Function at 0x1030f78
Capabilities:
Get hostname

Disassembly:
mov eax, 0x103aa42
call fcn.01032268
mov eax, 0x11e8
call fcn.01032130
mov eax, dword [reloc.msvcrt.dll___p__fmode]
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
mov esi, ecx
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov dword [ebp - reloc.msvcrt.dll___p__fmode], esi
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
lea eax, reloc.msvcrt.dll___p__fmode
push eax
xor ebx, ebx
push 0x28b
mov dword [ebp - 4], ebx
call fcn.010305b4
test eax, eax
je 0x1031572
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x289
call fcn.010305b4
test eax, eax
je 0x1031572
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x28d
call fcn.010305b4
test eax, eax
je 0x1031572
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x28f
call fcn.010305b4
test eax, eax
je 0x1031572
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x291
call fcn.010305b4
test eax, eax
je 0x1031572
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x293
call fcn.010305b4
test eax, eax
je 0x1031572
cmp esi, ebx
jne 0x1031217
cmp dword [ebp + 8], ebx
je 0x1030b49
push 0x295
call fcn.0102834e
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
mov dword [ebp - 0x1104], 0x1004a80
jmp 0x1030b6a
push 0x294
call fcn.0102834e
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
mov dword [ebp - 0x1104], 0x1004a4c
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x292
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov edi, eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x290
mov byte [ebp - 4], 2
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov esi, eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x28e
mov byte [ebp - 4], 4
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x28c
mov byte [ebp - 4], 6
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x288
mov byte [ebp - 4], 8
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push 0x28a
mov byte [ebp - 4], 0xa
call fcn.0102834e
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], reloc.ADVAPI32.dll_RegRestoreKeyW
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov ecx, dword [edi + 4]
cmp ecx, ebx
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edx
je 0x1030d35
mov dword [ebp - reloc.msvcrt.dll___p__fmode], ecx
mov esi, dword [esi + 4]
cmp esi, ebx
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edx
je 0x1030d48
mov dword [ebp - reloc.msvcrt.dll___p__fmode], esi
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [ecx + 4]
cmp esi, ebx
mov ecx, edx
je 0x1030d59
mov ecx, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
mov edi, edx
je 0x1030d6a
mov edi, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x1030d79
mov esi, edx
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1030d82
mov eax, edx
push dword [ebp - 0x10f4]
push dword [ebp - 0x1118]
push dword [ebp - 0x10f0]
push dword [ebp - 0x1120]
push ecx
push dword [ebp - 0x1114]
push edi
push dword [ebp - 0x1108]
push esi
push dword [ebp - 0x110c]
push eax
push dword [ebp - 0x1110]
lea eax, reloc.msvcrt.dll___p__fmode
push dword [ebp - 0x1104]
push 0x400
push eax
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x3c
test eax, eax
lea ecx, reloc.msvcrt.dll___p__fmode
setl byte [ebp - 0x10e6]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0xa
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 9
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 8
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 6
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 5
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp - 0x10e6], bl
je 0x1030eaa
push reloc.KERNEL32.dll_GetCurrentThread
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1031578
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
lea eax, reloc.msvcrt.dll___p__fmode
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
push 0x34
pop ecx
mov esi, 0x1004978
lea edi, [ebp - 0xe4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], reloc.ADVAPI32.dll_EnumDependentServicesW
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov esi, eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_SetThreadToken
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], reloc.ADVAPI32.dll_RevertToSelf
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov edi, eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_DuplicateTokenEx
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
mov byte [ebp - 4], 0x11
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x13
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x15
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov ecx, dword [esi + 4]
cmp ecx, ebx
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edx
je 0x1031082
mov dword [ebp - reloc.msvcrt.dll___p__fmode], ecx
mov edi, dword [edi + 4]
cmp edi, ebx
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edx
je 0x1031095
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edi
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [ecx + 4]
cmp esi, ebx
mov ecx, edx
je 0x10310a6
mov ecx, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
mov edi, edx
je 0x10310b7
mov edi, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x10310c6
mov esi, edx
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10310cf
mov eax, edx
push dword [ebp - 0x10f0]
push dword [ebp - 0x1118]
push dword [ebp - 0x10f4]
push dword [ebp - 0x1120]
push ecx
push dword [ebp - 0x1114]
push edi
push dword [ebp - 0x1108]
push esi
push dword [ebp - 0x110c]
push eax
push dword [ebp - 0x1110]
lea eax, reloc.msvcrt.dll___p__fmode
push dword [ebp - 0x1104]
push 0x400
push eax
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x3c
test eax, eax
lea ecx, reloc.msvcrt.dll___p__fmode
setl byte [ebp - 0x10ea]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x15
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x14
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x13
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x12
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x11
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x10
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_DuplicateTokenEx
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_RevertToSelf
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_SetThreadToken
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], reloc.ADVAPI32.dll_EnumDependentServicesW
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp - 0x10ea], bl
jne 0x1030e9d
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
lea eax, reloc.msvcrt.dll___p__fmode
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
push reloc.ADVAPI32.dll_RegCreateKeyW
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
jmp 0x103156d
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x17
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x18
call fcn.01030498
test eax, eax
je 0x10312a1
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call fcn.01030498
test eax, eax
je 0x10312a1
cmp dword [ebp + 8], ebx
je 0x10312cb
lea edx, reloc.msvcrt.dll___p__fmode
mov dword [ebp - 0x1100], 0x1004938
call fcn.010305f0
test eax, eax
jne 0x10312d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x17
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
jmp 0x1031578
mov dword [ebp - 0x1100], 0x1004908
jmp 0x10312dd
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
xor eax, eax
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
mov eax, dword [esi + reloc.msvcrt.dll___p__fmode]
cmp eax, ebx
mov ecx, 0x1001818
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
jne 0x1031301
mov dword [ebp - reloc.msvcrt.dll___p__fmode], ecx
mov esi, dword [esi + reloc.msvcrt.dll___p__fmode]
xor eax, eax
cmp esi, ebx
lea edi, reloc.msvcrt.dll___p__fmode
stosb byte es:[edi], al
mov dword [ebp - reloc.msvcrt.dll___p__fmode], esi
jne 0x1031320
mov dword [ebp - reloc.msvcrt.dll___p__fmode], ecx
mov eax, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec eax
push eax
push ebx
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov edi, eax
mov eax, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec eax
push eax
push ebx
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x19
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov esi, eax
mov eax, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec eax
push eax
push ebx
lea eax, reloc.msvcrt.dll___p__fmode
push eax
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1a
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push dword [ebp - 0x10f0]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1b
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], eax
lea eax, reloc.msvcrt.dll___p__fmode
push eax
push dword [ebp - 0x10f4]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1d
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const___class_std::allocator_unsigned_short_int__const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
dec ecx
push ecx
push ebx
lea ecx, reloc.msvcrt.dll___p__fmode
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::substr_unsigned_int__unsigned_int_]
mov ecx, dword [edi + 4]
cmp ecx, ebx
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov dword [ebp - reloc.msvcrt.dll___p__fmode], edx
je 0x1031417
mov dword [ebp - reloc.msvcrt.dll___p__fmode], ecx
mov esi, dword [esi + 4]
cmp esi, ebx
mov ecx, edx
je 0x1031422
mov ecx, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
mov edi, edx
je 0x1031433
mov edi, esi
mov esi, dword [ebp - reloc.msvcrt.dll___p__fmode]
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x1031442
mov esi, edx
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x103144b
mov edx, eax
push dword [ebp - 0x10f0]
mov eax, dword [ebp - reloc.msvcrt.dll___p__fmode]
push dword [ebp - 0x1118]
push dword [eax + 0x15c]
lea eax, reloc.msvcrt.dll___p__fmode
push dword [ebp - 0x1120]
push ecx
push dword [ebp - 0x1114]
push edi
push dword [ebp - 0x1108]
push esi
push dword [ebp - 0x110c]
push edx
push dword [ebp - 0x1110]
push dword [ebp - 0x1100]
push 0x400
push eax
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x3c
test eax, eax
lea ecx, reloc.msvcrt.dll___p__fmode
setl byte [ebp - 0x10e9]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1d
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1c
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1b
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x1a
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x19
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x18
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp - 0x10e9], bl
je 0x103152a
push reloc.KERNEL32.dll_GetCurrentThread
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10312a7
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
lea eax, reloc.msvcrt.dll___p__fmode
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
mov ecx, dword [ebp - reloc.msvcrt.dll___p__fmode]
push reloc.ADVAPI32.dll_RegCreateKeyW
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::append_unsigned_short_int_const__]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], 0x17
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, reloc.msvcrt.dll___p__fmode
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
xor ebx, ebx
inc ebx
jmp 0x1031578
call dword [sym.imp.KERNEL32.dll_GetLastError]
or dword [ebp - 4], reloc.msvcrt.dll___p__fmode
lea ecx, reloc.msvcrt.dll___p__fmode
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
mov eax, ebx
pop ebx
call fcn.01031d91
leave
ret 8