Function at 0x1004b71
Capabilities:
Manipulate boot configuration

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x64b4
call fcn.0100ba20
mov eax, dword [0x1011024]
push ebx
xor ebx, ebx
push esi
push edi
push 0x7f
pop ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push 0x7f
mov dword [ebp - 0x64b0], eax
xor eax, eax
lea edi, [ebp - 0x2c8]
mov dword [ebp - 0x2cc], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x7f
lea edi, [ebp - 0x14ac]
mov dword [ebp - 0x14b0], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x31
lea edi, [ebp - 0x10b0]
mov dword [ebp - 0x10b4], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x7e
pop edx
lea edi, [ebp - 0xc8]
mov dword [ebp - 0xcc], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0xcb4]
mov dword [ebp - 0xcb8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x6c0]
mov dword [ebp - 0x6c4], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0xeb0]
mov dword [ebp - 0xeb4], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0xab8]
mov dword [ebp - 0xabc], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x12ac]
mov dword [ebp - 0x12b0], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x8bc]
mov dword [ebp - 0x8c0], ebx
rep stosd dword es:[edi], eax
mov ecx, 0x9c3
lea edi, [ebp - 0x3fb4]
mov dword [ebp - 0x3fb8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x4c4]
mov dword [ebp - 0x4c8], ebx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x64a8]
mov dword [ebp - 0x64ac], ebx
stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x16a8]
mov dword [ebp - 0x16ac], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x18a4]
mov dword [ebp - 0x18a8], ebx
mov dword [ebp - 0x64a4], ebx
mov dword [ebp - 0x64a0], ebx
mov dword [ebp - 0x64b4], ebx
mov dword [ebp - 0x649c], ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x6498], ebx
mov esi, 0x1001388
lea edi, [ebp - 0x6490]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x6484]
rep stosd dword es:[edi], eax
push 0x7f
pop esi
mov dword [ebp - 0x6290], 0x10000
mov dword [ebp - 0x6288], ebx
mov dword [ebp - 0x6280], ebx
xor edx, edx
inc edx
mov dword [ebp - 0x628c], edx
lea eax, [ebp - 0x64b4]
mov dword [ebp - 0x6284], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x627c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x6080], ebx
mov dword [ebp - 0x607c], ebx
mov dword [ebp - 0x6078], 0x73
mov ecx, esi
lea edi, [ebp - 0x6074]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2cc]
mov dword [ebp - 0x5e6c], eax
xor eax, eax
mov dword [ebp - 0x5e78], 0x2001
mov dword [ebp - 0x5e74], edx
mov dword [ebp - 0x5e70], ebx
mov dword [ebp - 0x5e68], ebx
mov ecx, esi
lea edi, [ebp - 0x5e64]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5c68], ebx
mov dword [ebp - 0x5c64], ebx
mov dword [ebp - 0x5c60], 0x75
mov ecx, esi
lea edi, [ebp - 0x5c5c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x14b0]
mov dword [ebp - 0x5a54], eax
xor eax, eax
mov dword [ebp - 0x5a60], 0x2001
mov dword [ebp - 0x5a5c], edx
mov dword [ebp - 0x5a58], ebx
mov dword [ebp - 0x5a50], ebx
mov ecx, esi
lea edi, [ebp - 0x5a4c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5850], ebx
mov dword [ebp - 0x584c], ebx
mov dword [ebp - 0x5848], 0x70
mov ecx, esi
lea edi, [ebp - 0x5844]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x10b4]
mov dword [ebp - 0x563c], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x5634]
mov dword [ebp - 0x5648], 0x1001
mov dword [ebp - 0x5644], edx
mov dword [ebp - 0x5640], ebx
mov dword [ebp - 0x5638], ebx
rep stosd dword es:[edi], eax
mov eax, dword [0x10014d4]
mov dword [ebp - 0x5430], eax
mov eax, dword [0x10014d8]
push 0x7e
mov dword [ebp - 0x542c], eax
mov dword [ebp - 0x5438], ebx
mov dword [ebp - 0x5434], ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x5428]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5230], 0x20000
mov dword [ebp - 0x522c], edx
mov dword [ebp - 0x5228], ebx
mov dword [ebp - 0x5220], ebx
mov ecx, esi
lea eax, [ebp - 0x64a4]
mov dword [ebp - 0x5224], eax
xor eax, eax
push 0x7e
lea edi, [ebp - 0x521c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5020], ebx
mov dword [ebp - 0x501c], ebx
pop ecx
mov esi, 0x100156c
lea edi, [ebp - 0x5018]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x5012]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
mov dword [ebp - 0x4e18], 0x82002
mov dword [ebp - 0x4e14], edx
mov dword [ebp - 0x4e10], ebx
mov dword [ebp - 0x4e08], ebx
pop ecx
lea eax, [ebp - 0x649c]
mov dword [ebp - 0x4e0c], eax
xor eax, eax
lea edi, [ebp - 0x4e04]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4c08], ebx
mov dword [ebp - 0x4c04], ebx
mov esi, 0x1001698
lea edi, [ebp - 0x4c00]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x4bf6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xa
pop ecx
mov dword [ebp - 0x4a00], 0x2201
mov dword [ebp - 0x49fc], edx
mov dword [ebp - 0x49f8], ebx
push 0x76
lea eax, [ebp - 0x6c4]
mov dword [ebp - 0x49f4], eax
mov esi, 0x1001670
lea edi, [ebp - 0x49f0]
rep movsd dword es:[edi], dword [esi]
pop ecx
xor eax, eax
lea edi, [ebp - 0x49c8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x47f0], ebx
mov dword [ebp - 0x47ec], ebx
mov esi, 0x1001664
lea edi, [ebp - 0x47e8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x47de]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x8c0]
push 0xf
mov dword [ebp - 0x45e8], 0x2201
mov dword [ebp - 0x45e4], edx
mov dword [ebp - 0x45e0], ebx
mov dword [ebp - 0x45dc], eax
pop ecx
mov esi, 0x1001628
lea edi, [ebp - 0x45d8]
rep movsd dword es:[edi], dword [esi]
push 0x71
pop ecx
xor eax, eax
push 0x7f
lea edi, [ebp - 0x459c]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x43d8], ebx
mov dword [ebp - 0x43d4], ebx
mov word [ebp - 0x43d0], bx
lea edi, [ebp - 0x43ce]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xcb8]
mov dword [ebp - 0x41c4], eax
push 0x7f
pop ecx
xor eax, eax
mov dword [ebp - 0x41d0], 0xc0001
mov dword [ebp - 0x41cc], edx
mov dword [ebp - 0x41c8], ebx
mov dword [ebp - 0x41c0], ebx
lea edi, [ebp - 0x41bc]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2cc]
push eax
mov dword [ebp - 0x3fc0], ebx
mov dword [ebp - 0x3fbc], ebx
call fcn.0100269c
cmp eax, 1
je 0x1005c6d
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
mov esi, 0x1001568
lea eax, [ebp - 0x5638]
push esi
push eax
call edi
lea eax, [ebp - 0x10b4]
push esi
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x6490]
push eax
push 9
push dword [ebp - 0x64b0]
push dword [ebp + 8]
call fcn.0100e534
test eax, eax
jne 0x100505c
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
call fcn.0100c80a
jmp 0x100530e
cmp dword [ebp - 0x64a4], ebx
je 0x1005084
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100269c
test eax, eax
jne 0x1005c6d
call fcn.01002250
xor eax, eax
jmp 0x1005c70
cmp dword [ebp - 0x649c], ebx
ja 0x1005093
push 0x1b8
jmp 0x10050bf
cmp dword [ebp - 0x5e70], ebx
jne 0x10050aa
cmp dword [ebp - 0x5a58], ebx
je 0x10050b2
push 0x30b
jmp 0x10050bf
cmp dword [ebp - 0x5a58], ebx
jne 0x10050cc
cmp dword [ebp - 0x5640], ebx
je 0x10050cc
push 0x30c
call fcn.0100d783
push eax
call fcn.0100c82e
jmp 0x1005052
lea eax, [ebp - 0x10b4]
push esi
push eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x10050fa
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
test eax, eax
jne 0x10050fa
mov dword [ebp - 0x64a0], 1
cmp dword [ebp - 0x5e70], ebx
je 0x1005180
cmp dword [ebp - 0x5640], ebx
jne 0x100515d
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005135
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
test eax, eax
mov dword [ebp - 0x64a0], 1
je 0x100513b
mov dword [ebp - 0x64a0], ebx
lea eax, [ebp - 0x10b4]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x100515d
lea eax, [ebp - 0x10b4]
push 0x10011f8
push eax
call edi
pop ecx
pop ecx
cmp dword [ebp - 0x5e70], ebx
je 0x1005180
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1005180
push 0x30e
jmp 0x1005309
cmp dword [ebp - 0x5a58], ebx
je 0x10051a3
lea eax, [ebp - 0x14b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10051a3
push 0x30f
jmp 0x1005309
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x1001620
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
mov esi, 0x1001614
je 0x1005230
push 0x100160c
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
je 0x1005230
push esi
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
je 0x1005230
lea eax, [ebp - 0xcb8]
mov dword [ebp - 0x64ac], eax
lea eax, [ebp - 0x64ac]
push eax
push 0xfe
lea eax, [ebp - 0x16ac]
push eax
push 0x400
push ebx
push 0x41b
mov dword [ebp - 0x64a8], 0x1001388
call fcn.0100d783
push eax
push 0x2400
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp - 0x16ac]
jmp 0x100530e
push esi
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
jne 0x1005268
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
jne 0x1005268
lea eax, [ebp - 0x8c0]
push eax
call esi
test eax, eax
jne 0x1005268
push 0x30a
jmp 0x1005309
call fcn.0100bb22
cmp eax, ebx
mov dword [ebp - 0x6494], eax
jne 0x10052a8
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1005c6d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1001504
lea eax, [ebp - 0xcc]
push eax
call esi
push 2
push 0x10012c4
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
jne 0x100532c
push 3
push 0x1001560
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
je 0x100532c
lea eax, [ebp - 0x2cc]
push 0x10012c4
push eax
call dword [sym.imp.msvcrt.dll_wcstok]
cmp eax, ebx
pop ecx
pop ecx
jne 0x1005322
push 0x829
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x1005c6d
push eax
lea eax, [ebp - 0x2cc]
push eax
call esi
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
cmp eax, 1
jne 0x1005375
lea eax, [ebp - 0x14b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005375
push 0x313
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
push 0x10012a0
lea eax, [ebp - 0x2cc]
push eax
call esi
lea eax, [ebp - 0x6498]
push eax
push ebx
push dword [ebp - 0x64a0]
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x10b4]
push eax
lea eax, [ebp - 0x14b0]
push eax
lea eax, [ebp - 0x2cc]
push eax
call fcn.01002f60
cmp eax, 1
je 0x1005c5b
push 0x100153c
lea eax, [ebp - 0xcc]
push eax
call fcn.01001c2e
cmp eax, ebx
mov dword [ebp - 0x6494], eax
je 0x1005956
push eax
call fcn.0100bbcf
mov ecx, dword [ebp - 0x649c]
cmp ecx, ebx
jbe 0x1005c2a
cmp ecx, eax
ja 0x1005c2a
dec ecx
push ecx
push dword [ebp - 0x6494]
call fcn.0100c29c
push eax
lea eax, [ebp - 0x3fb8]
push eax
call esi
lea eax, [ebp - 0x3fb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005956
push 0x1001620
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
jne 0x1005634
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x6c4]
push eax
call edi
test eax, eax
jne 0x1005454
lea eax, [ebp - 0x8c0]
push eax
call edi
test eax, eax
je 0x1005454
push 0x430
jmp 0x1005c2f
mov edi, dword [sym.imp.msvcrt.dll_wcsstr]
lea eax, [ebp - 0x3fb8]
push 0x10015fc
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x100549a
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x100549a
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x100549a
push 0x2ca
jmp 0x1005c2f
lea eax, [ebp - 0x3fb8]
push 0x10015fc
push eax
call edi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
pop ecx
pop ecx
jne 0x10054d0
push 0x10011f4
lea eax, [ebp - 0x3fb8]
push eax
call edi
push 0x10015fc
lea eax, [ebp - 0x3fb8]
push eax
call edi
lea eax, [ebp - 0x4c8]
push eax
push 0x10015e4
lea eax, [ebp - 0x3fb8]
push eax
call fcn.0100238e
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100551a
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100551a
push dword [ebp - 0x649c]
push 0x27a
jmp 0x10058c7
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10055d9
lea eax, [ebp - 0xeb4]
push eax
push 0x10015d0
push 0x1001574
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
je 0x1005956
lea eax, [ebp - 0xeb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005582
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0xeb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x10059b0
push 0x10011f4
lea eax, [ebp - 0x12b0]
push eax
call edi
push 0x10015e4
lea eax, [ebp - 0x12b0]
push eax
call edi
push 0x100158c
lea eax, [ebp - 0x12b0]
push eax
call edi
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.USER32.dll_CharLowerW]
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x12b0]
push eax
call edi
lea eax, [ebp - 0x12b0]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call edi
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.010021b1
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005a67
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005a1d
push dword [ebp - 0x649c]
push 0x27b
jmp 0x10058c7
push 0x100160c
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
jne 0x1005783
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1005759
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1005759
lea eax, [ebp - 0x3fb8]
push 0x10015fc
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1005696
push 0x302
jmp 0x1005c2f
push 0x10015fc
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
push 0x10015e4
lea eax, [ebp - 0x3fb8]
push eax
call fcn.0100238e
push 0x10015b0
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
jne 0x10056e9
push 0x808
jmp 0x1005c2f
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
je 0x100570f
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.010021b1
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
je 0x1005a67
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
jmp 0x1005a67
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push 0x430
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x1005b56
push 0x10015a4
lea eax, [ebp - 0xcb8]
push eax
call edi
test eax, eax
jne 0x1005a67
mov edi, dword [sym.imp.msvcrt.dll_wcsstr]
lea eax, [ebp - 0x3fb8]
push 0x10015b0
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x10057bd
push 0x80e
jmp 0x1005c2f
lea eax, [ebp - 0x3fb8]
push 0x10015fc
push eax
call edi
test eax, eax
pop ecx
pop ecx
jne 0x10057e1
push dword [ebp - 0x649c]
push 0x279
jmp 0x10058c7
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
push 0x10015e4
lea eax, [ebp - 0x3fb8]
push eax
call fcn.0100238e
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
jne 0x100583e
lea eax, [ebp - 0x6c4]
push eax
call edi
test eax, eax
jne 0x100583e
lea eax, [ebp - 0x8c0]
push eax
call edi
test eax, eax
je 0x100583e
push 0x41a
jmp 0x1005c2f
lea eax, [ebp - 0x6c4]
push eax
call edi
test eax, eax
jne 0x100585c
lea eax, [ebp - 0x8c0]
push eax
call edi
test eax, eax
je 0x1005759
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
je 0x10059d8
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
push 0x10015e4
lea eax, [ebp - 0x3fb8]
push eax
call fcn.0100238e
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10058e8
push dword [ebp - 0x649c]
push 0x277
call fcn.0100d783
push eax
lea eax, [ebp - 0xabc]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0xabc]
jmp 0x1005c34
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
push 0x10015e4
lea eax, [ebp - 0x4c8]
push eax
call esi
push 0x100158c
lea eax, [ebp - 0x4c8]
push eax
call edi
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x4c8]
push eax
call edi
lea eax, [ebp - 0xeb4]
push eax
push 0x10015d0
push 0x1001574
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
jne 0x1005987
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1005c43
lea eax, [ebp - 0xeb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10059ba
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0xeb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10059ba
push 0xc15
jmp 0x1005c2f
push 0x10011f4
lea eax, [ebp - 0x3fb8]
push eax
call edi
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call edi
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1005a67
push 0x10011f8
lea eax, [ebp - 0x4c8]
push eax
call esi
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.010021b1
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
lea eax, [ebp - 0x4c8]
push 0x1001590
push eax
call esi
lea eax, [ebp - 0x4c8]
push 0x100158c
push eax
call edi
lea eax, [ebp - 0x8c0]
push eax
lea eax, [ebp - 0x4c8]
push eax
call edi
lea eax, [ebp - 0x3fb8]
push 0x10011f4
push eax
call edi
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x3fb8]
push eax
call edi
lea eax, [ebp - 0x3fb8]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov ecx, 0xfe
cmp eax, ecx
jb 0x1005aa5
push ecx
push 0xc12
call fcn.0100d783
push eax
lea eax, [ebp - 0x18a8]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x18a8]
jmp 0x1005c34
mov eax, dword [ebp - 0x649c]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c208
push 0x1388
lea eax, [ebp - 0x3fb8]
push eax
mov eax, dword [ebp - 0x649c]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c191
push 0x2710
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
cmp esi, ebx
pop ecx
jne 0x1005b26
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1005c4f
xor eax, eax
mov ecx, 0x4e2
mov edi, esi
push esi
rep stosd dword es:[edi], eax
push dword [ebp - 0x6494]
call fcn.01001f40
cmp eax, 1
jne 0x1005b67
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
jmp 0x1005c5b
lea eax, [ebp - 0xcc]
push eax
push esi
push 0x100153c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
test eax, eax
je 0x1005bef
push dword [ebp - 0x649c]
push 0x276
call fcn.0100d783
push eax
lea eax, [ebp - 0xabc]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0xabc]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
push esi
mov edi, eax
call dword [sym.imp.msvcrt.dll_free]
pop ecx
push dword [ebp - 0x6498]
lea eax, [ebp - 0x2cc]
push eax
call fcn.010026f7
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
mov eax, edi
jmp 0x1005c70
push 0x84
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x1005c5b
push 0x1b8
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push dword [ebp - 0x6498]
lea eax, [ebp - 0x2cc]
push eax
call fcn.010026f7
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100b77c
leave
ret 8