Function at 0x10011260
Capabilities:
Manipulate boot configuration
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10035ef1
mov eax, dword fs:[0]
push eax
sub esp, 0x558
mov eax, dword [0x1004c024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x528], ecx
cmp dword [ebp + 8], 5
jle 0x10011d63
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
push 0x80000
call fcn.1000f6bd
add esp, 4
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x390], eax
push 0x80000
push 0
mov ecx, dword [ebp - 0x390]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x128]
call fcn.1002fcd0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x128]
call fcn.1002fbe0
test eax, eax
jne 0x1001138f
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x52c], eax
push 0x4f5
push 0x1003a254
call fcn.10010f00
add esp, 8
push eax
push 0x1003a264
mov ecx, dword [ebp - 0x52c]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c4]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4c8]
jmp 0x10012040
lea ecx, [ebp - 0x394]
push ecx
lea edx, [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002fb50
test eax, eax
jne 0x10011446
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x530], eax
push 0x4fb
push 0x1003a284
call fcn.10010f00
add esp, 8
push eax
push str._s:_Create_write_PIPE_Failed.
mov eax, dword [ebp - 0x530]
push eax
mov ecx, dword [ebp - 0x530]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
call fcn.10010ed0
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4cc]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4d0]
jmp 0x10012040
mov edx, dword [ebp - 0x394]
push edx
mov eax, dword [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x128]
call fcn.1002f8a0
test eax, eax
jne 0x10011507
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x534], eax
push 0x502
push 0x1003a2b4
call fcn.10010f00
add esp, 8
push eax
push 0x1003a2c4
mov ecx, dword [ebp - 0x534]
push ecx
mov edx, dword [ebp - 0x534]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x388]
push eax
mov ecx, dword [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
call fcn.10010ed0
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4d4], eax
mov ecx, dword [ebp - 0x4d4]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4d8]
jmp 0x10012040
mov byte [ebp - 0x384], 0
push 0x1ff
push 0
lea edx, [ebp - 0x383]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x100115bb
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x538], eax
push 0x50c
push 0x1003a2e0
call fcn.10010f00
add esp, 8
push eax
push str._s:_Boot_file_path_invalid
mov ecx, dword [ebp - 0x538]
push ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x4dc]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4e0]
jmp 0x10012040
mov byte [ebp - 0x11c], 0
push 0x103
push 0
lea ecx, [ebp - 0x11b]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x11c]
push edx
call fcn.10011180
add esp, 4
test eax, eax
jne 0x10011674
cmp dword [ebp - 0x390], 0
je 0x10011613
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x53c], eax
push 0x516
push 0x1003a30c
call fcn.10010f00
add esp, 8
push eax
push str._s:_Get_bcdedit.exe_file_Failed.
mov edx, dword [ebp - 0x53c]
push edx
mov eax, dword [ebp - 0x53c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4e8]
jmp 0x10012040
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x11c]
push ecx
push str._s_bcdedit.exe__store__s__enum__v_n
lea edx, [ebp - 0x384]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x384]
push eax
call sub.ntdll.dll_strlen
add esp, 4
push eax
lea ecx, [ebp - 0x384]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002fb00
test eax, eax
jne 0x100117a6
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x384]
push eax
push 0x51d
push 0x1003a364
call fcn.10010f00
add esp, 8
push eax
push 0x1003a374
mov ecx, dword [ebp - 0x540]
push ecx
mov edx, dword [ebp - 0x540]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0x10
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x544], eax
push 0x51e
push 0x1003a384
call fcn.10010f00
add esp, 8
push eax
push 0x1003a394
mov edx, dword [ebp - 0x544]
push edx
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x394]
push edx
mov eax, dword [ebp - 0x38c]
push eax
call fcn.10010ed0
add esp, 0x10
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
push edx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4f0]
jmp 0x10012040
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
mov edx, dword [ebp - 0x388]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002f9c0
test eax, eax
jne 0x10011879
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x548], eax
push 0x526
push 0x1003a3b0
call fcn.10010f00
add esp, 8
push eax
push 0x1003a3c0
mov eax, dword [ebp - 0x548]
push eax
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010ed0
add esp, 0x10
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x4f4], edx
mov eax, dword [ebp - 0x4f4]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x4f8]
jmp 0x10012040
mov byte [ebp - 0x174], 0
push 0x3f
push 0
lea ecx, [ebp - 0x173]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x1003a3dc
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x12c], 0
lea edx, [ebp - 0x174]
mov dword [ebp - 0x398], edx
mov dword [ebp - 0x3a0], 0
jmp 0x100118d7
mov eax, dword [ebp - 0x3a0]
add eax, 1
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x17c]
sub ecx, dword [ebp - 0x180]
cmp dword [ebp - 0x3a0], ecx
jge 0x100119c4
mov edx, dword [ebp - 0x390]
add edx, dword [ebp - 0x3a0]
movsx eax, byte [edx]
cmp eax, 0x7b
jne 0x10011915
mov ecx, dword [ebp - 0x390]
add ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x180]
push edx
push 0x1003a3e8
mov eax, dword [ebp - 0x390]
add eax, dword [ebp - 0x3a0]
push eax
call dword [sym.imp.ntdll.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x100119bf
cmp dword [ebp - 0x12c], 0
je 0x100119bf
mov ecx, dword [ebp - 0x12c]
movsx edx, byte [ecx]
cmp edx, 0x7d
je 0x10011986
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x12c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x398]
add eax, 1
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x12c]
add ecx, 1
mov dword [ebp - 0x12c], ecx
jmp 0x10011948
mov edx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x12c]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x398]
add edx, 1
mov dword [ebp - 0x398], edx
mov eax, dword [ebp - 0x398]
mov byte [eax], 0
mov ecx, dword [ebp - 0x398]
add ecx, 1
mov dword [ebp - 0x398], ecx
jmp 0x100119c4
jmp 0x100118c8
lea edx, [ebp - 0x174]
push edx
call sub.ntdll.dll_strlen
add esp, 4
test eax, eax
jne 0x10011a53
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x54c], eax
push 0x541
push 0x1003a3f4
call fcn.10010f00
add esp, 8
push eax
push str._s:_Failed_to_get_our_boot_option.
mov eax, dword [ebp - 0x54c]
push eax
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x4fc], ecx
mov edx, dword [ebp - 0x4fc]
push edx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x500], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x500]
jmp 0x10012040
push 0x200
push 0
lea eax, [ebp - 0x384]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x174]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x11c]
push eax
push str._s_bcdedit.exe__store__s__delete__s__f_n
lea ecx, [ebp - 0x384]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0x14
lea edx, [ebp - 0x384]
push edx
call sub.ntdll.dll_strlen
add esp, 4
push eax
lea eax, [ebp - 0x384]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
lea ecx, [ebp - 0x128]
call fcn.1002fb00
test eax, eax
jne 0x10011ba2
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x550], eax
lea edx, [ebp - 0x384]
push edx
push 0x54a
push 0x1003a450
call fcn.10010f00
add esp, 8
push eax
push 0x1003a460
mov eax, dword [ebp - 0x550]
push eax
mov ecx, dword [ebp - 0x550]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0x10
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x554], eax
push 0x54b
push 0x1003a470
call fcn.10010f00
add esp, 8
push eax
push 0x1003a480
mov ecx, dword [ebp - 0x554]
push ecx
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x388]
push eax
mov ecx, dword [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
call fcn.10010ed0
add esp, 0x10
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x508], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x508]
jmp 0x10012040
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x17c], 0
push 0x1000
push 0
mov edx, dword [ebp - 0x390]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
mov edx, dword [ebp - 0x388]
push edx
lea ecx, [ebp - 0x128]
call fcn.1002f9c0
test eax, eax
jne 0x10011c95
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x558], eax
push 0x555
push 0x1003a49c
call fcn.10010f00
add esp, 8
push eax
push 0x1003a4ac
mov eax, dword [ebp - 0x558]
push eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010ed0
add esp, 0x10
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x50c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x510], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x510]
jmp 0x10012040
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.10010ed0
add esp, 0x10
push 0x1003a4c8
mov edx, dword [ebp - 0x390]
push edx
call fcn.10002700
add esp, 8
test eax, eax
jne 0x10011d13
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x518], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x518]
jmp 0x10012040
cmp dword [ebp - 0x390], 0
je 0x10011d37
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x51c], edx
mov eax, dword [ebp - 0x51c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov dword [ebp - 0x520], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1002fc70
mov eax, dword [ebp - 0x520]
jmp 0x10012040
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x528]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x528]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x10011d8c
mov eax, 1
jmp 0x10012040
push 0x1003a4d4
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
jne 0x10011df2
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x55c], eax
mov edx, dword [ebp + 0xc]
push edx
push 0x573
push 0x1003a4d8
call fcn.10010f00
add esp, 8
push eax
push 0x1003a4e8
mov eax, dword [ebp - 0x55c]
push eax
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0x10
xor eax, eax
jmp 0x10012040
push 0x1003a4fc
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x3ac], eax
push 0x1000
call fcn.1000f6bd
add esp, 4
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x3a4], ecx
push 0x100
push 0
lea edx, [ebp - 0x4b4]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x1000
push 0
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
push ecx
call dword [sym.imp.MSVCR80.dll_feof]
add esp, 4
test eax, eax
jne 0x10011f3a
mov edx, dword [ebp - 0x3a8]
push edx
push 0x100
lea eax, [ebp - 0x4b4]
push eax
call dword [sym.imp.MSVCR80.dll_fgets]
add esp, 0xc
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4bc], 0
jmp 0x10011eb4
mov edx, dword [ebp - 0x4bc]
add edx, 1
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x4bc], eax
jge 0x10011f09
mov ecx, dword [ebp - 0x3ac]
push ecx
push str.AOMEI_Backupper
mov edx, dword [ebp - 0x4bc]
lea eax, [ebp + edx - 0x4b4]
push eax
call dword [sym.imp.ntdll.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x10011f07
push 0x100
push 0
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
jmp 0x10011f09
jmp 0x10011ea5
lea edx, [ebp - 0x4b4]
push edx
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_strcat
add esp, 8
push 0x100
push 0
lea ecx, [ebp - 0x4b4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
jmp 0x10011e50
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
push 0x1003a51c
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
jne 0x10011fb0
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x591
push 0x1003a520
call fcn.10010f00
add esp, 8
push eax
push 0x1003a530
mov edx, dword [ebp - 0x560]
push edx
mov eax, dword [ebp - 0x560]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0x10
xor eax, eax
jmp 0x10012040
mov eax, dword [ebp - 0x3a4]
push eax
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3b0]
push edx
push 1
mov eax, dword [ebp - 0x3a4]
push eax
call dword [sym.imp.MSVCR80.dll_fwrite]
add esp, 0x10
cmp eax, dword [ebp - 0x3b0]
je 0x10012027
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0x564], eax
push 0x598
push 0x1003a544
call fcn.10010f00
add esp, 8
push eax
push str._s:_Warning:_write_boot_file.
mov ecx, dword [ebp - 0x564]
push ecx
mov edx, dword [ebp - 0x564]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov eax, 1
jmp 0x10012040
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000f6c2
mov esp, ebp
pop ebp
ret 8