Function at 0x1402ad700
Capabilities:
Link many functions at runtime

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x268
mov rbx, qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0xe0], 0
mov r15, rcx
lea rcx, str.api_ms_win_core_winrt_l1_1_0.dll
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x100], 0
call rbx
mov r12, rax
test rax, rax
je 0x1402ae0e8
lea rcx, str.combase.dll
call rbx
mov r13, rax
test rax, rax
je 0x1402ae160
lea rcx, str.xmllite.dll
call rbx
mov r14, rax
test rax, rax
je 0x1402ae1d0
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CreateXmlReader
mov rcx, rax
call rbx
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1402adfc0
lea rdx, str.RoActivateInstance
mov rcx, r12
call rbx
mov rsi, rax
test rax, rax
je 0x1402ae230
lea rdx, str.WindowsCreateStringReference
mov rcx, r13
call rbx
mov rdi, rax
test rax, rax
je 0x1402ae2b0
lea rdx, str.WindowsDeleteString
mov rcx, r13
call rbx
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1402ae308
lea rdx, str.WindowsGetStringRawBuffer
mov rcx, r13
call rbx
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1402ae3f0
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
cmp eax, 1
ja 0x1402ae0a8
lea rbx, str.Windows.Management.Deployment.PackageManager
mov rcx, rbx
call sub.msvcrt.dll_wcslen
mov rcx, rbx
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0x170]
mov edx, eax
call rdi
mov ebx, eax
test eax, eax
js 0x1402ae808
mov rcx, qword [rsp + 0xe0]
lea rdx, [rsp + 0xe8]
call rsi
mov ebx, eax
test eax, eax
js 0x1402ae8c8
mov rcx, qword [rsp + 0xe8]
lea r8, [rsp + 0xf0]
lea rdx, [0x140484310]
mov rax, qword [rcx]
call qword [rax]
mov ebx, eax
test eax, eax
js 0x1402aeb40
mov rcx, qword [rsp + 0xf0]
lea r8, [rsp + 0xf8]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x60]
mov ebx, eax
test eax, eax
js 0x1402aece0
mov rcx, qword [rsp + 0xf8]
lea rdx, [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
js 0x1402aef80
mov rcx, qword [rsp + 0x100]
lea rax, [rsp + 0xdb]
mov ebp, 1
mov qword [rsp + 0x60], rax
mov rdx, rax
mov rax, qword [rcx]
call qword [rax + 0x38]
xor r11d, r11d
mov ebx, eax
test eax, eax
js 0x1402ae398
mov qword [rsp + 0x88], r13
mov rsi, r11
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x80], r12
mov r12, qword [rsp + 0x50]
mov qword [rsp + 0x2b0], r15
mov r15, qword [rsp + 0x58]
nop word cs:[rax + rax]
cmp byte [rsp + 0xdb], 0
mov rcx, qword [rsp + 0x100]
je 0x1402aeda3
mov qword [rsp + 0x108], 0
lea rdx, [rsp + 0x108]
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x128], 0
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
js 0x1402ae448
mov rcx, qword [rsp + 0x108]
lea r8, [rsp + 0x110]
lea rdx, [0x140484300]
mov rax, qword [rcx]
call qword [rax]
mov ebx, eax
test eax, eax
js 0x1402ae580
mov rcx, qword [rsp + 0x110]
lea rdx, [rsp + 0x118]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
js 0x1402ae668
mov rcx, qword [rsp + 0x118]
lea rdx, [rsp + 0x140]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov ebx, eax
test eax, eax
js 0x1402ae6e0
mov rcx, qword [rsp + 0x118]
lea rdx, [rsp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
js 0x1402ae740
mov rcx, qword [rsp + 0x140]
xor edx, edx
call r15
mov rcx, qword [rsp + 0x138]
xor edx, edx
mov qword [rsp + 0x50], rax
call r15
mov rcx, qword [rsp + 0x110]
lea rdx, [rsp + 0x120]
mov r14, rax
mov rax, qword [rcx]
call qword [rax + 0x38]
mov ebx, eax
test eax, eax
js 0x1402ae7a0
mov rcx, qword [rsp + 0x120]
lea r8, [rsp + 0x128]
lea rdx, [0x1404842f0]
mov rax, qword [rcx]
call qword [rax]
mov ebx, eax
test eax, eax
js 0x1402ae860
mov rcx, qword [rsp + 0x118]
lea rdx, [rsp + 0x148]
mov rax, qword [rcx]
call qword [rax + 0x68]
mov ebx, eax
test eax, eax
js 0x1402aeb90
mov rcx, qword [rsp + 0x128]
lea rdx, [rsp + 0x130]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov ebx, eax
test eax, eax
js 0x1402aec78
xor edx, edx
mov rcx, qword [rsp + 0x130]
lea rdi, str.AppxManifest.xml
call r15
mov rcx, rax
mov rbx, rax
call sub.msvcrt.dll_wcslen
mov rcx, rdi
mov r13, rax
call sub.msvcrt.dll_wcslen
mov edx, 2
lea rcx, [r13 + rax + 1]
call fcn.1400d52e0
mov rcx, rbx
mov r13, rax
call sub.msvcrt.dll_wcslen
mov rdx, rbx
mov rcx, r13
lea r8, [rax + rax]
call sub.msvcrt.dll_memcpy
mov rcx, rdi
call sub.msvcrt.dll_wcslen
mov rcx, rbx
mov qword [rsp + 0x58], rax
call sub.msvcrt.dll_wcslen
mov rdx, qword [rsp + 0x58]
lea rcx, [r13 + rax*2]
lea r8, [rdx + rdx + 2]
mov rdx, rdi
lea rdi, [rsp + 0x1e0]
call sub.msvcrt.dll_memcpy
xor eax, eax
mov ecx, 0xf
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov qword [rsp + 0x1dc], 0
mov qword [rsp + 0x250], 0
rep stosq qword [rdi], rax
mov rax, qword [0x14048f9c0]
mov rcx, r13
mov qword [rsp + 0x1a8], 0
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x1b8], rsi
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x48]
mov dword [rsp + 0x1d8], 1
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x190], r15
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1402aec28
mov edx, 0x20
mov ecx, 1
call sub.msvcrt.dll_calloc
mov rdi, rax
test rax, rax
je 0x1402afc9c
lea rax, [0x140361ca0]
mov rdx, qword [str.pT7_]
mov rcx, rdi
mov qword [rdi], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x58], rax
mov r8, rax
call qword [0x140361ca0]
test eax, eax
js 0x1402af295
movabs rax, 0x2000000001
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rax
mov rdi, qword [rsp + 0x168]
test rdi, rdi
je 0x1402af7eb
xor r8d, r8d
lea rdx, [rsp + 0x150]
lea rcx, [0x1404842e0]
call qword [rsp + 0x198]
test eax, eax
js 0x1402af147
mov rcx, qword [rsp + 0x150]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
js 0x1402aed60
mov ecx, 0x20
lea r14, [rsp + 0x158]
call fcn.1400e69e0
mov rbx, qword [fcn.1400d07c0]
mov ecx, 0x20
mov qword [rax], 0
mov qword [rax + 0x18], rbx
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov dword [rax + 0x10], 1
mov qword [rsp + 0x230], rax
call fcn.1400e69e0
mov rbx, qword [fcn.1400d07c0]
mov ecx, 0x20
mov qword [rax], 0
mov qword [rax + 0x18], rbx
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov dword [rax + 0x10], 1
mov qword [rsp + 0x238], rax
call fcn.1400e69e0
mov rbx, qword [fcn.1400d07c0]
mov ecx, 0x20
mov qword [rax], 0
mov qword [rax + 0x18], rbx
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov dword [rax + 0x10], 1
mov qword [rsp + 0x240], rax
call fcn.1400e69e0
mov rbx, qword [0x14048d0a0]
lea r8, [rsp + 0xdc]
lea r10, [rsp + 0x160]
mov qword [rax], 0
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov qword [rax + 0x18], rbx
mov dword [rax + 0x10], 1
mov qword [rsp + 0x248], rax
mov eax, dword [rsp + 0x1dc]
test eax, eax
jne 0x1402adee9
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], r13
mov r13, r14
mov r14, r12
mov qword [rsp + 0x78], rdi
mov rdi, r8
mov dword [rsp + 0xa0], ebp
mov rbp, r10
mov rcx, qword [rsp + 0x150]
mov rax, qword [rcx]
call qword [rax + 0xc8]
mov ebx, eax
test eax, eax
jne 0x1402aded0
mov rsi, qword [rsp + 0x150]
mov rdx, rdi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test eax, eax
js 0x1402ae608
mov rax, qword [rsp + 0x58]
mov r9, rbp
mov r8, r13
mov rdx, rsi
lea r12, [rsp + 0x190]
mov qword [rsp + 0x20], rax
mov rcx, r12
call fcn.140039a20
test eax, eax
je 0x1402aded0
mov eax, dword [rsp + 0xdc]
cmp eax, 3
je 0x1402ae920
cmp eax, 0xf
je 0x1402aeae8
cmp eax, 1
je 0x1402ae968
mov edx, dword [rsp + 0x1dc]
test edx, edx
je 0x1402ade3d
nop dword [rax + rax]
mov r13, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov r12, r14
mov rdi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x250]
mov qword [rsp + 0x250], 0
test rcx, rcx
je 0x1402adf07
call fcn.14034efb0
mov rcx, qword [rsp + 0x230]
mov qword [rsp + 0x230], 0
test rcx, rcx
je 0x1402adf25
call fcn.1400be0b0
mov rcx, qword [rsp + 0x240]
mov qword [rsp + 0x240], 0
test rcx, rcx
je 0x1402adf43
call fcn.1400be0b0
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x248], 0
test rcx, rcx
je 0x1402adf61
call fcn.1400be0b0
mov rcx, qword [rsp + 0x238]
mov qword [rsp + 0x238], 0
test rcx, rcx
je 0x1402adf7f
call fcn.1400be0b0
mov rcx, qword [rsp + 0x150]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, eax
test eax, eax
js 0x1402af0a4
mov rcx, r13
call fcn.14034efb0
jmp 0x1402ae4a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
je 0x1402ae350
cmp qword [r15], 0
je 0x1402ae6c8
lea r9, str.CreateXmlReader_entry_point_is_not_found_in_xmllite.dll
lea r8, [0x140481888]
mov edx, 0x10
lea rcx, [0x14048139a]
call fcn.1400d2190
nop dword [rax]
mov rcx, qword [rsp + 0x100]
xor ebp, ebp
test rcx, rcx
je 0x1402ae025
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x1402ae038
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x1402ae04b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1402ae05e
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
test r14, r14
je 0x1402ae072
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r13, r13
je 0x1402ae080
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r12, r12
je 0x1402ae08e
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, ebp
add rsp, 0x268
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402ae0c5
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.CoInitializeEx_COINIT_APARTMENTTHREADED__failed_with_code_0x_lx
mov r8d, 0x20
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae112
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov r14, qword [r15]
lea r8, str.Failed_to_load_api_ms_win_core_winrt_l1_1_0.dll
test r14, r14
je 0x1402ae297
lea rcx, [0x14048139a]
xor r13d, r13d
xor r14d, r14d
xor ebp, ebp
lea r9, str.Failed_to_load_api_ms_win_core_winrt_l1_1_0.dll
lea r8, [0x140481888]
mov edx, 0x10
call fcn.1400d2190
mov rcx, qword [rsp + 0x100]
jmp 0x1402ae01a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae18a
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov r14, qword [r15]
test r14, r14
je 0x1402ae290
lea rcx, [0x14048139a]
mov edx, 0x10
xor r14d, r14d
xor ebp, ebp
lea r9, str.Failed_to_load_combase.dll
lea r8, [0x140481888]
call fcn.1400d2190
mov rcx, qword [rsp + 0x100]
jmp 0x1402ae01a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae1fa
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
cmp qword [r15], 0
lea r9, str.Failed_to_load_xmllite.dll
je 0x1402ae5e0
lea r8, [0x140481888]
mov edx, 0x10
lea rcx, [0x14048139a]
call fcn.1400d2190
jmp 0x1402ae010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae25a
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
cmp qword [r15], 0
je 0x1402ae380
lea r9, str.RoActivateInstance_entry_point_is_not_found_in_api_ms_win_core_winrt_l1_1_0.dll
lea r8, [0x140481888]
mov edx, 0x10
lea rcx, [0x14048139a]
call fcn.1400d2190
jmp 0x1402ae010
lea r8, str.Failed_to_load_combase.dll
mov edx, ebx
mov ecx, eax
xor r13d, r13d
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae2da
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
cmp qword [r15], 0
lea r9, str.WindowsCreateStringReference_entry_point_is_not_found_in_combase.dll
jne 0x1402ae20b
lea r8, str.WindowsCreateStringReference_entry_point_is_not_found_in_combase.dll
mov edx, ebx
mov ecx, eax
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
je 0x1402ae368
cmp qword [r15], 0
lea r9, str.WindowsDeleteString_entry_point_is_not_found_in_combase.dll
jne 0x1402ae20b
lea r8, str.WindowsDeleteString_entry_point_is_not_found_in_combase.dll
mov edx, ebx
mov ecx, eax
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
jmp 0x1402adfe0
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
jmp 0x1402ae324
lea r8, str.RoActivateInstance_entry_point_is_not_found_in_api_ms_win_core_winrt_l1_1_0.dll
mov edx, ebx
mov ecx, eax
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402ae3ae
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402ae3cb
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.IIterator_get_HasCurrent___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140026320
mov rsi, qword [0x14048eee0]
mov ebx, eax
mov eax, dword [rsi]
test eax, eax
jne 0x1402ae41a
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
cmp qword [r15], 0
lea r9, str.WindowsGetStringRawBuffer_entry_point_is_not_found_in_combase.dll
jne 0x1402ae20b
lea r8, str.WindowsGetStringRawBuffer_entry_point_is_not_found_in_combase.dll
mov edx, ebx
mov ecx, eax
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae45e
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae47b
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsp + 0x2b0]
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
lea r9, str.IIterator_get_Current___for_package__zu_failed_with_code_0x_lx
call fcn.1400cab90
nop dword [rax]
mov rcx, qword [rsp + 0x130]
test rcx, rcx
je 0x1402ae4b0
call r12
mov rcx, qword [rsp + 0x128]
test rcx, rcx
je 0x1402ae4c3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x120]
test rcx, rcx
je 0x1402ae4d6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x1402ae4e9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x1402ae4fc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x1402ae50c
call r12
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x1402ae51c
call r12
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x1402ae52c
call r12
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x1402ae53f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0x1dc]
test eax, eax
jne 0x1402ae556
add rsi, 1
test ebx, ebx
jns 0x1402ad950
mov r12, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x100]
jmp 0x1402ae01a
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae596
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae5b3
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsp + 0x2b0]
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
lea r9, str.IUnknown_QueryInterface_IID_IPackage__for_package__zu_failed_with_code_0x_lx
call fcn.1400cab90
jmp 0x1402ae4a0
mov ecx, eax
lea r8, str.Failed_to_load_xmllite.dll
mov edx, ebx
xor r14d, r14d
call fcn.1400cac00
xor ebp, ebp
mov rcx, qword [rsp + 0x100]
mov qword [r15], rax
jmp 0x1402ae01a
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1c0]
mov edx, 0x10
mov r12, r14
mov r9, qword [rsp + 0x1b0]
lea r8, str.IXmlReader_Read___for_application_manifest___S_for_package__zu____S__failed_with_HRESULT_0x_lx
mov r13, qword [rsp + 0x68]
lea rcx, [0x14048142d]
mov rsi, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
call fcn.1400d2190
jmp 0x1402adee9
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae67e
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae69b
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsp + 0x2b0]
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
lea r9, str.IPackage_get_Id___for_package__zu_failed_with_code_0x_lx
call fcn.1400cab90
jmp 0x1402ae4a0
lea r8, str.CreateXmlReader_entry_point_is_not_found_in_xmllite.dll
mov edx, ebx
mov ecx, eax
call fcn.1400cac00
mov qword [r15], rax
jmp 0x1402ae010
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae6f6
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae713
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsp + 0x2b0]
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
lea r9, str.IPackageId_get_FullName___for_package__zu_failed_with_code_0x_lx
call fcn.1400cab90
jmp 0x1402ae4a0
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae756
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae773
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsp + 0x2b0]
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
lea r9, str.IPackageId_get_Name___for_package__zu_failed_with_code_0x_lx
call fcn.1400cab90
jmp 0x1402ae4a0
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae7b6
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae7d3
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], ebx
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x2b0]
lea r9, str.IPackage_get_InstalledLocation___for_package__zu____S__failed_with_code_0x_lx
mov qword [rsp + 0x28], rax
call fcn.1400cab90
jmp 0x1402ae4a0
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402ae81e
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402ae83b
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.WindowsCreateStringReference___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402ae876
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402ae893
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], ebx
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x2b0]
lea r9, str.IUnknown_QueryInterface_IID_IStorageItem__for_package__zu____S__failed_with_code_0x_lx
mov qword [rsp + 0x28], rax
call fcn.1400cab90
jmp 0x1402ae4a0
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402ae8de
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402ae8fb
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.RoActivateInstance___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x1402af1d1
cmp qword [rsp + 0x220], 0
je 0x1402adeb9
cmp word [rcx], 0
je 0x1402adeb9
call fcn.1402ad500
mov rcx, qword [rsp + 0x230]
mov rdx, rax
call fcn.1400bc8e0
jmp 0x1402adeb9
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0xa0]
mov rcx, qword [rsp + 0x158]
mov dword [rsp + 0xa8], eax
test rcx, rcx
je 0x1402af269
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x1402af229
cmp qword [rsp + 0x1f0], 1
je 0x1402af900
cmp qword [rsp + 0x200], 1
je 0x1402af469
mov dword [rsp + 0xac], 0
mov dword [rsp + 0x98], 0
mov dword [rsp + 0xa8], 0
mov dword [rsp + 0xa4], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x40]
test eax, eax
jne 0x1402adeb9
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], rdi
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0x20], rdi
mov r9, rbp
mov r8, r13
mov rdx, rsi
mov rcx, r12
call fcn.140039a20
test eax, eax
je 0x1402afa55
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x1402aebf8
cmp qword [rsp + 0x168], 0
je 0x1402aed30
cmp qword [rsp + 0x160], 0
je 0x1402aedc0
mov eax, dword [rsp + 0x98]
test eax, eax
je 0x1402aea7a
cmp qword [rsp + 0x250], 0
je 0x1402af3d0
mov eax, dword [rsp + 0xa4]
test eax, eax
jne 0x1402aefce
test ebx, ebx
jne 0x1402af019
mov r15d, dword [rsp + 0xa8]
test r15d, r15d
jne 0x1402af065
mov r14d, dword [rsp + 0xac]
test r14d, r14d
jne 0x1402af108
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x48]
test eax, eax
je 0x1402aea13
mov r14, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0xc0]
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x1402af1fd
mov rax, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rdx, str.Package
mov qword [rsp + 0x98], rax
call rax
test eax, eax
jne 0x1402aedec
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402aedec
sub qword [rsp + 0x1e0], 1
jmp 0x1402adeb9
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402aeb56
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402aeb73
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.IInspectable_QueryInterface___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402aeba6
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402aebc3
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], ebx
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x2b0]
lea r9, str.IPackageId_get_FamilyName___for_package__zu____S__failed_with_code_0x_lx
mov qword [rsp + 0x28], rax
call fcn.1400cab90
jmp 0x1402ae4a0
lea rax, str.local_name___NULL
lea r9, str.xml_parser_iteration
mov r8d, 0x2c0
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, qword [rsp + 0x1b0]
lea r8, str.Failed_to_open_application_manifest___S_for_package__zu____S_:_error_code_0x_lx
mov edx, 0x10
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1c0]
lea rcx, [0x14048142d]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
call fcn.1400d2190
jmp 0x1402adf96
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402aec8e
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402aecab
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], ebx
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x2b0]
lea r9, str.IStorageItem_get_Path___for_package__zu____S__failed_with_code_0x_lx
mov qword [rsp + 0x28], rax
call fcn.1400cab90
jmp 0x1402ae4a0
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402aecf6
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402aed13
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.IPackageManager_FindPackagesByUserSecurityId___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
lea rax, [0x1404827fa]
lea r9, str.xml_parser_iteration
mov r8d, 0x2c1
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
nop dword [rax]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1c0]
mov edx, 0x10
lea r8, str.IXmlReader_SetInput___for_application_manifest___S_for_package__zu____S__failed_with_HRESULT_0x_lx
mov r9, qword [rsp + 0x1b0]
lea rcx, [0x14048142d]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
call fcn.1400d2190
jmp 0x1402adf7f
mov r12, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
jmp 0x1402ae01a
lea rax, str.prefix___NULL
lea r9, str.xml_parser_iteration
mov r8d, 0x2c2
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
cmp qword [rsp + 0x1e0], 1
je 0x1402af4ad
cmp qword [rsp + 0x1f0], 1
je 0x1402af4ee
cmp qword [rsp + 0x200], 1
je 0x1402af52f
cmp qword [rsp + 0x208], 1
je 0x1402af57f
cmp qword [rsp + 0x210], 1
je 0x1402af5cf
cmp qword [rsp + 0x218], 1
je 0x1402af65a
cmp qword [rsp + 0x1e8], 1
je 0x1402af6a6
cmp qword [rsp + 0x208], 1
jne 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.FileTypeAssociation
call rax
test eax, eax
jne 0x1402adeb9
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402adeb9
mov edx, 0x10
mov ecx, 1
call sub.msvcrt.dll_calloc
mov rbx, rax
test rax, rax
je 0x1402afcc6
mov rax, qword [rsp + 0x230]
xor ecx, ecx
mov qword [rsp + 0x230], rcx
mov ecx, 0x20
mov qword [rbx + 8], rax
call fcn.1400e69e0
xor r8d, r8d
xor r9d, r9d
mov ecx, 0x20
mov rsi, qword [fcn.1400d07c0]
mov qword [rax], r8
mov qword [rax + 8], 0
mov qword [rax + 0x18], rsi
mov byte [rax + 0x14], 0
mov dword [rax + 0x10], 1
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x240], r9
mov qword [rbx], rax
call fcn.1400e69e0
mov rsi, qword [fcn.1400d07c0]
xor r10d, r10d
mov rdx, rbx
mov qword [rax], r10
mov rcx, qword [rsp + 0x248]
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov qword [rax + 0x18], rsi
mov dword [rax + 0x10], 1
mov qword [rsp + 0x240], rax
call fcn.1400bc8e0
sub qword [rsp + 0x210], 1
jmp 0x1402adeb9
xor ax, ax
xor edi, edi
cmp eax, 0x80070000
jne 0x1402aef96
movzx ecx, bx
call fcn.140026320
mov edi, eax
mov rsi, qword [0x14048eee0]
mov edx, dword [rsi]
test edx, edx
jne 0x1402aefb3
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rsi], eax
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r9, str.IIterable_First___failed_with_code_0x_lx
mov r8d, edi
mov rcx, r15
call fcn.1400cab90
jmp 0x1402ae010
mov rcx, qword [rsp + 0x158]
mov r14, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rdx, str.AppListEntry
call r14
test eax, eax
jne 0x1402aea89
mov rcx, qword [rsp + 0x168]
lea rdx, str.none
call r14
test eax, eax
jne 0x1402aea89
mov dword [rsp + 0x1d8], 0
jmp 0x1402aeab3
lea r15, str.Category
mov rcx, qword [rsp + 0x158]
mov r14, qword [sym.imp.msvcrt.dll__wcsicmp]
mov rdx, r15
call r14
test eax, eax
jne 0x1402af193
mov rcx, qword [rsp + 0x168]
lea rdx, str.windows.protocol
call r14
test eax, eax
jne 0x1402af193
add qword [rsp + 0x200], 1
jmp 0x1402aeab3
mov rcx, qword [rsp + 0x158]
lea rdx, str.Name
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1402aeaa2
mov rcx, qword [rsp + 0x168]
call fcn.1402ad500
mov rcx, qword [rsp + 0x238]
mov rdx, rax
call fcn.1400bc8e0
jmp 0x1402aeab3
xor ax, ax
xor ebp, ebp
cmp eax, 0x80070000
jne 0x1402af0ba
movzx ecx, bx
call fcn.140026320
mov ebp, eax
mov rdi, qword [0x14048eee0]
mov edx, dword [rdi]
test edx, edx
jne 0x1402af0d7
lea rcx, [0x140481877]
call fcn.1400daa90
mov dword [rdi], eax
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], ebx
mov r8d, ebp
xor ebp, ebp
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x2b0]
lea r9, str.IIterator_MoveNext___for_package__zu____S__failed_with_code_0x_lx
mov qword [rsp + 0x28], rax
call fcn.1400cab90
jmp 0x1402adfb3
mov rcx, qword [rsp + 0x158]
lea rdx, [0x140482818]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1402aeab3
mov rcx, qword [rsp + 0x168]
call fcn.1402ad500
mov rcx, qword [rsp + 0x240]
mov rdx, rax
call fcn.1400bc8e0
jmp 0x1402aeab3
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1c0]
mov edx, 0x10
lea r8, str.CreateXmlReader___for_application_manifest___S_for_package__zu____S__failed_with_HRESULT_0x_lx
mov r9, qword [rsp + 0x1b0]
lea rcx, [0x14048142d]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
call fcn.1400d2190
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x1402adf96
mov rcx, qword [rsp + 0x158]
mov rdx, r15
call r14
test eax, eax
jne 0x1402aea91
mov rcx, qword [rsp + 0x168]
lea rdx, str.windows.fileTypeAssociation
call r14
test eax, eax
jne 0x1402aea91
add qword [rsp + 0x208], 1
jmp 0x1402aeab3
lea rax, [0x1404827fa]
lea r9, str.xml_parser_iteration
mov r8d, 0x2ed
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
lea rax, str.local_name___NULL
lea r9, str.xml_parser_iteration
mov r8d, 0x2f3
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
mov rax, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rdx, str.Package
mov qword [rsp + 0x98], rax
call rax
test eax, eax
jne 0x1402af2f1
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402af2f1
add qword [rsp + 0x1e0], 1
jmp 0x1402ae9b9
lea rax, str.local_name___NULL
lea r9, str.xml_parser_iteration
mov r8d, 0x279
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gwin32packageparser.c
lea rcx, [0x14048142d]
call fcn.1400e7f70
mov rcx, rdi
mov dword [rsp + 0x58], eax
call fcn.14034efb0
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1c0]
mov edx, 0x10
lea r8, str.Failed_to_create_an_IStream_for_application_manifest___S_for_package__zu____S_:_HRESULT_0x_lx
mov r9, qword [rsp + 0x1b0]
lea rcx, [0x14048142d]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
call fcn.1400d2190
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1402adf96
cmp qword [rsp + 0x1e0], 1
je 0x1402afb9a
cmp qword [rsp + 0x1e8], 1
je 0x1402af7f2
cmp qword [rsp + 0x1f0], 1
je 0x1402af893
cmp qword [rsp + 0x200], 1
je 0x1402af478
cmp qword [rsp + 0x208], 1
je 0x1402af96c
cmp qword [rsp + 0x210], 1
je 0x1402afad0
cmp qword [rsp + 0x218], 1
je 0x1402afa80
cmp qword [rsp + 0x228], 1
jne 0x1402ae9b9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Verb
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402ae9b9
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, str.uap3
call rax
test eax, eax
sete al
xor ebx, ebx
movzx eax, al
mov dword [rsp + 0xac], eax
xor eax, eax
mov dword [rsp + 0x98], eax
mov dword [rsp + 0xa8], eax
jmp 0x1402ae9e5
lea rdx, [0x140482818]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1402aea7a
mov rcx, qword [rsp + 0x168]
call sub.msvcrt.dll_wcslen
xor edx, edx
mov rcx, qword [rsp + 0x1d0]
mov r14, rax
call qword [rsp + 0x190]
mov rcx, rax
mov qword [rsp + 0xc8], rax
call sub.msvcrt.dll_wcslen
mov edx, 2
lea rcx, [r14 + rax + 2]
mov r15, rax
call fcn.1400d52e0
add r15, r15
mov rdx, qword [rsp + 0xc8]
mov r8, r15
mov rcx, rax
mov qword [rsp + 0x250], rax
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x168]
lea r8, [r14 + r14 + 2]
mov word [rax + r15], 0x21
lea rcx, [rax + r15 + 2]
call sub.msvcrt.dll_memcpy
jmp 0x1402aeab3
mov rax, qword [sym.imp.msvcrt.dll__wcsicmp]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Protocol
call rax
test eax, eax
je 0x1402afb50
mov ecx, dword [rsp + 0xa8]
test ecx, ecx
jne 0x1402ae9b9
jmp 0x1402af32d
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Applications
call rax
test eax, eax
jne 0x1402aedfb
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402aedfb
sub qword [rsp + 0x1e8], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Extensions
call rax
test eax, eax
jne 0x1402aee0a
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402aee0a
sub qword [rsp + 0x1f8], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Extension
call rax
test eax, eax
jne 0x1402aee19
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402aee19
sub qword [rsp + 0x200], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Extension
call rax
test eax, eax
jne 0x1402aee28
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402aee28
sub qword [rsp + 0x208], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.SupportedFileTypes
call rax
test eax, eax
je 0x1402afc0a
cmp qword [rsp + 0x218], 1
je 0x1402af65a
cmp qword [rsp + 0x210], 1
jne 0x1402aee46
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.SupportedVerbs
call rax
test eax, eax
jne 0x1402aee46
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, str.uap2
call rax
test eax, eax
jne 0x1402aee46
sub qword [rsp + 0x228], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.FileType
call rax
test eax, eax
jne 0x1402af5fb
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402af5fb
sub qword [rsp + 0x220], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Application
call rax
test eax, eax
jne 0x1402aee55
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402aee55
mov r9, qword [rsp + 0x250]
test r9, r9
je 0x1402af739
mov rax, qword [rsp + 0x238]
mov r8, qword [rsp + 0x1c8]
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1a8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x1d8]
mov dword [rsp + 0x20], eax
call qword [rsp + 0x1a0]
test eax, eax
sete al
movzx eax, al
mov dword [rsp + 0x1dc], eax
mov rcx, qword [rsp + 0x248]
xor r12d, r12d
mov qword [rsp + 0x248], r12
test rcx, rcx
je 0x1402af756
call fcn.1400be0b0
mov rcx, qword [rsp + 0x238]
xor esi, esi
mov qword [rsp + 0x238], rsi
test rcx, rcx
je 0x1402af772
call fcn.1400be0b0
mov ecx, 0x20
xor ebx, ebx
call fcn.1400e69e0
mov rsi, qword [fcn.1400d07c0]
xor r11d, r11d
mov ecx, 0x20
mov qword [rax], r11
mov qword [rax + 0x18], rsi
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov dword [rax + 0x10], 1
mov qword [rsp + 0x238], rax
call fcn.1400e69e0
mov rsi, qword [0x14048d0a0]
sub qword [rsp + 0x1f0], 1
mov qword [rax], rbx
mov qword [rax + 8], 0
mov byte [rax + 0x14], 0
mov qword [rax + 0x18], rsi
mov dword [rax + 0x10], 1
mov qword [rsp + 0x248], rax
jmp 0x1402adeb9
xor eax, eax
jmp 0x1402af2a5
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Application
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402af30f
mov rdx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x1f0]
cmp word [rdx], 0
jne 0x1402af889
mov rcx, qword [rsp + 0x250]
add rax, 1
xor r10d, r10d
mov dword [rsp + 0x1d8], 1
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x250], r10
test rcx, rcx
je 0x1402af864
call fcn.14034efb0
mov dword [rsp + 0x98], 1
xor r9d, r9d
xor ebx, ebx
mov dword [rsp + 0xac], r9d
mov dword [rsp + 0xa8], r9d
jmp 0x1402ae9e5
sub rax, 1
jne 0x1402af31e
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.VisualElements
call rax
test eax, eax
je 0x1402af920
cmp qword [rsp + 0x1f0], 1
jne 0x1402af31e
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Extensions
call rax
test eax, eax
jne 0x1402af9dc
mov rax, qword [rsp + 0x160]
cmp word [rax], 0
jne 0x1402af9dc
add qword [rsp + 0x1f8], 1
jmp 0x1402ae9b9
mov rax, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rdx, str.VisualElements
mov qword [rsp + 0x98], rax
call rax
test eax, eax
jne 0x1402ae9aa
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402afc68
mov dword [rsp + 0xa4], 1
xor r8d, r8d
mov dword [rsp + 0xac], r8d
mov dword [rsp + 0x98], r8d
mov dword [rsp + 0xa8], r8d
jmp 0x1402ae9e5
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.FileTypeAssociation
call rax
test eax, eax
jne 0x1402af33c
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402af33c
add qword [rsp + 0x210], 1
xor edx, edx
xor ebx, ebx
mov dword [rsp + 0xac], edx
mov dword [rsp + 0x98], edx
mov dword [rsp + 0xa8], edx
jmp 0x1402ae9e5
cmp qword [rsp + 0x1f0], 1
jne 0x1402af31e
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Extension
call rax
test eax, eax
jne 0x1402af31e
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402af31e
xor eax, eax
mov ebx, 1
mov dword [rsp + 0xac], eax
mov dword [rsp + 0x98], eax
mov dword [rsp + 0xa8], eax
jmp 0x1402ae9e5
mov r12, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xb8]
mov r13, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0xa0]
jmp 0x1402adee9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.FileType
call rax
test eax, eax
jne 0x1402af35a
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402af35a
add qword [rsp + 0x220], 1
jmp 0x1402ae9b9
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.SupportedFileTypes
call rax
test eax, eax
je 0x1402afc39
cmp qword [rsp + 0x210], 1
jne 0x1402af34b
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.SupportedVerbs
call rax
test eax, eax
jne 0x1402af34b
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, str.uap2
call rax
test eax, eax
jne 0x1402af34b
add qword [rsp + 0x228], 1
jmp 0x1402ae9b9
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402af499
mov dword [rsp + 0xa8], 1
xor eax, eax
xor ebx, ebx
mov dword [rsp + 0xac], eax
mov dword [rsp + 0x98], eax
jmp 0x1402ae9e5
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x98]
lea rdx, str.Applications
call rax
mov dword [rsp + 0xa4], eax
test eax, eax
jne 0x1402af300
mov rdx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x1e8]
cmp word [rdx], 0
jne 0x1402af300
xor r11d, r11d
add rax, 1
xor ebx, ebx
mov qword [rsp + 0x1e8], rax
mov dword [rsp + 0xac], r11d
mov dword [rsp + 0x98], r11d
mov dword [rsp + 0xa8], r11d
jmp 0x1402ae9e5
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402af5f0
sub qword [rsp + 0x218], 1
jmp 0x1402adeb9
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, [0x140482718]
call rax
test eax, eax
jne 0x1402afaf1
add qword [rsp + 0x218], 1
jmp 0x1402ae9b9
mov rcx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x98]
lea rdx, str.uap3
call rax
test eax, eax
je 0x1402af941
cmp dword [rsp + 0xa8], 0
jne 0x1402ae9aa
jmp 0x1402af8b0
mov qword [rsp + 0x20], 0x20
lea r9, [0x140482513]
lea r8, [0x1404815c0]
mov edx, 4
lea rcx, [0x14048139a]
call fcn.1400d2190
jmp 0x1402afcc4
mov qword [rsp + 0x20], 0x10
lea r9, [0x140482513]
lea r8, [0x1404815c0]
mov edx, 4
lea rcx, [0x14048139a]
call fcn.1400d2190
jmp 0x1402afcee