Function at 0x1007016
Capabilities:
Manipulate boot configuration

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x5b04
call fcn.0100ba20
mov eax, dword [0x1011024]
push ebx
push esi
push edi
xor ebx, ebx
push 0x7f
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5ae0], eax
xor eax, eax
mov ecx, 0x9c3
lea edi, [ebp - 0x31e4]
mov dword [ebp - 0x31e8], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x7f
lea edi, [ebp - 0x2dc]
mov dword [ebp - 0x2e0], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x7f
lea edi, [ebp - 0x6dc]
mov dword [ebp - 0x6e0], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x31
lea edi, [ebp - 0x4dc]
mov dword [ebp - 0x4e0], ebx
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0xdc]
mov dword [ebp - 0xe0], ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x18], ebx
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x7e
pop ecx
xor eax, eax
push 0x7e
lea edi, [ebp - 0xad4]
mov dword [ebp - 0xad8], ebx
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x8d8]
mov dword [ebp - 0x8dc], ebx
rep stosd dword es:[edi], eax
mov esi, 0x1001374
lea edi, [ebp - 0x5ad8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x5acc]
rep stosd dword es:[edi], eax
xor edx, edx
push 0x7f
inc edx
lea eax, [ebp - 0x5b04]
pop esi
mov dword [ebp - 0x5b00], ebx
mov dword [ebp - 0x5aec], ebx
mov dword [ebp - 0x5b04], ebx
mov dword [ebp - 0x5ae4], ebx
mov dword [ebp - 0x5af4], ebx
mov dword [ebp - 0x5af0], ebx
mov dword [ebp - 0x5af8], ebx
mov dword [ebp - 0x5ae8], ebx
mov dword [ebp - 0x5afc], ebx
mov dword [ebp - 0x58d8], 0x10000
mov dword [ebp - 0x58d4], edx
mov dword [ebp - 0x58d0], ebx
mov dword [ebp - 0x58cc], eax
mov dword [ebp - 0x58c8], ebx
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x58c4]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x56c8], ebx
mov dword [ebp - 0x56c4], ebx
mov dword [ebp - 0x56c0], 0x73
mov ecx, esi
lea edi, [ebp - 0x56bc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x54c0], 0x2001
mov dword [ebp - 0x54bc], edx
mov dword [ebp - 0x54b8], ebx
mov dword [ebp - 0x54b0], ebx
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x54b4], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x54ac]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x52b0], ebx
mov dword [ebp - 0x52ac], ebx
mov dword [ebp - 0x52a8], 0x75
mov ecx, esi
lea edi, [ebp - 0x52a4]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x50a8], 0x2001
mov dword [ebp - 0x50a4], edx
mov dword [ebp - 0x50a0], ebx
mov dword [ebp - 0x5098], ebx
lea eax, [ebp - 0x6e0]
mov dword [ebp - 0x509c], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x5094]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4e98], ebx
mov dword [ebp - 0x4e94], ebx
mov dword [ebp - 0x4e90], 0x70
mov ecx, esi
lea edi, [ebp - 0x4e8c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x4c84], eax
xor eax, eax
mov dword [ebp - 0x4c90], 0x1001
mov dword [ebp - 0x4c8c], edx
mov dword [ebp - 0x4c88], ebx
mov dword [ebp - 0x4c80], ebx
mov ecx, esi
lea edi, [ebp - 0x4c7c]
rep stosd dword es:[edi], eax
mov eax, dword [0x10014d4]
mov dword [ebp - 0x4a78], eax
mov eax, dword [0x10014d8]
mov dword [ebp - 0x4a74], eax
push 0x7e
mov dword [ebp - 0x4a80], ebx
mov dword [ebp - 0x4a7c], ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x4a70]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x5b00]
mov dword [ebp - 0x486c], eax
mov ecx, esi
mov dword [ebp - 0x4878], 0x20000
mov dword [ebp - 0x4874], edx
mov dword [ebp - 0x4870], ebx
mov dword [ebp - 0x4868], ebx
xor eax, eax
lea edi, [ebp - 0x4864]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4668], ebx
mov dword [ebp - 0x4664], ebx
mov esi, 0x100156c
lea edi, [ebp - 0x4660]
movsd dword es:[edi], dword [esi]
push 0x7e
movsw word es:[edi], word [esi]
pop ecx
lea edi, [ebp - 0x465a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x4460], 0x82002
mov dword [ebp - 0x445c], edx
mov dword [ebp - 0x4458], ebx
mov dword [ebp - 0x4450], ebx
push 0x7f
pop ecx
lea eax, [ebp - 0x5ae4]
mov dword [ebp - 0x4454], eax
xor eax, eax
push 0x7e
lea edi, [ebp - 0x444c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4250], ebx
mov dword [ebp - 0x424c], ebx
pop ecx
mov esi, 0x1001800
lea edi, [ebp - 0x4248]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x4242]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
mov dword [ebp - 0x4048], 0x2003
mov dword [ebp - 0x4044], edx
mov dword [ebp - 0x4040], ebx
mov dword [ebp - 0x4038], ebx
pop ecx
lea eax, [ebp - 0x5ae8]
mov dword [ebp - 0x403c], eax
xor eax, eax
lea edi, [ebp - 0x4034]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x3e38], ebx
mov dword [ebp - 0x3e34], ebx
mov esi, 0x10017f8
lea edi, [ebp - 0x3e30]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7e
pop ecx
lea edi, [ebp - 0x3e2a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
mov dword [ebp - 0x3c30], ebx
mov dword [ebp - 0x3c2c], edx
mov dword [ebp - 0x3c28], ebx
lea eax, [ebp - 0x5af4]
mov dword [ebp - 0x3c24], eax
mov dword [ebp - 0x3c20], ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x3c1c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x3a20], ebx
mov dword [ebp - 0x3a1c], ebx
mov esi, 0x10017f0
lea edi, [ebp - 0x3a18]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7e
pop ecx
lea edi, [ebp - 0x3a12]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x5af8]
mov dword [ebp - 0x380c], eax
push 0x7f
pop ecx
xor eax, eax
lea edi, [ebp - 0x3804]
mov dword [ebp - 0x3818], ebx
mov dword [ebp - 0x3814], edx
mov dword [ebp - 0x3810], ebx
mov dword [ebp - 0x3808], ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x3608], ebx
mov dword [ebp - 0x3604], ebx
mov esi, 0x10017e8
lea edi, [ebp - 0x3600]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7e
pop ecx
lea edi, [ebp - 0x35fa]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x5af0]
mov dword [ebp - 0x33f4], eax
push 0x7f
pop ecx
xor eax, eax
mov dword [ebp - 0x3400], ebx
mov dword [ebp - 0x33fc], edx
mov dword [ebp - 0x33f8], ebx
mov dword [ebp - 0x33f0], ebx
lea edi, [ebp - 0x33ec]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2e0]
push eax
mov dword [ebp - 0x31f0], ebx
mov dword [ebp - 0x31ec], ebx
call fcn.0100269c
cmp eax, 1
je 0x1007750
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
mov esi, 0x1001568
lea eax, [ebp - 0x4c80]
push esi
push eax
call edi
lea eax, [ebp - 0x4e0]
push esi
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x5ad8]
push eax
push 0xa
push dword [ebp - 0x5ae0]
push dword [ebp + 8]
call fcn.0100e534
test eax, eax
jne 0x10074f7
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
call fcn.0100c80a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x1007750
cmp dword [ebp - 0x5b00], ebx
je 0x100751f
lea eax, [ebp - 0x2e0]
push eax
call fcn.0100269c
test eax, eax
jne 0x1007750
call fcn.01002334
xor eax, eax
jmp 0x1007c1f
cmp dword [ebp - 0x4040], ebx
je 0x1007537
cmp dword [ebp - 0x5ae8], 0x20
jae 0x1007537
push 0x31a
jmp 0x100755c
cmp dword [ebp - 0x5ae8], ebx
jne 0x1007563
cmp dword [ebp - 0x5af4], ebx
jne 0x1007563
cmp dword [ebp - 0x5af8], ebx
jne 0x1007563
cmp dword [ebp - 0x5af0], ebx
jne 0x1007563
push 0x42e
call fcn.0100d783
jmp 0x10074e3
cmp dword [ebp - 0x54b8], ebx
jne 0x100757a
cmp dword [ebp - 0x50a0], ebx
je 0x1007582
push 0x30b
jmp 0x100758f
cmp dword [ebp - 0x50a0], ebx
jne 0x100759f
cmp dword [ebp - 0x4c88], ebx
je 0x100759f
push 0x30c
call fcn.0100d783
push eax
call fcn.0100c82e
jmp 0x10074de
lea eax, [ebp - 0x4e0]
push esi
push eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x10075ce
lea eax, [ebp - 0x2e0]
push eax
call fcn.0100db50
test eax, eax
jne 0x10075ce
xor esi, esi
inc esi
mov dword [ebp - 0x5aec], esi
jmp 0x10075d1
xor esi, esi
inc esi
cmp dword [ebp - 0x54b8], ebx
je 0x1007668
cmp dword [ebp - 0x4c88], ebx
jne 0x1007634
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100760c
lea eax, [ebp - 0x2e0]
push eax
call fcn.0100db50
test eax, eax
mov dword [ebp - 0x5aec], esi
je 0x1007612
mov dword [ebp - 0x5aec], ebx
lea eax, [ebp - 0x4e0]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x1007634
lea eax, [ebp - 0x4e0]
push 0x10011f8
push eax
call edi
pop ecx
pop ecx
cmp dword [ebp - 0x54b8], ebx
je 0x1007668
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1007668
push 0x30e
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x10076ca
cmp dword [ebp - 0x50a0], ebx
je 0x1007688
lea eax, [ebp - 0x6e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1007688
push 0x30f
jmp 0x1007652
push 0x2710
call dword [sym.imp.msvcrt.dll_malloc]
cmp eax, ebx
pop ecx
mov dword [ebp - 0x5ae0], eax
jne 0x10076d1
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
mov eax, esi
jmp 0x1007c1f
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1001504
lea eax, [ebp - 0xe0]
push eax
call edi
push 2
mov esi, 0x10012c4
push esi
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
jne 0x1007762
push 3
push 0x1001560
lea eax, [ebp - 0x2e0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
je 0x1007762
lea eax, [ebp - 0x2e0]
push esi
push eax
call dword [sym.imp.msvcrt.dll_wcstok]
cmp eax, ebx
pop ecx
pop ecx
jne 0x1007758
push 0x829
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
push dword [ebp - 0x5ae0]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
xor eax, eax
inc eax
jmp 0x1007c1f
push eax
lea eax, [ebp - 0x2e0]
push eax
call edi
lea eax, [ebp - 0x2e0]
push eax
call fcn.0100db50
xor edi, edi
inc edi
cmp eax, edi
jne 0x10077b3
lea eax, [ebp - 0x6e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10077b3
push 0x313
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
lea eax, [ebp - 0x2e0]
push 0x10012a0
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
lea eax, [ebp - 0x5afc]
push eax
push ebx
push dword [ebp - 0x5aec]
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x6e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.01002f60
cmp eax, edi
je 0x1007bfe
push 0x100153c
lea eax, [ebp - 0xe0]
push eax
call fcn.01001c2e
cmp eax, ebx
mov dword [ebp - 0x5adc], eax
jne 0x1007842
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
jmp 0x1007bfe
push eax
call fcn.0100bbcf
cmp eax, 0x14
mov ecx, dword [ebp - 0x5ae4]
jb 0x100789b
cmp ecx, 0x14
jb 0x100789b
push 0x314
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
push dword [ebp - 0x5ae0]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0x5adc]
push eax
call fcn.0100bb96
jmp 0x1007c0b
cmp ecx, ebx
jbe 0x1007bd0
cmp ecx, eax
ja 0x1007bd0
cmp dword [ebp - 0x5adc], ebx
je 0x1007ba2
dec ecx
push ecx
push dword [ebp - 0x5adc]
call fcn.0100c29c
cmp eax, ebx
je 0x1007ba2
push eax
lea eax, [ebp - 0x31e8]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
cmp dword [ebp - 0x5ae8], ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
pop ecx
pop ecx
mov esi, 0x10011f4
je 0x1007974
lea eax, [ebp - 0x31e8]
push 0x10017d8
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x100792c
push 0x319
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
xor edi, edi
inc edi
jmp 0x1007be6
push esi
lea eax, [ebp - 0x31e8]
push eax
call edi
push 0x10017d8
lea eax, [ebp - 0x31e8]
push eax
call edi
push 0x100158c
lea eax, [ebp - 0x31e8]
push eax
call edi
push 0xa
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x5ae8]
call dword [sym.imp.msvcrt.dll__ltow]
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x31e8]
push eax
call edi
cmp dword [ebp - 0x5af4], ebx
je 0x10079b6
lea eax, [ebp - 0x31e8]
push 0x10017c0
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x100799e
push 0x318
jmp 0x1007910
push esi
lea eax, [ebp - 0x31e8]
push eax
call edi
push 0x10017c0
lea eax, [ebp - 0x31e8]
push eax
call edi
cmp dword [ebp - 0x5af0], ebx
je 0x10079f8
lea eax, [ebp - 0x31e8]
push 0x10017b4
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x10079e0
push 0x317
jmp 0x1007910
push esi
lea eax, [ebp - 0x31e8]
push eax
call edi
push 0x10017b4
lea eax, [ebp - 0x31e8]
push eax
call edi
cmp dword [ebp - 0x5af8], ebx
je 0x1007a37
mov ebx, 0x100179c
lea eax, [ebp - 0x31e8]
push ebx
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x1007a23
push 0x316
jmp 0x1007910
push esi
lea eax, [ebp - 0x31e8]
push eax
call edi
push ebx
lea eax, [ebp - 0x31e8]
push eax
call edi
lea eax, [ebp - 0x31e8]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov ecx, 0xfe
cmp eax, ecx
jb 0x1007aa0
push ecx
push 0xc12
call fcn.0100d783
push eax
lea eax, [ebp - 0x8dc]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x8dc]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
push dword [ebp - 0x5ae0]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
xor edi, edi
inc edi
jmp 0x1007c0b
mov eax, dword [ebp - 0x5ae4]
dec eax
push eax
push dword [ebp - 0x5adc]
call fcn.0100c208
push 0x1388
lea eax, [ebp - 0x31e8]
push eax
mov eax, dword [ebp - 0x5ae4]
dec eax
push eax
push dword [ebp - 0x5adc]
call fcn.0100c191
mov esi, dword [ebp - 0x5ae0]
xor eax, eax
mov ecx, 0x4e2
mov edi, esi
push esi
rep stosd dword es:[edi], eax
push dword [ebp - 0x5adc]
call fcn.01001f40
xor edi, edi
inc edi
cmp eax, edi
jne 0x1007b1b
lea eax, [ebp - 0x5adc]
push eax
call fcn.0100bb96
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
jmp 0x1007c0b
lea eax, [ebp - 0xe0]
push eax
push esi
push 0x100153c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
test eax, eax
je 0x1007b78
push dword [ebp - 0x5ae4]
push 0xcb
call fcn.0100d783
push eax
lea eax, [ebp - 0xad8]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0xad8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
mov edi, eax
jmp 0x1007bf2
push 0x84
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0x5adc]
push eax
call fcn.0100bb96
jmp 0x1007831
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1007be6
push 0x7d
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xe0]
push eax
call fcn.01001efb
lea eax, [ebp - 0x5adc]
push eax
call fcn.0100bb96
push dword [ebp - 0x5ae0]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
push dword [ebp - 0x5afc]
lea eax, [ebp - 0x2e0]
push eax
call fcn.010026f7
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100b77c
leave
ret 8