Function at 0x41a4c0
Capabilities:
Get number of processors
Manipulate boot configuration
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49dde6
mov eax, dword fs:[0]
push eax
sub esp, 0x914
mov eax, dword [0x4c6374]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push str._bcdedit.exe
lea edx, [esi + 0x30]
lea ecx, [ebp - 0x840]
call fcn.0040c1a0
push 0x800
lea eax, [ebp - 0x810]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__create__s__d__9E_OneKeyRestore___device
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
xor eax, eax
mov dword [ebp - 0x814], 7
mov dword [ebp - 0x818], 0
mov word [ebp - 0x828], ax
lea eax, [ebp - 0x828]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x28
test al, al
jne 0x41a70b
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push 0x19
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
mov dword [ebp - 0x8dc], 0xf
mov dword [ebp - 0x8e0], 0
mov byte [ebp - 0x8f0], 0
call fcn.0040f450
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x920]
push 0xe
push str.GptRestore.cpp
mov dword [ebp - 0x90c], 0xf
mov dword [ebp - 0x910], 0
mov byte [ebp - 0x920], 0
call fcn.0040f450
lea eax, [ebp - 0x908]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 5
push eax
push 0x15b
lea eax, [ebp - 0x920]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
mov eax, dword [ebp - 0x8f4]
cmp eax, 8
jb 0x41a683
inc eax
lea ecx, [ebp - 0x908]
push eax
push dword [ebp - 0x908]
call fcn.0040f5b0
xor eax, eax
mov dword [ebp - 0x8f4], 7
mov word [ebp - 0x908], ax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x8f8], 0
cmp eax, 0x10
jb 0x41a6be
inc eax
lea ecx, [ebp - 0x920]
push eax
push dword [ebp - 0x920]
call fcn.0040f330
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x90c], 0xf
mov dword [ebp - 0x910], 0
mov byte [ebp - 0x920], 0
cmp eax, 0x10
jb 0x41a6f7
inc eax
lea ecx, [ebp - 0x8f0]
push eax
push dword [ebp - 0x8f0]
call fcn.0040f330
lea ecx, [ebp - 0x888]
call fcn.00408b70
mov byte [ebp - 4], 6
jmp 0x41ac40
push 7
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.0040a4f0
cmp eax, 0xffffffff
jne 0x41a875
push 2
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.0040a4f0
cmp eax, 0xffffffff
jne 0x41a875
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x908]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 8
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x908]
mov byte [ebp - 4], 0xa
push eax
push 0x162
lea eax, [ebp - 0x8f0]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
lea ecx, [ebp - 0x920]
call fcn.0040f680
mov eax, dword [ebp - 0x8dc]
cmp eax, 0x10
jb 0x41a828
inc eax
lea ecx, [ebp - 0x8f0]
push eax
push dword [ebp - 0x8f0]
call fcn.0040f330
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x8dc], 0xf
mov dword [ebp - 0x8e0], 0
mov byte [ebp - 0x8f0], 0
cmp eax, 0x10
jb 0x41a861
inc eax
lea ecx, [ebp - 0x908]
push eax
push dword [ebp - 0x908]
call fcn.0040f330
lea ecx, [ebp - 0x888]
call fcn.00408b70
mov byte [ebp - 4], 0xb
jmp 0x41ac40
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__create__s__d__9E_OneKeyRestore___application_osloader
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41aa1c
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x920]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0xd
call fcn.0040f550
lea eax, [ebp - 0x908]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0xf
push eax
push 0x16b
lea eax, [ebp - 0x8f0]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
mov eax, dword [ebp - 0x8f4]
cmp eax, 8
jb 0x41a994
inc eax
lea ecx, [ebp - 0x908]
push eax
push dword [ebp - 0x908]
call fcn.0040f5b0
xor eax, eax
mov dword [ebp - 0x8f4], 7
mov word [ebp - 0x908], ax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8f8], 0
cmp eax, 0x10
jb 0x41a9cf
inc eax
lea ecx, [ebp - 0x8f0]
push eax
push dword [ebp - 0x8f0]
call fcn.0040f330
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x8dc], 0xf
mov dword [ebp - 0x8e0], 0
mov byte [ebp - 0x8f0], 0
cmp eax, 0x10
jb 0x41aa08
inc eax
lea ecx, [ebp - 0x920]
push eax
push dword [ebp - 0x920]
call fcn.0040f330
lea ecx, [ebp - 0x888]
call fcn.00408b70
mov byte [ebp - 4], 0x10
jmp 0x41ac40
push 7
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.0040a4f0
cmp eax, 0xffffffff
jne 0x41aaff
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41aaff
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x12
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x14
push eax
push 0x172
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x41ab1f
mov ecx, dword [esi]
jmp 0x41ab21
mov ecx, esi
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push ecx
cmovae eax, dword [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
push eax
push str._s__set__s_ramdisksdidevice_partition_s
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x1c
test al, al
jne 0x41ac60
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x16
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x18
push eax
push 0x17b
lea eax, [ebp - 0x908]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
lea ecx, [ebp - 0x920]
call fcn.0040f680
lea ecx, [ebp - 0x908]
call fcn.0040ef30
lea ecx, [ebp - 0x8f0]
call fcn.0040ef30
lea ecx, [ebp - 0x888]
call fcn.00408b70
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x888]
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
push eax
call fcn.0042f0f8
add esp, 4
xor bl, bl
jmp 0x41c7ab
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41ad41
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41ad41
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x1b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x1d
push eax
push 0x182
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_ramdisksdipath__boot_boot.sdi
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41ae33
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x1f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x21
push eax
push 0x18c
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41af14
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41af14
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x23
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x25
push eax
push 0x193
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x41af34
mov ecx, dword [esi]
jmp 0x41af36
mov ecx, esi
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
cmovae eax, dword [ebp - 0x840]
push ecx
push str.ffffffff_8d96_11de_8e71_fffffffffffe
push eax
push str._s__set__s_device_ramdisk__s__bootUSM8PE6F.WIM__s
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x20
test al, al
jne 0x41b01b
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x27
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x29
push eax
push 0x19d
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b0fc
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b0fc
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x2b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x2d
push eax
push 0x1a4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_path_windows_system32_bootwinload.efi
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41b1ee
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x2f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x31
push eax
push 0x1ad
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b2cf
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b2cf
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x33
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x35
push eax
push 0x1b4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_description_9E_OneKeyRestore
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41b3c1
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x37
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x39
push eax
push 0x1bd
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b4a2
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b4a2
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x3b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x3d
push eax
push 0x1c4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_locale_zh_CN
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41b594
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x3f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x41
push eax
push 0x1cd
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b675
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b675
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x43
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x45
push eax
push 0x1d4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_inherit_bootloadersettings
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41b767
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x47
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x49
push eax
push 0x1dd
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b848
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41b848
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x4b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x4d
push eax
push 0x1e4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x41b866
mov esi, dword [esi]
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
cmovae eax, dword [ebp - 0x840]
push esi
push str.ffffffff_8d96_11de_8e71_fffffffffffe
push eax
push str._s__set__s_osdevice_ramdisk__s__bootUSM8PE6F.WIM__s
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x20
test al, al
jne 0x41b94b
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x4f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x51
push eax
push 0x1ed
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41ba2c
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41ba2c
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x53
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x55
push eax
push 0x1f4
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_systemroot_windows
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41bb1e
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x57
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x59
push eax
push 0x1fd
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bbff
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bbff
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x5b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x5c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x5d
push eax
push 0x204
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_detecthal_Yes
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41bcf1
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x5f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x60
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x61
push eax
push 0x20d
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bdd2
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bdd2
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x63
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x64
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x65
push eax
push 0x214
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_winpe_Yes
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41bec4
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x67
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x68
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x69
push eax
push 0x21d
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bfa5
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41bfa5
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x6b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x6c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x6d
push eax
push 0x224
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__displayorder__s__addlast
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41c097
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x6f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x70
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x71
push eax
push 0x22d
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c178
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c178
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x73
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x74
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x75
push eax
push 0x234
jmp 0x41c765
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__timeout_3
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x20
test al, al
jne 0x41c265
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x77
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x78
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x79
push eax
push 0x23d
jmp 0x41c341
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c385
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c385
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x7b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x7c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x7d
push eax
push 0x243
lea eax, [ebp - 0x908]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
lea ecx, [ebp - 0x920]
call fcn.0040f680
lea ecx, [ebp - 0x908]
call fcn.0040ef30
lea ecx, [ebp - 0x8f0]
call fcn.0040ef30
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 1
call fcn.004059f0
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_fffffffffffe
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__default__s
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41c477
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x7f
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x80
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x81
push eax
push 0x24b
jmp 0x41c553
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c597
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c597
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x83
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x84
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x85
push eax
push 0x251
lea eax, [ebp - 0x908]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
lea ecx, [ebp - 0x920]
call fcn.0040f680
lea ecx, [ebp - 0x908]
call fcn.0040ef30
lea ecx, [ebp - 0x8f0]
call fcn.0040ef30
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 1
call fcn.004059f0
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.004793f0
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
push str.ffffffff_8d96_11de_8e71_ffffffffffff
cmovae eax, dword [ebp - 0x840]
push eax
push str._s__set__s_testsigning_on
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.0040edf0
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x810]
call fcn.00425290
add esp, 0x24
test al, al
jne 0x41c689
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x87
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x88
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x89
push eax
push 0x259
jmp 0x41c765
push 0
push str.success
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c7a9
push 0
push 0x4b69ac
lea ecx, [ebp - 0x828]
call fcn.004089a0
cmp eax, 0xffffffff
jne 0x41c7a9
push 0x98
lea eax, [ebp - 0x8d8]
push 0
push eax
call fcn.004793f0
add esp, 4
lea ecx, [ebp - 0x8d8]
call fcn.00408c30
mov edx, str.CreateProcessAndReturnResult_Error:
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x8d8]
call fcn.0040b820
lea edx, [ebp - 0x810]
mov ecx, eax
call fcn.0040b820
mov edx, str.Errcode:
mov ecx, eax
call fcn.0040b820
lea edx, [ebp - 0x828]
mov ecx, eax
call fcn.0040be40
push str.CGptRestore::BcdOperation
lea ecx, [ebp - 0x8f0]
call fcn.0040f550
push str.GptRestore.cpp
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x8b
call fcn.0040f550
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x8c
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00408b50
push eax
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x8d
push eax
push 0x260
lea eax, [ebp - 0x908]
push eax
push ecx
call fcn.0041f440
mov ecx, eax
call fcn.0041f910
lea ecx, [ebp - 0x920]
call fcn.0040f680
lea ecx, [ebp - 0x908]
call fcn.0040ef30
lea ecx, [ebp - 0x8f0]
call fcn.0040ef30
lea ecx, [ebp - 0x8d8]
call fcn.004059f0
xor bl, bl
jmp 0x41c7ab
mov bl, 1
mov eax, dword [ebp - 0x814]
cmp eax, 8
jb 0x41c7c9
inc eax
lea ecx, [ebp - 0x828]
push eax
push dword [ebp - 0x828]
call fcn.0040f5b0
mov ecx, dword [ebp - 0x82c]
xor eax, eax
mov dword [ebp - 0x814], 7
mov dword [ebp - 0x818], 0
mov word [ebp - 0x828], ax
cmp ecx, 8
jb 0x41c804
inc ecx
push ecx
push dword [ebp - 0x840]
lea ecx, [ebp - 0x840]
call fcn.0040f5b0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00475cda
mov esp, ebp
pop ebp
ret