Function at 0x1400da390
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x490
mov rax, qword [0x14015d3e0]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x48], rcx
xor ebx, ebx
lea rcx, str.BuildStateInfo
mov r12d, ebx
lea r14d, [rbx + 1]
call fcn.1400ed218
lea r15d, [rbx + 0x11]
mov qword [rsp + 0x40], rbx
mov ecx, r15d
mov r13d, ebx
mov esi, ebx
mov edi, ebx
call fcn.1400dba24
test eax, eax
jne 0x1400da44e
mov r9d, 0x522
mov r14d, ebx
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400daaf5
test byte [rcx + 0x1c], 8
je 0x1400daaf5
mov edx, r15d
lea rax, str.ERROR_PRIVILEGE_NOT_HELD
mov rcx, qword [rcx + 0x10]
lea r8, [0x14013bbf0]
mov qword [rsp + 0x20], rax
call fcn.1400d9dd4
jmp 0x1400daaf5
mov r15d, 0x12
mov ecx, r15d
call fcn.1400dba24
test eax, eax
jne 0x1400da47f
mov r9d, 0x522
mov r14d, ebx
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
jmp 0x1400da41a
call fcn.1400db36c
mov qword [rsp + 0x30], rax
mov r13, rax
test rax, rax
jne 0x1400da4ea
mov r14d, ebx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r12d, eax
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400daaf5
test byte [rcx + 0x1c], 8
je 0x1400daaf5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [section..data]
lea edx, [r13 + 0x13]
mov r9d, eax
lea rax, str.GetLastError___
jmp 0x1400da434
mov ecx, 0x448
call fcn.1400ecee0
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1400da538
lea r9d, [rax + 0xe]
mov r14d, ebx
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400daaf5
test byte [rcx + 0x1c], 8
je 0x1400daaf5
lea edx, [rax + 0x14]
lea rax, str.pMpInfoList
jmp 0x1400da434
xor r9d, r9d
mov rdi, r13
cmp dword [r13 + 4], r9d
jbe 0x1400da590
mov r12, qword [rsp + 0x40]
mov eax, ebx
lea rcx, [rax + rax*2]
movzx eax, word [rdi + rcx*8 + 0xc]
mov r9d, dword [rdi + rcx*8 + 8]
movzx r8d, word [rdi + rcx*8 + 0x1c]
add r9, rdi
mov edx, dword [rdi + rcx*8 + 0x18]
mov rcx, r12
shr ax, 1
add rdx, rdi
shr r8w, 1
mov word [rsp + 0x20], ax
call fcn.1400da0c4
add ebx, r14d
cmp ebx, dword [rdi + 4]
jb 0x1400da549
mov rax, qword [rsp + 0x40]
mov r12d, esi
xor r9d, r9d
mov r13, rax
lea rbx, section..data
lea r15, [0x14013bbf0]
cmp qword [r13 + 8], r9
je 0x1400daadd
mov r8, qword [r13 + 0x10]
test r8, r8
je 0x1400daadd
movzx esi, word [r13 + 0x2e]
lea rcx, [rsp + 0x70]
mov r9d, esi
mov edx, 0x105
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400db1bd
lea eax, [rcx + 0x5c]
lea rcx, [rsp + 0x70]
mov word [rsp + 0x72], ax
call fcn.1400da2e4
xor r9d, r9d
test eax, eax
jne 0x1400daadd
lea ecx, [rsi + 1]
add rcx, rcx
lea eax, [r9 + 0x5c]
mov word [rsp + rsi*2 + 0x70], ax
cmp rcx, 0x20a
jae 0x1400db1b7
mov word [rsp + rcx + 0x70], r9w
mov eax, r9d
mov ecx, dword [r13 + 0x30]
test ecx, ecx
jne 0x1400da7eb
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetDriveTypeW]
nop dword [rax + rax]
mov ecx, dword [r13 + 0x30]
xor r9d, r9d
test ecx, ecx
jne 0x1400da7eb
cmp eax, 3
je 0x1400da7f4
test eax, eax
je 0x1400daadd
mov rsi, qword [r13 + 0x18]
test rsi, rsi
jne 0x1400da73e
mov ecx, 0x1090
call fcn.1400ecee0
mov rdi, rax
test rax, rax
je 0x1400dac3b
mov qword [rax], rsi
mov edx, 0x40
movzx r9d, word [r13 + 0x2e]
lea rsi, [rax + 0x80c]
mov r8, qword [r13 + 0x10]
mov rcx, rsi
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400dabed
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.14003c4e0
xor r9d, r9d
test eax, eax
js 0x1400dab83
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
add rcx, 0x10
call fcn.1400da0a8
test eax, eax
jne 0x1400daadd
mov r14d, r9d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edx, 0x28
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.GetLastError___
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
xor esi, esi
jmp 0x1400daaf0
mov ecx, 0x1090
call fcn.1400ecee0
mov rdi, rax
xor eax, eax
test rdi, rdi
je 0x1400dadab
mov qword [rdi], rax
lea rcx, [rdi + 0x80c]
movzx r9d, word [r13 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r13 + 0x10]
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400dad60
movzx r9d, word [rsi + 8]
lea rcx, [rdi + 0x88c]
mov r8, qword [rsi]
mov edx, 0x400
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400dad0c
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.14003c4e0
xor r9d, r9d
test eax, eax
js 0x1400dacc4
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
add rcx, 0x10
call fcn.1400da0a8
test eax, eax
je 0x1400dac82
mov rsi, qword [rsi + 0x10]
test rsi, rsi
jne 0x1400da73e
jmp 0x1400daadd
cmp eax, 3
jne 0x1400da897
lea rdx, [rsp + 0x38]
mov byte [rsp + 0x38], r9b
lea rcx, [rsp + 0x70]
call fcn.1400db830
xor r9d, r9d
test eax, eax
jne 0x1400da85e
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daadd
test byte [rax + 0x1c], 4
je 0x1400daadd
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [section..data]
lea r9, [rsp + 0x70]
mov edx, 0x16
mov dword [rsp + 0x20], eax
mov r8, r15
mov rcx, qword [rcx + 0x10]
call fcn.1400d9f94
xor r9d, r9d
jmp 0x1400daadd
cmp byte [rsp + 0x38], r9b
je 0x1400da897
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400daadd
test byte [rcx + 0x1c], 4
je 0x1400daadd
mov rcx, qword [rcx + 0x10]
lea r9, [rsp + 0x70]
mov edx, 0x17
mov r8, r15
call fcn.1400d9f2c
jmp 0x1400da856
cmp dword [r13 + 0x30], r9d
jne 0x1400da8bf
lea rax, [rsp + 0x3c]
lea r9, [rbp + 0x180]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400db74c
jmp 0x1400da908
mov esi, 0x10
lea r8, [r13 + 0x34]
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.14002d18c
xor edi, edi
test eax, eax
js 0x1400db176
mov esi, 0x100
lea r8, [r13 + 0x23e]
mov edx, esi
lea rcx, [rbp + 0x180]
call fcn.14002d18c
test eax, eax
js 0x1400db112
mov eax, dword [r13 + 0x28]
mov dword [rsp + 0x3c], eax
mov rdi, qword [r13 + 0x18]
test rdi, rdi
jne 0x1400daa11
mov ecx, 0xab8
call fcn.1400ecee0
mov rsi, rax
test rax, rax
je 0x1400daf0a
mov qword [rax], rdi
lea edx, [rdi + 0x40]
movzx r9d, word [r13 + 0x2e]
lea rcx, [rax + 0xc]
mov r8, qword [r13 + 0x10]
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400daea0
lea edx, [rcx + 0x10]
lea rdi, [rsi + 0x88c]
mov rcx, rdi
lea r8, [rsp + 0x50]
call fcn.14002d18c
xor ecx, ecx
test eax, eax
js 0x1400dae56
lea rdi, [rsi + 0x8ac]
mov edx, 0x100
mov rcx, rdi
lea r8, [rbp + 0x180]
call fcn.14002d18c
xor r9d, r9d
test eax, eax
js 0x1400dadef
mov eax, dword [rsp + 0x3c]
mov rdx, rsi
mov rcx, qword [rsp + 0x48]
mov dword [rsi + 0xaac], eax
call fcn.1400da0a8
test eax, eax
jne 0x1400daadd
mov r14d, r9d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [section..data]
mov edx, 0x1e
mov r9d, eax
mov r8, r15
lea rax, str.GetLastError___
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
xor edi, edi
jmp 0x1400daaf0
mov ecx, 0xab8
call fcn.1400ecee0
mov rsi, rax
xor eax, eax
test rsi, rsi
je 0x1400db0ce
mov qword [rsi], rax
lea rcx, [rsi + 0xc]
movzx r9d, word [r13 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r13 + 0x10]
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400db07c
movzx r9d, word [rdi + 8]
lea rcx, [rsi + 0x8c]
mov r8, qword [rdi]
mov edx, 0x400
call fcn.14003c4e0
xor ecx, ecx
test eax, eax
js 0x1400db028
lea rcx, [rsi + 0x88c]
mov edx, 0x10
lea r8, [rsp + 0x50]
call fcn.14002d18c
xor ecx, ecx
test eax, eax
js 0x1400dafe1
lea rcx, [rsi + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x180]
call fcn.14002d18c
xor r9d, r9d
test eax, eax
js 0x1400daf98
mov eax, dword [rsp + 0x3c]
mov rdx, rsi
mov rcx, qword [rsp + 0x48]
mov dword [rsi + 0xaac], eax
call fcn.1400da0a8
test eax, eax
je 0x1400daf40
mov rdi, qword [rdi + 0x10]
test rdi, rdi
jne 0x1400daa11
mov r13, qword [r13]
test r13, r13
jne 0x1400da5a1
mov rsi, r9
mov rdi, r9
mov r13, qword [rsp + 0x30]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, r13
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
cmp qword [rsp + 0x40], 0
je 0x1400dab34
lea rcx, [rsp + 0x40]
call fcn.1400db228
lea rcx, str.BuildStateInfo
call fcn.1400ed25c
mov ecx, r12d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov eax, r14d
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.1400164a0
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, eax
mov r14d, r9d
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.14003c4e0
mov edx, 0x27
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDevicePath___pMp__pDeviceName__pMp__cchDeviceName_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
jmp 0x1400da737
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
movzx r9d, word [r13 + 0x2e]
mov edx, 0x40
mov r8, qword [r13 + 0x10]
mov rcx, rsi
call fcn.14003c4e0
mov edx, 0x26
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szVolumeGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400dabd0
mov r9d, 0xe
mov r14d, esi
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400daaf0
test byte [rcx + 0x1c], 8
je 0x1400daaf0
lea edx, [r9 + 0x17]
lea rax, str.pNewMedia
mov rcx, qword [rcx + 0x10]
mov r8, r15
mov qword [rsp + 0x20], rax
call fcn.1400d9dd4
jmp 0x1400daaf0
mov r14d, r9d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edx, 0x2d
jmp 0x1400da715
mov ecx, eax
mov r14d, r9d
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.14003c4e0
mov edx, 0x2c
jmp 0x1400dabc6
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
movzx r9d, word [rsi + 8]
lea rcx, [rdi + 0x88c]
mov r8, qword [rsi]
mov edx, 0x400
call fcn.14003c4e0
mov r9d, eax
mov edx, 0x2b
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400dabd0
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400da737
test byte [rax + 0x1c], 8
je 0x1400da737
movzx r9d, word [r13 + 0x2e]
lea rcx, [rdi + 0x80c]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.14003c4e0
mov edx, 0x2a
jmp 0x1400dac2f
mov r9d, 0xe
mov r14d, eax
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400dade7
test byte [rcx + 0x1c], 8
je 0x1400dade7
mov rcx, qword [rcx + 0x10]
lea rax, str.pNewMedia
lea edx, [r9 + 0x1b]
mov qword [rsp + 0x20], rax
mov r8, r15
call fcn.1400d9dd4
xor eax, eax
mov rsi, rax
jmp 0x1400daaf0
mov ecx, eax
mov r14d, r9d
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
lea r8, [rbp + 0x180]
mov edx, 0x100
mov rcx, rdi
call fcn.14002d18c
mov edx, 0x1d
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szLabel___szLabel_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
jmp 0x1400daa0a
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
lea r8, [rsp + 0x50]
mov edx, 0x10
mov rcx, rdi
call fcn.14002d18c
mov edx, 0x1c
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szFsName___szFsName_
jmp 0x1400dae39
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daaf0
test byte [rax + 0x1c], 8
je 0x1400daaf0
movzx r9d, word [r13 + 0x2e]
lea rcx, [rsi + 0xc]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.14003c4e0
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
mov edx, 0x1b
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
jmp 0x1400daaf0
mov r9d, 0xe
mov r14d, edi
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400daaf0
test byte [rcx + 0x1c], 8
je 0x1400daaf0
lea edx, [r9 + 0xc]
lea rax, str.pNewVolume
jmp 0x1400dac6c
mov r14d, r9d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r12d, eax
mov rax, qword [section..data]
xor r13d, r13d
mov edi, r13d
cmp rax, rbx
je 0x1400daaf0
test byte [rax + 0x1c], 8
je 0x1400daaf0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [section..data]
lea edx, [r13 + 0x24]
mov r9d, eax
lea rax, str.GetLastError___
jmp 0x1400dac6c
mov ecx, eax
mov r14d, r9d
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
lea r8, [rbp + 0x180]
mov edx, 0x100
lea rcx, [rsi + 0x8ac]
call fcn.14002d18c
mov edx, 0x23
jmp 0x1400dae2f
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
lea r8, [rsp + 0x50]
mov edx, 0x10
lea rcx, [rsi + 0x88c]
call fcn.14002d18c
mov edx, 0x22
jmp 0x1400dae94
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
movzx r9d, word [rdi + 8]
lea rcx, [rsi + 0x8c]
mov r8, qword [rdi]
mov edx, 0x400
call fcn.14003c4e0
mov r9d, eax
mov edx, 0x21
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400dae39
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400daa0a
test byte [rax + 0x1c], 8
je 0x1400daa0a
movzx r9d, word [r13 + 0x2e]
lea rcx, [rsi + 0xc]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.14003c4e0
mov r9d, eax
mov edx, 0x20
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400dae39
mov r9d, 0xe
mov r14d, eax
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400db10a
test byte [rcx + 0x1c], 8
je 0x1400db10a
mov rcx, qword [rcx + 0x10]
lea rax, str.pNewVolume
lea edx, [r9 + 0x11]
mov qword [rsp + 0x20], rax
mov r8, r15
call fcn.1400d9dd4
xor eax, eax
mov rdi, rax
jmp 0x1400daaf0
mov ecx, eax
mov r14d, edi
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400db16e
test byte [rax + 0x1c], 8
je 0x1400db16e
lea r8, [r13 + 0x23e]
mov rdx, rsi
lea rcx, [rbp + 0x180]
call fcn.14002d18c
mov r9d, eax
mov edx, 0x19
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szLabel___pMp__szLabel_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
mov rsi, rdi
jmp 0x1400daaf0
mov ecx, eax
mov r14d, edi
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400db16e
test byte [rax + 0x1c], 8
je 0x1400db16e
lea r8, [r13 + 0x34]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.14002d18c
mov r9d, eax
mov edx, 0x18
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szFsName___pMp__szFsName_
jmp 0x1400db156
call fcn.1400167c8
int3
mov r14d, ecx
mov ecx, eax
call fcn.1400ed2a0
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400db219
test byte [rax + 0x1c], 8
je 0x1400db219
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x70]
mov r9, rsi
mov edx, 0x105
call fcn.14003c4e0
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_szVolumeGuid___pMp__pVolumeGuid__cchGuid_
mov edx, 0x15
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400d9dd4
xor eax, eax
mov esi, eax
jmp 0x1400db10a