Function at 0x14016ba80
Capabilities:
Get disk information
Manipulate boot configuration

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x2328
call fcn.1401e9500
sub rsp, rax
mov qword [rsp + 0x2250], 0xfffffffffffffffe
mov rax, qword [0x1402bd5c0]
xor rax, rsp
mov qword [rsp + 0x2310], rax
mov dword [rsp + 0x2248], 0
mov edx, 1
mov rcx, qword [rsp + 0x2340]
call fcn.14007d790
mov rcx, qword [rsp + 0x2340]
add rcx, 0x618
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x14016bb00
xor r8d, r8d
xor edx, edx
lea rcx, str.Drive_cannot_be_empty.
call fcn.1400f0bf0
jmp 0x14016cb99
mov rcx, qword [rsp + 0x2340]
add rcx, 0x608
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
jle 0x14016bd38
lea rcx, [rsp + 0x1790]
call fcn.14000dfa0
nop
lea rcx, [rsp + 0x1760]
call fcn.140007080
nop
lea rdx, [rsp + 0x1760]
lea rcx, [rsp + 0x1790]
call fcn.1401cb640
call fcn.1400dd690
mov dword [rsp + 0x1758], eax
mov dword [rsp + 0x1ad0], 0
mov dword [rsp + 0x1ad4], 0
jmp 0x14016bb8a
mov eax, dword [rsp + 0x1ad4]
add eax, 1
mov dword [rsp + 0x1ad4], eax
mov edi, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007100
cmp rdi, rax
jae 0x14016bcd8
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007130
mov rdx, rax
mov rax, qword [rsp + 0x2340]
mov eax, dword [rax + 0x210]
cmp dword [rdx + 0x198], eax
jne 0x14016bc07
mov rcx, qword [rsp + 0x2340]
add rcx, 0x608
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x14016bb79
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x14024ff28]
call fcn.140006130
test eax, eax
je 0x14016bc96
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x14024ff38]
call fcn.140006130
test eax, eax
je 0x14016bc96
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x14024ff48]
call fcn.140006130
test eax, eax
je 0x14016bc96
jmp 0x14016bb79
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007130
mov rcx, rax
add rcx, 0x1b0
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x14016bb79
mov eax, dword [rsp + 0x1758]
cmp dword [rsp + 0x1ad0], eax
jl 0x14016bd1d
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Your_RAM_cache_exceed_the_available_RAM_on_your_system__Please_set_it_lower.
call fcn.1400f0bf0
nop
lea rcx, [rsp + 0x1760]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x1790]
call fcn.140005e30
jmp 0x14016cb99
lea rcx, [rsp + 0x1760]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x1790]
call fcn.140005e30
lea rcx, [rsp + 0x880]
call fcn.14000dfa0
nop
mov rax, qword [rsp + 0x2340]
mov eax, dword [rax + 0x210]
mov dword [rsp + 0xa18], eax
lea rcx, [rsp + 0x880]
call fcn.1401e4240
mov dword [rsp + 0x878], 0
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
call fcn.140015c70
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
mov edx, eax
call fcn.140016360
mov r8d, eax
lea rdx, [rsp + 0x21c0]
mov rcx, qword [rsp + 0x2340]
call fcn.14016a400
mov qword [rsp + 0x2258], rax
mov eax, dword [rsp + 0x2248]
or eax, 1
mov dword [rsp + 0x2248], eax
mov rcx, qword [rsp + 0x2258]
call fcn.140050200
lea rcx, [rsp + 0xa28]
mov rdx, rax
call fcn.140006130
test eax, eax
jne 0x14016be6a
lea rcx, [rsp + 0xa30]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
mov rcx, qword [rsp + 0x2340]
add rcx, 0x608
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp edi, eax
jne 0x14016be6a
lea rcx, [rsp + 0xa38]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
mov rcx, qword [rsp + 0x2340]
add rcx, 0x610
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
cmp edi, eax
jne 0x14016be6a
mov dword [rsp + 0x2260], 0
jmp 0x14016be75
mov dword [rsp + 0x2260], 1
movzx eax, byte [rsp + 0x2260]
mov byte [rsp + 0x21b8], al
mov eax, dword [rsp + 0x2248]
and eax, 1
test eax, eax
je 0x14016bea7
and dword [rsp + 0x2248], 0xfffffffe
lea rcx, [rsp + 0x21c0]
call fcn.140007060
movzx eax, byte [rsp + 0x21b8]
test eax, eax
je 0x14016bed5
mov dword [rsp + 0x878], 1
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006e50
movzx ecx, ax
call fcn.1401e8b50
mov dword [rsp + 0x40], 0
lea rcx, [rsp + 0xa28]
lea rdx, [0x140250000]
call fcn.140006130
test eax, eax
jne 0x14016bf2d
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
call fcn.140015c70
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
mov edx, eax
call fcn.140016360
cmp rax, 4
je 0x14016bf2d
mov dword [rsp + 0x40], 1
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
call fcn.140015c70
mov rcx, qword [rsp + 0x2340]
add rcx, 0x2c0
mov edx, eax
call fcn.140016360
mov r8d, eax
lea rdx, [rsp + 0x870]
mov rcx, qword [rsp + 0x2340]
call fcn.14016a400
nop
mov rdx, qword [rsp + 0x2340]
add rdx, 0x618
lea rcx, [rsp + 0xa20]
call fcn.140002ce0
lea rcx, [rsp + 0xa28]
lea rdx, [rsp + 0x870]
call fcn.140002ce0
lea rdx, [0x140250008]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
je 0x14016c038
lea rdx, [0x140250018]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
je 0x14016c038
lea rdx, [0x140250028]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
je 0x14016c038
lea rdx, [0x14024ec94]
lea rcx, [rsp + 0x21d0]
call fcn.140002050
mov qword [rsp + 0x2268], rax
mov rax, qword [rsp + 0x2268]
mov qword [rsp + 0x2270], rax
mov eax, dword [rsp + 0x2248]
or eax, 2
mov dword [rsp + 0x2248], eax
mov rax, qword [rsp + 0x2270]
mov qword [rsp + 0x2278], rax
jmp 0x14016c04e
mov rax, qword [rsp + 0x2340]
add rax, 0x608
mov qword [rsp + 0x2278], rax
mov rax, qword [rsp + 0x2278]
mov qword [rsp + 0x21c8], rax
lea rcx, [rsp + 0xa30]
mov rdx, qword [rsp + 0x21c8]
call fcn.140002ce0
nop
mov eax, dword [rsp + 0x2248]
and eax, 2
test eax, eax
je 0x14016c097
and dword [rsp + 0x2248], 0xfffffffd
lea rcx, [rsp + 0x21d0]
call fcn.140007060
lea rdx, [0x140250038]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
jne 0x14016c0c7
mov rax, qword [rsp + 0x2340]
add rax, 0x610
mov qword [rsp + 0x2280], rax
jmp 0x14016c114
lea rdx, [0x14024ecbc]
lea rcx, [rsp + 0x21e0]
call fcn.140002050
mov qword [rsp + 0x2288], rax
mov rax, qword [rsp + 0x2288]
mov qword [rsp + 0x2290], rax
mov eax, dword [rsp + 0x2248]
or eax, 4
mov dword [rsp + 0x2248], eax
mov rax, qword [rsp + 0x2290]
mov qword [rsp + 0x2280], rax
mov rax, qword [rsp + 0x2280]
mov qword [rsp + 0x21d8], rax
lea rcx, [rsp + 0xa38]
mov rdx, qword [rsp + 0x21d8]
call fcn.140002ce0
nop
mov eax, dword [rsp + 0x2248]
and eax, 4
test eax, eax
je 0x14016c15d
and dword [rsp + 0x2248], 0xfffffffb
lea rcx, [rsp + 0x21e0]
call fcn.140007060
lea rdx, [0x140250048]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
jne 0x14016c18d
mov rax, qword [rsp + 0x2340]
add rax, 0x620
mov qword [rsp + 0x2298], rax
jmp 0x14016c1da
lea rdx, [0x14024edbc]
lea rcx, [rsp + 0x21f0]
call fcn.140002050
mov qword [rsp + 0x22a0], rax
mov rax, qword [rsp + 0x22a0]
mov qword [rsp + 0x22a8], rax
mov eax, dword [rsp + 0x2248]
or eax, 8
mov dword [rsp + 0x2248], eax
mov rax, qword [rsp + 0x22a8]
mov qword [rsp + 0x2298], rax
mov rax, qword [rsp + 0x2298]
mov qword [rsp + 0x21e8], rax
lea rcx, [rsp + 0xa40]
mov rdx, qword [rsp + 0x21e8]
call fcn.140002ce0
nop
mov eax, dword [rsp + 0x2248]
and eax, 8
test eax, eax
je 0x14016c223
and dword [rsp + 0x2248], 0xfffffff7
lea rcx, [rsp + 0x21f0]
call fcn.140007060
lea rdx, [0x140250058]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
jne 0x14016c26f
mov rcx, qword [rsp + 0x2340]
add rcx, 0x560
call fcn.140015c70
mov rcx, qword [rsp + 0x2340]
add rcx, 0x560
mov edx, eax
call fcn.140016360
mov qword [rsp + 0x22b0], rax
jmp 0x14016c27b
mov qword [rsp + 0x22b0], 0xfffffffffffffffe
lea rcx, [rsp + 0xa48]
mov r8, qword [rsp + 0x22b0]
lea rdx, [0x14024ff54]
call fcn.140002ba0
lea rcx, [rsp + 0x880]
call fcn.1401cbc50
lea rcx, [rsp + 0x13f0]
call fcn.14000e170
nop
mov dword [rsp + 0x1588], 1
lea rcx, [rsp + 0x13f0]
call fcn.1401e4480
lea rcx, [rsp + 0x1730]
call fcn.1400834ec
nop
lea rax, [rsp + 0x21f8]
mov qword [rsp + 0x2200], rax
lea rdx, [0x140250068]
mov rcx, qword [rsp + 0x2200]
call fcn.140002050
mov qword [rsp + 0x22b8], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x22b8]
lea rcx, [rsp + 0x880]
call fcn.1401e3fe0
lea rdx, [0x14024ee2c]
lea rcx, [rsp + 0x868]
call fcn.140002050
nop
mov dword [rsp + 0x1ad8], 0
jmp 0x14016c35a
mov eax, dword [rsp + 0x1ad8]
add eax, 1
mov dword [rsp + 0x1ad8], eax
movsxd rdi, dword [rsp + 0x1ad8]
lea rcx, [rsp + 0x1730]
call fcn.1400202c0
cmp rdi, rax
jge 0x14016c3a2
movsxd rdx, dword [rsp + 0x1ad8]
lea rcx, [rsp + 0x1730]
call fcn.14000de90
mov r8d, dword [rax]
lea rdx, [0x140250078]
lea rcx, [rsp + 0x868]
call fcn.14000df50
jmp 0x14016c349
lea rcx, [rsp + 0x868]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x14016c3c7
lea rax, [0x140250088]
mov qword [rsp + 0x22c0], rax
jmp 0x14016c3dc
lea rcx, [rsp + 0x868]
call fcn.140050200
mov qword [rsp + 0x22c0], rax
lea rcx, [rsp + 0x1598]
mov rdx, qword [rsp + 0x22c0]
call fcn.140002020
lea rax, [rsp + 0x2208]
mov qword [rsp + 0x2210], rax
lea rdx, [0x140250090]
mov rcx, qword [rsp + 0x2210]
call fcn.140002050
mov qword [rsp + 0x22c8], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x22c8]
lea rcx, [rsp + 0x880]
call fcn.1401e3fe0
lea rcx, [rsp + 0x868]
call fcn.140001910
mov dword [rsp + 0x1adc], 0
jmp 0x14016c46b
mov eax, dword [rsp + 0x1adc]
add eax, 1
mov dword [rsp + 0x1adc], eax
movsxd rdi, dword [rsp + 0x1adc]
lea rcx, [rsp + 0x1730]
call fcn.1400202c0
cmp rdi, rax
jge 0x14016c4b3
movsxd rdx, dword [rsp + 0x1adc]
lea rcx, [rsp + 0x1730]
call fcn.14000de90
mov r8d, dword [rax]
lea rdx, [0x1402500a0]
lea rcx, [rsp + 0x868]
call fcn.14000df50
jmp 0x14016c45a
lea rcx, [rsp + 0x868]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x14016c4d8
lea rax, [0x1402500b0]
mov qword [rsp + 0x22d0], rax
jmp 0x14016c4ed
lea rcx, [rsp + 0x868]
call fcn.140050200
mov qword [rsp + 0x22d0], rax
lea rcx, [rsp + 0x15a0]
mov rdx, qword [rsp + 0x22d0]
call fcn.140002020
lea rax, [rsp + 0x2218]
mov qword [rsp + 0x2220], rax
lea rdx, [0x1402500b8]
mov rcx, qword [rsp + 0x2220]
call fcn.140002050
mov qword [rsp + 0x22d8], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x22d8]
lea rcx, [rsp + 0x880]
call fcn.1401e3fe0
lea rcx, [rsp + 0x868]
call fcn.140001910
mov dword [rsp + 0x1ae0], 0
jmp 0x14016c57c
mov eax, dword [rsp + 0x1ae0]
add eax, 1
mov dword [rsp + 0x1ae0], eax
movsxd rdi, dword [rsp + 0x1ae0]
lea rcx, [rsp + 0x1730]
call fcn.1400202c0
cmp rdi, rax
jge 0x14016c5c4
movsxd rdx, dword [rsp + 0x1ae0]
lea rcx, [rsp + 0x1730]
call fcn.14000de90
mov r8d, dword [rax]
lea rdx, [0x1402500c0]
lea rcx, [rsp + 0x868]
call fcn.14000df50
jmp 0x14016c56b
lea rcx, [rsp + 0x1618]
lea rdx, [rsp + 0x868]
call fcn.140002ce0
lea rcx, [rsp + 0x13f0]
call fcn.1401cbc50
lea rdx, [0x1402500d0]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
je 0x14016c61a
lea rdx, [0x1402500e0]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
jne 0x14016c6b3
cmp dword [rsp + 0x878], 0
je 0x14016c6b3
lea rcx, [rsp + 0x1618]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x14016c649
mov dword [rsp + 0x22e0], 0
jmp 0x14016c665
lea rcx, [rsp + 0xa38]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov dword [rsp + 0x22e0], eax
lea rcx, [rsp + 0x1618]
xor edx, edx
call fcn.140006e50
movzx ebx, ax
lea rcx, [rsp + 0xa30]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006e50
mov r9d, dword [rsp + 0x22e0]
movzx r8d, bx
mov edx, edi
movzx ecx, ax
call fcn.1401e8fe0
lea rdx, [0x1402500f0]
lea rcx, [rsp + 0x870]
call fcn.140006130
test eax, eax
jne 0x14016c725
cmp dword [rsp + 0x878], 0
je 0x14016c725
lea rcx, [rsp + 0x1620]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov ebx, eax
lea rcx, [rsp + 0xa30]
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006e50
mov r9d, ebx
mov r8d, 1
mov edx, edi
movzx ecx, ax
call fcn.1401e8cc0
cmp dword [rsp + 0x40], 0
je 0x14016c91a
lea rcx, [rsp + 0x1b20]
call fcn.14000dfa0
nop
lea rcx, [rsp + 0x1ae8]
call fcn.140007080
nop
lea rdx, [rsp + 0x1ae8]
lea rcx, [rsp + 0x1b20]
call fcn.1401cb640
mov dword [rsp + 0x1e60], 0
jmp 0x14016c77f
mov eax, dword [rsp + 0x1e60]
add eax, 1
mov dword [rsp + 0x1e60], eax
mov edi, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007100
cmp rdi, rax
jae 0x14016c8ff
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140250100]
call fcn.140006130
test eax, eax
je 0x14016c7cc
jmp 0x14016c76e
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov rcx, rax
add rcx, 0x1b8
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
test eax, eax
jne 0x14016c800
jmp 0x14016c76e
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006e50
movzx ecx, ax
call fcn.1401e8b50
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov rcx, rax
add rcx, 0x1b0
call fcn.140050200
mov rcx, rax
call fcn.1400aac5c
mov edi, eax
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006e50
xor r9d, r9d
xor r8d, r8d
mov edx, edi
movzx ecx, ax
call fcn.1401e8fe0
lea rcx, [rsp + 0x1e70]
call fcn.14000dfa0
nop
mov edx, dword [rsp + 0x1e60]
lea rcx, [rsp + 0x1ae8]
call fcn.140007130
mov eax, dword [rax + 0x198]
mov dword [rsp + 0x2008], eax
lea rcx, [rsp + 0x1e70]
call fcn.1401e4240
lea rcx, [rsp + 0x2028]
lea rdx, [0x14024eecc]
call fcn.140002020
lea rcx, [rsp + 0x1e70]
call fcn.1401cbc50
nop
lea rcx, [rsp + 0x1e70]
call fcn.140005e30
jmp 0x14016c76e
lea rcx, [rsp + 0x1ae8]
call fcn.1400070d0
nop
lea rcx, [rsp + 0x1b20]
call fcn.140005e30
mov edx, 1
mov ecx, 1
call fcn.1401cc440
lea rcx, [rsp + 0xbc8]
call fcn.140002d10
nop
mov rcx, qword [rsp + 0x2340]
add rcx, 0x618
xor edx, edx
call fcn.140006e50
movzx r8d, ax
lea rdx, [0x14025010c]
lea rcx, [rsp + 0xbc8]
call fcn.140002ba0
xor edx, edx
mov word [rsp + 0xbe0], dx
lea rdi, [rsp + 0xbe2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x50], ax
lea rdi, [rsp + 0x52]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x140250114]
lea rdx, [rsp + 0xbc8]
lea rcx, [rsp + 0x2230]
call fcn.1400010b0
mov qword [rsp + 0x22e8], rax
mov rcx, qword [rsp + 0x22e8]
call fcn.140050200
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xbd0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x860]
mov r8d, 0x400
lea rdx, [rsp + 0xbe0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x14016ca22
mov dword [rsp + 0x22f0], 1
jmp 0x14016ca2d
mov dword [rsp + 0x22f0], 0
movzx eax, byte [rsp + 0x22f0]
mov byte [rsp + 0x2228], al
lea rcx, [rsp + 0x2230]
call fcn.140007060
movzx edx, byte [rsp + 0x2228]
test edx, edx
je 0x14016cb38
lea rcx, [rsp + 0x21b0]
call fcn.140002d10
nop
mov r8d, dword [rsp + 0x860]
lea rdx, [0x140250120]
lea rcx, [rsp + 0x21b0]
call fcn.140002ba0
lea rcx, [rsp + 0x2238]
call fcn.140001000
mov qword [rsp + 0x22f8], rax
mov rax, qword [rsp + 0x22f8]
mov qword [rsp + 0x2300], rax
lea r8, [0x140250130]
mov rdx, qword [rsp + 0x2300]
lea rcx, [rsp + 0x2240]
call fcn.1400010b0
mov qword [rsp + 0x2308], rax
mov rcx, qword [rsp + 0x2308]
call fcn.140050200
mov rbx, rax
lea rcx, [rsp + 0x21b0]
call fcn.140050200
mov rdi, rax
lea rcx, [rsp + 0xbc8]
call fcn.140050200
mov r9, rbx
mov r8, rdi
mov rdx, rax
lea rcx, str.DiskSerialNumber
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x2240]
call fcn.140007060
nop
lea rcx, [rsp + 0x2238]
call fcn.140007060
nop
lea rcx, [rsp + 0x21b0]
call fcn.140007060
mov rcx, qword [rsp + 0x2340]
call fcn.140082910
nop
lea rcx, [rsp + 0xbc8]
call fcn.140007060
nop
lea rcx, [rsp + 0x868]
call fcn.140007060
nop
lea rcx, [rsp + 0x1730]
call fcn.14008350c
nop
lea rcx, [rsp + 0x13f0]
call fcn.140005e30
nop
lea rcx, [rsp + 0x870]
call fcn.140007060
nop
lea rcx, [rsp + 0x880]
call fcn.140005e30
mov rcx, qword [rsp + 0x2310]
xor rcx, rsp
call fcn.1400a9820
add rsp, 0x2328
pop rdi
pop rbx
ret