Function at 0x10010d10
Capabilities:
Manipulate boot configuration

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [sym.imp.libDeteven.dll_stristr]
mov dword [ebp - 4], 0
test esi, esi
je 0x10011078
push str.Unlock_PAE
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.expstart.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.8ootLogoChanger.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Emul_x64
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.bootuituner
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.TUNINGBootscreen.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.UFD_FORMAT.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.dseo13b.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Ultimate_Windows_Tweaker.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.SamsungSamsung_Data_MigrationData_Migration.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.USBcashdrawer_driver_USB_OPOS__sign3DriverInstall.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.iShareAdmin.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.iShareCacheX.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.FiraDisk_integrator.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Trackpad
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Power_Plan_Assistant
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.EasyBCD
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.K.J
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.ObjectDock.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.EDIUS6.Dongle.License.Backup
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Setup_Acronus
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.VisualMaster.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Windows7MasterWindows7_Master.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.Dongle.License.Backup
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.droidpad
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.RunBCDEdit.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.my_7_optimizer
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.My7CustoBox.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.CCBootClient.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.VisualBcd.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.mutesv.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.test_on_8_x64
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.ctsrsvc.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.znet_bcd.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.uishell.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.xkinstaller.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.winaerotweaker.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.dfwks
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str._tronsolution
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.extramagic_settings_process.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.wo_mic_driver.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str.DiskGenius.exe
push esi
call edi
add esp, 8
test eax, eax
jne 0x1001103b
push str._vJoy_
push esi
call edi
add esp, 8
test eax, eax
je 0x1001104b
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
push eax
push str.Test_Mode_switch
call fcn.100755d0
add esp, 8
test eax, eax
jne 0x1001103b
mov eax, dword [ebp + 8]
push 3
push 0x1010cb64
mov edx, esi
call fcn.10081050
add esp, 8
test eax, eax
jne 0x1001103b
push str.ctsrsvc.exe
lea eax, [ebx + 0xc]
call fcn.10077670
add esp, 4
test eax, eax
jne 0x1001103b
push str._sogpproc.exe
lea eax, [ebx + 0xc]
call fcn.10077670
add esp, 4
test eax, eax
jne 0x1001103b
mov esi, dword [ebp + 0x10]
push str.bootstatuspolicy
push esi
call edi
add esp, 8
test eax, eax
je 0x10011102
push str.ignoreallfailures
push esi
call edi
add esp, 8
test eax, eax
je 0x10011102
cmp dword [ebx + 0x10], 0xf
je 0x1001103b
mov ecx, dword [ebx + 0x18]
push 0
push str.DFEnt.exe
push ecx
call dword [sym.imp.libDeteven.dll_endsWith]
add esp, 0xc
test eax, eax
jne 0x1001103b
mov edx, dword [ebx + 0x18]
push eax
push str._buena.exe
push edx
call dword [sym.imp.libDeteven.dll_endsWith]
add esp, 0xc
test eax, eax
jne 0x1001103b
push str._set_default_recoveryenabled_No
push esi
call edi
add esp, 8
test eax, eax
jne 0x10011120
push str._set_current_nx_AlwaysOff_
push esi
call edi
add esp, 8
test eax, eax
je 0x10011142
cmp dword [ebx + 0x10], 0xf
jne 0x10011142
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x10011142
mov eax, dword [eax + 4]
cmp eax, 0x15
je 0x1001103b
cmp eax, 0x2e
je 0x1001103b
push str._set_loadoptions_DDISABLE_INTEGRITY_CHECKS
push esi
call edi
add esp, 8
test eax, eax
je 0x10011168
cmp dword [ebx + 0x10], 0xf
jne 0x10011168
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x10011168
cmp dword [eax + 4], 0x15
je 0x1001103b
mov eax, esi
push str._set_current_nx_AlwaysOff_
push eax
call edi
mov esi, dword [sym.imp.libDeteven.dll_wcsistr]
add esp, 8
test eax, eax
je 0x10011199
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x10011199
push str.Base_Image_Script_Framework
push eax
call esi
add esp, 8
test eax, eax
jne 0x1001103b
mov ecx, dword [ebp + 0x10]
push str.set_TESTSIGNING_ON
push ecx
call edi
add esp, 8
test eax, eax
je 0x100111fc
cmp dword [ebx + 0x10], 0xf
jne 0x100111fc
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x100111fc
cmp dword [eax + 4], 0x15
je 0x1001103b
mov edx, dword [eax + 0xc]
push 0
push str.xenos.exe
push edx
call dword [sym.imp.libDeteven.dll_endsWith]
add esp, 0xc
test eax, eax
jne 0x1001103b
push eax
mov eax, dword [ebx + 0x24]
mov ecx, dword [eax + 0xc]
push str.Xenos64.exe
push ecx
call dword [sym.imp.libDeteven.dll_endsWith]
add esp, 0xc
test eax, eax
jne 0x1001103b
mov edx, dword [ebx + 0x18]
push str.deepfreeze
push edx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov eax, dword [ebx + 0x18]
push 0x100c49f0
push eax
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov ecx, dword [ebx + 0x18]
push str.SmartFix.exe
push ecx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
cmp dword [ebp + 0xc], eax
je 0x10011259
mov edx, dword [ebp + 0xc]
push str.FusionAccess_Windows_Installer.exe
push edx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
cmp dword [ebx + 0x10], 0xf
jne 0x100114e7
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x100114e7
push 0x100c4a28
push eax
call esi
add esp, 8
test eax, eax
jne 0x100112a5
mov eax, dword [ebx + 0x20]
push 0x100c4a34
push eax
call esi
add esp, 8
test eax, eax
jne 0x100112a5
mov ecx, dword [ebx + 0x20]
push 0x100c4a40
push ecx
call esi
add esp, 8
test eax, eax
je 0x100114b2
mov edx, dword [ebx + 0x20]
push 0x100c4a4c
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.emulator
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.activ
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.disable
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.DEPoff
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.Optimizer
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.Optitex
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.depot
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.recovery
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push 0x100c4ae0
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.medkit
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.mastercam
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.wilcom
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.DKSKonfiguration_
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.licen
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.boot
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push 0x100c4b50
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.disable
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.install
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.software
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push 0x100c4200
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push str.repair
push edx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov eax, dword [ebx + 0x20]
push str.DksProtectOn
push eax
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov ecx, dword [ebx + 0x20]
push str.clean
push ecx
call esi
add esp, 8
test eax, eax
jne 0x100114ab
mov edx, dword [ebx + 0x20]
push 0x100c4bb4
push edx
call esi
add esp, 8
test eax, eax
je 0x100114b2
mov dword [ebp - 4], 1
mov eax, dword [ebx + 0x20]
push 0x100c4bc0
push eax
call esi
add esp, 8
test eax, eax
jne 0x1001103b
mov ecx, dword [ebx + 0x20]
push str.Scripts_
push ecx
call esi
add esp, 8
test eax, eax
jne 0x1001103b
cmp dword [ebp - 4], eax
jne 0x100115c1
mov edx, dword [ebx + 0xec]
push str.EFIMicrosoftBootBCD
push edx
call esi
add esp, 8
test eax, eax
jne 0x1001103b
lea esi, [ebx + 0xc]
test esi, esi
je 0x1001159f
jmp 0x10011510
mov eax, dword [esi + 0xc]
push str.driver
push eax
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov ecx, dword [esi + 0xc]
push str.windeploy.exe
push ecx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov edx, dword [esi + 0xc]
push str.WD20Alive
push edx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov eax, dword [esi + 0xc]
push str.DeepFreeze
push eax
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov ecx, dword [esi + 0xc]
push str.DFServ.exe
push ecx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov edx, dword [esi + 0xc]
push str.SmartFix
push edx
call edi
add esp, 8
test eax, eax
jne 0x1001103b
mov esi, dword [esi + 0x18]
test esi, esi
jne 0x10011510
cmp dword [ebp + 0xc], 0
je 0x100115c1
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push 6
push 0x100b0e78
push eax
push ecx
push ebx
call dword [sym.imp.DetEvenFilter.dll_Ordinal_152]
add esp, 0x14
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
pop edi
pop esi
mov esp, ebp
pop ebp
ret