Function at 0x1005c84
Capabilities:
Manipulate boot configuration

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x64bc
call fcn.0100ba20
mov eax, dword [0x1011024]
push ebx
xor ebx, ebx
push esi
push edi
push 0x7f
pop esi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64ac], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x2c8]
mov dword [ebp - 0x2cc], ebx
rep stosd dword es:[edi], eax
mov ecx, esi
lea edi, [ebp - 0x16a8]
mov dword [ebp - 0x16ac], ebx
rep stosd dword es:[edi], eax
push 0x31
mov ecx, esi
lea edi, [ebp - 0xcb8]
mov dword [ebp - 0xcbc], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x7e
pop edx
lea edi, [ebp - 0xc8]
mov dword [ebp - 0xcc], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x4c4]
mov dword [ebp - 0x4c8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x18a4]
mov dword [ebp - 0x18a8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x6c0]
mov dword [ebp - 0x6c4], ebx
rep stosd dword es:[edi], eax
mov ecx, 0x9c3
lea edi, [ebp - 0x3fb4]
mov dword [ebp - 0x3fb8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0xab8]
mov dword [ebp - 0xabc], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0xeb4]
mov dword [ebp - 0xeb8], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x10b0]
mov dword [ebp - 0x10b4], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x12ac]
mov dword [ebp - 0x12b0], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x8bc]
mov dword [ebp - 0x8c0], ebx
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x14a8]
mov dword [ebp - 0x14ac], ebx
rep stosd dword es:[edi], eax
mov eax, dword [0x1001380]
mov dword [ebp - 0x64b8], ebx
mov dword [ebp - 0x64a4], ebx
mov dword [ebp - 0x64a0], ebx
mov dword [ebp - 0x64b0], ebx
mov dword [ebp - 0x64a8], ebx
mov dword [ebp - 0x64b4], ebx
mov dword [ebp - 0x64bc], ebx
mov dword [ebp - 0x6498], ebx
mov dword [ebp - 0x6490], eax
mov eax, dword [0x1001384]
mov dword [ebp - 0x648c], eax
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x6488]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x6290], 0x10000
mov dword [ebp - 0x6288], ebx
mov dword [ebp - 0x6280], ebx
xor edx, edx
inc edx
mov dword [ebp - 0x628c], edx
lea eax, [ebp - 0x64bc]
mov dword [ebp - 0x6284], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x627c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x6080], ebx
mov dword [ebp - 0x607c], ebx
mov dword [ebp - 0x6078], 0x73
push 0x7f
mov ecx, esi
lea edi, [ebp - 0x6074]
rep stosd dword es:[edi], eax
pop ecx
lea eax, [ebp - 0x2cc]
mov dword [ebp - 0x5e6c], eax
xor eax, eax
mov esi, 0x2001
mov dword [ebp - 0x5e78], esi
mov dword [ebp - 0x5e74], edx
mov dword [ebp - 0x5e70], ebx
mov dword [ebp - 0x5e68], ebx
push 0x7f
lea edi, [ebp - 0x5e64]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x5c68], ebx
mov dword [ebp - 0x5c64], ebx
mov dword [ebp - 0x5c60], 0x75
lea edi, [ebp - 0x5c5c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5a60], esi
push 0x7f
pop esi
lea eax, [ebp - 0x16ac]
mov dword [ebp - 0x5a54], eax
xor eax, eax
mov dword [ebp - 0x5a5c], edx
mov dword [ebp - 0x5a58], ebx
mov dword [ebp - 0x5a50], ebx
mov ecx, esi
lea edi, [ebp - 0x5a4c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5850], ebx
mov dword [ebp - 0x584c], ebx
mov dword [ebp - 0x5848], 0x70
mov ecx, esi
lea edi, [ebp - 0x5844]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xcbc]
mov dword [ebp - 0x563c], eax
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x5634]
mov dword [ebp - 0x5648], 0x1001
mov dword [ebp - 0x5644], edx
mov dword [ebp - 0x5640], ebx
mov dword [ebp - 0x5638], ebx
rep stosd dword es:[edi], eax
mov eax, dword [0x10014d4]
mov dword [ebp - 0x5430], eax
mov eax, dword [0x10014d8]
push 0x7e
mov dword [ebp - 0x542c], eax
mov dword [ebp - 0x5438], ebx
mov dword [ebp - 0x5434], ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x5428]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5230], 0x20000
mov dword [ebp - 0x522c], edx
mov dword [ebp - 0x5228], ebx
mov dword [ebp - 0x5220], ebx
mov ecx, esi
lea eax, [ebp - 0x64b8]
mov dword [ebp - 0x5224], eax
xor eax, eax
push 0x7e
lea edi, [ebp - 0x521c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5020], ebx
mov dword [ebp - 0x501c], ebx
pop ecx
mov esi, 0x100156c
lea edi, [ebp - 0x5018]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x5012]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
mov dword [ebp - 0x4e18], 0x2002
mov dword [ebp - 0x4e14], edx
mov dword [ebp - 0x4e10], ebx
mov dword [ebp - 0x4e08], ebx
pop ecx
lea eax, [ebp - 0x64a0]
mov dword [ebp - 0x4e0c], eax
xor eax, eax
lea edi, [ebp - 0x4e04]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4c08], ebx
mov dword [ebp - 0x4c04], ebx
mov esi, 0x1001698
lea edi, [ebp - 0x4c00]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x4bf6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xe
pop ecx
mov dword [ebp - 0x4a00], 0x2201
mov dword [ebp - 0x49fc], edx
mov dword [ebp - 0x49f8], ebx
push 0x72
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x49f4], eax
mov esi, 0x1001764
lea edi, [ebp - 0x49f0]
rep movsd dword es:[edi], dword [esi]
pop ecx
xor eax, eax
lea edi, [ebp - 0x49b8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x47f0], ebx
mov dword [ebp - 0x47ec], ebx
mov esi, 0x1001664
lea edi, [ebp - 0x47e8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x7d
pop ecx
lea edi, [ebp - 0x47de]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xabc]
push 0xc
mov dword [ebp - 0x45e8], 0x2201
mov dword [ebp - 0x45e4], edx
mov dword [ebp - 0x45e0], ebx
mov dword [ebp - 0x45dc], eax
pop ecx
mov esi, 0x1001734
push 0x74
xor eax, eax
lea edi, [ebp - 0x45d8]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 0x7f
lea edi, [ebp - 0x45a8]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x43d8], ebx
mov dword [ebp - 0x43d4], ebx
mov word [ebp - 0x43d0], bx
lea edi, [ebp - 0x43ce]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x6c4]
mov dword [ebp - 0x41c4], eax
push 0x7f
pop ecx
xor eax, eax
mov dword [ebp - 0x41d0], 0xc0001
mov dword [ebp - 0x41cc], edx
mov dword [ebp - 0x41c8], ebx
mov dword [ebp - 0x41c0], ebx
lea edi, [ebp - 0x41bc]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2cc]
push eax
mov dword [ebp - 0x3fc0], ebx
mov dword [ebp - 0x3fbc], ebx
call fcn.0100269c
cmp eax, 1
je 0x1006dac
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
mov esi, 0x1001568
lea eax, [ebp - 0x5638]
push esi
push eax
call edi
lea eax, [ebp - 0xcbc]
push esi
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x6490]
push eax
push 9
push dword [ebp - 0x64ac]
push dword [ebp + 8]
call fcn.0100e534
test eax, eax
jne 0x100618b
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
call fcn.0100c80a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x1006dac
cmp dword [ebp - 0x64b8], ebx
je 0x10061b3
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100269c
test eax, eax
jne 0x1006dac
call fcn.01002223
xor eax, eax
jmp 0x1007002
cmp dword [ebp - 0x5e70], ebx
jne 0x10061ca
cmp dword [ebp - 0x5a58], ebx
je 0x10061d2
push 0x30b
jmp 0x10061df
cmp dword [ebp - 0x5a58], ebx
jne 0x10061ec
cmp dword [ebp - 0x5640], ebx
je 0x10061ec
push 0x30c
call fcn.0100d783
push eax
call fcn.0100c82e
jmp 0x1006172
lea eax, [ebp - 0xcbc]
push esi
push eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x100621a
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
test eax, eax
jne 0x100621a
mov dword [ebp - 0x64a4], 1
cmp dword [ebp - 0x5e70], ebx
je 0x10062a0
cmp dword [ebp - 0x5640], ebx
jne 0x100627d
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1006255
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
test eax, eax
mov dword [ebp - 0x64a4], 1
je 0x100625b
mov dword [ebp - 0x64a4], ebx
lea eax, [ebp - 0xcbc]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x100627d
lea eax, [ebp - 0xcbc]
push 0x10011f8
push eax
call edi
pop ecx
pop ecx
cmp dword [ebp - 0x5e70], ebx
je 0x10062a0
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10062a0
push 0x30e
jmp 0x10063ee
cmp dword [ebp - 0x5a58], ebx
je 0x10062c3
lea eax, [ebp - 0x16ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10062c3
push 0x30f
jmp 0x10063ee
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x1001620
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
mov edi, 0x1001614
je 0x100630a
push 0x100160c
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
je 0x100630a
push edi
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
je 0x100630a
push 0x431
jmp 0x10063ee
push edi
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
jne 0x1006342
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
jne 0x1006342
lea eax, [ebp - 0xabc]
push eax
call edi
test eax, eax
jne 0x1006342
push 0x30a
jmp 0x10063ee
mov edi, 0x100172c
push edi
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
je 0x1006367
push 0x1001724
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
jne 0x100638f
cmp dword [ebp - 0x4e10], ebx
jne 0x100638f
push 0x80c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
push 0x80d
jmp 0x10063ee
push 0x1001504
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 2
push 0x10012c4
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
jne 0x1006406
push 3
push 0x1001560
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
je 0x1006406
lea eax, [ebp - 0x2cc]
push 0x10012c4
push eax
call dword [sym.imp.msvcrt.dll_wcstok]
cmp eax, ebx
pop ecx
pop ecx
jne 0x10063f8
push 0x829
call fcn.0100d783
jmp 0x1006177
push eax
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x2cc]
push eax
call fcn.0100db50
cmp eax, 1
jne 0x1006455
lea eax, [ebp - 0x16ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1006455
push 0x313
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
lea eax, [ebp - 0x2cc]
push 0x10012a0
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
lea eax, [ebp - 0x6498]
push eax
push ebx
push dword [ebp - 0x64a4]
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xcbc]
push eax
lea eax, [ebp - 0x16ac]
push eax
lea eax, [ebp - 0x2cc]
push eax
call fcn.01002f60
cmp eax, 1
jne 0x1006491
xor esi, esi
inc esi
jmp 0x1006fee
call fcn.0100bb22
cmp eax, ebx
mov dword [ebp - 0x6494], eax
jne 0x10064d1
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1006f8c
push 0x100153c
lea eax, [ebp - 0xcc]
push eax
call fcn.01001c2e
cmp eax, ebx
mov dword [ebp - 0x6494], eax
je 0x1006fa7
mov ecx, dword [ebp - 0x64a0]
dec ecx
push ecx
push eax
call fcn.0100c29c
push eax
lea eax, [ebp - 0x3fb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push dword [ebp - 0x6494]
call fcn.0100bbcf
mov dword [ebp - 0x64a4], eax
mov eax, dword [ebp - 0x64a0]
cmp eax, ebx
jbe 0x100652f
cmp eax, dword [ebp - 0x64a4]
jbe 0x100655f
push 0x10015a4
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
je 0x100655f
push 0x1b8
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x100665c
push edi
lea eax, [ebp - 0x6c4]
push eax
call esi
test eax, eax
mov edi, 0x1001574
jne 0x1006a3c
lea eax, [ebp - 0x3fb8]
push 0x1001710
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x1006595
push 0x280
jmp 0x1006546
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10065df
lea eax, [ebp - 0xeb8]
push eax
push 0x10015d0
push edi
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
je 0x1006630
lea eax, [ebp - 0xeb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10065df
push 0x30d
jmp 0x1006546
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1006862
lea eax, [ebp - 0x10b4]
push eax
push 0x10016ec
push edi
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
je 0x1006630
lea eax, [ebp - 0xeb8]
push eax
push 0x10015d0
push edi
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
jne 0x100666d
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
jmp 0x1006f8c
lea eax, [ebp - 0xeb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10066a1
push 0x2c8
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
mov dword [ebp - 0x64a8], 1
lea eax, [ebp - 0x10b4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10066e6
lea eax, [ebp - 0xabc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10066e6
push 0x2c9
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
mov dword [ebp - 0x64b4], 1
cmp dword [ebp - 0x64a8], ebx
jne 0x100685a
push 0x10016dc
lea eax, [ebp - 0x4c8]
push eax
call esi
test eax, eax
jne 0x1006716
push 0x10016bc
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x10016a4
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x100153c
lea eax, [ebp - 0xcc]
push eax
call fcn.01001c2e
cmp eax, ebx
mov dword [ebp - 0x649c], eax
jne 0x10067ac
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
push dword [ebp - 0x6498]
lea eax, [ebp - 0x2cc]
push eax
call fcn.010026f7
lea eax, [ebp - 0x6494]
jmp 0x1006da6
mov eax, dword [ebp - 0x64a4]
xor esi, esi
dec eax
cmp eax, ebx
mov dword [ebp - 0x64a8], eax
jbe 0x1006812
push esi
push dword [ebp - 0x649c]
call fcn.0100c29c
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.USER32.dll_CharLowerW]
lea eax, [ebp - 0x8c0]
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1006d5d
inc esi
cmp esi, dword [ebp - 0x64a8]
jb 0x10067bf
mov edi, 0x1001574
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x10015d0
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
test eax, eax
je 0x100690e
push 0x27c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
cmp dword [ebp - 0x64b4], ebx
jne 0x10068ae
lea eax, [ebp - 0xabc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10068ae
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xabc]
push eax
push 0x10016ec
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
test eax, eax
je 0x1006918
push 0x281
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x10011f4
lea eax, [ebp - 0x3fb8]
push eax
call esi
push 0x1001710
lea eax, [ebp - 0x3fb8]
push eax
call esi
lea eax, [ebp - 0x3fb8]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov ecx, 0xfe
cmp eax, ecx
jb 0x1006922
push ecx
push 0xc12
call fcn.0100d783
push eax
lea eax, [ebp - 0x12b0]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x12b0]
jmp 0x1006d67
push 0x27d
jmp 0x1006d62
push 0x282
jmp 0x1006d62
mov eax, dword [ebp - 0x64a0]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c208
push 0x1388
lea eax, [ebp - 0x3fb8]
push eax
mov eax, dword [ebp - 0x64a0]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c191
push 0x2710
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
cmp esi, ebx
pop ecx
mov dword [ebp - 0x64b0], esi
jne 0x100699d
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1006d76
xor eax, eax
mov ecx, 0x4e2
mov edi, esi
push esi
rep stosd dword es:[edi], eax
push dword [ebp - 0x6494]
call fcn.01001f40
cmp eax, 1
jne 0x10069d2
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x1006d76
lea eax, [ebp - 0xcc]
push eax
push esi
push 0x100153c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
test eax, eax
je 0x1006a21
push dword [ebp - 0x64a0]
push 0x276
call fcn.0100d783
push eax
lea eax, [ebp - 0x18a8]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x18a8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
jmp 0x1006a42
push 0x84
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
jmp 0x10069c5
mov esi, dword [ebp - 0x64b0]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x1001614
lea eax, [ebp - 0x6c4]
push eax
call edi
test eax, eax
jne 0x1006ccc
cmp dword [ebp - 0x64a0], ebx
je 0x1006a94
push 0x431
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
cmp esi, ebx
je 0x1006783
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x1006783
push 0x10016dc
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
jne 0x1006ab8
push 0x10016bc
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x10b4]
push eax
push 0x10016ec
mov edi, 0x1001574
push edi
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
jne 0x1006b0c
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
jmp 0x1006d44
lea eax, [ebp - 0xeb8]
push eax
push 0x10015d0
push edi
lea eax, [ebp - 0xcc]
push eax
call fcn.0100227d
cmp eax, 0xffffffff
je 0x1006adb
lea eax, [ebp - 0xeb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1006b4d
cmp dword [ebp - 0x49f8], ebx
je 0x1006b4d
push 0x41a
jmp 0x1006d30
lea eax, [ebp - 0x10b4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1006b70
cmp dword [ebp - 0x45e0], ebx
je 0x1006b70
push 0x810
jmp 0x1006d30
push 0x10016a4
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x100153c
lea eax, [ebp - 0xcc]
push eax
call fcn.01001c2e
cmp eax, ebx
mov dword [ebp - 0x649c], eax
je 0x1006757
mov eax, dword [ebp - 0x64a4]
dec eax
cmp eax, ebx
mov dword [ebp - 0x64ac], ebx
mov dword [ebp - 0x64a8], eax
jbe 0x1006c27
mov esi, ebx
push esi
push dword [ebp - 0x649c]
call fcn.0100c29c
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.USER32.dll_CharLowerW]
lea eax, [ebp - 0x8c0]
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1006d5d
inc esi
cmp esi, dword [ebp - 0x64a8]
jb 0x1006bce
mov esi, dword [ebp - 0x64b0]
mov edi, 0x1001574
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
lea eax, [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1006c80
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x10015d0
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
test eax, eax
je 0x1006db4
push 0x27c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
lea eax, [ebp - 0xabc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1006ccc
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xabc]
push eax
push 0x10016ec
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
test eax, eax
je 0x1006e02
push 0x281
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
push 0x100160c
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1006f40
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0xabc]
push eax
call edi
test eax, eax
jne 0x1006f9d
lea eax, [ebp - 0x4c8]
push eax
call edi
test eax, eax
jne 0x1006f9d
mov edi, 0x1001710
lea eax, [ebp - 0x3fb8]
push edi
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1006e09
push 0x27e
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
cmp esi, ebx
je 0x1006f8c
jmp 0x1006f84
push 0xc14
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
push dword [ebp - 0x6498]
lea eax, [ebp - 0x2cc]
push eax
call fcn.010026f7
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
lea eax, [ebp - 0x649c]
push eax
call fcn.0100bb96
xor eax, eax
inc eax
jmp 0x1007002
push 0x27d
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
cmp esi, ebx
je 0x1006de5
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
lea eax, [ebp - 0x649c]
push eax
call fcn.0100bb96
jmp 0x1006489
push 0x282
jmp 0x1006db9
push edi
lea eax, [ebp - 0x3fb8]
push eax
call fcn.01001d91
lea eax, [ebp - 0x3fb8]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov ecx, 0xfe
cmp eax, ecx
jb 0x1006e8b
push ecx
push 0xc12
call fcn.0100d783
push eax
lea eax, [ebp - 0x12b0]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x12b0]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
cmp esi, ebx
je 0x1006489
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x1006489
mov eax, dword [ebp - 0x64a0]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c208
push 0x1388
lea eax, [ebp - 0x3fb8]
push eax
mov eax, dword [ebp - 0x64a0]
dec eax
push eax
push dword [ebp - 0x6494]
call fcn.0100c191
push 0x2710
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
cmp esi, ebx
pop ecx
je 0x1006fa7
xor eax, eax
mov ecx, 0x4e2
mov edi, esi
push esi
rep stosd dword es:[edi], eax
push dword [ebp - 0x6494]
call fcn.01001f40
cmp eax, 1
je 0x1006f78
lea eax, [ebp - 0xcc]
push eax
push esi
push 0x100153c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
test eax, eax
je 0x1006f5f
push dword [ebp - 0x64a0]
push 0x276
call fcn.0100d783
push eax
lea eax, [ebp - 0x18a8]
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x18a8]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100d376
cmp esi, ebx
je 0x1006f4c
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
mov esi, eax
jmp 0x1006fe2
push 0x84
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
jmp 0x1006489
push 0x431
jmp 0x1006d30
xor esi, esi
push 8
inc esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7c
call fcn.0100d783
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d376
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100d5fe
lea eax, [ebp - 0xcc]
push eax
call fcn.01001efb
lea eax, [ebp - 0x6494]
push eax
call fcn.0100bb96
push dword [ebp - 0x6498]
lea eax, [ebp - 0x2cc]
push eax
call fcn.010026f7
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100b77c
leave
ret 8