Function at 0x1400e47c0
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x490
mov rax, qword [0x14016b400]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x48], rcx
xor ebx, ebx
lea rcx, str.BuildStateInfo
mov r12d, ebx
lea r14d, [rbx + 1]
call fcn.140029428
lea r15d, [rbx + 0x11]
mov qword [rsp + 0x40], rbx
mov ecx, r15d
mov r13d, ebx
mov esi, ebx
mov edi, ebx
call fcn.1400e5930
test eax, eax
jne 0x1400e487e
mov r9d, 0x522
mov r14d, ebx
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400e4efa
test byte [rcx + 0x1c], 8
je 0x1400e4efa
mov edx, r15d
lea rax, str.ERROR_PRIVILEGE_NOT_HELD
mov rcx, qword [rcx + 0x10]
lea r8, [0x14013cfb8]
mov qword [rsp + 0x20], rax
call fcn.1400e4514
jmp 0x1400e4efa
mov r15d, 0x12
mov ecx, r15d
call fcn.1400e5930
test eax, eax
jne 0x1400e48af
mov r9d, 0x522
mov r14d, ebx
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
jmp 0x1400e484a
call fcn.14002b748
mov qword [rsp + 0x30], rax
mov r13, rax
test rax, rax
jne 0x1400e490e
mov r14d, ebx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12d, eax
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400e4efa
test byte [rcx + 0x1c], 8
je 0x1400e4efa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea edx, [r13 + 0x13]
mov r9d, eax
lea rax, str.GetLastError___
jmp 0x1400e4864
mov ecx, 0x448
call fcn.1400293f0
xor r10d, r10d
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1400e495f
lea r9d, [rax + 0xe]
mov r14d, r10d
mov r12d, r9d
mov rcx, qword [section..data]
lea rbx, section..data
cmp rcx, rbx
je 0x1400e4efa
test byte [rcx + 0x1c], 8
je 0x1400e4efa
lea edx, [rax + 0x14]
lea rax, str.pMpInfoList
jmp 0x1400e4864
mov rdi, r13
cmp dword [r13 + 4], r10d
jbe 0x1400e49b9
mov r12, qword [rsp + 0x40]
mov eax, ebx
mov qword [rsp + 0x28], r10
lea rcx, [rax + rax*2]
movzx eax, word [rdi + rcx*8 + 0xc]
mov r9d, dword [rdi + rcx*8 + 8]
movzx r8d, word [rdi + rcx*8 + 0x1c]
add r9, rdi
mov edx, dword [rdi + rcx*8 + 0x18]
mov rcx, r12
shr ax, 1
add rdx, rdi
shr r8w, 1
mov word [rsp + 0x20], ax
call fcn.1400290dc
add ebx, r14d
mov r10, rsi
cmp ebx, dword [rdi + 4]
jb 0x1400e496d
mov rax, qword [rsp + 0x40]
mov r12d, esi
mov r13, rax
lea rbx, section..data
lea r15, [0x14013cfb8]
cmp qword [r13 + 8], r10
je 0x1400e4ee2
mov r8, qword [r13 + 0x10]
test r8, r8
je 0x1400e4ee2
movzx esi, word [r13 + 0x2e]
lea rcx, [rsp + 0x70]
mov r9d, esi
mov edx, 0x105
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e5591
lea eax, [rcx + 0x5c]
lea rcx, [rsp + 0x70]
mov word [rsp + 0x72], ax
call fcn.1400e4734
xor r10d, r10d
test eax, eax
jne 0x1400e4ee2
lea ecx, [rsi + 1]
add rcx, rcx
lea eax, [r10 + 0x5c]
mov word [rsp + rsi*2 + 0x70], ax
cmp rcx, 0x20a
jae 0x1400e558b
mov word [rsp + rcx + 0x70], r10w
mov eax, r10d
mov ecx, dword [r13 + 0x30]
test ecx, ecx
jne 0x1400e4c02
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetDriveTypeW]
mov ecx, dword [r13 + 0x30]
xor r10d, r10d
test ecx, ecx
jne 0x1400e4c02
cmp eax, 3
je 0x1400e4c0b
test eax, eax
je 0x1400e4ee2
mov rsi, qword [r13 + 0x18]
test rsi, rsi
jne 0x1400e4b55
mov ecx, 0x1090
call fcn.1400293f0
mov rdi, rax
test rax, rax
je 0x1400e5027
mov qword [rax], rsi
mov edx, 0x40
movzx r9d, word [r13 + 0x2e]
lea rsi, [rax + 0x80c]
mov r8, qword [r13 + 0x10]
mov rcx, rsi
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e4fd9
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.140029060
xor r10d, r10d
test eax, eax
js 0x1400e4f6f
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
add rcx, 0x10
call fcn.1400e4720
test eax, eax
jne 0x1400e4ee2
mov r14d, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, 0x28
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.GetLastError___
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
xor esi, esi
jmp 0x1400e4ef5
mov ecx, 0x1090
call fcn.1400293f0
mov rdi, rax
xor eax, eax
test rdi, rdi
je 0x1400e518b
mov qword [rdi], rax
lea rcx, [rdi + 0x80c]
movzx r9d, word [r13 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r13 + 0x10]
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e5140
movzx r9d, word [rsi + 8]
lea rcx, [rdi + 0x88c]
mov r8, qword [rsi]
mov edx, 0x400
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e50ec
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.140029060
xor r10d, r10d
test eax, eax
js 0x1400e50a4
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
add rcx, 0x10
call fcn.1400e4720
test eax, eax
je 0x1400e506e
mov rsi, qword [rsi + 0x10]
test rsi, rsi
jne 0x1400e4b55
jmp 0x1400e4ee2
cmp eax, 3
jne 0x1400e4ca8
lea rdx, [rsp + 0x38]
mov byte [rsp + 0x38], r10b
lea rcx, [rsp + 0x70]
call fcn.1400e5760
xor r10d, r10d
test eax, eax
jne 0x1400e4c6f
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4ee2
test byte [rax + 0x1c], 4
je 0x1400e4ee2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea r9, [rsp + 0x70]
mov edx, 0x16
mov dword [rsp + 0x20], eax
mov r8, r15
mov rcx, qword [rcx + 0x10]
call fcn.1400e5a88
xor r10d, r10d
jmp 0x1400e4ee2
cmp byte [rsp + 0x38], r10b
je 0x1400e4ca8
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400e4ee2
test byte [rcx + 0x1c], 4
je 0x1400e4ee2
mov rcx, qword [rcx + 0x10]
lea r9, [rsp + 0x70]
mov edx, 0x17
mov r8, r15
call fcn.1400e4650
jmp 0x1400e4c67
cmp dword [r13 + 0x30], r10d
jne 0x1400e4cd0
lea rax, [rsp + 0x3c]
lea r9, [rbp + 0x180]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400e5694
jmp 0x1400e4d19
mov esi, 0x10
lea r8, [r13 + 0x34]
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.1400109f0
xor edi, edi
test eax, eax
js 0x1400e554a
mov esi, 0x100
lea r8, [r13 + 0x23e]
mov edx, esi
lea rcx, [rbp + 0x180]
call fcn.1400109f0
test eax, eax
js 0x1400e54e6
mov eax, dword [r13 + 0x28]
mov dword [rsp + 0x3c], eax
mov rdi, qword [r13 + 0x18]
test rdi, rdi
jne 0x1400e4e16
mov ecx, 0xab8
call fcn.1400293f0
mov rsi, rax
test rax, rax
je 0x1400e52ea
mov qword [rax], rdi
lea edx, [rdi + 0x40]
movzx r9d, word [r13 + 0x2e]
lea rcx, [rax + 0xc]
mov r8, qword [r13 + 0x10]
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e5280
lea edx, [rcx + 0x10]
lea rdi, [rsi + 0x88c]
mov rcx, rdi
lea r8, [rsp + 0x50]
call fcn.1400109f0
xor ecx, ecx
test eax, eax
js 0x1400e5236
lea rdi, [rsi + 0x8ac]
mov edx, 0x100
mov rcx, rdi
lea r8, [rbp + 0x180]
call fcn.1400109f0
xor r10d, r10d
test eax, eax
js 0x1400e51cf
mov eax, dword [rsp + 0x3c]
mov rdx, rsi
mov rcx, qword [rsp + 0x48]
mov dword [rsi + 0xaac], eax
call fcn.1400e4720
test eax, eax
jne 0x1400e4ee2
mov r14d, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
mov edx, 0x1e
mov r9d, eax
mov r8, r15
lea rax, str.GetLastError___
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
xor edi, edi
jmp 0x1400e4ef5
mov ecx, 0xab8
call fcn.1400293f0
mov rsi, rax
xor eax, eax
test rsi, rsi
je 0x1400e54a2
mov qword [rsi], rax
lea rcx, [rsi + 0xc]
movzx r9d, word [r13 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r13 + 0x10]
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e5450
movzx r9d, word [rdi + 8]
lea rcx, [rsi + 0x8c]
mov r8, qword [rdi]
mov edx, 0x400
call fcn.140029060
xor ecx, ecx
test eax, eax
js 0x1400e53fc
lea rcx, [rsi + 0x88c]
mov edx, 0x10
lea r8, [rsp + 0x50]
call fcn.1400109f0
xor ecx, ecx
test eax, eax
js 0x1400e53b5
lea rcx, [rsi + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x180]
call fcn.1400109f0
xor r10d, r10d
test eax, eax
js 0x1400e536c
mov eax, dword [rsp + 0x3c]
mov rdx, rsi
mov rcx, qword [rsp + 0x48]
mov dword [rsi + 0xaac], eax
call fcn.1400e4720
test eax, eax
je 0x1400e5320
mov rdi, qword [rdi + 0x10]
test rdi, rdi
jne 0x1400e4e16
mov r13, qword [r13]
test r13, r13
jne 0x1400e49ca
mov rsi, r10
mov rdi, r10
mov r13, qword [rsp + 0x30]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, r13
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
cmp qword [rsp + 0x40], 0
je 0x1400e4f27
lea rcx, [rsp + 0x40]
call fcn.14002b6d8
lea rcx, str.BuildStateInfo
call fcn.140027f60
mov ecx, r12d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov eax, r14d
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.1400321c0
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, eax
mov r14d, r10d
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.140029060
mov edx, 0x27
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDevicePath___pMp__pDeviceName__pMp__cchDeviceName_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
jmp 0x1400e4b4e
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
movzx r9d, word [r13 + 0x2e]
mov edx, 0x40
mov r8, qword [r13 + 0x10]
mov rcx, rsi
call fcn.140029060
mov edx, 0x26
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szVolumeGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400e4fbc
mov r9d, 0xe
mov r14d, esi
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400e4ef5
test byte [rcx + 0x1c], 8
je 0x1400e4ef5
lea edx, [r9 + 0x17]
lea rax, str.pNewMedia
mov rcx, qword [rcx + 0x10]
mov r8, r15
mov qword [rsp + 0x20], rax
call fcn.1400e4514
jmp 0x1400e4ef5
mov r14d, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, 0x2d
jmp 0x1400e4b2c
mov ecx, eax
mov r14d, r10d
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
movzx r9d, word [r13 + 0x2c]
lea rcx, [rdi + 0xc]
mov r8, qword [r13 + 8]
mov edx, 0x400
call fcn.140029060
mov edx, 0x2c
jmp 0x1400e4fb2
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
movzx r9d, word [rsi + 8]
lea rcx, [rdi + 0x88c]
mov r8, qword [rsi]
mov edx, 0x400
call fcn.140029060
mov r9d, eax
mov edx, 0x2b
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400e4fbc
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4b4e
test byte [rax + 0x1c], 8
je 0x1400e4b4e
movzx r9d, word [r13 + 0x2e]
lea rcx, [rdi + 0x80c]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.140029060
mov edx, 0x2a
jmp 0x1400e501b
mov r9d, 0xe
mov r14d, eax
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400e51c7
test byte [rcx + 0x1c], 8
je 0x1400e51c7
mov rcx, qword [rcx + 0x10]
lea rax, str.pNewMedia
lea edx, [r9 + 0x1b]
mov qword [rsp + 0x20], rax
mov r8, r15
call fcn.1400e4514
xor eax, eax
mov rsi, rax
jmp 0x1400e4ef5
mov ecx, eax
mov r14d, r10d
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
lea r8, [rbp + 0x180]
mov edx, 0x100
mov rcx, rdi
call fcn.1400109f0
mov edx, 0x1d
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szLabel___szLabel_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
jmp 0x1400e4e0f
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
lea r8, [rsp + 0x50]
mov edx, 0x10
mov rcx, rdi
call fcn.1400109f0
mov edx, 0x1c
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szFsName___szFsName_
jmp 0x1400e5219
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4ef5
test byte [rax + 0x1c], 8
je 0x1400e4ef5
movzx r9d, word [r13 + 0x2e]
lea rcx, [rsi + 0xc]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.140029060
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
mov edx, 0x1b
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
jmp 0x1400e4ef5
mov r9d, 0xe
mov r14d, edi
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400e4ef5
test byte [rcx + 0x1c], 8
je 0x1400e4ef5
lea edx, [r9 + 0xc]
lea rax, str.pNewVolume
jmp 0x1400e5058
mov r14d, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12d, eax
mov rax, qword [section..data]
xor r13d, r13d
mov edi, r13d
cmp rax, rbx
je 0x1400e4ef5
test byte [rax + 0x1c], 8
je 0x1400e4ef5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea edx, [r13 + 0x24]
mov r9d, eax
lea rax, str.GetLastError___
jmp 0x1400e5058
mov ecx, eax
mov r14d, r10d
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
lea r8, [rbp + 0x180]
mov edx, 0x100
lea rcx, [rsi + 0x8ac]
call fcn.1400109f0
mov edx, 0x23
jmp 0x1400e520f
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
lea r8, [rsp + 0x50]
mov edx, 0x10
lea rcx, [rsi + 0x88c]
call fcn.1400109f0
mov edx, 0x22
jmp 0x1400e5274
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
movzx r9d, word [rdi + 8]
lea rcx, [rsi + 0x8c]
mov r8, qword [rdi]
mov edx, 0x400
call fcn.140029060
mov r9d, eax
mov edx, 0x21
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400e5219
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e4e0f
test byte [rax + 0x1c], 8
je 0x1400e4e0f
movzx r9d, word [r13 + 0x2e]
lea rcx, [rsi + 0xc]
mov r8, qword [r13 + 0x10]
mov edx, 0x40
call fcn.140029060
mov r9d, eax
mov edx, 0x20
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400e5219
mov r9d, 0xe
mov r14d, eax
mov r12d, r9d
mov rcx, qword [section..data]
cmp rcx, rbx
je 0x1400e54de
test byte [rcx + 0x1c], 8
je 0x1400e54de
mov rcx, qword [rcx + 0x10]
lea rax, str.pNewVolume
lea edx, [r9 + 0x11]
mov qword [rsp + 0x20], rax
mov r8, r15
call fcn.1400e4514
xor eax, eax
mov rdi, rax
jmp 0x1400e4ef5
mov ecx, eax
mov r14d, edi
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e5542
test byte [rax + 0x1c], 8
je 0x1400e5542
lea r8, [r13 + 0x23e]
mov rdx, rsi
lea rcx, [rbp + 0x180]
call fcn.1400109f0
mov r9d, eax
mov edx, 0x19
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szLabel___pMp__szLabel_
mov rcx, qword [section..data]
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
mov rsi, rdi
jmp 0x1400e4ef5
mov ecx, eax
mov r14d, edi
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e5542
test byte [rax + 0x1c], 8
je 0x1400e5542
lea r8, [r13 + 0x34]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.1400109f0
mov r9d, eax
mov edx, 0x18
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szFsName___pMp__szFsName_
jmp 0x1400e552a
call fcn.1400324a4
int3
mov r14d, ecx
mov ecx, eax
call fcn.1400f2b1c
mov r12d, eax
mov rax, qword [section..data]
cmp rax, rbx
je 0x1400e55ed
test byte [rax + 0x1c], 8
je 0x1400e55ed
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x70]
mov r9, rsi
mov edx, 0x105
call fcn.140029060
mov rcx, qword [section..data]
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_szVolumeGuid___pMp__pVolumeGuid__cchGuid_
mov edx, 0x15
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
xor eax, eax
mov esi, eax
jmp 0x1400e54de