Function at 0x10079e60
Capabilities:
Set file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x2ecc]
mov eax, 0x2ecc
call fcn.10126240
push 0xfffffffffffffffe
push 0x1016f128
push 0x10118480
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x1017455c]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x2ec8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 0x2ed4]
mov dword [ebp - 0x64], ebx
mov esi, dword [ebp + 0x2ee0]
mov dword [ebp - 0x38], esi
mov eax, dword [ebp + 0x2ee4]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x50], edx
mov eax, dword [ebp + 0x2ee8]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp + 0x2eec]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp + 0x2ef0]
mov dword [ebp - 0x7c], edx
xor edi, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], edi
mov byte [ebp + 0x2bac], 0
push 0x103
push edi
lea eax, [ebp + 0x2bad]
push eax
call fcn.10116880
mov byte [ebp], 0
push 0x207
push edi
lea ecx, [ebp + 1]
push ecx
call fcn.10116880
mov byte [ebp + 0xf2c], 0
push 0x103
push edi
lea edx, [ebp + 0xf2d]
push edx
call fcn.10116880
add esp, 0x24
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x48], edi
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x19], 0
cmp esi, edi
je 0x10079f57
mov dword [esi], eax
mov dword [ebp - 0x20], 1
cmp dword [ebp + 0x2edc], edi
je 0x10079fea
mov eax, dword [str.ERMINST_UEFI]
mov dword [ebp + 0x2cb0], eax
mov ecx, dword [0x1015ad08]
mov dword [ebp + 0x2cb4], ecx
mov edx, dword [0x1015ad0c]
mov dword [ebp + 0x2cb8], edx
mov al, byte [0x1015ad10]
mov byte [ebp + 0x2cbc], al
mov ecx, dword [ebp + 0x2ed8]
push ecx
push str._ERMINST_UEFI__GPT_Partition_Detected__UEFI_boot_enabled____u_._n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push edi
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
call fcn.1004f190
test eax, eax
jne 0x1007a040
push str._ERMINST_UEFI__Platform_Incompatibility:_eScan_Rescue_Mode_on_UEFI_works_only_on_64_bit_platforms__n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push edi
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
jmp 0x1007bb4b
mov ecx, dword [str.ERMINST_NORM]
mov dword [ebp + 0x2cb0], ecx
mov edx, dword [0x1015adc8]
mov dword [ebp + 0x2cb4], edx
mov eax, dword [0x1015adcc]
mov dword [ebp + 0x2cb8], eax
mov cl, byte [0x1015add0]
mov byte [ebp + 0x2cbc], cl
mov edx, dword [ebp + 0x2ed8]
push edx
push str._ERMINST_NORM__Non_GPT_Partition_Detected___u_._n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push edi
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
mov dword [ebp - 0x20], 2
push ebx
lea ecx, [ebp + 0x2278]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x2278]
call fcn.10049c40
push str.BOOTUEFI
lea edx, [ebp + 0x2278]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edi, [ebp + 0x2278]
call fcn.10044b00
test eax, eax
jne 0x1007a0b1
mov eax, edi
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Missing_Source_Folder:__s__n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
jmp 0x1007bb4e
cmp dword [ebp + 0x2ed8], 2
je 0x1007bacc
push ebx
lea eax, [ebp + 0xf2c]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
lea ecx, [ebp + 0xf2c]
call fcn.10049c40
push str.BOOTUEFIEFIBOOTerescue_bzimg
lea ecx, [ebp + 0xf2c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push 0
lea edx, [ebp - 0x58]
lea ecx, [ebp + 0xf2c]
call fcn.10044660
add esp, 8
mov dword [ebp - 0x20], 3
cmp dword [ebp + 0x2edc], 0
je 0x1007a1c8
lea edx, [ebp - 0x21]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x4c]
push ecx
push 0
lea edx, [ebp]
push edx
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0x40]
call fcn.1007e340
add esp, 0x18
mov dword [ebp - 0x20], 4
mov eax, dword [ebp - 0x40]
cmp eax, 0xffffffff
jne 0x1007a177
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Unable_to_get_System_Volume_Partition_Number_of_SYSTEM_Partition__n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
jmp 0x1007bb4e
test esi, esi
je 0x1007a197
mov dword [esi], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
test ecx, ecx
je 0x1007a189
mov dword [ecx], eax
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x1007a19d
mov cl, byte [ebp - 0x21]
mov byte [esi], cl
jmp 0x1007a19d
mov eax, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x70]
cmp ecx, 1
jle 0x1007a1be
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__More_than_one___u__SYSTEM_Partition_found._Cannot_install_eScan_Rescue_Mode__n
lea eax, [ebp + 0x26a8]
push eax
jmp 0x1007a097
add al, 0x61
mov byte [ebp - 0x22], al
jmp 0x1007a6ca
mov byte [ebp + 0x2ebc], 0
xor esi, esi
xor eax, eax
mov dword [ebp + 0x2ebd], eax
mov dword [ebp + 0x2ec1], eax
mov byte [ebp + 0x2ec5], al
mov dword [ebp - 0x74], esi
mov byte [ebp + 0x2db4], al
push 0x103
push esi
lea ecx, [ebp + 0x2db5]
push ecx
call fcn.10116880
mov byte [ebp + 0x208], 0
push 0x3ff
push esi
lea edx, [ebp + 0x209]
push edx
call fcn.10116880
or edi, 0xffffffff
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x54], edi
mov byte [ebp - 0x19], 0
mov dword [ebp - 0x20], 5
lea eax, [ebp - 0x19]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x60]
push edx
push esi
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp + 0x2db4]
push ecx
lea ecx, [ebp - 0x5c]
lea edx, [ebp - 0x68]
call fcn.1007e340
movsx edx, byte [ebp - 0x19]
push edx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x68]
push eax
lea ecx, [ebp + 0x2db4]
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__SysVol_s__SysVolPartitionNo:_d__SysVolCnt:_d__SysVolDrvNo:_d__BootVolDrvNo:_d__SysVolDrv:_c_
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
add esp, 0x54
push esi
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 4
mov dword [ebp - 0x20], 6
cmp byte [ebp + 0x2db4], 0
je 0x1007a5c2
cmp byte [ebp + 0x2db9], 0x3a
jne 0x1007a2e0
lea ecx, [ebp + 0x2db8]
push ecx
lea edx, [ebp + 0x2db4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
jmp 0x1007a3a4
mov ax, word [0x1015af64]
mov word [ebp - 0x34], ax
mov cl, byte [0x1015af66]
mov byte [ebp - 0x32], cl
mov bl, 0x50
mov byte [ebp - 0x39], bl
cmp bl, 0x5a
ja 0x1007a31a
mov byte [ebp - 0x34], bl
push 0x2c
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp + 0x208]
push eax
call sym.EncDec.dll_CheckIfPresentInCommaList
test eax, eax
je 0x1007a322
inc bl
jmp 0x1007a2f5
test esi, esi
je 0x1007a3a4
lea ecx, [ebp + 0x2db4]
push ecx
lea edx, [ebp - 0x34]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_DefineDosDeviceA]
test eax, eax
je 0x1007a366
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x2db4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
mov al, byte [ebp - 0x34]
mov byte [ebp - 0x19], al
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x1007a3a4
mov byte [ecx], al
jmp 0x1007a3a4
push 0x104
lea esi, [ebp + 0x1b5c]
call fcn.10049da0
mov edx, esi
push edx
lea eax, [ebp + 0x2cb0]
push eax
push str.__s__DefineDosDevice_Fails__Reason:__s
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x18
or edi, 0xffffffff
mov dword [ebp - 0x20], 7
mov byte [ebp + 0x2aa8], 0
push 0x103
push 0
lea edx, [ebp + 0x2aa9]
push edx
call fcn.10116880
mov byte [ebp + 0x2584], 0
push 0x103
push 0
lea eax, [ebp + 0x2585]
push eax
call fcn.10116880
add esp, 0x18
lea ecx, [ebp + 0x2db4]
lea edx, [ebp + 0x2aa8]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007a3f0
lea ecx, [ebp + 0x2aa8]
call fcn.10049c40
lea eax, [ebp + 0x2aa8]
add eax, edi
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1007a410
mov ecx, dword [str.grldr]
mov dword [eax], ecx
mov dx, word [0x1015af94]
mov word [eax + 4], dx
push 0
push 0
xor edx, edx
lea ecx, [ebp + 0x2aa8]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1007a591
mov byte [ebp + 0x2174], al
push 0x103
push eax
lea eax, [ebp + 0x2175]
push eax
call fcn.10116880
mov byte [ebp + 0x1a58], 0
push 0x103
push 0
lea ecx, [ebp + 0x1a59]
push ecx
call fcn.10116880
add esp, 0x18
lea esi, [ebp + 0x2174]
call fcn.10045ef0
lea edx, [ebp + 0x2175]
push edx
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x2aa8]
lea edx, [ebp + 0x2584]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007a4a3
lea edi, [ebp + 0x2584]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1007a4b4
mov cx, word [0x10148b60]
mov word [edi], cx
lea eax, [ebp + 0x2174]
mov edx, eax
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1007a4d0
sub eax, edx
lea edi, [ebp + 0x2584]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x1007a4e0
mov ecx, eax
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edx, [ebp + 0x1a58]
push edx
lea eax, [ebp + 0x2584]
lea ebx, [ebp + 0x2aa8]
call fcn.1004b670
add esp, 4
cmp eax, 1
jne 0x1007a53f
lea eax, [ebp + 0x2584]
push eax
mov ecx, ebx
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__Successfully_Moved___s__to___s_
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
add esp, 0x14
jmp 0x1007a56f
lea ecx, [ebp + 0x1a58]
push ecx
lea edx, [ebp + 0x2584]
push edx
lea eax, [ebp + 0x2aa8]
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Failed_to_move___s__to___s___Reason:__s
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
add esp, 0x18
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
lea eax, [ebp + 0x26a8]
push eax
push 0x1013fb04
push 0
call fcn.10053700
jmp 0x1007a5e6
lea ecx, [ebp + 0x2aa8]
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__Not_Found_in_SysVolDrive:__s
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
jmp 0x1007a5e9
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s_:_System_Volume_Not_Detected.
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push esi
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
mov dword [ebp - 0x20], 8
lea esi, [ebp + 0x2ebc]
call fcn.10048200
mov al, byte [ebp + 0x2ebc]
mov byte [ebp - 0x19], al
movsx eax, al
push eax
push str.._c:
lea ecx, [ebp + 0x2bac]
push ecx
call fcn.1010d6a8
mov dword [ebp - 0x20], 9
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x74]
push edx
push 0
lea eax, [ebp + 0x2bac]
push eax
push 0
lea edx, [ebp - 0x40]
xor ecx, ecx
call fcn.1007d990
mov ebx, dword [ebp - 0x6c]
push ebx
mov esi, dword [ebp - 0x40]
push esi
lea ecx, [ebp + 0x2bac]
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__BootVolDrive:__s__BootVolNo:_d__BootVolDrvNo:_d_n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
add esp, 0x48
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 4
mov dword [ebp - 0x20], 0xa
cmp esi, 0xffffffff
jne 0x1007a69a
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Unable_to_get_PartitionNumber_of_Boot_Partition__Cannot_install_eScan_Rescue_Mode__n
jmp 0x1007a156
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x1007a6bb
mov dword [eax], esi
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x1007a6ac
mov dword [eax], ebx
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x1007a6bb
mov cl, byte [ebp + 0x2ebc]
mov byte [eax], cl
add bl, 0x61
mov byte [ebp - 0x22], bl
mov esi, dword [ebp - 0x28]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x20], 0xb
cmp byte [ebp + 0x2bac], 0
je 0x1007bb21
cmp byte [ebp + 0x2bb1], 0x3a
jne 0x1007a7b6
lea edx, [ebp + 0x2bb0]
push edx
lea eax, [ebp + 0x2bac]
push eax
call edi
lea ecx, [ebp + 0x2bac]
call fcn.10049c40
mov dword [ebp - 0x20], 0xe
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__EFI_SYSTEM_PATH:__s_n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x1544]
push ecx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call ebx
lea ecx, [ebp + 0x1544]
call fcn.10049c40
push 0x1015b1ac
lea edx, [ebp + 0x1544]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edi, [ebp + 0x1544]
call fcn.10044b00
mov esi, dword [ebp + 0x2edc]
test eax, eax
jne 0x1007a78f
test esi, esi
jne 0x1007a78f
mov ecx, edi
call fcn.10079db0
lea edi, [ebp + 0x1544]
call fcn.10044b00
test eax, eax
jne 0x1007a8b0
mov eax, edi
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Missing_EFI_Folder:__s__n
jmp 0x1007a090
cmp dword [ebp + 0x2edc], 0
je 0x1007a706
mov cx, word [0x1015af64]
mov word [ebp - 0x38], cx
mov dl, byte [0x1015af66]
mov byte [ebp - 0x36], dl
mov bl, 0x50
mov byte [ebp - 0x3a], bl
cmp bl, 0x5a
ja 0x1007a7fe
mov byte [ebp - 0x38], bl
push 0x2c
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp]
push ecx
call sym.EncDec.dll_CheckIfPresentInCommaList
test eax, eax
jne 0x1007a853
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x20], 0xd
cmp dword [ebp - 0x48], 0
je 0x1007a89c
lea edx, [ebp + 0x2bac]
push edx
lea eax, [ebp - 0x38]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_DefineDosDeviceA]
test eax, eax
je 0x1007a857
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp + 0x2bac]
push edx
call edi
lea ecx, [ebp + 0x2bac]
call fcn.10049c40
mov al, byte [ebp - 0x38]
mov byte [ebp - 0x21], al
test esi, esi
je 0x1007a706
mov byte [esi], al
jmp 0x1007a706
inc bl
jmp 0x1007a7d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DefineDosDevice_Fails__Error:_d_n
lea eax, [ebp + 0x1b5c]
push eax
call fcn.1010d6a8
lea ecx, [ebp + 0x1b5c]
push ecx
push str._ERMINST_UEFI__Unable_to_map_SYSTEM_volume_on_UEFI_enabled_system___s_n
lea edx, [ebp + 0x1440]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x1440]
call fcn.10079d30
add esp, 0x1c
jmp 0x1007bb4e
push 0
mov ecx, str._ERMINST_UEFI__Unable_to_get_Free_Drive_to_map_SYSTEM_volume_on_UEFI_enabled_system__n
call fcn.10079d30
add esp, 4
jmp 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x2584]
push ecx
call ebx
lea ecx, [ebp + 0x2584]
call fcn.10049c40
push str.EFIBoot
lea edx, [ebp + 0x2584]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edi, [ebp + 0x2584]
call fcn.10044b00
test eax, eax
jne 0x1007a8f7
test esi, esi
jne 0x1007a8f7
mov ecx, edi
call fcn.10079db0
lea edi, [ebp + 0x2584]
call fcn.10044b00
test eax, eax
jne 0x1007a91a
mov eax, edi
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Missing_EFIBoot_Folder:__s__n
jmp 0x1007a090
mov dword [ebp - 0x20], 0xf
test esi, esi
je 0x1007aa42
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0xa18]
push ecx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
lea ecx, [ebp + 0xa18]
call fcn.10049c40
push str.EFIMicrosoftBoot
lea edx, [ebp + 0xa18]
push edx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
call ebx
lea edi, [ebp + 0xa18]
call fcn.10044b00
test eax, eax
jne 0x1007a981
mov eax, edi
push eax
push str._ERMINST_UEFI__Missing_EFIMSBoot_Folder:__s__n
lea ecx, [ebp + 0x26a8]
push ecx
jmp 0x1007a15d
lea edx, [ebp + 0x2bac]
push edx
lea eax, [ebp + 0x2aa8]
push eax
call esi
lea ecx, [ebp + 0x2aa8]
call fcn.10049c40
push str.EFIMicrosoftBootBootmgfw.efi
lea ecx, [ebp + 0x2aa8]
push ecx
call ebx
push 0
push 0
xor edx, edx
lea ecx, [ebp + 0x2aa8]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007a9da
lea edx, [ebp + 0x2aa8]
push edx
push str._ERMINST_UEFI__Missing_MS_BootFile:__s__n
lea eax, [ebp + 0x26a8]
push eax
jmp 0x1007a15d
lea ecx, [ebp + 0x2bac]
push ecx
lea edx, [ebp + 0x2174]
push edx
call esi
lea ecx, [ebp + 0x2174]
call fcn.10049c40
push str.EFIMicrosoftBoot_bootmgfw.efi.escan
lea eax, [ebp + 0x2174]
push eax
call ebx
push 0
push 0
xor edx, edx
lea ecx, [ebp + 0x2174]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007aa42
push 0
lea edi, [ebp + 0x2174]
lea ebx, [ebp + 0x2aa8]
call fcn.10063ba0
add esp, 4
test eax, eax
jne 0x1007aa42
mov ecx, ebx
push ecx
push str._ERMINST_UEFI__Unable_to_make_copy_of_file:__s__n
jmp 0x1007a156
cmp dword [ebp + 0x2ed8], 2
je 0x1007bacc
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0xc20]
push ecx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call esi
lea ecx, [ebp + 0xc20]
call fcn.10049c40
push str..disk
lea edx, [ebp + 0xc20]
push edx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
call edi
lea ecx, [ebp + 0xc20]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0xb1c]
push ecx
call esi
lea ecx, [ebp + 0xb1c]
call fcn.10049c40
push str.boot
lea edx, [ebp + 0xb1c]
push edx
call edi
lea ecx, [ebp + 0xb1c]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0xe28]
push ecx
call esi
lea ecx, [ebp + 0xe28]
call fcn.10049c40
push str.bootgrub
lea edx, [ebp + 0xe28]
push edx
call edi
lea ecx, [ebp + 0xe28]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x1238]
push ecx
call esi
lea ecx, [ebp + 0x1238]
call fcn.10049c40
push str.bootgrubgrub.cfg
lea edx, [ebp + 0x1238]
push edx
call edi
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x914]
push ecx
call esi
lea ecx, [ebp + 0x914]
call fcn.10049c40
push str.bootgrubx86_64_efi
lea edx, [ebp + 0x914]
push edx
call edi
lea ecx, [ebp + 0x914]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0xd24]
push ecx
call esi
lea ecx, [ebp + 0xd24]
call fcn.10049c40
push 0x1015b334
lea edx, [ebp + 0xd24]
push edx
call edi
lea ecx, [ebp + 0xd24]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x1a58]
push ecx
call esi
lea ecx, [ebp + 0x1a58]
call fcn.10049c40
push str.tceoptional
lea edx, [ebp + 0x1a58]
push edx
call edi
lea ecx, [ebp + 0x1a58]
call fcn.10079db0
test eax, eax
je 0x1007bb4e
mov dword [ebp - 0x20], 0x10
xor esi, esi
mov dword [ebp - 0x30], esi
mov dword [0x101936b0], 1
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ac10
push 0
push 1
lea eax, [ebp + 0x2bac]
push eax
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ac46
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str..disk
lea ecx, [ebp + 0x2db4]
push ecx
call edi
push 0
push 1
lea edx, [ebp + 0xc20]
push edx
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ac95
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str..diskinfo
lea eax, [ebp + 0x2db4]
push eax
call edi
push 0
push 0
xor edx, edx
lea ecx, [ebp + 0x2db4]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007ace7
push str.eScan_Rescue_Mode
lea ecx, [ebp + 0x2db4]
call fcn.100462c0
add esp, 4
inc esi
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007acf3
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str.boot
lea ecx, [ebp + 0x2db4]
push ecx
call edi
push 0
push 1
lea edx, [ebp + 0xb1c]
push edx
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ad42
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str.bootgrub
lea eax, [ebp + 0x2db4]
push eax
call edi
push 0
push 1
lea ecx, [ebp + 0xe28]
push ecx
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ad91
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str.bootgrubx86_64_efi
lea edx, [ebp + 0x2db4]
push edx
call edi
push 0
push 1
lea eax, [ebp + 0x914]
push eax
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ade0
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push 0x1015b334
lea ecx, [ebp + 0x2db4]
push ecx
call edi
push 0
push 1
lea edx, [ebp + 0xd24]
push edx
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ae30
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str.tceoptional
lea eax, [ebp + 0x2db4]
push eax
call edi
push 0
push 1
lea ecx, [ebp + 0x1a58]
push ecx
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2278]
lea edx, [ebp + 0x2db4]
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x1007ae80
lea ecx, [ebp + 0x2db4]
call fcn.10049c40
push str.efi_boot
lea edx, [ebp + 0x2db4]
push edx
call edi
push 0
push 1
lea eax, [ebp + 0x2584]
push eax
mov edx, 0x10149c34
lea ecx, [ebp + 0x2db4]
call fcn.10048680
add esi, eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp + 0x2bac]
push ecx
push esi
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__Successfully_copied__u_files_to_EFI_Partition__s_n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x18
mov dword [ebp - 0x20], 0x11
cmp esi, 0x46
jae 0x1007af11
push esi
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Less_than_70_files_copied__CopyCount:_u_._Aborting_setting_of_eScan_Rescue_Mode__n
jmp 0x1007a090
mov dword [ebp + 0x1d64], 0x5c3a43
push 0x100
push 0
lea eax, [ebp + 0x1d68]
push eax
call fcn.10116880
mov byte [ebp + 0x70c], 0
push 0x207
push 0
lea ecx, [ebp + 0x70d]
push ecx
call fcn.10116880
mov byte [ebp + 0x1e68], 0
push 0x207
push 0
lea edx, [ebp + 0x1e69]
push edx
call fcn.10116880
lea eax, [ebp + 0x2cb0]
push eax
push str.__s__Iterating_Volumes..._n
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
mov edx, dword [ebp - 0x64]
mov al, byte [edx]
mov byte [ebp + 0x1d64], al
lea ecx, [ebp + 0x1d64]
push ecx
lea ecx, [ebp + 0x70c]
call fcn.1007e9c0
add esp, 0x38
lea eax, [ebp + 0x2cb0]
lea ecx, [ebp + 0x26a8]
cmp byte [ebp + 0x70c], 0
jne 0x1007afcf
lea edx, [ebp + 0x1d64]
push edx
push eax
push str.__s__Unable_to_get_Volume_Name_of__s_path__n
push ecx
jmp 0x1007a097
mov byte [ebp - 0x29], 0x61
or esi, 0xffffffff
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x84], 0
movsx edx, byte [ebp + 0x1d64]
push edx
push eax
push str.__s__Iterating_devices__SrcDrive:_c_..._n
push ecx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
movsx edx, byte [ebp + 0x1d64]
push edx
push str.._c:
lea eax, [ebp + 0x2688]
push eax
call fcn.1010d6a8
push 0
lea ecx, [ebp - 0x48]
push ecx
push 0
push 0
push 0
lea edx, [ebp - 0x84]
push edx
push 0
lea eax, [ebp + 0x2688]
push eax
push 0
lea edx, [ebp - 0x44]
xor ecx, ecx
call fcn.1007d990
add esp, 0x44
mov ebx, dword [ebp - 0x48]
push ebx
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__eScan_HDD_No:_d_n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
cmp ebx, esi
je 0x1007b0be
push ebx
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [ebp + 0x1d64]
push ecx
lea edx, [ebp + 0x70c]
push edx
lea eax, [ebp + 0x2cb0]
push eax
push str.__s__eScan_Installed_on_Volume:__s___s__PartitionNo:__d___HDDNo:__d__n
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x20
add bl, 0x61
mov byte [ebp - 0x29], bl
jmp 0x1007b0f4
lea edx, [ebp + 0x1d64]
push edx
lea eax, [ebp + 0x70c]
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__eScan_Installed_on_Volume:__s___s___VolHDDNo:_NOT_FOUND__n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x18
lea eax, [ebp + 0x70c]
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__eScan_SrcVol:_s_n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
mov dword [ebp - 0x20], 0x12
mov eax, str.DeviceHarddiskVolume
lea ecx, [ebp + 0x70c]
call fcn.10031940
test eax, eax
lea eax, [ebp + 0x70c]
je 0x1007b156
push eax
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Unable_to_Recognize_Volume_Number_from__s__n
jmp 0x1007a090
push 0
push 0x1013f817
push str.DeviceHarddiskVolume
push eax
call fcn.10047ed0
mov byte [ebp + 0x608], 0
push 0x103
push 0
lea ecx, [ebp + 0x609]
push ecx
call fcn.10116880
mov byte [ebp + 0x2070], 0
push 0x103
push 0
lea edx, [ebp + 0x2071]
push edx
call fcn.10116880
mov byte [ebp + 0x1c60], 0
push 0x103
push 0
lea eax, [ebp + 0x1c61]
push eax
call fcn.10116880
mov byte [ebp + 0x1134], 0
push 0x103
push 0
lea ecx, [ebp + 0x1135]
push ecx
call fcn.10116880
add esp, 0x40
mov byte [ebp + 0x1850], 0
push 0x207
push 0
lea edx, [ebp + 0x1851]
push edx
call fcn.10116880
mov dword [ebp - 0x20], 0xb5
push 0x400
lea ebx, [ebp + 0x208]
mov esi, dword [ebp - 0x64]
call fcn.10042910
mov esi, ebx
call fcn.10049c80
mov eax, ebx
push eax
push str._sLOG
lea ecx, [ebp + 0x133c]
push ecx
call fcn.1010d6a8
mov edx, ebx
push edx
push str._sINFECTED
lea eax, [ebp + 0x1c60]
push eax
call fcn.1010d6a8
add esp, 0x28
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp + 0x2070]
push ecx
xor ecx, ecx
lea edx, [ebp + 0x608]
call fcn.10059340
lea ecx, [ebp + 0x2070]
call fcn.10049c40
push str.MicroWorldeScanBDplugins
lea edx, [ebp + 0x2070]
push edx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
call esi
mov byte [ebp + 0x1850], bl
mov byte [ebp + 0x1850], bl
push 0x208
lea eax, [ebp + 0x1850]
push eax
lea ecx, [ebp + 0x2070]
push ecx
call dword [0x1017eafc]
test eax, eax
jbe 0x1007b2ba
cmp byte [ebp + 0x1850], bl
je 0x1007b2ba
lea ecx, [ebp + 0x1850]
lea edx, [ebp + 0x2070]
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x1007b2b0
mov byte [ebp + 0x1850], bl
mov byte [ebp + 0x1850], bl
push 0x208
lea edx, [ebp + 0x1850]
push edx
lea eax, [ebp + 0x133c]
push eax
call dword [0x1017eafc]
test eax, eax
jbe 0x1007b301
cmp byte [ebp + 0x1850], bl
je 0x1007b301
lea ecx, [ebp + 0x1850]
lea edx, [ebp + 0x133c]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x1007b2f7
mov byte [ebp + 0x1850], bl
mov byte [ebp + 0x1850], bl
push 0x208
lea ecx, [ebp + 0x1850]
push ecx
lea edx, [ebp + 0x1c60]
push edx
call dword [0x1017eafc]
cmp eax, ebx
jbe 0x1007b34a
cmp byte [ebp + 0x1850], bl
je 0x1007b34a
lea ecx, [ebp + 0x1850]
lea edx, [ebp + 0x1c60]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x1007b340
push ebx
push 0x101483c4
push 0x10149ea8
lea eax, [ebp + 0x2070]
push eax
call fcn.10047ed0
push ebx
push 0x101483c4
push 0x10149ea8
lea ecx, [ebp + 0x133c]
push ecx
call fcn.10047ed0
push ebx
push 0x101483c4
push 0x10149ea8
lea edx, [ebp + 0x1c60]
push edx
call fcn.10047ed0
add esp, 0x30
mov dword [ebp - 0x20], 0xb6
lea eax, [ebp + 0x2bac]
push eax
lea ecx, [ebp + 0x1e68]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x1e68]
call fcn.10049c40
push str.rescue.ini
lea edx, [ebp + 0x1e68]
push edx
call esi
mov dword [ebp - 0x20], 0x13
push 0x80
lea eax, [ebp + 0x1e68]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp + 0x1e68]
call fcn.10033960
mov ecx, dword [ebp - 0x44]
push ecx
movsx edx, byte [ebp - 0x29]
push edx
push str._c_u
lea eax, [ebp + 0x1134]
push eax
call fcn.1010d6a8
mov dword [ebp - 0x20], 0xb7
push str.General
lea esi, [ebp + 0x1e68]
lea eax, [ebp + 0x1c62]
mov ebx, str.Quarantine_Path
call fcn.10042d90
push str.General
lea eax, [ebp + 0x2072]
mov ebx, str.Plugins_Path
call fcn.10042d90
push str.General
lea eax, [ebp + 0x133e]
mov ebx, str.LogDir_Path
call fcn.10042d90
push str.General
lea eax, [ebp + 0x1134]
mov ebx, str.QuarantDevID
call fcn.10042d90
push str.General
lea eax, [ebp + 0x1134]
mov ebx, str.PluginsDevID
call fcn.10042d90
push str.General
lea eax, [ebp + 0x1134]
mov ebx, str.LogDirDevID
call fcn.10042d90
add esp, 0x28
mov eax, dword [ebp - 0x80]
xor ebx, ebx
cmp eax, ebx
je 0x1007b4a3
mov cl, byte [ebp + 0x1c60]
mov byte [eax], cl
mov eax, dword [ebp - 0x78]
cmp eax, ebx
je 0x1007b4b2
mov dl, byte [ebp + 0x2070]
mov byte [eax], dl
mov eax, dword [ebp - 0x7c]
cmp eax, ebx
je 0x1007b4c1
mov cl, byte [ebp + 0x133c]
mov byte [eax], cl
mov edx, dword [ebp - 0x50]
cmp edx, ebx
je 0x1007b4da
lea ecx, [ebp + 0x1e68]
mov edi, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x1007b4d0
push ebx
push ebx
xor edx, edx
lea ecx, [ebp + 0x1e68]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007b523
lea edx, [ebp + 0x1e68]
push edx
lea eax, [ebp + 0x2cb0]
push eax
push str.__s__Unable_to_Create_File:__s__n
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push ebx
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
jmp 0x1007bb4e
mov dword [ebp - 0x20], 0x14
cmp dword [ebp + 0x2edc], ebx
je 0x1007bacc
mov byte [ebp + 0x174c], bl
push 0x103
push ebx
lea edx, [ebp + 0x174d]
push edx
call fcn.10116880
mov byte [ebp + 0x1030], bl
push 0x103
push ebx
lea eax, [ebp + 0x1031]
push eax
call fcn.10116880
lea eax, [ebp + 0x1238]
call fcn.10033960
push 0x1014a614
lea ecx, [ebp + 0x1238]
push ecx
call fcn.1010ebfe
add esp, 0x20
mov edi, eax
cmp edi, ebx
jne 0x1007b5be
lea edx, [ebp + 0x1238]
push edx
lea eax, [ebp + 0x2cb0]
push eax
push str.__s__Unable_to_Create_File:__s__n
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push ebx
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x14
jmp 0x1007bb4e
push str.set_default0_n
push edi
call fcn.10110652
push str.set_timeout27_n
push edi
call fcn.10110652
push str.set_gfxpayload1024x768_n
push edi
call fcn.10110652
push str.set_gfxmodauto_n
push edi
call fcn.10110652
push str.set_gfxmodkeep_n
push edi
call fcn.10110652
push 0x10149d6c
push edi
call fcn.10110652
push str.menuentry_eScan_Rescue_Mode_n
push edi
call fcn.10110652
add esp, 0x38
cmp byte [ebp - 0x19], bl
jne 0x1007b618
cmp byte [ebp - 0x21], bl
je 0x1007b68e
mov dword [ebp - 0x50], ebx
mov byte [ebp + 0x1b5c], bl
push 0x103
push ebx
lea edx, [ebp + 0x1b5d]
push edx
call fcn.10116880
add esp, 0xc
mov al, byte [ebp - 0x19]
cmp al, bl
je 0x1007b64f
movsx eax, al
push eax
push str._c:_
lea ecx, [ebp + 0x2eb8]
push ecx
jmp 0x1007b660
movsx edx, byte [ebp - 0x21]
push edx
push str._c:_
lea eax, [ebp + 0x2eb8]
push eax
call fcn.1010d6a8
add esp, 0xc
lea ecx, [ebp + 0x1b5c]
push ecx
lea edx, [ebp + 0x1030]
push edx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x174c]
lea edx, [ebp + 0x2eb8]
call fcn.10031ce0
add esp, 0xc
cmp byte [ebp + 0x174c], bl
je 0x1007b930
cmp byte [ebp + 0x1030], bl
je 0x1007b930
push 0x10149b80
lea ecx, [ebp + 0x1030]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1007b6da
push 0x10149b74
lea ecx, [ebp + 0x1030]
push ecx
call fcn.1011c280
add esp, 8
test eax, eax
jne 0x1007b930
lea edx, [ebp + 0x174c]
cmp dword [ebp - 0x58], 0x400000
jae 0x1007b708
movsx eax, byte [ebp - 0x22]
mov ecx, dword [ebp - 0x40]
push ecx
push eax
push ecx
push eax
push edx
push str._tlinux__EFI_Boot_erescue_bzimg_quiet_tceUUID_s_sysdevid_c_u_esdevid_c_u_config_rescue.ini_n
push edi
call fcn.10110652
add esp, 0x1c
jmp 0x1007b94b
lea eax, [ebp + 0x174c]
push eax
mov ecx, eax
push ecx
push edx
push str._tlinux__EFI_Boot_erescue_bzimg_quiet_tceUUID_s_sysdevidUUID_s_esdevidUUID_s_config_rescue.ini_n
push edi
call fcn.10110652
mov byte [ebp + 0x237c], bl
push 0x103
push ebx
lea eax, [ebp + 0x237d]
push eax
call fcn.10116880
mov byte [ebp + 0x1648], bl
push 0x103
push ebx
lea ecx, [ebp + 0x1649]
push ecx
call fcn.10116880
mov dword [ebp - 0x28], ebx
mov byte [ebp + 0x1440], bl
push 0x103
push ebx
lea edx, [ebp + 0x1441]
push edx
call fcn.10116880
mov byte [ebp + 0x2480], bl
push 0x103
push ebx
lea eax, [ebp + 0x2481]
push eax
call fcn.10116880
add esp, 0x44
mov byte [ebp + 0x237c], bl
mov dword [ebp - 0x28], ebx
mov byte [ebp + 0x1648], bl
movsx ecx, byte [ebp + 0x1c60]
push ecx
push str._c:_
lea edx, [ebp + 0x2eb8]
push edx
call fcn.1010d6a8
lea eax, [ebp + 0x1440]
push eax
lea ecx, [ebp + 0x1648]
push ecx
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp + 0x237c]
lea edx, [ebp + 0x2eb8]
call fcn.10031ce0
add esp, 0x18
cmp byte [ebp + 0x237c], bl
je 0x1007b812
lea eax, [ebp + 0x237c]
push eax
push str.UUID_s
lea ecx, [ebp + 0x2480]
push ecx
call fcn.1010d6a8
push str.General
lea esi, [ebp + 0x1e68]
lea eax, [ebp + 0x2480]
mov ebx, str.QuarantDevID
call fcn.10042d90
add esp, 0x10
xor ebx, ebx
mov byte [ebp + 0x237c], bl
mov dword [ebp - 0x28], ebx
mov byte [ebp + 0x1648], bl
movsx edx, byte [ebp + 0x2070]
push edx
push str._c:_
lea eax, [ebp + 0x2eb8]
push eax
call fcn.1010d6a8
lea ecx, [ebp + 0x1440]
push ecx
lea edx, [ebp + 0x1648]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp + 0x237c]
lea edx, [ebp + 0x2eb8]
call fcn.10031ce0
add esp, 0x18
cmp byte [ebp + 0x237c], bl
je 0x1007b8a0
lea ecx, [ebp + 0x237c]
push ecx
push str.UUID_s
lea edx, [ebp + 0x2480]
push edx
call fcn.1010d6a8
push str.General
lea esi, [ebp + 0x1e68]
lea eax, [ebp + 0x2480]
mov ebx, str.PluginsDevID
call fcn.10042d90
add esp, 0x10
xor ebx, ebx
mov byte [ebp + 0x237c], bl
mov dword [ebp - 0x28], ebx
mov byte [ebp + 0x1648], bl
movsx eax, byte [ebp + 0x133c]
push eax
push str._c:_
lea ecx, [ebp + 0x2eb8]
push ecx
call fcn.1010d6a8
lea edx, [ebp + 0x1440]
push edx
lea eax, [ebp + 0x1648]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp + 0x237c]
lea edx, [ebp + 0x2eb8]
call fcn.10031ce0
add esp, 0x18
cmp byte [ebp + 0x237c], bl
je 0x1007b94b
lea edx, [ebp + 0x237c]
push edx
push str.UUID_s
lea eax, [ebp + 0x2480]
push eax
call fcn.1010d6a8
push str.General
lea esi, [ebp + 0x1e68]
lea eax, [ebp + 0x2480]
mov ebx, str.LogDirDevID
call fcn.10042d90
add esp, 0x10
xor ebx, ebx
jmp 0x1007b94b
movsx eax, byte [ebp - 0x22]
mov ecx, dword [ebp - 0x40]
push ecx
push eax
push ecx
push eax
push ecx
push eax
push str._tlinux__EFI_Boot_erescue_bzimg_quiet_tcesd_c_u_sysdevid_c_u_esdevid_c_u_config_rescue.ini_n
push edi
call fcn.10110652
add esp, 0x20
cmp byte [ebp + 0x1e68], bl
je 0x1007b95e
lea esi, [ebp + 0x1e68]
call fcn.10079e40
push str._tinitrd__EFI_Boot_erescue_ird.gz_n
push edi
call fcn.10110652
push 0x1015b804
push edi
call fcn.10110652
push str.menuentry_Windows_n
push edi
call fcn.10110652
push str._tchainloader__EFI_Microsoft_Boot_bootmgfw.efi.escan_n
push edi
call fcn.10110652
push 0x1015b804
push edi
call fcn.10110652
push edi
call fcn.1010f263
mov dword [ebp - 0x20], 0x16
lea ecx, [ebp + 0x1238]
push ecx
lea edx, [ebp + 0x2cb0]
push edx
push str.__s__Successfully_Created_CFG_File:__s_n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push ebx
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x40
cmp dword [ebp + 0x2ed8], ebx
je 0x1007bacc
lea ecx, [ebp + 0x2bac]
push ecx
lea edx, [ebp + 0x2480]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp + 0x2480]
call fcn.10049c40
push str.EFIBootgrubx64.efi
lea eax, [ebp + 0x2480]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push ebx
push ebx
xor edx, edx
lea ecx, [ebp + 0x2480]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007ba4f
lea ecx, [ebp + 0x2480]
push ecx
push str._ERMINST_SETRESCUE__Unable_to_file_file:__s__n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push ebx
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
jmp 0x1007bb4e
push ebx
push ebx
xor edx, edx
lea ecx, [ebp + 0x2174]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1007ba91
lea eax, [ebp + 0x2174]
push eax
push str._ERMINST_SETRESCUE__Unable_to_file_file:__s__n
lea ecx, [ebp + 0x26a8]
push ecx
call fcn.1010d6a8
push ebx
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x10
jmp 0x1007bb4e
push ebx
lea edi, [ebp + 0x2aa8]
lea ebx, [ebp + 0x2480]
call fcn.10063ba0
add esp, 4
cmp eax, 1
jne 0x1007badd
push str._ERMINST_SETRESCUE__Rescue_Mode_Set_Successfully._n
lea edx, [ebp + 0x26a8]
push edx
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0xc
mov dword [ebp - 4], 0xfffffffe
mov eax, 1
jmp 0x1007bb57
push 0x104
lea esi, [ebp + 0x1b5c]
call fcn.10049da0
mov eax, esi
push eax
lea ecx, [ebp + 0x2aa8]
push ecx
lea edx, [ebp + 0x2480]
push edx
push str._ERMINST_SETRESCUE__Failed_to_copy__s_to__s___s__n
lea eax, [ebp + 0x26a8]
push eax
call fcn.1010d6a8
push 0
lea ecx, [ebp + 0x26a8]
call fcn.10079d30
add esp, 0x1c
jmp 0x1007bb4e
lea ecx, [ebp + 0x2cb0]
push ecx
push str.__s__Unable_to_detect_SYSTEM_volume_on_UEFI_enabled_system__n
jmp 0x1007a156
add esp, 0xc
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2ec8]
xor ecx, ebp
call fcn.1010d699
add ebp, 0x2ecc
mov esp, ebp
pop ebp
ret