Function at 0x10cbf70
Capabilities:
Manipulate boot configuration

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1181a8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1424
call sub.ntdll.dll__chkstk
mov dword [ebp - 0x1428], ecx
mov dword [ebp - 0x1420], 0
mov dword [ebp - 0x218], 0
lea eax, [ebp - 0x1420]
push eax
lea ecx, [ebp - 0x218]
push ecx
mov ecx, dword [ebp - 0x1428]
call fcn.010cbea0
mov edx, dword [ebp - 0x218]
cmp edx, dword [ebp - 0x1420]
jne 0x10cbfdf
mov eax, 1
jmp 0x10cc422
mov word [ebp - 0xc1c], 0
push 0x1fe
push 0
lea eax, [ebp - 0xc1a]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
call fcn.010905a0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1420]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1420]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x142c], eax
mov ecx, dword [ebp - 0x1420]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1420]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x142c]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x100
lea ecx, [ebp - 0xc1c]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x214], 0
push 0x1fe
push 0
lea eax, [ebp - 0x212]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1430], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1430]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1430]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x100
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x2c]
call edx
lea ecx, [ebp - 0x141c]
call fcn.0117e330
mov dword [ebp - 4], 0
mov word [ebp - 0xa1c], 0
push 0x3fe
push 0
lea eax, [ebp - 0xa1a]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x61c], 0
push 0x3fe
push 0
lea ecx, [ebp - 0x61a]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0xc1c]
push edx
push 0x100ab1c
lea eax, [ebp - 0xa1c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x214]
push ecx
push 0x100ab1c
lea edx, [ebp - 0x61c]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x10cc182
push 0
lea eax, [ebp - 0x61c]
push eax
call fcn.010901a0
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108c50
lea eax, [ebp - 0xc1c]
push eax
push 0x1007784
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x1007784
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x10cc1d7
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aaf0
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aaf0
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aac8
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aac8
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aa94
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aa94
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aa64
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aa64
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aa3c
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aa3c
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100aa0c
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100aa0c
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
lea eax, [ebp - 0xc1c]
push eax
push 0x100a9d8
lea ecx, [ebp - 0xa1c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x214]
push edx
push 0x100a9d8
lea eax, [ebp - 0x61c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x61c]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x141c]
call fcn.01108d00
mov dword [ebp - 0x1424], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x141c]
call fcn.01133540
mov eax, dword [ebp - 0x1424]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8