Function at 0x40be67
Capabilities:
Connect to wmi namespace via wbemlocator
Get hostname
Query or enumerate registry value
Reference sql statements
Reference wmi statements

Disassembly:
mov eax, 0x41c7c0
call fcn.0041be90
sub esp, 0x728
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
push ebx
push ebx
push ebx
push 3
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp eax, ebx
jge 0x40bea7
cmp eax, 0x80010119
jne 0x40c45f
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x34]
mov dword [ebp - 4], ebx
push eax
push 0x41dde4
push 1
push ebx
push 0x41deb4
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x40c446
mov dword [ebp - 0x2c], ebx
push str.ROOTCIMV2
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
push edx
push ebx
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
mov byte [ebp - 4], 2
push eax
call dword [ecx + 0xc]
push dword [ebp - 0x30]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov esi, eax
call edi
cmp esi, ebx
jl 0x40c42e
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push dword [ebp - 0x2c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
cmp eax, ebx
jl 0x40c42e
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
mov dword [ebp - 0x118], str.SELECT__FROM_Win32_BIOS_WHERE__SerialNumber_IS_NOT_NULL_
mov dword [ebp - 0x114], str.SoftwareElementID
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], str.SELECT__FROM_Win32_Processor_WHERE__ProcessorId_IS_NOT_NULL_
mov dword [ebp - 0x108], str.ProcessorId
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], str.SELECT__FROM_Win32_DiskDrive_WHERE__PNPDeviceID_IS_NOT_NULL__AND__NOT__InterfaceType__USB__
mov dword [ebp - 0xfc], str.Signature
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], str.SELECT__FROM_Win32_NetworkAdapter_WHERE__MACAddress_IS_NOT_NULL__AND__NOT__PNPDeviceID_LIKE_ROOT___
mov dword [ebp - 0xf0], str.MACAddress
mov dword [ebp - 0xec], 1
mov dword [ebp - 0xe8], str.SELECT__FROM_Win32_BaseBoard_WHERE__SerialNumber_IS_NOT_NULL_
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], str.SELECT__FROM_Win32_OperatingSystem
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], str.SELECT__FROM_Win32_PhysicalMemory
mov dword [ebp - 0xcc], str.PartNumber
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], str.SELECT__FROM_Win32_UserAccount
mov dword [ebp - 0xc0], 0x423358
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], 0x4232d8
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x4c], 0x1b
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x4c]
jge 0x40c434
mov dword [ebp - 0x28], ebx
push dword [ebp + eax*4 - 0x118]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 0x4232d4
mov byte [ebp - 4], 4
call fcn.0040d23d
pop ecx
mov dword [ebp - 0x20], eax
pop ecx
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
push edx
push ebx
mov ecx, dword [eax]
push 0x30
push dword [ebp - 0x1c]
mov byte [ebp - 4], 5
push dword [ebp - 0x20]
push eax
call dword [ecx + 0x50]
push dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
call edi
push dword [ebp - 0x1c]
mov byte [ebp - 4], 3
call edi
cmp dword [ebp - 0x14], ebx
jl 0x40c3ea
cmp dword [ebp - 0x28], ebx
je 0x40c3ea
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x44], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x40c3af
mov dword [ebp - 0x1c], ebx
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x20], 0x80004005
push edx
push 1
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 8
call dword [ecx + 0x10]
mov dword [ebp - 0x20], eax
jmp 0x40c0e8
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 4], 7
jl 0x40c39e
cmp dword [ebp - 0x1c], ebx
je 0x40c39e
cmp dword [ebp - 0x30], ebx
je 0x40c39e
push 0x4232cc
call esi
pop ecx
push eax
push 0x4232cc
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov byte [ebp - 0x15], bl
mov word [ebp - 0x6c], bx
push 0xffffffffffffffff
push 0x4232bc
mov byte [ebp - 4], 0xa
call fcn.0040d23d
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
mov eax, dword [ebp - 0x1c]
push ebx
lea edx, [ebp - 0x6c]
push ebx
mov ecx, dword [eax]
push edx
push ebx
mov byte [ebp - 4], 0xb
push dword [ebp - 0x14]
push eax
call dword [ecx + 0x10]
push dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xa
call edi
cmp dword [ebp - 0x20], ebx
jl 0x40c18b
cmp word [ebp - 0x6c], 8
jne 0x40c18b
mov eax, dword [ebp - 0x64]
cmp eax, ebx
je 0x40c18b
push eax
mov dword [ebp - 0x14], eax
call esi
pop ecx
push eax
lea ecx, [ebp - 0x44]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov byte [ebp - 0x15], 1
mov word [ebp - 0x7c], bx
push 0xffffffffffffffff
push str.PNPDeviceID
mov byte [ebp - 4], 0xc
call fcn.0040d23d
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
mov eax, dword [ebp - 0x1c]
push ebx
lea edx, [ebp - 0x7c]
push ebx
mov ecx, dword [eax]
push edx
push ebx
mov byte [ebp - 4], 0xd
push dword [ebp - 0x14]
push eax
call dword [ecx + 0x10]
push dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xc
call edi
cmp dword [ebp - 0x20], ebx
jl 0x40c1f2
cmp word [ebp - 0x7c], 8
jne 0x40c1f2
mov eax, dword [ebp - 0x74]
cmp eax, ebx
je 0x40c1f2
push eax
mov dword [ebp - 0x14], eax
call esi
pop ecx
push eax
lea ecx, [ebp - 0x44]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov byte [ebp - 0x15], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x114]
cmp eax, ebx
je 0x40c25e
mov word [ebp - 0x9c], bx
mov ecx, dword [ebp - 0x1c]
push ebx
lea edx, [ebp - 0x9c]
push ebx
mov ecx, dword [ecx]
push edx
push ebx
push eax
push dword [ebp - 0x1c]
mov byte [ebp - 4], 0xe
call dword [ecx + 0x10]
cmp eax, ebx
jl 0x40c251
cmp word [ebp - 0x9c], 8
jne 0x40c251
mov eax, dword [ebp - 0x94]
cmp eax, ebx
je 0x40c251
push eax
mov dword [ebp - 0x14], eax
call esi
pop ecx
push eax
lea ecx, [ebp - 0x44]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov byte [ebp - 0x15], 1
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [ebp - 0x15], bl
je 0x40c37e
mov word [ebp - 0x5c], bx
push 0xffffffffffffffff
push str.name
mov byte [ebp - 4], 0xf
call fcn.0040d23d
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
mov eax, dword [ebp - 0x1c]
push ebx
lea edx, [ebp - 0x5c]
push ebx
mov ecx, dword [eax]
push edx
push ebx
mov byte [ebp - 4], 0x10
push dword [ebp - 0x14]
push eax
call dword [ecx + 0x10]
push dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xf
call edi
cmp dword [ebp - 0x20], ebx
jl 0x40c2e1
cmp word [ebp - 0x5c], 8
jne 0x40c2e1
mov eax, dword [ebp - 0x54]
cmp eax, ebx
je 0x40c2e1
push eax
mov dword [ebp - 0x14], eax
call esi
pop ecx
push eax
lea ecx, [ebp - 0x44]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
push 0x4232a4
call esi
pop ecx
push eax
push 0x4232a4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov word [ebp - 0xac], bx
push 0xffffffffffffffff
push str.Manufacturer
mov byte [ebp - 4], 0x11
call fcn.0040d23d
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
mov eax, dword [ebp - 0x1c]
push ebx
lea edx, [ebp - 0xac]
push ebx
mov ecx, dword [eax]
push edx
push ebx
mov byte [ebp - 4], 0x12
push dword [ebp - 0x14]
push eax
call dword [ecx + 0x10]
push dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x11
call edi
cmp dword [ebp - 0x20], ebx
jl 0x40c367
cmp word [ebp - 0xac], 8
jne 0x40c367
mov eax, dword [ebp - 0xa4]
cmp eax, ebx
je 0x40c367
push eax
mov dword [ebp - 0x14], eax
call esi
pop ecx
push eax
lea ecx, [ebp - 0x44]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
push 0x4232a4
call esi
pop ecx
push eax
push 0x4232a4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x110], ebx
lea eax, [ebp - 0x7c]
push eax
jne 0x40c404
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x40c3af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x423290
call esi
pop ecx
mov ecx, dword [ebp + 8]
push eax
push 0x423290
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov ecx, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x44]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 1
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x40c3fb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
add dword [ebp - 0x24], 3
jmp 0x40c019
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x40c0a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x40c0a1
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x40c44c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x40c44c
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
mov eax, dword [ebp - 0x34]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x40c465
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x40c465
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
mov eax, dword [ebp + 8]
cmp dword [eax + 8], ebx
jne 0x40c5fc
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x31e]
mov word [ebp - 0x320], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x24]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x28]
push eax
push str.MachineGuid
push str.SOFTWAREMicrosoftCryptography
push edi
mov dword [ebp - 0x24], 0x206
mov dword [ebp - 0x28], 1
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x40c4e9
cmp word [ebp - 0x320], bx
je 0x40c4e9
lea eax, [ebp - 0x320]
push eax
call esi
pop ecx
mov ecx, dword [ebp + 8]
push eax
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
jmp 0x40c58a
call fcn.00403e39
test eax, eax
je 0x40c58a
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
push eax
push 0x20119
push ebx
push str.SOFTWAREMicrosoftCryptography
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40c58a
cmp dword [ebp - 0x2c], ebx
je 0x40c58a
push 0x208
lea eax, [ebp - 0x320]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x206
mov dword [ebp - 0x28], 1
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x28]
push eax
push ebx
push str.MachineGuid
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x40c581
cmp word [ebp - 0x320], bx
je 0x40c581
lea eax, [ebp - 0x320]
push eax
call esi
pop ecx
mov ecx, dword [ebp + 8]
push eax
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x526]
mov word [ebp - 0x528], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x28], 1
push eax
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x28]
push eax
push str.Default_User_ID
push str.Identities
push SysReAllocString
mov dword [ebp - 0x24], 0x206
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x40c5fc
cmp word [ebp - 0x528], bx
je 0x40c5fc
lea eax, [ebp - 0x528]
push eax
call esi
pop ecx
mov ecx, dword [ebp + 8]
push eax
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0x8c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], 0x13
push eax
mov byte [ebp - 4], 0x14
call fcn.0040bc0f
pop ecx
jmp 0x40c63a
mov eax, dword [ebp - 0x88]
mov dword [ebp - 4], 0x13
cmp eax, ebx
jne 0x40c650
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004032c2
pop ecx
pop ecx
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov byte [ebp - 4], 0x16
push dword [ecx]
mov ecx, dword [ebp + 8]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0x732]
mov word [ebp - 0x734], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x104
push eax
lea eax, [ebp - 0x734]
push eax
push 4
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea eax, [ebp - 0x734]
push eax
call esi
pop ecx
mov ecx, dword [ebp + 8]
push eax
lea eax, [ebp - 0x734]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const___unsigned_int_]
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov ecx, dword [ebp - 0xc]
push 1
pop eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret