Function at 0x1400cc640
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3d8]
sub rsp, 0x4b0
mov rax, qword [0x1401543b0]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov qword [rsp + 0x50], rcx
xor ebx, ebx
lea rcx, str.BuildStateInfo
mov esi, ebx
lea edi, [rbx + 1]
call fcn.140008368
lea r14d, [rbx + 0x11]
mov qword [rsp + 0x58], rbx
mov ecx, r14d
mov qword [rsp + 0x48], rbx
mov r13d, ebx
mov qword [rsp + 0x38], rbx
call fcn.1400cdad0
test eax, eax
jne 0x1400cc701
mov r9d, 0x522
mov edi, ebx
mov esi, r9d
mov rcx, qword [0x140154180]
lea rbx, [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
mov edx, r14d
lea rax, str.ERROR_PRIVILEGE_NOT_HELD
lea r8, [0x140129870]
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x20], rax
call fcn.1400cc0d8
jmp 0x1400cd33b
mov r14d, 0x12
mov ecx, r14d
call fcn.1400cdad0
test eax, eax
je 0x1400cc6b1
call fcn.1400cd4c4
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x1400cc774
mov edi, ebx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov esi, eax
mov rcx, qword [0x140154180]
lea rbx, [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
lea edx, [r14 + 1]
lea r8, [0x140129870]
mov rcx, qword [0x140154180]
mov r9d, eax
lea rax, str.GetLastError___
jmp 0x1400cc6ee
mov ecx, 0x448
call fcn.1400ddeec
xor r10d, r10d
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400cc7c5
lea r9d, [rax + 0xe]
mov edi, r10d
mov esi, r9d
mov rcx, qword [0x140154180]
lea rbx, [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
lea edx, [rax + 0x14]
lea rax, str.pMpInfoList
jmp 0x1400cc6e7
mov rax, qword [rsp + 0x58]
cmp dword [rax + 4], r10d
jbe 0x1400cc822
mov r13, qword [rsp + 0x48]
mov rsi, rax
lea rcx, [rbx + rbx*2]
mov qword [rsp + 0x28], r10
movzx eax, word [rsi + rcx*8 + 0xc]
mov r9d, dword [rsi + rcx*8 + 8]
movzx r8d, word [rsi + rcx*8 + 0x1c]
add r9, rsi
mov edx, dword [rsi + rcx*8 + 0x18]
mov rcx, r13
shr ax, 1
add rdx, rsi
shr r8w, 1
mov word [rsp + 0x20], ax
call fcn.1400cc37c
add ebx, edi
mov r10d, 0
cmp ebx, dword [rsi + 4]
jb 0x1400cc7d8
mov esi, r10d
mov r13d, esi
mov r15, qword [rsp + 0x48]
lea rbx, [0x140154180]
lea r14, [0x140129870]
cmp qword [r15 + 8], r10
je 0x1400ccce2
mov r8, qword [r15 + 0x10]
test r8, r8
je 0x1400ccce2
movzx r12d, word [r15 + 0x2e]
lea rcx, [rbp - 0x70]
mov r9d, r12d
mov edx, 0x105
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400cd2e2
lea eax, [rcx + 0x5c]
lea rcx, [rbp - 0x70]
mov word [rbp - 0x6e], ax
call fcn.1400cc5ac
xor r10d, r10d
test eax, eax
jne 0x1400ccce2
lea ecx, [rax + 0x5c]
mov word [rbp + r12*2 - 0x70], cx
lea ecx, [r12 + 1]
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400cd2dc
mov word [rbp + rcx - 0x70], r10w
mov eax, r10d
cmp dword [r15 + 0x30], r10d
jne 0x1400cca42
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_GetDriveTypeW]
xor r10d, r10d
cmp dword [r15 + 0x30], r10d
jne 0x1400cca42
cmp eax, 3
je 0x1400cca4b
test eax, eax
je 0x1400ccce2
mov r12, qword [r15 + 0x18]
test r12, r12
jne 0x1400cc97d
mov ecx, 0x1090
call fcn.1400ddeec
xor ecx, ecx
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1400ccdd0
mov qword [rax], rcx
mov r12d, 0x40
movzx r9d, word [r15 + 0x2e]
lea rcx, [rax + 0x80c]
mov r8, qword [r15 + 0x10]
mov edx, r12d
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400ccd7a
mov r12, qword [rsp + 0x38]
mov edx, 0x400
movzx r9d, word [r15 + 0x2c]
mov r8, qword [r15 + 8]
lea rcx, [r12 + 0xc]
call fcn.14004b548
xor r10d, r10d
test eax, eax
js 0x1400ccd28
mov rcx, qword [rsp + 0x50]
mov rdx, r12
add rcx, 0x10
call fcn.1400cc360
test eax, eax
je 0x1400cccf3
mov qword [rsp + 0x38], r10
jmp 0x1400ccce2
mov ecx, 0x1090
call fcn.1400ddeec
xor ecx, ecx
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1400ccf2d
mov qword [rax], rcx
mov edx, 0x40
movzx r9d, word [r15 + 0x2e]
lea rcx, [rax + 0x80c]
mov r8, qword [r15 + 0x10]
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400ccedf
mov rcx, qword [rsp + 0x38]
mov edx, 0x400
movzx r9d, word [r12 + 8]
add rcx, 0x88c
mov r8, qword [r12]
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400cce86
mov rcx, qword [rsp + 0x38]
mov edx, 0x400
movzx r9d, word [r15 + 0x2c]
add rcx, 0xc
mov r8, qword [r15 + 8]
call fcn.14004b548
xor r10d, r10d
test eax, eax
js 0x1400cce3a
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x38]
add rcx, 0x10
call fcn.1400cc360
test eax, eax
je 0x1400cce05
mov r12, qword [r12 + 0x10]
mov qword [rsp + 0x38], r10
test r12, r12
jne 0x1400cc97d
jmp 0x1400ccce2
cmp eax, 3
jne 0x1400ccae5
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x30], r10b
lea rcx, [rbp - 0x70]
call fcn.1400cd8fc
xor r10d, r10d
test eax, eax
jne 0x1400ccaad
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400ccce2
test byte [rax + 0x1c], 4
je 0x1400ccce2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov rcx, qword [0x140154180]
lea r9, [rbp - 0x70]
mov edx, 0x16
mov dword [rsp + 0x20], eax
mov r8, r14
mov rcx, qword [rcx + 0x10]
call fcn.1400cc29c
xor r10d, r10d
jmp 0x1400ccce2
cmp byte [rsp + 0x30], r10b
je 0x1400ccae5
mov rcx, qword [0x140154180]
cmp rcx, rbx
je 0x1400ccce2
test byte [rcx + 0x1c], 4
je 0x1400ccce2
mov rcx, qword [rcx + 0x10]
lea r9, [rbp - 0x70]
mov edx, 0x17
mov r8, r14
call fcn.1400cc238
jmp 0x1400ccaa5
cmp dword [r15 + 0x30], r10d
jne 0x1400ccb0c
lea rax, [rsp + 0x40]
lea r9, [rbp + 0x1a0]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.1400cd82c
jmp 0x1400ccb5b
mov r12d, 0x10
lea r8, [r15 + 0x34]
mov edx, r12d
lea rcx, [rsp + 0x68]
call fcn.14001ec98
xor ecx, ecx
test eax, eax
js 0x1400cd295
mov r12d, 0x100
lea r8, [r15 + 0x23e]
mov edx, r12d
lea rcx, [rbp + 0x1a0]
call fcn.14001ec98
xor ecx, ecx
test eax, eax
js 0x1400cd246
mov eax, dword [r15 + 0x28]
mov dword [rsp + 0x40], eax
mov r12, qword [r15 + 0x18]
test r12, r12
jne 0x1400ccc0e
mov ecx, 0xab8
call fcn.1400ddeec
mov r13, rax
xor eax, eax
test r13, r13
je 0x1400cd084
mov qword [r13], rax
lea rcx, [r13 + 0xc]
movzx r9d, word [r15 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r15 + 0x10]
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400cd034
lea rcx, [r13 + 0x88c]
lea r8, [rsp + 0x68]
lea edx, [r12 + 0x10]
call fcn.14001ec98
xor ecx, ecx
test eax, eax
js 0x1400ccfe5
lea rcx, [r13 + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x1a0]
call fcn.14001ec98
xor r10d, r10d
test eax, eax
js 0x1400ccf93
mov eax, dword [rsp + 0x40]
mov rdx, r13
mov rcx, qword [rsp + 0x50]
mov dword [r13 + 0xaac], eax
call fcn.1400cc360
test eax, eax
je 0x1400ccf5b
mov r13d, r10d
jmp 0x1400ccce2
mov ecx, 0xab8
call fcn.1400ddeec
mov r13, rax
xor eax, eax
test r13, r13
je 0x1400cd218
mov qword [r13], rax
lea rcx, [r13 + 0xc]
movzx r9d, word [r15 + 0x2e]
lea edx, [rax + 0x40]
mov r8, qword [r15 + 0x10]
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400cd1d2
movzx r9d, word [r12 + 8]
lea rcx, [r13 + 0x8c]
mov r8, qword [r12]
mov edx, 0x400
call fcn.14004b548
xor ecx, ecx
test eax, eax
js 0x1400cd17e
lea rcx, [r13 + 0x88c]
mov edx, 0x10
lea r8, [rsp + 0x68]
call fcn.14001ec98
xor ecx, ecx
test eax, eax
js 0x1400cd139
lea rcx, [r13 + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x1a0]
call fcn.14001ec98
xor r10d, r10d
test eax, eax
js 0x1400cd0f1
mov eax, dword [rsp + 0x40]
mov rdx, r13
mov rcx, qword [rsp + 0x50]
mov dword [r13 + 0xaac], eax
call fcn.1400cc360
test eax, eax
je 0x1400cd0bc
mov r12, qword [r12 + 0x10]
mov r13d, r10d
test r12, r12
jne 0x1400ccc0e
mov r15, qword [r15]
test r15, r15
jne 0x1400cc835
jmp 0x1400cd33b
mov edi, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov edx, 0x28
jmp 0x1400ccf8b
mov ecx, eax
mov edi, r10d
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
movzx r9d, word [r15 + 0x2c]
lea rcx, [r12 + 0xc]
mov r8, qword [r15 + 8]
mov edx, 0x400
call fcn.14004b548
mov edx, 0x27
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDevicePath___pMp__pDeviceName__pMp__cchDeviceName_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
mov rcx, qword [rsp + 0x38]
mov rdx, r12
movzx r9d, word [r15 + 0x2e]
add rcx, 0x80c
mov r8, qword [r15 + 0x10]
call fcn.14004b548
mov edx, 0x26
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szVolumeGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400cd323
mov r9d, 0xe
mov edi, ecx
mov esi, r9d
mov rcx, qword [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
lea edx, [r9 + 0x17]
lea rax, str.pNewMedia
jmp 0x1400cd0b4
mov edi, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov edx, 0x2d
jmp 0x1400ccf8b
mov ecx, eax
mov edi, r10d
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
mov rcx, qword [rsp + 0x38]
mov edx, 0x400
movzx r9d, word [r15 + 0x2c]
add rcx, 0xc
mov r8, qword [r15 + 8]
call fcn.14004b548
mov edx, 0x2c
jmp 0x1400ccd6b
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
mov rcx, qword [rsp + 0x38]
mov edx, 0x400
movzx r9d, word [r12 + 8]
add rcx, 0x88c
mov r8, qword [r12]
call fcn.14004b548
mov r9d, eax
mov edx, 0x2b
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewMedia__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
mov rcx, qword [rsp + 0x38]
mov edx, 0x40
movzx r9d, word [r15 + 0x2e]
add rcx, 0x80c
mov r8, qword [r15 + 0x10]
call fcn.14004b548
mov edx, 0x2a
jmp 0x1400ccdc1
mov r9d, 0xe
mov edi, ecx
mov esi, r9d
mov rcx, qword [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
lea edx, [r9 + 0x1b]
jmp 0x1400ccdf9
mov edi, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov edx, 0x1e
mov r8, r14
jmp 0x1400cc75e
mov ecx, eax
mov edi, r10d
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea rcx, [r13 + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x1a0]
call fcn.14001ec98
mov edx, 0x1d
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szLabel___szLabel_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea rcx, [r13 + 0x88c]
mov edx, 0x10
lea r8, [rsp + 0x68]
call fcn.14001ec98
mov edx, 0x1c
mov r9d, eax
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_pNewVolume__szFsName___szFsName_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
movzx r9d, word [r15 + 0x2e]
lea rcx, [r13 + 0xc]
mov r8, qword [r15 + 0x10]
mov edx, 0x40
call fcn.14004b548
mov edx, 0x1b
mov r9d, eax
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szGuid___pMp__pVolumeGuid__pMp__cchVolumeGuid_
jmp 0x1400cd323
mov r9d, 0xe
mov edi, eax
mov esi, r9d
mov rcx, qword [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
lea edx, [r9 + 0xc]
lea rax, str.pNewVolume
mov r8, r14
jmp 0x1400cc6ee
mov edi, r10d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov edx, 0x24
jmp 0x1400ccf8b
mov ecx, eax
mov edi, r10d
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea rcx, [r13 + 0x8ac]
mov edx, 0x100
lea r8, [rbp + 0x1a0]
call fcn.14001ec98
mov edx, 0x23
jmp 0x1400ccfd6
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea rcx, [r13 + 0x88c]
mov edx, 0x10
lea r8, [rsp + 0x68]
call fcn.14001ec98
mov edx, 0x22
jmp 0x1400cd025
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
movzx r9d, word [r12 + 8]
lea rcx, [r13 + 0x8c]
mov r8, qword [r12]
mov edx, 0x400
call fcn.14004b548
mov r9d, eax
mov edx, 0x21
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_pNewVolume__szDosPath___pCurrentLink__pLink__pCurrentLink__cchLink_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
movzx r9d, word [r15 + 0x2e]
lea rcx, [r13 + 0xc]
mov r8, qword [r15 + 0x10]
mov edx, 0x40
call fcn.14004b548
mov edx, 0x20
jmp 0x1400cd075
mov r9d, 0xe
mov edi, eax
mov esi, r9d
mov rcx, qword [0x140154180]
cmp rcx, rbx
je 0x1400cd33b
test byte [rcx + 0x1c], 8
je 0x1400cd33b
lea edx, [r9 + 0x11]
jmp 0x1400cd0ad
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea r8, [r15 + 0x23e]
mov rdx, r12
lea rcx, [rbp + 0x1a0]
call fcn.14001ec98
mov r9d, eax
mov edx, 0x19
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szLabel___pMp__szLabel_
jmp 0x1400cd323
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
lea r8, [r15 + 0x34]
mov rdx, r12
lea rcx, [rsp + 0x68]
call fcn.14001ec98
mov r9d, eax
mov edx, 0x18
lea rax, str.::StringCchCopy_ARRAY_COUNT_PARAM_szFsName___pMp__szFsName_
jmp 0x1400cd323
call fcn.140020338
int3
mov edi, ecx
mov ecx, eax
call fcn.1400de1e4
mov esi, eax
mov rax, qword [0x140154180]
cmp rax, rbx
je 0x1400cd33b
test byte [rax + 0x1c], 8
je 0x1400cd33b
mov r8, qword [r15 + 0x10]
lea rcx, [rbp - 0x70]
mov r9, r12
mov edx, 0x105
call fcn.14004b548
mov r9d, eax
mov edx, 0x15
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_szVolumeGuid___pMp__pVolumeGuid__cchGuid_
mov rcx, qword [0x140154180]
mov r8, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400cc0d8
mov rcx, r13
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
cmp qword [rsp + 0x48], 0
je 0x1400cd36c
lea rcx, [rsp + 0x48]
call fcn.1400cd3b8
lea rcx, str.BuildStateInfo
call fcn.1400084a8
mov ecx, esi
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_SetLastError]
mov eax, edi
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.14001ff30
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret