CoTaskMemAlloc

//----- (1011EF30) --------------------------------------------------------
void *__stdcall Windows::COM::CoTaskMemAlloc(Windows::COM *this, unsigned __int32 a2)
{
  void *result; // [email protected]
  int v3; // [email protected]
  int (__stdcall *v4)(int, Windows::COM *); // [email protected]

  if ( (unsigned int)this <=  )
  {
    v3 = `anonymous namespace'::g_pIMalloc;
    v4 = *(int (__stdcall **)(int, Windows::COM *))(*(_DWORD *)`anonymous namespace'::g_pIMalloc + 12);
    __guard_check_icall_fptr(*(_DWORD *)(*(_DWORD *)`anonymous namespace'::g_pIMalloc + ));
    result = (void *)v4(v3, this);
  }
  else
  {
    result = ;
  }
  return result;
}

從上一篇可知：
g_pIMalloc + ，即加 ，CRetailMalloc_Alloc(IMalloc *, unsigned long)
而函數中的 this 實際為 a2