Function at 0x10011210
Capabilities:
Manipulate boot configuration
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10033ffd
mov eax, dword fs:[0]
push eax
sub esp, 0x558
mov eax, dword [0x10048024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x528], ecx
cmp dword [ebp + 8], 5
jle 0x10011d13
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
push 0x80000
call fcn.1000f66d
add esp, 4
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x390], eax
push 0x80000
push 0
mov ecx, dword [ebp - 0x390]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x128]
call fcn.1002df30
mov dword [ebp - 4], 0
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x128]
call fcn.1002de40
test eax, eax
jne 0x1001133f
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x52c], eax
push 0x4f5
push 0x10038134
call fcn.10010eb0
add esp, 8
push eax
push 0x10038144
mov ecx, dword [ebp - 0x52c]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c4]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4c8]
jmp 0x10011ff0
lea ecx, [ebp - 0x394]
push ecx
lea edx, [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002ddb0
test eax, eax
jne 0x100113f6
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x530], eax
push 0x4fb
push 0x10038164
call fcn.10010eb0
add esp, 8
push eax
push str._s:_Create_write_PIPE_Failed.
mov eax, dword [ebp - 0x530]
push eax
mov ecx, dword [ebp - 0x530]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
call fcn.10010e80
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4cc]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4d0]
jmp 0x10011ff0
mov edx, dword [ebp - 0x394]
push edx
mov eax, dword [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x128]
call fcn.1002db00
test eax, eax
jne 0x100114b7
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x534], eax
push 0x502
push 0x10038194
call fcn.10010eb0
add esp, 8
push eax
push 0x100381a4
mov ecx, dword [ebp - 0x534]
push ecx
mov edx, dword [ebp - 0x534]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x388]
push eax
mov ecx, dword [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
call fcn.10010e80
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4d4], eax
mov ecx, dword [ebp - 0x4d4]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4d8]
jmp 0x10011ff0
mov byte [ebp - 0x384], 0
push 0x1ff
push 0
lea edx, [ebp - 0x383]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x1001156b
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x538], eax
push 0x50c
push 0x100381c0
call fcn.10010eb0
add esp, 8
push eax
push str._s:_Boot_file_path_invalid
mov ecx, dword [ebp - 0x538]
push ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x4dc]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4e0]
jmp 0x10011ff0
mov byte [ebp - 0x11c], 0
push 0x103
push 0
lea ecx, [ebp - 0x11b]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x11c]
push edx
call fcn.10011130
add esp, 4
test eax, eax
jne 0x10011624
cmp dword [ebp - 0x390], 0
je 0x100115c3
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x53c], eax
push 0x516
push 0x100381ec
call fcn.10010eb0
add esp, 8
push eax
push str._s:_Get_bcdedit.exe_file_Failed.
mov edx, dword [ebp - 0x53c]
push edx
mov eax, dword [ebp - 0x53c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4e8]
jmp 0x10011ff0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x11c]
push ecx
push str._s_bcdedit.exe__store__s__enum__v_n
lea edx, [ebp - 0x384]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x384]
push eax
call sub.ntdll.dll_strlen
add esp, 4
push eax
lea ecx, [ebp - 0x384]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002dd60
test eax, eax
jne 0x10011756
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x384]
push eax
push 0x51d
push 0x10038244
call fcn.10010eb0
add esp, 8
push eax
push 0x10038254
mov ecx, dword [ebp - 0x540]
push ecx
mov edx, dword [ebp - 0x540]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0x10
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x544], eax
push 0x51e
push 0x10038264
call fcn.10010eb0
add esp, 8
push eax
push 0x10038274
mov edx, dword [ebp - 0x544]
push edx
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x394]
push edx
mov eax, dword [ebp - 0x38c]
push eax
call fcn.10010e80
add esp, 0x10
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
push edx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4f0]
jmp 0x10011ff0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
mov edx, dword [ebp - 0x388]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002dc20
test eax, eax
jne 0x10011829
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x548], eax
push 0x526
push 0x10038290
call fcn.10010eb0
add esp, 8
push eax
push 0x100382a0
mov eax, dword [ebp - 0x548]
push eax
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010e80
add esp, 0x10
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4f4], edx
mov eax, dword [ebp - 0x4f4]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x4f8]
jmp 0x10011ff0
mov byte [ebp - 0x174], 0
push 0x3f
push 0
lea ecx, [ebp - 0x173]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100382bc
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x12c], 0
lea edx, [ebp - 0x174]
mov dword [ebp - 0x398], edx
mov dword [ebp - 0x3a0], 0
jmp 0x10011887
mov eax, dword [ebp - 0x3a0]
add eax, 1
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x17c]
sub ecx, dword [ebp - 0x180]
cmp dword [ebp - 0x3a0], ecx
jge 0x10011974
mov edx, dword [ebp - 0x390]
add edx, dword [ebp - 0x3a0]
movsx eax, byte [edx]
cmp eax, 0x7b
jne 0x100118c5
mov ecx, dword [ebp - 0x390]
add ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x180]
push edx
push 0x100382c8
mov eax, dword [ebp - 0x390]
add eax, dword [ebp - 0x3a0]
push eax
call dword [sym.imp.ntdll.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x1001196f
cmp dword [ebp - 0x12c], 0
je 0x1001196f
mov ecx, dword [ebp - 0x12c]
movsx edx, byte [ecx]
cmp edx, 0x7d
je 0x10011936
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x12c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x398]
add eax, 1
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x12c]
add ecx, 1
mov dword [ebp - 0x12c], ecx
jmp 0x100118f8
mov edx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x12c]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x398]
add edx, 1
mov dword [ebp - 0x398], edx
mov eax, dword [ebp - 0x398]
mov byte [eax], 0
mov ecx, dword [ebp - 0x398]
add ecx, 1
mov dword [ebp - 0x398], ecx
jmp 0x10011974
jmp 0x10011878
lea edx, [ebp - 0x174]
push edx
call sub.ntdll.dll_strlen
add esp, 4
test eax, eax
jne 0x10011a03
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x54c], eax
push 0x541
push 0x100382d4
call fcn.10010eb0
add esp, 8
push eax
push str._s:_Failed_to_get_our_boot_option.
mov eax, dword [ebp - 0x54c]
push eax
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x4fc], ecx
mov edx, dword [ebp - 0x4fc]
push edx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x500], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x500]
jmp 0x10011ff0
push 0x200
push 0
lea eax, [ebp - 0x384]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x174]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x11c]
push eax
push str._s_bcdedit.exe__store__s__delete__s__f_n
lea ecx, [ebp - 0x384]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0x14
lea edx, [ebp - 0x384]
push edx
call sub.ntdll.dll_strlen
add esp, 4
push eax
lea eax, [ebp - 0x384]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
lea ecx, [ebp - 0x128]
call fcn.1002dd60
test eax, eax
jne 0x10011b52
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x550], eax
lea edx, [ebp - 0x384]
push edx
push 0x54a
push 0x10038330
call fcn.10010eb0
add esp, 8
push eax
push 0x10038340
mov eax, dword [ebp - 0x550]
push eax
mov ecx, dword [ebp - 0x550]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0x10
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x554], eax
push 0x54b
push 0x10038350
call fcn.10010eb0
add esp, 8
push eax
push 0x10038360
mov ecx, dword [ebp - 0x554]
push ecx
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x388]
push eax
mov ecx, dword [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
call fcn.10010e80
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x508], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x508]
jmp 0x10011ff0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x17c], 0
push 0x1000
push 0
mov edx, dword [ebp - 0x390]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
mov edx, dword [ebp - 0x388]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002dc20
test eax, eax
jne 0x10011c45
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x558], eax
push 0x555
push 0x1003837c
call fcn.10010eb0
add esp, 8
push eax
push 0x1003838c
mov eax, dword [ebp - 0x558]
push eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010e80
add esp, 0x10
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x50c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x510], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x510]
jmp 0x10011ff0
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010e80
add esp, 0x10
push 0x100383a8
mov edx, dword [ebp - 0x390]
push edx
call fcn.100025e0
add esp, 8
test eax, eax
jne 0x10011cc3
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x518], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x518]
jmp 0x10011ff0
cmp dword [ebp - 0x390], 0
je 0x10011ce7
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x51c], edx
mov eax, dword [ebp - 0x51c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x520], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002ded0
mov eax, dword [ebp - 0x520]
jmp 0x10011ff0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x528]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x528]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x10011d3c
mov eax, 1
jmp 0x10011ff0
push 0x100383b4
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
jne 0x10011da2
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x55c], eax
mov edx, dword [ebp + 0xc]
push edx
push 0x573
push 0x100383b8
call fcn.10010eb0
add esp, 8
push eax
push 0x100383c8
mov eax, dword [ebp - 0x55c]
push eax
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0x10
xor eax, eax
jmp 0x10011ff0
push 0x100383dc
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x3ac], eax
push 0x1000
call fcn.1000f66d
add esp, 4
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x3a4], ecx
push pe_nt_image_headers32
push 0
lea edx, [ebp - 0x4b4]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x1000
push 0
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
push ecx
call dword [sym.imp.MSVCR80.dll_feof]
add esp, 4
test eax, eax
jne 0x10011eea
mov edx, dword [ebp - 0x3a8]
push edx
push pe_nt_image_headers32
lea eax, [ebp - 0x4b4]
push eax
call dword [sym.imp.MSVCR80.dll_fgets]
add esp, 0xc
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4bc], 0
jmp 0x10011e64
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x4bc], eax
jge 0x10011eb9
mov ecx, dword [ebp - 0x3ac]
push ecx
push str.AOMEI_Backupper
mov edx, dword [ebp - 0x4bc]
lea eax, [ebp + edx - 0x4b4]
push eax
call dword [sym.imp.ntdll.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x10011eb7
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
jmp 0x10011eb9
jmp 0x10011e55
lea edx, [ebp - 0x4b4]
push edx
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_strcat
add esp, 8
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
jmp 0x10011e00
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
push 0x100383fc
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
jne 0x10011f60
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x591
push 0x10038400
call fcn.10010eb0
add esp, 8
push eax
push 0x10038410
mov edx, dword [ebp - 0x560]
push edx
mov eax, dword [ebp - 0x560]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0x10
xor eax, eax
jmp 0x10011ff0
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3b0]
push edx
push 1
mov eax, dword [ebp - 0x3a4]
push eax
call dword [sym.imp.MSVCR80.dll_fwrite]
add esp, 0x10
cmp eax, dword [ebp - 0x3b0]
je 0x10011fd7
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x564], eax
push 0x598
push 0x10038424
call fcn.10010eb0
add esp, 8
push eax
push str._s:_Warning:_write_boot_file.
mov ecx, dword [ebp - 0x564]
push ecx
mov edx, dword [ebp - 0x564]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov eax, 1
jmp 0x10011ff0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000f672
mov esp, ebp
pop ebp
ret 8