - 0xd58], eax
mov eax, dword [eax]
mov dword [ebp - 0xc28], eax
jmp 0x100a9ac
mov dword [ebp - 0xc28], ebx
mov eax, dword [ebp - 0xc18]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xc14]
push edx
push ebx
push dword [ebp - 0xc28]
push eax
call dword [ecx + 0x4c]
mov dword [ebp - 0xc24], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc94]
cmp ecx, ebx
je 0x100a9e6
call fcn.0100506e
mov dword [ebp - 0xc94], ebx
cmp dword [ebp - 0xc24], ebx
jge 0x100a9f9
push dword [ebp - 0xc24]
call fcn.01014187
lea eax, [esi + 0x78]
push eax
push 0x163
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push 0x1001f18
lea ecx, [ebp - 0xc7c]
call fcn.01004986
mov dword [ebp - 0xc80], eax
mov byte [ebp - 4], 7
push 0x1001890
lea ecx, [ebp - 0xc90]
call fcn.01004986
mov dword [ebp - 0xd60], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xc80]
cmp dword [ecx], ebx
je 0x100aa60
mov ecx, dword [ecx]
mov dword [ebp - 0xd54], ecx
mov ecx, dword [ecx]
mov dword [ebp - 0xc28], ecx
jmp 0x100aa66
mov dword [ebp - 0xc28], ebx
cmp dword [eax], ebx
je 0x100aa7c
mov eax, dword [eax]
mov dword [ebp - 0xd04], eax
mov eax, dword [eax]
mov dword [ebp - 0xc2c], eax
jmp 0x100aa82
mov dword [ebp - 0xc2c], ebx
mov eax, dword [ebp - 0xc08]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xc0c]
push edx
push dword [ebp - 0xc14]
push ebx
push ebx
push dword [ebp - 0xc28]
push dword [ebp - 0xc2c]
push eax
call dword [ecx + 0x60]
mov dword [ebp - 0xc24], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xc90]
cmp ecx, ebx
je 0x100aac9
call fcn.0100506e
mov dword [ebp - 0xc90], ebx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc7c]
cmp ecx, ebx
je 0x100aae2
call fcn.0100506e
mov dword [ebp - 0xc7c], ebx
cmp dword [ebp - 0xc0c], ebx
jne 0x100aaf4
mov dword [ebp - 0xc24], 0x80004005
cmp dword [ebp - 0xc24], ebx
jge 0x100abe0
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
push 0x34
call fcn.01017157
push eax
mov esi, dword [sym.imp.msvcrt.dll___iob_func]
call esi
add eax, 0x40
push eax
call fcn.01016d99
push 0x5c
call fcn.01017157
push eax
call esi
add eax, 0x40
push eax
call fcn.01016d99
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100ab4f
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100ab65
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100ab7b
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100ab91
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100aba7
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc1c], ebx
mov ecx, dword [ebp - 0xc04]
cmp ecx, ebx
je 0x100abbe
push 1
call fcn.01006b00
mov dword [ebp - 0xc04], ebx
cmp dword [ebp - 0xc00], ebx
je 0x100abd8
push dword [ebp - 0xc00]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc00], ebx
mov byte [ebp - 4], bl
jmp 0x100bb83
push ebx
lea eax, [ebp - 0xc48]
push eax
push 0x1001880
push dword [ebp - 0xc0c]
call fcn.01005b07
cmp eax, ebx
jne 0x100ac06
push 0x800300fd
call fcn.01014187
cmp dword [ebp - 0xc48], ebx
jne 0x100ab00
lea eax, [ebp - 0xcac]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x1001f04
lea ecx, [ebp - 0xc9c]
call fcn.01004986
mov dword [ebp - 0xd34], eax
mov byte [ebp - 4], 9
cmp dword [eax], ebx
je 0x100ac4f
mov eax, dword [eax]
mov dword [ebp - 0xcf8], eax
mov eax, dword [eax]
mov dword [ebp - 0xc2c], eax
jmp 0x100ac55
mov dword [ebp - 0xc2c], ebx
mov eax, dword [ebp - 0xc0c]
mov ecx, dword [eax]
push ebx
push ebx
lea edx, [ebp - 0xcac]
push edx
push ebx
push dword [ebp - 0xc2c]
push eax
call dword [ecx + 0x10]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc9c]
cmp ecx, ebx
je 0x100ac8a
call fcn.0100506e
mov dword [ebp - 0xc9c], ebx
cmp dword [ebp - 0xc24], ebx
jge 0x100acb3
xor eax, eax
mov word [ebp - 0xcac], ax
lea eax, [ebp - 0xcac]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0xc24]
call fcn.01014187
cmp word [ebp - 0xcac], 1
je 0x100b8e2
cmp word [ebp - 0xcac], bx
je 0x100b8e2
mov eax, dword [ebp - 0xcac]
and eax, 0xdfff
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xca4]
mov dword [ebp - 0xc28], eax
cmp eax, ebx
je 0x100ae4b
lea ecx, [ebp - 0xc34]
push ecx
push 1
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov dword [ebp - 0xc24], eax
cmp eax, ebx
jge 0x100ad13
push eax
call fcn.01014187
lea eax, [ebp - 0xc44]
push eax
push 1
push dword [ebp - 0xc28]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov dword [ebp - 0xc24], eax
cmp eax, ebx
jge 0x100ad38
push eax
call fcn.01014187
cmp dword [ebp - 0xc44], 0xffffffff
jne 0x100ae4b
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
push 0x33
call fcn.01017157
push eax
mov esi, dword [sym.imp.msvcrt.dll___iob_func]
call esi
add eax, 0x20
push eax
call fcn.01016d99
push 0x17f
call fcn.01017157
push eax
xor edi, edi
inc edi
push edi
push edi
call esi
add eax, 0x20
push eax
call fcn.01017004
add esp, 0x10
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100ad9f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100adb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100adcb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100ade1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100adf7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc1c], ebx
mov ecx, dword [ebp - 0xc04]
cmp ecx, ebx
je 0x100ae0d
push edi
call fcn.01006b00
mov dword [ebp - 0xc04], ebx
cmp dword [ebp - 0xc00], ebx
je 0x100ae27
push dword [ebp - 0xc00]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc00], ebx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xc20]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
mov eax, edi
jmp 0x100bb9f
cmp dword [esi + 0x44], ebx
jne 0x100af10
mov eax, dword [esi + 0x24]
mov dword [ebp - 0xd4c], eax
push edi
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.0101570a
mov eax, dword [esi + 0x18]
mov dword [ebp - 0xd14], eax
push edi
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.0101570a
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
push ebx
push edi
push dword [esi + 0x30]
push edi
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.01018ccd
cmp eax, 1
je 0x100aedd
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
push 0x34
call fcn.01017157
push eax
mov esi, dword [sym.imp.msvcrt.dll___iob_func]
call esi
add eax, 0x40
push eax
call fcn.01016d99
call fcn.01014c31
jmp 0x100ab2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x100aef8
cmp eax, 0x50010001
je 0x100aef8
cmp eax, 0xa0010001
jne 0x100aefe
mov dword [ebp - 0xc40], ebx
mov ecx, dword [esi + 0x74]
cmp ecx, ebx
je 0x100af10
lea eax, [esi + 0x78]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0xc44]
cmp dword [ebp - 0xc34], eax
jg 0x100b8aa
push dword [ebp - 0xce4]
lea eax, [ebp - 0xc10]
push eax
push dword [ebp - 0xc34]
push dword [ebp - 0xc28]
call fcn.0100440e
cmp eax, ebx
jne 0x100af5a
push 0x800300fd
call fcn.01014187
lea eax, [ebp - 0xc10]
push eax
mov ecx, dword [ebp - 0xc04]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
lea eax, [esi + 0x78]
push eax
push 0x164
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push edi
push dword [ebp - 0xc10]
lea eax, [ebp - 0xa00]
push eax
call fcn.0101570a
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0xa00]
push eax
call sub.ADVAPI32.dll_ConvertStringSidToSidW
push dword [ebp - 0xc00]
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0x40c]
push eax
push dword [ebp - 0xc38]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
mov dword [ebp - 0xc2c], eax
cmp dword [ebp - 0xc38], ebx
je 0x100affe
push dword [ebp - 0xc38]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xc38], ebx
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
cmp dword [ebp - 0xc2c], ebx
jne 0x100b117
inc dword [ebp - 0xc30]
mov eax, dword [ebp - 0xc30]
cmp eax, dword [ebp - 0xc44]
jle 0x100b89f
push 0x1001374
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
cmp dword [ebp + 8], ebx
jne 0x100b0c2
lea ecx, [esi + 0x28]
call sub.framedynos.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd3c], eax
cmp eax, ebx
je 0x100b0b3
push 0x1001370
lea eax, [esi + 0x28]
push eax
lea eax, [ebp - 0xcf4]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0x20]
push ecx
push eax
lea eax, [ebp - 0xcb0]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xcb0]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcf4]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
jmp 0x100b0c2
lea eax, [esi + 0x20]
push eax
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
push dword [ebp - 0xc10]
push 0x4b
call fcn.01017157
push eax
lea eax, [ebp - 0xc20]
push eax
call sub.framedynos.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const__
add esp, 0xc
push 0x33
call fcn.01017157
push eax
call dword [sym.imp.msvcrt.dll___iob_func]
add eax, 0x20
push eax
call fcn.01016d99
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0xd1c], eax
push eax
call dword [sym.imp.msvcrt.dll___iob_func]
add eax, 0x20
push eax
call fcn.01016d99
jmp 0x100b89f
cmp dword [ebp + 8], ebx
jne 0x100b26b
mov eax, dword [esi + 0x20]
mov dword [ebp - 0xd5c], eax
push ebx
push 1
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.01014f64
test eax, eax
jne 0x100b177
mov eax, dword [esi + 0x28]
mov dword [ebp - 0xd24], eax
push ebx
push 1
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.01014f64
test eax, eax
je 0x100b26b
lea ecx, [esi + 0x28]
call sub.framedynos.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd44], eax
cmp eax, ebx
je 0x100b26b
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc6c], edi
inc dword [ebp - 0xc30]
mov eax, dword [ebp - 0xc30]
cmp eax, dword [ebp - 0xc44]
jle 0x100b89f
lea ecx, [esi + 0x28]
call sub.framedynos.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd2c], eax
cmp eax, ebx
je 0x100b217
push 0x1001370
lea eax, [esi + 0x28]
push eax
lea eax, [ebp - 0xcbc]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x20]
push ecx
push eax
lea eax, [ebp - 0xcb8]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xcb8]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcbc]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
jmp 0x100b226
lea eax, [esi + 0x20]
push eax
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
push dword [ebp - 0xc10]
push 0x4b
call fcn.01017157
push eax
lea eax, [ebp - 0xc20]
push eax
call sub.framedynos.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const__
add esp, 0xc
push 0x33
call fcn.01017157
push eax
call dword [sym.imp.msvcrt.dll___iob_func]
add eax, 0x20
push eax
call fcn.01016d99
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0xcfc], eax
jmp 0x100b102
mov ecx, dword [ebp - 0xc04]
add ecx, 4
lea eax, [ebp - 0x40c]
push eax
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
push edi
push 0x1001370
lea eax, [ebp - 0x804]
push eax
call fcn.01015c73
mov eax, dword [ebp - 0xc04]
add eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd00], eax
push edi
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.01015c73
lea eax, [ebp - 0x804]
push eax
mov ecx, dword [ebp - 0xc04]
add ecx, 4
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
cmp dword [esi + 0x60], ebx
jne 0x100b5ea
lea eax, [esi + 0x78]
push eax
push 0x165
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push dword [ebp - 0xc04]
mov ecx, esi
call fcn.010070a6
test eax, eax
jne 0x100b409
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
push 0x34
call fcn.01017157
push eax
call dword [sym.imp.msvcrt.dll___iob_func]
add eax, 0x40
push eax
call fcn.01016d99
push 0x5c
call fcn.01017157
push eax
call dword [sym.imp.msvcrt.dll___iob_func]
add eax, 0x40
push eax
call fcn.01016d99
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100b34c
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100b362
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100b378
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100b38e
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100b3a4
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc1c], ebx
push 1
mov ecx, dword [ebp - 0xc04]
call fcn.01006b00
mov dword [ebp - 0xc04], ebx
cmp dword [ebp - 0xc00], ebx
je 0x100b3d1
push dword [ebp - 0xc00]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc00], ebx
cmp dword [esi + 0x44], ebx
jne 0x100abd8
cmp dword [ebp - 0xc40], 1
jne 0x100abd8
mov esi, dword [esi + 0x24]
push edi
push esi
lea eax, [ebp - 0x210]
push eax
call fcn.0101570a
lea eax, [ebp - 0x210]
push eax
call fcn.01018af5
jmp 0x100abd8
cmp dword [ebp - 0xc84], ebx
jne 0x100b515
lea eax, [esi + 0x78]
push eax
push 0x166
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push dword [ebp - 0xc04]
mov ecx, esi
call fcn.01007f2c
test eax, eax
je 0x100b2fb
cmp dword [esi + 0x44], 1
jne 0x100b467
mov dword [ebp - 0xc48], edi
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
call sub.Secur32.dll_GetComputerObjectNameW
jmp 0x100b4f6
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xbfc]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov eax, dword [esi + 0x50]
mov dword [ebp - 0xd08], eax
push edi
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.0101570a
push edi
push 0x1001f00
lea eax, [ebp - 0x210]
push eax
call fcn.01015c73
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [esi + 0x4c]
call fcn.010044cf
test eax, eax
jne 0x100b4df
mov dword [ebp - 0xc3c], edi
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
push 3
lea eax, [ebp - 0x210]
push eax
call sub.Secur32.dll_TranslateNameW
jmp 0x100b4f6
lea eax, [ebp - 0x210]
push eax
push 1
lea eax, [ebp - 0x608]
push eax
mov ecx, esi
call fcn.01006a74
lea eax, [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0xc04]
add ecx, 0x30
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
mov dword [ebp - 0xc84], 1
cmp dword [esi + 0x44], 1
je 0x100b565
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [esi + 0x4c]
call fcn.010044cf
test eax, eax
je 0x100b565
mov eax, dword [ebp - 0xc04]
add eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd10], eax
push edi
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.0101570a
lea eax, [ebp - 0x40c]
push eax
push ebx
lea eax, [ebp - 0x608]
push eax
mov ecx, esi
call fcn.01006a74
jmp 0x100b5d5
mov dword [ebp - 0xc4c], 0x1fc
lea eax, [ebp - 0x608]
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0xc4c], ebx
je 0x100b594
mov byte [eax], bl
inc eax
mov dword [ebp - 0xcd8], eax
dec dword [ebp - 0xc4c]
jmp 0x100b57b
mov dword [ebp - 0xc3c], edi
mov eax, dword [ebp - 0xc04]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc4], eax
push edi
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.0101570a
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
push 2
lea eax, [ebp - 0x40c]
push eax
call sub.Secur32.dll_TranslateNameW
lea eax, [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0xc04]
add ecx, 0x2c
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
lea eax, [esi + 0x78]
push eax
push 0x15f
call fcn.01017157
push eax
push dword [esi + 0x74]
call fcn.010037d1
push dword [ebp - 0xc08]
push dword [ebp - 0xc04]
mov ecx, esi
call fcn.0100948c
test eax, eax
jne 0x100b691
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100b62e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100b644
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100b65a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100b670
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100b686
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc1c], ebx
mov ecx, dword [ebp - 0xc04]
jmp 0x100abb1
mov ecx, esi
cmp dword [esi + 0x60], ebx
jne 0x100b78b
push dword [ebp - 0xc04]
call fcn.01009e6a
test eax, eax
jne 0x100b790
push dword [ebp - 0xc08]
lea eax, [esi + 0x5c]
push ecx
mov ecx, esp
mov dword [ebp - 0xcc4], esp
push eax
call sub.framedynos.dll_public:_void___thiscall_CHString::constructor_class_CHString_const__
mov byte [ebp - 4], 0xe
push dword [esi + 0x10]
mov byte [ebp - 4], 3
call fcn.01007c74
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100b6ed
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100b703
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100b719
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100b72f
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100b745
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebp - 0xc1c], ebx
push 1
mov ecx, dword [ebp - 0xc04]
call fcn.01006b00
mov dword [ebp - 0xc04], ebx
cmp dword [ebp - 0xc00], ebx
je 0x100b772
push dword [ebp - 0xc00]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc00], ebx
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x100abd8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esi + 0x10], ebx
jmp 0x100abd8
call fcn.01006b26
push dword [ebp - 0xc08]
lea eax, [esi + 0x5c]
push ecx
mov ecx, esp
mov dword [ebp - 0xd20], esp
push eax
call sub.framedynos.dll_public:_void___thiscall_CHString::constructor_class_CHString_const__
mov byte [ebp - 4], 0xf
push dword [esi + 0x10]
mov byte [ebp - 4], 3
call fcn.01007c74
cmp eax, ebx
je 0x100b6d7
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x100b7d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esi + 0x10], ebx
mov eax, dword [esi + 0x74]
cmp eax, ebx
je 0x100b7e2
lea ecx, [esi + 0x78]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, 0x1fc
mov dword [ebp - 0xc78], eax
lea ecx, [ebp - 0xa00]
mov dword [ebp - 0xcc0], ecx
cmp dword [ebp - 0xc78], ebx
je 0x100b812
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xcc0], ecx
dec dword [ebp - 0xc78]
jmp 0x100b7f9
mov dword [ebp - 0xc54], eax
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0xce8], ecx
cmp dword [ebp - 0xc54], ebx
je 0x100b83d
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xce8], ecx
dec dword [ebp - 0xc54]
jmp 0x100b824
mov dword [ebp - 0xc50], eax
lea ecx, [ebp - 0x210]
mov dword [ebp - 0xcc8], ecx
cmp dword [ebp - 0xc50], ebx
je 0x100b868
mov byte [ecx], bl
inc ecx
mov dword [ebp - 0xcc8], ecx
dec dword [ebp - 0xc50]
jmp 0x100b84f
mov dword [ebp - 0xc74], eax
lea eax, [ebp - 0x804]
mov dword [ebp - 0xce0], eax
cmp dword [ebp - 0xc74], ebx
je 0x100b893
mov byte [eax], bl
inc eax
mov dword [ebp - 0xce0], eax
dec dword [ebp - 0xc74]
jmp 0x100b87a
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc6c], edi
inc dword [ebp - 0xc34]
jmp 0x100af1c
cmp dword [esi + 0x44], ebx
jne 0x100b9ab
cmp dword [ebp - 0xc40], 1
jne 0x100b9ab
mov esi, dword [esi + 0x24]
push edi
push esi
lea eax, [ebp - 0x210]
push eax
call fcn.0101570a
lea eax, [ebp - 0x210]
push eax
call fcn.01018af5
jmp 0x100b9ab
lea eax, [esi + 0x78]
push eax
push ebx
push dword [esi + 0x74]
call fcn.010037d1
lea edi, [esi + 0x28]
mov ecx, edi
call sub.framedynos.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
cmp dword [eax + 4], ebx
je 0x100b955
push 0x1001370
push edi
lea eax, [ebp - 0xc8c]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0x10
add esi, 0x20
push esi
push eax
lea eax, [ebp - 0xcd0]
push eax
call sub.framedynos.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xcd0]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc8c]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
jmp 0x100b964
add esi, 0x20
push esi
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
push dword [ebp - 0xc10]
push 0x4b
call fcn.01017157
push eax
lea eax, [ebp - 0xc20]
push eax
call sub.framedynos.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const__
add esp, 0xc
push 0x33
call fcn.01017157
push eax
mov esi, dword [sym.imp.msvcrt.dll___iob_func]
call esi
add eax, 0x20
push eax
call fcn.01016d99
push dword [ebp - 0xc20]
call esi
add eax, 0x20
push eax
call fcn.01016d99
lea eax, [ebp - 0xcac]
push eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call edi
xor esi, esi
inc esi
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0xc08]
cmp eax, ebx
je 0x100b9d6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc18]
cmp eax, ebx
je 0x100b9ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc18], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100ba02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc14], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100ba18
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc1c]
cmp eax, ebx
je 0x100ba28
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc04]
cmp ecx, ebx
je 0x100ba38
push esi
call fcn.01006b00
cmp dword [ebp - 0xc00], ebx
je 0x100ba4c
push dword [ebp - 0xc00]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
lea eax, [ebp - 0xcac]
push eax
call edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xc20]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
mov eax, esi
jmp 0x100bb9f
lea ecx, [ebp - 0xc20]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc10]
call sub.framedynos.dll_public:_void___thiscall_CHString::destructor_void_
xor eax, eax
call fcn.0101466b
ret 4