Function at 0x14001ed90
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6e0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x6d0], rax
mov rsi, rdx
mov qword [rsp + 0xd8], rdx
mov rdi, rcx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x130], rdx
mov dword [rsp + 0x40], 1
xor r13d, r13d
mov dword [rsp + 0x44], r13d
lea rdx, [rsp + 0x5f0]
call fcn.140021eb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001ee05
mov rdx, qword [rax]
mov r8d, dword [rax + 0x10]
lea rcx, [rsp + 0x90]
call fcn.140006c80
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, 7
jbe 0x14001ee62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ee5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ee5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
movdqa xmm0, xmmword [0x1400b1980]
movdqu xmmword [rsp + 0x600], xmm0
mov word [rsp + 0x5f0], r13w
lea rdx, [rsp + 0x5b0]
mov rcx, rdi
call fcn.140021d70
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001ee9a
mov rdx, qword [rax]
mov r8d, dword [rax + 0x10]
lea rcx, [rsp + 0xa0]
call fcn.140006c80
nop
mov rdx, qword [rsp + 0x5c8]
cmp rdx, 7
jbe 0x14001eef7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001eef2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001eef2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
movdqa xmm0, xmmword [0x1400b1980]
movdqu xmmword [rsp + 0x5c0], xmm0
mov word [rsp + 0x5b0], r13w
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x48], r13
mov qword [rsi], r13
mov dword [rsp + 0x40], 1
mov r14, qword [rsp + 0x90]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001efab
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001ef74
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001ef8e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x14001efa3
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
mov rax, rsi
jmp 0x14002137e
lea rax, [rsp + 0x288]
mov qword [rsp + 0x138], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x288], xmm0
mov rax, qword [rdi + 0x118]
test rax, rax
je 0x14001efdf
lock inc dword [rax + 8]
mov r14, qword [rsp + 0x90]
mov rax, qword [rdi + 0x110]
mov qword [rsp + 0x288], rax
mov rax, qword [rdi + 0x118]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x298]
mov qword [rsp + 0x568], rax
movdqu xmmword [rsp + 0x298], xmm0
mov rax, qword [rdi + 0x108]
test rax, rax
je 0x14001f02e
lock inc dword [rax + 8]
mov r14, qword [rsp + 0x90]
mov rax, qword [rdi + 0x100]
mov qword [rsp + 0x298], rax
mov rax, qword [rdi + 0x108]
mov qword [rsp + 0x2a0], rax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x70], rax
xor edx, edx
mov r15, qword [rsp + 0xa0]
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x570]
call fcn.140005d20
nop
lea rcx, [rsp + 0x288]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x298]
mov r8, rax
lea rdx, [rsp + 0xa8]
call fcn.140023910
nop
lea rcx, [rsp + 0x48]
cmp rcx, rax
je 0x14001f0cb
mov rbx, qword [rax]
mov qword [rax], r13
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001f0c6
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14001f0e5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa8], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x48]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400d7320]
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001f13d
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
cmp dword [0x1400d736c], 0x7fffffff
jne 0x14001f15f
mov dword [0x1400d736c], 0x7ffffffe
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov byte [rsp + 0x2e0], 1
cmp qword [0x1400d7378], 0
je 0x14001f1da
mov rdi, qword [0x1400d7370]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001f1a6
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x48]
call fcn.140025600
test al, al
je 0x14001f19a
mov rbx, qword [rbx + 0x10]
jmp 0x14001f1a0
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001f182
cmp byte [rdi + 0x19], 0
jne 0x14001f1be
lea r8, [rdi + 0x20]
lea rdx, [rsp + 0x48]
call fcn.140025600
test al, al
je 0x14001f1c5
mov rdi, qword [0x1400d7370]
cmp rdi, qword [0x1400d7370]
jne 0x140020e64
mov rdi, qword [rsp + 0x98]
lea rdx, [rsp + 0x590]
mov rcx, rdi
call fcn.140022050
nop
lea rax, [0x1400aa410]
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x2f0], 1
lea rdx, [rsp + 0xb8]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0xb8]
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0x300], rcx
lea r8, [rsp + 0x2e8]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x188]
call fcn.14001ccf0
mov dword [rsp + 0x44], 0x80
lea rax, [rsp + 0x590]
cmp qword [rsp + 0x5a8], 7
cmova rax, qword [rsp + 0x590]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x310], rax
lea rdx, [rsp + 0x14c]
mov rcx, qword [rsp + 0x188]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x14c]
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x320], rcx
lea r8, [rsp + 0x308]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x180]
call fcn.14001ccf0
mov r12d, 0x180
mov dword [rsp + 0x44], r12d
lea rax, [0x1400aa40c]
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x330], 1
lea rdx, [rsp + 0x150]
mov rcx, qword [rsp + 0x180]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x150]
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x340], rcx
lea r8, [rsp + 0x328]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x178]
call fcn.14001ccf0
mov dword [rsp + 0x40], 0x80001
lea rsi, [rdi + 8]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14001f355
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x350], rax
lea rdx, [rsp + 0x154]
mov rcx, qword [rsp + 0x178]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x154]
mov qword [rsp + 0x358], rax
mov qword [rsp + 0x360], rcx
lea r8, [rsp + 0x348]
lea rdx, [rsp + 0x358]
lea rcx, [rsp + 0x170]
call fcn.14001ccf0
mov dword [rsp + 0x40], 0x180001
lea rcx, [rdi + 0x28]
cmp qword [rdi + 0x40], 7
jbe 0x14001f3c9
mov rcx, qword [rdi + 0x28]
mov rax, qword [rdi + 0x38]
mov qword [rsp + 0x368], rcx
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x170]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x158]
mov qword [rsp + 0x378], rax
mov qword [rsp + 0x380], rcx
lea r8, [rsp + 0x368]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0xf8]
call fcn.14001ccf0
mov ebx, 0x380001
mov dword [rsp + 0x40], ebx
mov rdi, qword [rsp + 0xf8]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0xb0], rdi
btr ebx, 0x15
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x14001f469
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xf8], r13
btr ebx, 0x14
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001f48b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r13
btr ebx, 0x13
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14001f4ad
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r13
btr r12d, 8
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x14001f4d1
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x180], r13
btr r12d, 7
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001f4f5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r13
lea rax, [0x1400aa410]
mov qword [rsp + 0x388], rax
mov qword [rsp + 0x390], 1
lea rdx, [rsp + 0x148]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x148]
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3a0], rcx
lea r8, [rsp + 0x388]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x1a0]
call fcn.14001ccf0
bts ebx, 0x16
mov dword [rsp + 0x40], ebx
lea rax, [rsp + 0x590]
cmp qword [rsp + 0x5a8], 7
cmova rax, qword [rsp + 0x590]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x3b0], rax
lea rdx, [rsp + 0x15c]
mov rcx, qword [rsp + 0x1a0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x15c]
mov qword [rsp + 0x3b8], rax
mov qword [rsp + 0x3c0], rcx
lea r8, [rsp + 0x3a8]
lea rdx, [rsp + 0x3b8]
lea rcx, [rsp + 0x198]
call fcn.14001ccf0
bts ebx, 0x17
mov dword [rsp + 0x40], ebx
lea rax, [0x1400aa40c]
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x3d0], 1
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x198]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x160]
mov qword [rsp + 0x3d8], rax
mov qword [rsp + 0x3e0], rcx
lea r8, [rsp + 0x3c8]
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x190]
call fcn.14001ccf0
bts ebx, 0x18
mov dword [rsp + 0x40], ebx
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14001f658
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x3e8], rcx
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x164]
mov rcx, qword [rsp + 0x190]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x164]
mov qword [rsp + 0x3f8], rax
mov qword [rsp + 0x400], rcx
lea r8, [rsp + 0x3e8]
lea rdx, [rsp + 0x3f8]
lea rcx, [rsp + 0x100]
call fcn.14001ccf0
or r12d, 0x40
mov dword [rsp + 0x44], r12d
mov rsi, qword [rsp + 0x100]
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x88], rsi
and r12d, 0xffffffbf
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001f701
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x100], r13
btr ebx, 0x18
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001f723
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r13
btr ebx, 0x17
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001f745
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r13
btr ebx, 0x16
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001f767
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x5b0]
mov qword [rsp + 0x70], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14001f785
xorps xmm0, xmm0
movups xmmword [rsp + 0x5b0], xmm0
mov qword [rsp + 0x5c0], r13
mov qword [rsp + 0x5c8], r13
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call fcn.1400067e0
bts ebx, 0x1a
mov dword [rsp + 0x40], ebx
btr ebx, 0x1a
mov dword [rsp + 0x40], ebx
bts ebx, 0x19
mov dword [rsp + 0x40], ebx
btr ebx, 0x19
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0x5b0]
call fcn.1400131d0
movzx ebx, al
mov rdx, qword [rsp + 0x5c8]
cmp rdx, 7
jbe 0x14001f836
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f831
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f831
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
movdqa xmm0, xmmword [0x1400b1980]
movdqu xmmword [rsp + 0x5c0], xmm0
mov word [rsp + 0x5b0], r13w
test bl, bl
jne 0x14001fefa
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [rbx + 0x100]
test rdx, rdx
je 0x14001fefa
add rdx, 0xb8
cmp qword [rdx + 0x18], 7
jbe 0x14001f8a7
mov rdx, qword [rdx]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001f8b0
lea rcx, [rsp + 0x270]
call fcn.140006c80
nop
mov rax, qword [rbx + 0x100]
add rax, 0x28
mov qword [rsp + 0xa8], rax
lea rax, [0x1400aa410]
mov qword [rsp + 0x408], rax
mov qword [rsp + 0x410], 1
lea rdx, [rsp + 0x168]
mov rbx, qword [rsp + 0x270]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x168]
mov qword [rsp + 0x418], rax
mov qword [rsp + 0x420], rcx
lea r8, [rsp + 0x408]
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x1c0]
call fcn.14001ccf0
bts r12d, 0x1d
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0xa8]
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001f962
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x428], rcx
mov qword [rsp + 0x430], rax
lea rdx, [rsp + 0x16c]
mov rcx, qword [rsp + 0x1c0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x16c]
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x440], rcx
lea r8, [rsp + 0x428]
lea rdx, [rsp + 0x438]
lea rcx, [rsp + 0x1b8]
call fcn.14001ccf0
bts r12d, 0x1c
mov dword [rsp + 0x44], r12d
lea rax, [0x1400aa40c]
mov qword [rsp + 0x448], rax
mov qword [rsp + 0x450], 1
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x1b0]
mov qword [rsp + 0x458], rax
mov qword [rsp + 0x460], rcx
lea r8, [rsp + 0x448]
lea rdx, [rsp + 0x458]
lea rcx, [rsp + 0x1f0]
call fcn.14001ccf0
bts r12d, 0x1b
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 7
jbe 0x14001fa4e
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x468], rcx
mov qword [rsp + 0x470], rax
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1f0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x1e0]
mov qword [rsp + 0x478], rax
mov qword [rsp + 0x480], rcx
lea r8, [rsp + 0x468]
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x1a8]
call fcn.14001ccf0
bts r12d, 0x1a
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 0x28]
cmp qword [rax + 0x40], 7
jbe 0x14001facc
mov rcx, qword [rax + 0x28]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x488], rcx
mov qword [rsp + 0x490], rax
lea rdx, [rsp + 0x218]
mov rcx, qword [rsp + 0x1a8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x218]
mov qword [rsp + 0x498], rax
mov qword [rsp + 0x4a0], rcx
lea r8, [rsp + 0x488]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x108]
call fcn.14001ccf0
bts r12d, 0x15
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x108], r13
test rdi, rdi
je 0x14001fb68
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
mov rax, qword [rsp + 0xa8]
mov rdi, rax
mov qword [rsp + 0xb0], rax
btr r12d, 0x15
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14001fb97
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x108], r13
btr r12d, 0x1a
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001fbbb
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r13
btr r12d, 0x1b
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1f0]
test rcx, rcx
je 0x14001fbdf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1f0], r13
btr r12d, 0x1c
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001fc03
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r13
btr r12d, 0x1d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001fc27
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r13
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 0x100]
add rax, 0x28
mov qword [rsp + 0xa8], rax
lea rax, [0x1400aa410]
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x4b0], 1
lea rdx, [rsp + 0x144]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x144]
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x4c0], rcx
lea r8, [rsp + 0x4a8]
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x1d8]
call fcn.14001ccf0
bts r12d, 0x19
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0xa8]
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001fcc0
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x4c8], rcx
mov qword [rsp + 0x4d0], rax
lea rdx, [rsp + 0x228]
mov rcx, qword [rsp + 0x1d8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x228]
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rcx
lea r8, [rsp + 0x4c8]
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1d0]
call fcn.14001ccf0
bts r12d, 0x18
mov dword [rsp + 0x44], r12d
lea rax, [0x1400aa40c]
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0x4f0], 1
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0x1d0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x140]
mov qword [rsp + 0x4f8], rax
mov qword [rsp + 0x500], rcx
lea r8, [rsp + 0x4e8]
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x1c8]
call fcn.14001ccf0
bts r12d, 0x17
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 7
jbe 0x14001fdac
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x508], rcx
mov qword [rsp + 0x510], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x1c8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x58]
mov qword [rsp + 0x518], rax
mov qword [rsp + 0x520], rcx
lea r8, [rsp + 0x508]
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x110]
call fcn.14001ccf0
bts r12d, 0x16
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x110], r13
test rsi, rsi
je 0x14001fe42
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov rax, qword [rsp + 0xa8]
mov rsi, rax
mov qword [rsp + 0x88], rax
btr r12d, 0x16
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x14001fe71
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x110], r13
btr r12d, 0x17
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001fe95
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r13
btr r12d, 0x18
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001feb9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r13
btr r12d, 0x19
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001fee5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r13
test rbx, rbx
je 0x14001fefa
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x270], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r12, rax
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rbx
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r12
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rcx, [rsp + 0xc0]
call fcn.14001d220
nop
lea r9, [rsp + 0x5b0]
lea r8, [rsp + 0x5b8]
mov edx, 0x2e
lea rcx, str.__xml_version_1.0__encoding_UTF_8____a_a__a_
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.140024ee0
mov r12d, dword [rsp + 0x40]
bts r12d, 0x1d
mov dword [rsp + 0x40], r12d
btr r12d, 0x1d
mov dword [rsp + 0x40], r12d
bts r12d, 0x1c
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0xc8]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x5b0]
call qword [rax + 0x30]
test eax, eax
js 0x1400213ab
btr r12d, 0x1c
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0xc8], 0
je 0x14001ffd8
lea rcx, [rsp + 0xc8]
call fcn.140014ef0
lea rcx, [rsp + 0x68]
call fcn.14001d220
nop
lea rcx, [rsp + 0x60]
call fcn.14001d220
nop
mov qword [rsp + 0x278], r13
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x278]
call qword [rax + 0x40]
test eax, eax
js 0x1400213b6
mov rbx, qword [rsp + 0x278]
mov qword [rsp + 0x280], rbx
mov r12d, dword [rsp + 0xb8]
or r12d, 4
mov dword [rsp + 0x44], r12d
lea r9, [rsp + 0x5b0]
lea r8, [rsp + 0x5b8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea r8, [rsp + 0x5b0]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x280]
call fcn.140021430
nop
and r12d, 0xfffffffb
mov dword [rsp + 0x44], r12d
test rbx, rbx
je 0x14002008f
lea rcx, [rsp + 0x280]
call fcn.140014ef0
mov qword [rsp + 0x78], r13
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x528], rax
mov qword [rsp + 0x530], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x530], rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x5f0]
mov qword [rsp + 0x70], rcx
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140020110
xorps xmm0, xmm0
movups xmmword [rsp + 0x5f0], xmm0
mov qword [rsp + 0x600], r13
mov qword [rsp + 0x608], r13
mov rdx, rax
lea rcx, [rsp + 0x5f0]
call fcn.1400067e0
or r12d, 0x20
mov dword [rsp + 0x44], r12d
and r12d, 0xffffffdf
mov dword [rsp + 0x44], r12d
or r12d, 0x10
mov dword [rsp + 0x44], r12d
and r12d, 0xffffffef
mov dword [rsp + 0x44], r12d
lea rcx, [rsp + 0x5f0]
call fcn.1400131d0
movzx ebx, al
mov rdx, qword [rsp + 0x608]
cmp rdx, 7
jbe 0x1400201c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400201c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400201c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
movdqa xmm0, xmmword [0x1400b1980]
movdqu xmmword [rsp + 0x600], xmm0
mov word [rsp + 0x5f0], r13w
test bl, bl
je 0x140021154
mov qword [rsp + 0x5f0], rdi
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x220], rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x118]
call fcn.140015400
bts r12d, 9
mov dword [rsp + 0x44], r12d
lea rax, [rsp + 0x118]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xe0]
call fcn.140019660
bts r12d, 0x14
mov dword [rsp + 0x44], r12d
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x78], 0
je 0x140020273
lea rcx, [rsp + 0x78]
call fcn.140014ef0
mov qword [rsp + 0x70], r13
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0x78], rax
btr r12d, 0x14
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0xe0], 0
je 0x1400202bc
lea rcx, [rsp + 0xe0]
call fcn.140014ef0
btr r12d, 9
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x118], 0
je 0x1400202df
lea rcx, [rsp + 0x118]
call fcn.140014ef0
nop
lea rax, [rsp + 0x78]
mov qword [rsp + 0x220], rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1e8]
call fcn.14001d400
bts r12d, 0xd
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x120]
call fcn.140021490
bts r12d, 0x11
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x68], 0
je 0x14002033c
lea rcx, [rsp + 0x68]
call fcn.140014ef0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x68], rax
btr r12d, 0x11
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x120], 0
je 0x140020373
lea rcx, [rsp + 0x120]
call fcn.140014ef0
btr r12d, 0xd
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x1e8], 0
je 0x140020396
lea rcx, [rsp + 0x1e8]
call fcn.140014ef0
nop
mov qword [rsp + 0x238], r13
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x238]
call qword [rax + 0x40]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213c1
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0x2d0], rbx
bts r12d, 0x12
mov dword [rsp + 0x44], r12d
lea r9, [rsp + 0x5f0]
lea r8, [rsp + 0x5f8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov qword [rsp + 0x240], r13
mov rax, qword [rbx]
lea r8, [rsp + 0x240]
mov rdx, qword [rsp + 0x5f0]
mov rcx, rbx
call qword [rax + 0x50]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213ce
mov rdi, qword [rsp + 0x240]
mov qword [rsp + 0x2b0], rdi
bts r12d, 0x13
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x80], 0
je 0x140020458
lea rcx, [rsp + 0x80]
call fcn.140014ef0
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0x80], rdi
btr r12d, 0x13
mov dword [rsp + 0x44], r12d
btr r12d, 0x12
mov dword [rsp + 0x44], r12d
test rbx, rbx
je 0x14002048f
lea rcx, [rsp + 0x2d0]
call fcn.140014ef0
nop
mov rcx, qword [rsp + 0xc8]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400204a8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp qword [rsp + 0x78], 0
je 0x1400204ba
lea rcx, [rsp + 0x78]
call fcn.140014ef0
mov rbx, qword [rsp + 0x98]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x670]
call fcn.140005d60
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x690]
call fcn.140005d60
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x6b0]
call fcn.140005d60
nop
lea rbx, [rsp + 0x670]
nop dword [rax]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x630]
call fcn.140005d60
nop
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea r8, [rsp + 0x630]
mov rdx, rax
lea rcx, [rsp + 0x610]
call fcn.140011600
nop
lea rcx, [rsp + 0x610]
cmp qword [rsp + 0x628], 7
cmova rcx, qword [rsp + 0x610]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x140020657
mov rdx, qword [rsp + 0x628]
cmp rdx, 7
jbe 0x1400205b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400205b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400205b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x620], r13
mov qword [rsp + 0x628], 7
mov word [rsp + 0x610], r13w
mov rdx, qword [rsp + 0x648]
cmp rdx, 7
jbe 0x140020620
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002061b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002061b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x640], r13
mov qword [rsp + 0x648], 7
mov word [rsp + 0x630], r13w
add rbx, 0x20
lea rax, [rsp + 0x6d0]
cmp rbx, rax
jne 0x140020510
jmp 0x1400207bf
lea rdx, [rsp + 0x610]
cmp qword [rsp + 0x628], 7
cmova rdx, qword [rsp + 0x610]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140020680
mov r8, rax
lea rcx, [rsp + 0x248]
call fcn.140006c80
nop
mov rdi, qword [rsp + 0x248]
mov qword [rsp + 0x248], r13
test rsi, rsi
je 0x1400206c0
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x88], rdi
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x628]
cmp rdx, 7
jbe 0x14002073a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020735
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020735
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x620], r13
mov qword [rsp + 0x628], 7
mov word [rsp + 0x610], r13w
mov rdx, qword [rsp + 0x648]
cmp rdx, 7
jbe 0x1400207a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002079d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002079d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x640], r13
mov qword [rsp + 0x648], 7
mov word [rsp + 0x630], r13w
lea r9, [sym.DiagsCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x670]
call fcn.140069ec8
cmp qword [rsp + 0x80], 0
je 0x140020c54
mov qword [rsp + 0x250], r13
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x250]
call qword [rax + 0x40]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213db
mov rbx, qword [rsp + 0x250]
mov qword [rsp + 0x2a8], rbx
mov r12d, dword [rsp + 0x40]
bts r12d, 7
mov dword [rsp + 0x40], r12d
lea rdx, [rsp + 0x50]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x50]
mov qword [rsp + 0x538], rax
mov qword [rsp + 0x540], rcx
lea rax, str.xmlns_
mov qword [rsp + 0x548], rax
mov qword [rsp + 0x550], 7
lea r8, [rsp + 0x538]
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0x230]
call fcn.14001ccf0
bts r12d, 8
mov dword [rsp + 0x40], r12d
lea r8, [0x14009c308]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x128]
call fcn.14001ce20
nop
btr r12d, 8
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x1400208d8
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x230], r13
btr r12d, 7
mov dword [rsp + 0x40], r12d
test rbx, rbx
je 0x1400208f7
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x2a8], r13
mov qword [rsp + 0x258], r13
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x1f8]
call fcn.140024fe0
bts r12d, 0xc
mov dword [rsp + 0x40], r12d
btr r12d, 0xc
mov dword [rsp + 0x40], r12d
bts r12d, 0xb
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x258]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x1400213e8
btr r12d, 0xb
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x1f8], 0
je 0x140020973
lea rcx, [rsp + 0x1f8]
call fcn.140014ef0
mov rbx, qword [rsp + 0x258]
mov qword [rsp + 0x138], rbx
bts r12d, 0xa
mov dword [rsp + 0x40], r12d
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x5d0]
call fcn.140005d20
nop
btr r12d, 0xa
mov dword [rsp + 0x40], r12d
test rbx, rbx
je 0x1400209c7
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x138], r13
mov rcx, qword [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov edi, eax
xor edx, edx
mov rcx, qword [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x650]
call fcn.140005d20
nop
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140020a04
mov rax, qword [rax]
lea rcx, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rcx, qword [rsp + 0x5d0]
mov qword [rsp + 0x20], rdx
mov r9, rax
mov rdx, qword [rsp + 0x5e0]
call fcn.14000da80
mov rdx, rax
cmp qword [rsp + 0x5e0], rax
jb 0x1400213f5
lfence
mov rbx, qword [rsp + 0x5e0]
mov rax, rbx
sub rax, rdx
cmp rax, rdi
cmovb rdi, rax
lea rax, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rax, qword [rsp + 0x5d0]
lea rcx, [rax + rdx*2]
sub rbx, rdi
mov r8, rbx
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdi*2]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x5e0], rbx
mov rdx, qword [rsp + 0x668]
cmp rdx, 7
jbe 0x140020ae7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020ae2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020ae2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
movdqa xmm0, xmmword [0x1400b1980]
movdqu xmmword [rsp + 0x660], xmm0
mov word [rsp + 0x650], r13w
lea rcx, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rcx, qword [rsp + 0x5d0]
mov edx, dword [rsp + 0x5e0]
test edx, edx
jne 0x140020b30
mov qword [rsp + 0x650], r13
jmp 0x140020b46
lea r9, [rsp + 0x650]
lea r8, [rsp + 0x658]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x200]
call fcn.140024ee0
mov r12d, dword [rsp + 0x40]
bts r12d, 0x10
mov dword [rsp + 0x40], r12d
btr r12d, 0x10
mov dword [rsp + 0x40], r12d
bts r12d, 0xf
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x200]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x650]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x1400213fb
btr r12d, 0xf
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x200], 0
je 0x140020bc0
lea rcx, [rsp + 0x200]
call fcn.140014ef0
nop
mov rdx, qword [rsp + 0x5e8]
cmp rdx, 7
jbe 0x140020c0b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020c06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x5e0], r13
mov qword [rsp + 0x5e8], 7
mov word [rsp + 0x5d0], r13w
mov rcx, qword [rsp + 0x128]
test rcx, rcx
je 0x140020c42
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x128], r13
mov r14, qword [rsp + 0x90]
mov r15, qword [rsp + 0xa0]
jmp 0x140020c80
cmp qword [rsp + 0x60], 0
je 0x140020c66
lea rcx, [rsp + 0x60]
call fcn.140014ef0
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x140020c7b
mov rax, qword [rcx]
call qword [rax + 8]
mov r12d, dword [rsp + 0x40]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x98]
call fcn.1400216a0
nop
mov qword [rsp + 0x260], r13
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x208]
call fcn.140024fe0
or r12d, 8
mov dword [rsp + 0x40], r12d
and r12d, 0xfffffff7
mov dword [rsp + 0x40], r12d
or r12d, 4
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x208]
mov rax, qword [rcx]
lea rdx, [rsp + 0x260]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x140021408
and r12d, 0xfffffffb
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x208], 0
je 0x140020d1b
lea rcx, [rsp + 0x208]
call fcn.140014ef0
mov rbx, qword [rsp + 0x260]
mov qword [rsp + 0x210], rbx
or r12d, 2
mov dword [rsp + 0x40], r12d
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x558]
call fcn.140024d50
mov rdi, qword [rax]
add rdi, 0x28
mov rax, rbx
lea rcx, [rsp + 0x210]
cmp rdi, rcx
je 0x140020d7e
mov rsi, rbx
mov rbx, r13
mov qword [rsp + 0x210], rbx
mov rcx, qword [rdi]
test rcx, rcx
je 0x140020d78
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rdi], rsi
mov rax, r13
and r12d, 0xfffffffd
mov dword [rsp + 0x40], r12d
test rax, rax
je 0x140020d9c
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x210], r13
cmp qword [rsp + 0x80], 0
je 0x140020db5
lea rcx, [rsp + 0x80]
call fcn.140014ef0
nop
cmp qword [rsp + 0x60], 0
je 0x140020dc8
lea rcx, [rsp + 0x60]
call fcn.140014ef0
nop
cmp qword [rsp + 0x68], 0
je 0x140020ddb
lea rcx, [rsp + 0x68]
call fcn.140014ef0
nop
cmp qword [rsp + 0xc0], 0
je 0x140020df4
lea rcx, [rsp + 0xc0]
call fcn.140014ef0
nop
mov rdx, qword [rsp + 0x5a8]
cmp rdx, 7
jbe 0x140020e3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020e3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020e3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x5a0], r13
mov qword [rsp + 0x5a8], 7
mov word [rsp + 0x590], r13w
mov rsi, qword [rsp + 0xd8]
cmp qword [0x1400d7378], 0
je 0x140020f4d
mov rdi, qword [0x1400d7370]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x140020eb4
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x48]
call fcn.140025600
test al, al
je 0x140020ea8
mov rbx, qword [rbx + 0x10]
jmp 0x140020eae
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140020e90
cmp byte [rdi + 0x19], 0
jne 0x140020ecc
lea r8, [rdi + 0x20]
lea rdx, [rsp + 0x48]
call fcn.140025600
test al, al
je 0x140020ed3
mov rdi, qword [0x1400d7370]
cmp rdi, qword [0x1400d7370]
je 0x140020f4d
mov rax, qword [rdi + 0x28]
test rax, rax
setne byte [rsp + 0xd0]
test rax, rax
je 0x140020f4d
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x268], r13
lea rax, [rsp + 0x98]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rdi + 0x28]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x58], eax
test eax, eax
js 0x140021415
mov rbx, qword [rsp + 0x268]
mov rcx, qword [rsi]
test rcx, rcx
je 0x140020f4a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsi], r13
mov qword [rsi], rbx
mov rbx, qword [rsp + 0xd8]
lea rcx, [0x1400d7320]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140020f7b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x140020f95
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x140020faf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
test r15, r15
je 0x140020fc4
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x140020fd9
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
jmp 0x14002137b
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x558]
call fcn.140024d50
mov r12, qword [rax]
add r12, 0x28
xor r8d, r8d
lea rdx, [0x14009ae68]
lea rcx, [rsp + 0xe8]
call fcn.140006c80
nop
lea rax, [rsp + 0xe8]
cmp r12, rax
je 0x1400211ef
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x138], rax
mov rbx, r13
mov qword [rsp + 0xe8], rbx
mov rcx, qword [r12]
test rcx, rcx
je 0x1400211e9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0x138]
mov qword [r12], rax
jmp 0x1400211f7
mov rbx, qword [rsp + 0xe8]
test rbx, rbx
je 0x14002120c
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xe8], r13
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0xc8]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002122a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp qword [rsp + 0x78], 0
je 0x14002123d
lea rcx, [rsp + 0x78]
call fcn.140014ef0
nop
cmp qword [rsp + 0x80], 0
je 0x140021256
lea rcx, [rsp + 0x80]
call fcn.140014ef0
nop
cmp qword [rsp + 0x60], 0
je 0x140021269
lea rcx, [rsp + 0x60]
call fcn.140014ef0
nop
cmp qword [rsp + 0x68], 0
je 0x14002127c
lea rcx, [rsp + 0x68]
call fcn.140014ef0
nop
cmp qword [rsp + 0xc0], 0
je 0x140021295
lea rcx, [rsp + 0xc0]
call fcn.140014ef0
nop
mov rdx, qword [rsp + 0x5a8]
cmp rdx, 7
jbe 0x1400212e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400212db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400212db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688bc
mov qword [rsp + 0x5a0], r13
mov qword [rsp + 0x5a8], 7
mov word [rsp + 0x590], r13w
lea rcx, [0x1400d7320]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002131f
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
test rsi, rsi
je 0x140021334
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test rdi, rdi
je 0x140021349
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
test r15, r15
je 0x14002135e
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x140021373
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
mov rbx, qword [rsp + 0xd8]
mov rax, rbx
mov rcx, qword [rsp + 0x6d0]
xor rcx, rsp
call fcn.140068870
lea r11, [rsp + 0x6e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.140006fd0
nop
lfence
mov ecx, eax
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006fd0
nop
call fcn.14000a010
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006fd0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006fd0
int3