Function at 0x4015b2
Capabilities:
Manipulate boot configuration

Disassembly:
push ebx
push edi
push dword [0x4134b4]
call fcn.00407590
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4015d3
jg 0x4015cf
cmp ebx, 0
jb 0x4015d3
xor eax, eax
jmp 0x4015d8
mov eax, 1
or eax, eax
jne 0x401e0f
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._delete
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, 0x411074
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
mov eax, str.Adding_wvx1boot_entry_to_BCD
push eax
call fcn.0040208d
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._create
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str.__d_wvx1boot__application_osloader
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push dword [0x413a50]
push dword [0x4134a0]
call fcn.0040cee0
add dword [0x413a50], 2
mov edx, 0x411c72
pop ecx
mov dword [0x413a50], ecx
add ecx, dword [0x411efc]
call fcn.00403080
je 0x40195a
call fcn.00402566
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._device__ramdisk_
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 2
push dword [0x4134b4]
call fcn.0040ce70
pop eax
mov edx, 0x4111e6
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 3
push dword [0x4134b4]
call fcn.0040cfe0
pop eax
mov edx, str._ramdiskoptions_
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, 0x411140
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 2
push dword [0x4134b4]
call fcn.0040ce70
pop eax
mov edx, 0x4111e6
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 3
push dword [0x4134b4]
call fcn.0040cfe0
pop eax
mov edx, str._ramdiskoptions_
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
movzx ebx, byte [0x4134cc]
mov eax, 1
cmp ebx, eax
jne 0x401895
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._path_windows_system32winload.efi
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
jmp 0x4018fd
movzx ebx, byte [0x4134cc]
mov eax, 2
cmp ebx, eax
jne 0x4018fd
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._path_windows_system32winload.exe
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._winpe_yes
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
jmp 0x401c84
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._device__vhd_
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 2
push dword [0x4134b4]
call fcn.0040ce70
pop eax
mov edx, 0x4111e6
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 3
push dword [0x4134b4]
call fcn.0040cfe0
pop eax
mov edx, 0x41109a
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._osdevice__vhd_
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 2
push dword [0x4134b4]
call fcn.0040ce70
pop eax
mov edx, 0x4111e6
push edx
call fcn.0040dec0
push dword [0x413a50]
push dword [0x413a50]
push 3
push dword [0x4134b4]
call fcn.0040cfe0
pop eax
mov edx, 0x41109a
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._inherit_bootloadersettings
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._nointegritychecks_Yes
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
movzx ebx, byte [0x4134cc]
mov eax, 2
cmp ebx, eax
jge 0x401bc4
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._path_windows_system32winload.efi
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
jmp 0x401c2c
movzx ebx, byte [0x4134cc]
mov eax, 2
cmp ebx, eax
jne 0x401c2c
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._path_windows_system32winload.exe
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._nx_OptIn
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._systemroot_windows
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._set
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
mov edx, str._detecthal_yes
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
push dword [0x413a50]
push 0x83
xor eax, eax
push eax
push dword [0x413a50]
mov edx, str._bootsequence
push edx
call fcn.0040dec0
mov edx, dword [0x4134bc]
push edx
call fcn.0040dec0
add dword [0x413a50], 2
mov eax, str.bcdedit.exe
push eax
mov edx, dword [0x411efc]
add dword [esp + 4], edx
call fcn.004042e8
pop dword [0x413a50]
call fcn.00401f64
mov eax, str.It_will_restart_in_3_seconds.
push eax
call fcn.0040208d
push 0xbb8
push 4
mov eax, str.Reboot__
push eax
mov eax, str.It_will_restart_in_3_seconds.
push eax
push 0
call fcn.00401e41
mov ebx, eax
cmp ebx, 7
jne 0x401dbd
jmp 0x401303
push 0x82
xor eax, eax
push eax
mov eax, str._r__t_0
push eax
mov eax, str.shutdown.exe
push eax
call fcn.004042e8
push 0x82
xor eax, eax
push eax
mov eax, str.shut__r
push eax
mov eax, str.pecmd.exe
push eax
call fcn.004042e8
push 0x82
xor eax, eax
push eax
mov eax, str.reboot
push eax
mov eax, str.wpeutil.exe
push eax
call fcn.004042e8
jmp 0x401303
push dword [0x4134b4]
mov edx, 0x411028
pop ecx
call fcn.00403080
je 0x401e2f
mov eax, str.File_is_invalid.
push eax
call fcn.0040208d
jmp 0x401e3a
mov eax, str.File_is_not_available.
push eax
call fcn.0040208d
xor eax, eax
pop edi
pop ebx
ret 4