Function at 0x100a145
Capabilities:
Get hostname

Disassembly:
mov eax, 0x1016373
call fcn.010159b8
sub esp, 0xd74
mov eax, dword [0x1019060]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0xca8], esi
xor ebx, ebx
mov dword [ebp - 0xc18], ebx
mov dword [ebp - 0xc64], ebx
mov dword [ebp - 0xc30], 1
mov edi, 0x1001324
push edi
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_void___thiscall_CHString::constructor_unsigned_short_int_const__
mov dword [ebp - 4], ebx
push edi
lea ecx, [ebp - 0xc24]
call sub.framedyn.dll_public:_void___thiscall_CHString::constructor_unsigned_short_int_const__
mov byte [ebp - 4], 1
mov dword [ebp - 0xc20], ebx
mov dword [ebp - 0xc00], ebx
mov dword [ebp - 0xc10], ebx
mov dword [ebp - 0xc0c], ebx
mov dword [ebp - 0xc04], ebx
mov dword [ebp - 0xc44], ebx
mov dword [ebp - 0xc28], ebx
mov dword [ebp - 0xc3c], ebx
mov eax, 0xfe
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc4c], eax
mov dword [ebp - 0xc38], eax
push 0x30
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0xcbc], eax
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x100a20d
mov ecx, eax
call fcn.010060e0
jmp 0x100a20f
xor eax, eax
mov dword [ebp - 0xc34], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0xc08], eax
mov dword [ebp - 0xc40], ebx
push 4
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0xc14], eax
mov byte [ebp - 4], 3
push 0x7f
pop edx
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0xa00]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x40c]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x210]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x804]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x608]
rep stosd dword es:[edi], eax
lea eax, [esi + 0x5c]
push eax
push 0x162
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push 0x1001eb4
lea ecx, [ebp - 0xc58]
call fcn.0100425c
mov dword [ebp - 0xd50], eax
mov byte [ebp - 4], 4
mov eax, dword [eax]
cmp eax, ebx
je 0x100a2a9
mov eax, dword [eax]
jmp 0x100a2ab
xor eax, eax
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0xd58], ecx
mov edx, dword [esi + 0x20]
mov dword [ebp - 0xd60], edx
push ebx
lea edi, [ebp - 0xc18]
push edi
push eax
push ebx
lea eax, [esi + 0x10]
push eax
push dword [esi + 0x28]
push ecx
push edx
lea eax, [ebp - 0xc00]
push eax
push dword [esi]
call fcn.01004db5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc58]
cmp ecx, ebx
je 0x100a2f7
call fcn.01004968
mov dword [ebp - 0xc58], ebx
cmp dword [ebp - 0xc18], ebx
jge 0x100a30a
push dword [ebp - 0xc18]
call fcn.010155f5
push 0x100189c
lea ecx, [ebp - 0xc54]
call fcn.0100425c
mov dword [ebp - 0xd68], eax
mov byte [ebp - 4], 5
mov eax, dword [eax]
cmp eax, ebx
je 0x100a32e
mov eax, dword [eax]
jmp 0x100a330
xor eax, eax
mov ecx, dword [ebp - 0xc00]
mov edx, dword [ecx]
push ebx
lea edi, [ebp - 0xc10]
push edi
push ebx
push ebx
push eax
push ecx
call dword [edx + 0x18]
mov dword [ebp - 0xc18], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc54]
cmp ecx, ebx
je 0x100a366
call fcn.01004968
mov dword [ebp - 0xc54], ebx
cmp dword [ebp - 0xc18], ebx
jge 0x100a379
push dword [ebp - 0xc18]
call fcn.010155f5
lea eax, [esi + 0x5c]
push eax
push 0x16a
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
mov edi, 0x1001e8c
push edi
lea ecx, [ebp - 0xc70]
call fcn.0100425c
mov dword [ebp - 0xd70], eax
mov byte [ebp - 4], 6
mov eax, dword [eax]
cmp eax, ebx
je 0x100a3bb
mov eax, dword [eax]
mov dword [ebp - 0xc68], eax
jmp 0x100a3c1
mov dword [ebp - 0xc68], ebx
mov ecx, dword [ebp - 0xc10]
mov eax, dword [ecx]
push ebx
lea edx, [ebp - 0xc0c]
push edx
push ebx
push dword [ebp - 0xc68]
push ecx
call dword [eax + 0x4c]
mov dword [ebp - 0xc18], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc70]
cmp ecx, ebx
je 0x100a3fb
call fcn.01004968
mov dword [ebp - 0xc70], ebx
cmp dword [ebp - 0xc18], ebx
jge 0x100a40e
push dword [ebp - 0xc18]
call fcn.010155f5
lea eax, [esi + 0x5c]
push eax
push 0x163
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push edi
lea ecx, [ebp - 0xc5c]
call fcn.0100425c
mov edi, eax
mov dword [ebp - 0xd78], edi
mov byte [ebp - 4], 7
push 0x100189c
lea ecx, [ebp - 0xc6c]
call fcn.0100425c
mov ecx, eax
mov dword [ebp - 0xd80], ecx
mov byte [ebp - 4], 8
mov eax, dword [edi]
cmp eax, ebx
je 0x100a469
mov eax, dword [eax]
mov dword [ebp - 0xc78], eax
jmp 0x100a46f
mov dword [ebp - 0xc78], ebx
mov ecx, dword [ecx]
cmp ecx, ebx
je 0x100a479
mov edx, dword [ecx]
jmp 0x100a47b
xor edx, edx
mov ecx, dword [ebp - 0xc00]
mov eax, dword [ecx]
push ebx
lea edi, [ebp - 0xc04]
push edi
push dword [ebp - 0xc0c]
push ebx
push ebx
push dword [ebp - 0xc78]
push edx
push ecx
call dword [eax + 0x60]
mov dword [ebp - 0xc18], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xc6c]
cmp ecx, ebx
je 0x100a4bd
call fcn.01004968
mov dword [ebp - 0xc6c], ebx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc5c]
cmp ecx, ebx
je 0x100a4d6
call fcn.01004968
mov dword [ebp - 0xc5c], ebx
cmp dword [ebp - 0xc04], ebx
jne 0x100a4e8
mov dword [ebp - 0xc18], 0x80004005
cmp dword [ebp - 0xc18], ebx
jge 0x100a5d0
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push 0x5c
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100a543
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100a559
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100a56f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100a585
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov ecx, dword [ebp - 0xc34]
cmp ecx, ebx
je 0x100a5a8
mov dword [ebp - 0xcb4], ecx
mov dword [ebp - 0xd1c], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100a5c5
mov dword [ebp - 0xcac], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xd74], ebx
jmp 0x100b630
push ebx
lea eax, [ebp - 0xc44]
push eax
push 0x100188c
push dword [ebp - 0xc04]
call fcn.0100562c
mov dword [ebp - 0xc48], eax
cmp eax, ebx
jne 0x100a5fc
push 0x800300fd
call fcn.010155f5
cmp dword [ebp - 0xc44], ebx
je 0x100a6e4
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push 0x5c
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100a657
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100a66d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100a683
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100a699
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov ecx, dword [ebp - 0xc34]
cmp ecx, ebx
je 0x100a6bc
mov dword [ebp - 0xcc4], ecx
mov dword [ebp - 0xd24], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100a6d9
mov dword [ebp - 0xccc], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xd54], ebx
jmp 0x100b630
lea eax, [ebp - 0xc88]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x1001e78
lea ecx, [ebp - 0xc74]
call fcn.0100425c
mov dword [ebp - 0xcd4], eax
mov byte [ebp - 4], 9
mov eax, dword [eax]
cmp eax, ebx
je 0x100a715
mov eax, dword [eax]
jmp 0x100a717
xor eax, eax
mov ecx, dword [ebp - 0xc04]
mov edx, dword [ecx]
push ebx
push ebx
lea edi, [ebp - 0xc88]
push edi
push ebx
push eax
push ecx
call dword [edx + 0x10]
mov dword [ebp - 0xc18], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc74]
cmp ecx, ebx
je 0x100a74d
call fcn.01004968
mov dword [ebp - 0xc74], ebx
cmp dword [ebp - 0xc18], ebx
jge 0x100a767
mov word [ebp - 0xc88], bx
push dword [ebp - 0xc18]
call fcn.010155f5
xor edi, edi
inc edi
cmp word [ebp - 0xc88], di
je 0x100b3c8
cmp word [ebp - 0xc88], bx
je 0x100b3c8
mov eax, dword [ebp - 0xc88]
and ax, 0xdfff
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc60], eax
cmp eax, ebx
je 0x100a8d8
lea ecx, [ebp - 0xc28]
push ecx
push edi
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov dword [ebp - 0xc18], eax
cmp eax, ebx
jge 0x100a7c7
push eax
call fcn.010155f5
lea eax, [ebp - 0xc3c]
push eax
push edi
push dword [ebp - 0xc60]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov dword [ebp - 0xc18], eax
cmp eax, ebx
jge 0x100a7eb
push eax
call fcn.010155f5
cmp dword [ebp - 0xc3c], 0xffffffff
jne 0x100a8d8
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x33
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01013236
push 0x201b
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.010134be
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100a84a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100a860
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100a876
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100a88c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov ecx, dword [ebp - 0xc34]
cmp ecx, ebx
je 0x100a8ae
mov dword [ebp - 0xd2c], ecx
mov dword [ebp - 0xcdc], ecx
push edi
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100a8cb
mov dword [ebp - 0xd6c], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xce4], edi
mov esi, edi
jmp 0x100b632
cmp dword [esi + 0x3c], ebx
jne 0x100aa4e
mov eax, dword [esi + 0x20]
mov dword [ebp - 0xd34], eax
push eax
lea eax, [ebp - 0x210]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
call edi
mov eax, dword [esi + 0x14]
mov dword [ebp - 0xcec], eax
push eax
lea eax, [ebp - 0x40c]
push eax
call edi
lea edi, [esi + 0x5c]
push edi
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push ebx
mov eax, 0xfe
push eax
push dword [esi + 0x28]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.01014adc
mov dword [ebp - 0xc48], eax
cmp eax, 1
je 0x100aa1e
push edi
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
call fcn.0101275e
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100a991
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100a9a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100a9bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100a9d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov ecx, dword [ebp - 0xc34]
cmp ecx, ebx
je 0x100a9f6
mov dword [ebp - 0xd5c], ecx
mov dword [ebp - 0xcf4], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100aa13
mov dword [ebp - 0xd3c], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xcfc], ebx
jmp 0x100b630
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x100aa39
cmp eax, 0x50010001
je 0x100aa39
cmp eax, 0xa0010001
jne 0x100aa3f
mov dword [ebp - 0xc30], ebx
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x100aa4e
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0xc3c]
cmp dword [ebp - 0xc28], eax
jg 0x100b38a
push dword [ebp - 0xc98]
lea eax, [ebp - 0xc1c]
push eax
push dword [ebp - 0xc28]
push dword [ebp - 0xc60]
call fcn.01003da4
mov dword [ebp - 0xc48], eax
cmp eax, ebx
jne 0x100aa9e
push 0x800300fd
call fcn.010155f5
lea eax, [ebp - 0xc1c]
push eax
mov ecx, dword [ebp - 0xc08]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
lea edi, [esi + 0x5c]
push edi
push 0x164
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push dword [ebp - 0xc1c]
lea eax, [ebp - 0xa00]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0xa00]
push eax
call dword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
push dword [ebp - 0xc14]
lea eax, [ebp - 0xc4c]
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0xc50]
push eax
lea eax, [ebp - 0x40c]
push eax
push dword [ebp - 0xc40]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
mov dword [ebp - 0xc48], eax
push edi
push ebx
push dword [esi + 0x58]
call fcn.0100336c
cmp dword [ebp - 0xc48], ebx
jne 0x100abe5
inc dword [ebp - 0xc2c]
mov eax, dword [ebp - 0xc2c]
cmp eax, dword [ebp - 0xc3c]
jle 0x100b37f
push 0x1001320
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
cmp dword [ebp + 8], ebx
jne 0x100ad0d
lea edi, [esi + 0x24]
mov ecx, edi
call sub.framedyn.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd7c], eax
cmp eax, ebx
je 0x100acfe
push 0x10012ec
push edi
lea eax, [ebp - 0xca4]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0x1c]
push ecx
push eax
lea eax, [ebp - 0xc94]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc94]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xca4]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
jmp 0x100ad0d
cmp dword [ebp - 0xc40], ebx
je 0x100abff
push dword [ebp - 0xc40]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xc40], ebx
cmp dword [ebp + 8], ebx
jne 0x100ad59
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0xd04], eax
push eax
lea eax, [ebp - 0x40c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100ac5c
lea edi, [esi + 0x24]
mov eax, dword [edi]
mov dword [ebp - 0xd44], eax
push eax
lea eax, [ebp - 0x804]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x100ad59
mov ecx, edi
call sub.framedyn.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd0c], eax
cmp eax, ebx
je 0x100ad59
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
mov eax, 0xfe
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc4c], eax
inc dword [ebp - 0xc2c]
mov eax, dword [ebp - 0xc2c]
cmp eax, dword [ebp - 0xc3c]
jle 0x100b37f
lea edi, [esi + 0x24]
mov ecx, edi
call sub.framedyn.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd64], eax
cmp eax, ebx
je 0x100acfe
push 0x10012ec
push edi
lea eax, [ebp - 0xc90]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x1c]
push ecx
push eax
lea eax, [ebp - 0xc9c]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc9c]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc90]
jmp 0x100abdb
lea eax, [esi + 0x1c]
push eax
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
push dword [ebp - 0xc1c]
push 0x4b
call fcn.01013515
push eax
lea eax, [ebp - 0xc24]
push eax
call sub.framedyn.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const__
add esp, 0xc
push 0x33
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push dword [ebp - 0xc24]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
jmp 0x100b37f
mov edi, dword [ebp - 0xc08]
add edi, 4
lea eax, [ebp - 0x40c]
push eax
mov ecx, edi
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
push 0x10012ec
lea eax, [ebp - 0x804]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [edi]
mov dword [ebp - 0xd14], eax
push eax
lea eax, [ebp - 0x804]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x804]
push eax
mov ecx, edi
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
lea eax, [esi + 0x5c]
push eax
push 0x165
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push dword [ebp - 0xc08]
mov ecx, esi
call fcn.01006c3d
test eax, eax
jne 0x100aef1
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push 0x5c
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100ae21
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100ae37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100ae4d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100ae63
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov eax, dword [ebp - 0xc20]
cmp eax, ebx
je 0x100ae79
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc20], ebx
mov ecx, dword [ebp - 0xc08]
mov dword [ebp - 0xd4c], ecx
mov dword [ebp - 0xcb0], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100aeb5
mov dword [ebp - 0xcb8], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
cmp dword [esi + 0x3c], ebx
jne 0x100aee6
cmp dword [ebp - 0xc30], 1
jne 0x100aee6
mov esi, dword [esi + 0x20]
mov dword [ebp - 0xcc0], esi
push esi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x210]
push eax
call fcn.01014895
mov dword [ebp - 0xcc8], ebx
jmp 0x100b630
cmp dword [ebp - 0xc64], ebx
jne 0x100b258
lea eax, [esi + 0x5c]
push eax
push 0x166
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push dword [ebp - 0xc08]
mov ecx, esi
call fcn.01006e04
test eax, eax
jne 0x100b048
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push 0x5c
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100af78
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100af8e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100afa4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100afba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov eax, dword [ebp - 0xc20]
cmp eax, ebx
je 0x100afd0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc20], ebx
mov ecx, dword [ebp - 0xc08]
mov dword [ebp - 0xcd0], ecx
mov dword [ebp - 0xcd8], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100b00c
mov dword [ebp - 0xce0], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
cmp dword [esi + 0x3c], ebx
jne 0x100b03d
cmp dword [ebp - 0xc30], 1
jne 0x100b03d
mov esi, dword [esi + 0x20]
mov dword [ebp - 0xce8], esi
push esi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x210]
push eax
call fcn.01014895
mov dword [ebp - 0xcf0], ebx
jmp 0x100b630
push dword [ebp - 0xc08]
mov ecx, esi
call fcn.01007bdb
test eax, eax
jne 0x100b17c
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
push 0x34
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push 0x5c
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100b0ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100b0c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100b0d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100b0ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov eax, dword [ebp - 0xc20]
cmp eax, ebx
je 0x100b104
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc20], ebx
mov ecx, dword [ebp - 0xc08]
mov dword [ebp - 0xcf8], ecx
mov dword [ebp - 0xd00], ecx
push 1
call fcn.0100667f
mov dword [ebp - 0xc08], ebx
mov eax, dword [ebp - 0xc14]
cmp eax, ebx
je 0x100b140
mov dword [ebp - 0xd08], eax
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0xc14], ebx
cmp dword [esi + 0x3c], ebx
jne 0x100b171
cmp dword [ebp - 0xc30], 1
jne 0x100b171
mov esi, dword [esi + 0x20]
mov dword [ebp - 0xd10], esi
push esi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x210]
push eax
call fcn.01014895
mov dword [ebp - 0xd18], ebx
jmp 0x100b630
cmp dword [esi + 0x3c], 1
jne 0x100b1a6
mov dword [ebp - 0xc44], 0xfe
lea eax, [ebp - 0xc44]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
call sub.Secur32.dll_GetComputerObjectNameW
jmp 0x100b239
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0xbfc]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov eax, dword [esi + 0x48]
mov dword [ebp - 0xd20], eax
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1001e74
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [esi + 0x44]
call fcn.01003d32
test eax, eax
jne 0x100b222
mov dword [ebp - 0xc38], 0xfe
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
push 3
lea eax, [ebp - 0x210]
push eax
call sub.Secur32.dll_TranslateNameW
jmp 0x100b239
lea eax, [ebp - 0x210]
push eax
push 1
lea eax, [ebp - 0x608]
push eax
mov ecx, esi
call fcn.010064af
lea eax, [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0xc08]
add ecx, 0x2c
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
mov dword [ebp - 0xc64], 1
cmp dword [esi + 0x3c], 1
je 0x100b29f
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [esi + 0x44]
call fcn.01003d32
test eax, eax
je 0x100b29f
mov edi, dword [edi]
mov dword [ebp - 0xd28], edi
push edi
lea eax, [ebp - 0x40c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x40c]
push eax
push ebx
lea eax, [ebp - 0x608]
push eax
mov ecx, esi
call fcn.010064af
jmp 0x100b2f3
push 0x7f
pop ecx
xor eax, eax
lea edi, [ebp - 0x608]
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc38], 0xfe
mov eax, dword [ebp - 0xc08]
add eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd30], eax
push eax
lea eax, [ebp - 0x40c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0x608]
push eax
push 1
push 2
lea eax, [ebp - 0x40c]
push eax
call sub.Secur32.dll_TranslateNameW
lea eax, [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0xc08]
add ecx, 0x28
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_unsigned_short_int_const__
lea edi, [esi + 0x5c]
push edi
push 0x15f
call fcn.01013515
push eax
push dword [esi + 0x58]
call fcn.0100336c
push dword [ebp - 0xc00]
push dword [ebp - 0xc08]
mov ecx, esi
call fcn.0100911b
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x100b341
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 0x7f
pop edx
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0xa00]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x40c]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x210]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x804]
rep stosd dword es:[edi], eax
mov eax, 0xfe
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc4c], eax
inc dword [ebp - 0xc28]
jmp 0x100aa5a
cmp dword [esi + 0x3c], ebx
jne 0x100b499
cmp dword [ebp - 0xc30], 1
jne 0x100b499
mov esi, dword [esi + 0x20]
mov dword [ebp - 0xd38], esi
push esi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x210]
push eax
call fcn.01014895
jmp 0x100b499
lea eax, [esi + 0x5c]
push eax
push ebx
push dword [esi + 0x58]
call fcn.0100336c
lea edi, [esi + 0x24]
mov ecx, edi
call sub.framedyn.dll_protected:_struct_CHStringData____thiscall_CHString::GetData_void_const
mov eax, dword [eax + 4]
mov dword [ebp - 0xd40], eax
cmp eax, ebx
je 0x100b443
push 0x10012ec
push edi
lea eax, [ebp - 0xca0]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___unsigned_short_int_const__
mov byte [ebp - 4], 0xe
add esi, 0x1c
push esi
push eax
lea eax, [ebp - 0xc8c]
push eax
call sub.framedyn.dll_class_CHString___stdcall_operator_class_CHString_const___class_CHString_const__
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8c]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xca0]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
jmp 0x100b452
add esi, 0x1c
push esi
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_class_CHString_const____thiscall_CHString::operator_class_CHString_const__
push dword [ebp - 0xc1c]
push 0x4b
call fcn.01013515
push eax
lea eax, [ebp - 0xc24]
push eax
call sub.framedyn.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const__
add esp, 0xc
push 0x33
call fcn.01013515
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
push dword [ebp - 0xc24]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.01013236
lea eax, [ebp - 0xc88]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor esi, esi
inc esi
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0xc00]
cmp eax, ebx
je 0x100b4c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc00], ebx
mov eax, dword [ebp - 0xc10]
cmp eax, ebx
je 0x100b4d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc10], ebx
mov eax, dword [ebp - 0xc0c]
cmp eax, ebx
je 0x100b4ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc0c], ebx
mov eax, dword [ebp - 0xc04]
cmp eax, ebx
je 0x100b504
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xc04], ebx
mov eax, dword [ebp - 0xc20]
cmp eax, ebx
je 0x100b514
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc08]
cmp ecx, ebx
je 0x100b524
push esi
call fcn.0100667f
cmp dword [ebp - 0xc14], ebx
je 0x100b632
push dword [ebp - 0xc14]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x100b632
xor esi, esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xc24]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc1c]
call sub.framedyn.dll_public:_void___thiscall_CHString::destructor_void_
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0101256f
pop edi
pop esi
pop ebx
leave
ret 4