Function at 0x14001edb0
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6e0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x6d0], rax
mov rsi, rdx
mov qword [rsp + 0xd8], rdx
mov rdi, rcx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x130], rdx
mov dword [rsp + 0x40], 1
xor r13d, r13d
mov dword [rsp + 0x44], r13d
lea rdx, [rsp + 0x5f0]
call fcn.140021ed0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001ee25
mov rdx, qword [rax]
mov r8d, dword [rax + 0x10]
lea rcx, [rsp + 0x90]
call fcn.140006ca0
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, 7
jbe 0x14001ee82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ee7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ee7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
movdqa xmm0, xmmword [0x1400b2980]
movdqu xmmword [rsp + 0x600], xmm0
mov word [rsp + 0x5f0], r13w
lea rdx, [rsp + 0x5b0]
mov rcx, rdi
call fcn.140021d90
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001eeba
mov rdx, qword [rax]
mov r8d, dword [rax + 0x10]
lea rcx, [rsp + 0xa0]
call fcn.140006ca0
nop
mov rdx, qword [rsp + 0x5c8]
cmp rdx, 7
jbe 0x14001ef17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ef12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ef12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
movdqa xmm0, xmmword [0x1400b2980]
movdqu xmmword [rsp + 0x5c0], xmm0
mov word [rsp + 0x5b0], r13w
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x48], r13
mov qword [rsi], r13
mov dword [rsp + 0x40], 1
mov r14, qword [rsp + 0x90]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001efcb
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001ef94
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001efae
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x14001efc3
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
mov rax, rsi
jmp 0x14002139e
lea rax, [rsp + 0x288]
mov qword [rsp + 0x138], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x288], xmm0
mov rax, qword [rdi + 0x118]
test rax, rax
je 0x14001efff
lock inc dword [rax + 8]
mov r14, qword [rsp + 0x90]
mov rax, qword [rdi + 0x110]
mov qword [rsp + 0x288], rax
mov rax, qword [rdi + 0x118]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x298]
mov qword [rsp + 0x568], rax
movdqu xmmword [rsp + 0x298], xmm0
mov rax, qword [rdi + 0x108]
test rax, rax
je 0x14001f04e
lock inc dword [rax + 8]
mov r14, qword [rsp + 0x90]
mov rax, qword [rdi + 0x100]
mov qword [rsp + 0x298], rax
mov rax, qword [rdi + 0x108]
mov qword [rsp + 0x2a0], rax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x70], rax
xor edx, edx
mov r15, qword [rsp + 0xa0]
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x570]
call fcn.140005d40
nop
lea rcx, [rsp + 0x288]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x298]
mov r8, rax
lea rdx, [rsp + 0xa8]
call fcn.140023930
nop
lea rcx, [rsp + 0x48]
cmp rcx, rax
je 0x14001f0eb
mov rbx, qword [rax]
mov qword [rax], r13
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001f0e6
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14001f105
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa8], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x48]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400d8320]
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001f15d
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
cmp dword [0x1400d836c], 0x7fffffff
jne 0x14001f17f
mov dword [0x1400d836c], 0x7ffffffe
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov byte [rsp + 0x2e0], 1
cmp qword [0x1400d8378], 0
je 0x14001f1fa
mov rdi, qword [0x1400d8370]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001f1c6
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x48]
call fcn.140025620
test al, al
je 0x14001f1ba
mov rbx, qword [rbx + 0x10]
jmp 0x14001f1c0
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001f1a2
cmp byte [rdi + 0x19], 0
jne 0x14001f1de
lea r8, [rdi + 0x20]
lea rdx, [rsp + 0x48]
call fcn.140025620
test al, al
je 0x14001f1e5
mov rdi, qword [0x1400d8370]
cmp rdi, qword [0x1400d8370]
jne 0x140020e84
mov rdi, qword [rsp + 0x98]
lea rdx, [rsp + 0x590]
mov rcx, rdi
call fcn.140022070
nop
lea rax, [0x1400ab410]
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x2f0], 1
lea rdx, [rsp + 0xb8]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0xb8]
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0x300], rcx
lea r8, [rsp + 0x2e8]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x188]
call fcn.14001cd10
mov dword [rsp + 0x44], 0x80
lea rax, [rsp + 0x590]
cmp qword [rsp + 0x5a8], 7
cmova rax, qword [rsp + 0x590]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x310], rax
lea rdx, [rsp + 0x14c]
mov rcx, qword [rsp + 0x188]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x14c]
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x320], rcx
lea r8, [rsp + 0x308]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x180]
call fcn.14001cd10
mov r12d, 0x180
mov dword [rsp + 0x44], r12d
lea rax, [0x1400ab40c]
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x330], 1
lea rdx, [rsp + 0x150]
mov rcx, qword [rsp + 0x180]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x150]
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x340], rcx
lea r8, [rsp + 0x328]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x178]
call fcn.14001cd10
mov dword [rsp + 0x40], 0x80001
lea rsi, [rdi + 8]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14001f375
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x350], rax
lea rdx, [rsp + 0x154]
mov rcx, qword [rsp + 0x178]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x154]
mov qword [rsp + 0x358], rax
mov qword [rsp + 0x360], rcx
lea r8, [rsp + 0x348]
lea rdx, [rsp + 0x358]
lea rcx, [rsp + 0x170]
call fcn.14001cd10
mov dword [rsp + 0x40], 0x180001
lea rcx, [rdi + 0x28]
cmp qword [rdi + 0x40], 7
jbe 0x14001f3e9
mov rcx, qword [rdi + 0x28]
mov rax, qword [rdi + 0x38]
mov qword [rsp + 0x368], rcx
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x170]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x158]
mov qword [rsp + 0x378], rax
mov qword [rsp + 0x380], rcx
lea r8, [rsp + 0x368]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0xf8]
call fcn.14001cd10
mov ebx, 0x380001
mov dword [rsp + 0x40], ebx
mov rdi, qword [rsp + 0xf8]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0xb0], rdi
btr ebx, 0x15
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x14001f489
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xf8], r13
btr ebx, 0x14
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001f4ab
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r13
btr ebx, 0x13
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14001f4cd
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r13
btr r12d, 8
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x14001f4f1
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x180], r13
btr r12d, 7
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001f515
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r13
lea rax, [0x1400ab410]
mov qword [rsp + 0x388], rax
mov qword [rsp + 0x390], 1
lea rdx, [rsp + 0x148]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x148]
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3a0], rcx
lea r8, [rsp + 0x388]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x1a0]
call fcn.14001cd10
bts ebx, 0x16
mov dword [rsp + 0x40], ebx
lea rax, [rsp + 0x590]
cmp qword [rsp + 0x5a8], 7
cmova rax, qword [rsp + 0x590]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x3b0], rax
lea rdx, [rsp + 0x15c]
mov rcx, qword [rsp + 0x1a0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x15c]
mov qword [rsp + 0x3b8], rax
mov qword [rsp + 0x3c0], rcx
lea r8, [rsp + 0x3a8]
lea rdx, [rsp + 0x3b8]
lea rcx, [rsp + 0x198]
call fcn.14001cd10
bts ebx, 0x17
mov dword [rsp + 0x40], ebx
lea rax, [0x1400ab40c]
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x3d0], 1
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x198]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x160]
mov qword [rsp + 0x3d8], rax
mov qword [rsp + 0x3e0], rcx
lea r8, [rsp + 0x3c8]
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x190]
call fcn.14001cd10
bts ebx, 0x18
mov dword [rsp + 0x40], ebx
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14001f678
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x3e8], rcx
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x164]
mov rcx, qword [rsp + 0x190]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x164]
mov qword [rsp + 0x3f8], rax
mov qword [rsp + 0x400], rcx
lea r8, [rsp + 0x3e8]
lea rdx, [rsp + 0x3f8]
lea rcx, [rsp + 0x100]
call fcn.14001cd10
or r12d, 0x40
mov dword [rsp + 0x44], r12d
mov rsi, qword [rsp + 0x100]
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x88], rsi
and r12d, 0xffffffbf
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001f721
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x100], r13
btr ebx, 0x18
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001f743
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r13
btr ebx, 0x17
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001f765
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r13
btr ebx, 0x16
mov dword [rsp + 0x40], ebx
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001f787
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x5b0]
mov qword [rsp + 0x70], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14001f7a5
xorps xmm0, xmm0
movups xmmword [rsp + 0x5b0], xmm0
mov qword [rsp + 0x5c0], r13
mov qword [rsp + 0x5c8], r13
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call fcn.140006800
bts ebx, 0x1a
mov dword [rsp + 0x40], ebx
btr ebx, 0x1a
mov dword [rsp + 0x40], ebx
bts ebx, 0x19
mov dword [rsp + 0x40], ebx
btr ebx, 0x19
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0x5b0]
call fcn.1400131f0
movzx ebx, al
mov rdx, qword [rsp + 0x5c8]
cmp rdx, 7
jbe 0x14001f856
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f851
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
movdqa xmm0, xmmword [0x1400b2980]
movdqu xmmword [rsp + 0x5c0], xmm0
mov word [rsp + 0x5b0], r13w
test bl, bl
jne 0x14001ff1a
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [rbx + 0x100]
test rdx, rdx
je 0x14001ff1a
add rdx, 0xb8
cmp qword [rdx + 0x18], 7
jbe 0x14001f8c7
mov rdx, qword [rdx]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001f8d0
lea rcx, [rsp + 0x270]
call fcn.140006ca0
nop
mov rax, qword [rbx + 0x100]
add rax, 0x28
mov qword [rsp + 0xa8], rax
lea rax, [0x1400ab410]
mov qword [rsp + 0x408], rax
mov qword [rsp + 0x410], 1
lea rdx, [rsp + 0x168]
mov rbx, qword [rsp + 0x270]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x168]
mov qword [rsp + 0x418], rax
mov qword [rsp + 0x420], rcx
lea r8, [rsp + 0x408]
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x1c0]
call fcn.14001cd10
bts r12d, 0x1d
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0xa8]
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001f982
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x428], rcx
mov qword [rsp + 0x430], rax
lea rdx, [rsp + 0x16c]
mov rcx, qword [rsp + 0x1c0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x16c]
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x440], rcx
lea r8, [rsp + 0x428]
lea rdx, [rsp + 0x438]
lea rcx, [rsp + 0x1b8]
call fcn.14001cd10
bts r12d, 0x1c
mov dword [rsp + 0x44], r12d
lea rax, [0x1400ab40c]
mov qword [rsp + 0x448], rax
mov qword [rsp + 0x450], 1
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x1b0]
mov qword [rsp + 0x458], rax
mov qword [rsp + 0x460], rcx
lea r8, [rsp + 0x448]
lea rdx, [rsp + 0x458]
lea rcx, [rsp + 0x1f0]
call fcn.14001cd10
bts r12d, 0x1b
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 7
jbe 0x14001fa6e
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x468], rcx
mov qword [rsp + 0x470], rax
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1f0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x1e0]
mov qword [rsp + 0x478], rax
mov qword [rsp + 0x480], rcx
lea r8, [rsp + 0x468]
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x1a8]
call fcn.14001cd10
bts r12d, 0x1a
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 0x28]
cmp qword [rax + 0x40], 7
jbe 0x14001faec
mov rcx, qword [rax + 0x28]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x488], rcx
mov qword [rsp + 0x490], rax
lea rdx, [rsp + 0x218]
mov rcx, qword [rsp + 0x1a8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x218]
mov qword [rsp + 0x498], rax
mov qword [rsp + 0x4a0], rcx
lea r8, [rsp + 0x488]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x108]
call fcn.14001cd10
bts r12d, 0x15
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x108], r13
test rdi, rdi
je 0x14001fb88
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
mov rax, qword [rsp + 0xa8]
mov rdi, rax
mov qword [rsp + 0xb0], rax
btr r12d, 0x15
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14001fbb7
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x108], r13
btr r12d, 0x1a
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001fbdb
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r13
btr r12d, 0x1b
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1f0]
test rcx, rcx
je 0x14001fbff
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1f0], r13
btr r12d, 0x1c
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001fc23
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r13
btr r12d, 0x1d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001fc47
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r13
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 0x100]
add rax, 0x28
mov qword [rsp + 0xa8], rax
lea rax, [0x1400ab410]
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x4b0], 1
lea rdx, [rsp + 0x144]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x144]
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x4c0], rcx
lea r8, [rsp + 0x4a8]
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x1d8]
call fcn.14001cd10
bts r12d, 0x19
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0xa8]
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x14001fce0
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x4c8], rcx
mov qword [rsp + 0x4d0], rax
lea rdx, [rsp + 0x228]
mov rcx, qword [rsp + 0x1d8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x228]
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rcx
lea r8, [rsp + 0x4c8]
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1d0]
call fcn.14001cd10
bts r12d, 0x18
mov dword [rsp + 0x44], r12d
lea rax, [0x1400ab40c]
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0x4f0], 1
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0x1d0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x140]
mov qword [rsp + 0x4f8], rax
mov qword [rsp + 0x500], rcx
lea r8, [rsp + 0x4e8]
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x1c8]
call fcn.14001cd10
bts r12d, 0x17
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 7
jbe 0x14001fdcc
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x508], rcx
mov qword [rsp + 0x510], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x1c8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x58]
mov qword [rsp + 0x518], rax
mov qword [rsp + 0x520], rcx
lea r8, [rsp + 0x508]
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x110]
call fcn.14001cd10
bts r12d, 0x16
mov dword [rsp + 0x44], r12d
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x110], r13
test rsi, rsi
je 0x14001fe62
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov rax, qword [rsp + 0xa8]
mov rsi, rax
mov qword [rsp + 0x88], rax
btr r12d, 0x16
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x14001fe91
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x110], r13
btr r12d, 0x17
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001feb5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r13
btr r12d, 0x18
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001fed9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r13
btr r12d, 0x19
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0x44], r12d
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001ff05
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r13
test rbx, rbx
je 0x14001ff1a
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x270], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r12, rax
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rbx
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r12
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rcx, [rsp + 0xc0]
call fcn.14001d240
nop
lea r9, [rsp + 0x5b0]
lea r8, [rsp + 0x5b8]
mov edx, 0x2e
lea rcx, str.__xml_version_1.0__encoding_UTF_8____a_a__a_
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.140024f00
mov r12d, dword [rsp + 0x40]
bts r12d, 0x1d
mov dword [rsp + 0x40], r12d
btr r12d, 0x1d
mov dword [rsp + 0x40], r12d
bts r12d, 0x1c
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0xc8]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x5b0]
call qword [rax + 0x30]
test eax, eax
js 0x1400213cb
btr r12d, 0x1c
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0xc8], 0
je 0x14001fff8
lea rcx, [rsp + 0xc8]
call fcn.140014f10
lea rcx, [rsp + 0x68]
call fcn.14001d240
nop
lea rcx, [rsp + 0x60]
call fcn.14001d240
nop
mov qword [rsp + 0x278], r13
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x278]
call qword [rax + 0x40]
test eax, eax
js 0x1400213d6
mov rbx, qword [rsp + 0x278]
mov qword [rsp + 0x280], rbx
mov r12d, dword [rsp + 0xb8]
or r12d, 4
mov dword [rsp + 0x44], r12d
lea r9, [rsp + 0x5b0]
lea r8, [rsp + 0x5b8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea r8, [rsp + 0x5b0]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x280]
call fcn.140021450
nop
and r12d, 0xfffffffb
mov dword [rsp + 0x44], r12d
test rbx, rbx
je 0x1400200af
lea rcx, [rsp + 0x280]
call fcn.140014f10
mov qword [rsp + 0x78], r13
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x528], rax
mov qword [rsp + 0x530], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x530], rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x5f0]
mov qword [rsp + 0x70], rcx
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140020130
xorps xmm0, xmm0
movups xmmword [rsp + 0x5f0], xmm0
mov qword [rsp + 0x600], r13
mov qword [rsp + 0x608], r13
mov rdx, rax
lea rcx, [rsp + 0x5f0]
call fcn.140006800
or r12d, 0x20
mov dword [rsp + 0x44], r12d
and r12d, 0xffffffdf
mov dword [rsp + 0x44], r12d
or r12d, 0x10
mov dword [rsp + 0x44], r12d
and r12d, 0xffffffef
mov dword [rsp + 0x44], r12d
lea rcx, [rsp + 0x5f0]
call fcn.1400131f0
movzx ebx, al
mov rdx, qword [rsp + 0x608]
cmp rdx, 7
jbe 0x1400201e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400201e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400201e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
movdqa xmm0, xmmword [0x1400b2980]
movdqu xmmword [rsp + 0x600], xmm0
mov word [rsp + 0x5f0], r13w
test bl, bl
je 0x140021174
mov qword [rsp + 0x5f0], rdi
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x220], rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x118]
call fcn.140015420
bts r12d, 9
mov dword [rsp + 0x44], r12d
lea rax, [rsp + 0x118]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xe0]
call fcn.140019680
bts r12d, 0x14
mov dword [rsp + 0x44], r12d
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x78], 0
je 0x140020293
lea rcx, [rsp + 0x78]
call fcn.140014f10
mov qword [rsp + 0x70], r13
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0x78], rax
btr r12d, 0x14
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0xe0], 0
je 0x1400202dc
lea rcx, [rsp + 0xe0]
call fcn.140014f10
btr r12d, 9
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x118], 0
je 0x1400202ff
lea rcx, [rsp + 0x118]
call fcn.140014f10
nop
lea rax, [rsp + 0x78]
mov qword [rsp + 0x220], rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1e8]
call fcn.14001d420
bts r12d, 0xd
mov dword [rsp + 0x44], r12d
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x120]
call fcn.1400214b0
bts r12d, 0x11
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x68], 0
je 0x14002035c
lea rcx, [rsp + 0x68]
call fcn.140014f10
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x68], rax
btr r12d, 0x11
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x120], 0
je 0x140020393
lea rcx, [rsp + 0x120]
call fcn.140014f10
btr r12d, 0xd
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x1e8], 0
je 0x1400203b6
lea rcx, [rsp + 0x1e8]
call fcn.140014f10
nop
mov qword [rsp + 0x238], r13
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x238]
call qword [rax + 0x40]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213e1
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0x2d0], rbx
bts r12d, 0x12
mov dword [rsp + 0x44], r12d
lea r9, [rsp + 0x5f0]
lea r8, [rsp + 0x5f8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov qword [rsp + 0x240], r13
mov rax, qword [rbx]
lea r8, [rsp + 0x240]
mov rdx, qword [rsp + 0x5f0]
mov rcx, rbx
call qword [rax + 0x50]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213ee
mov rdi, qword [rsp + 0x240]
mov qword [rsp + 0x2b0], rdi
bts r12d, 0x13
mov dword [rsp + 0x44], r12d
cmp qword [rsp + 0x80], 0
je 0x140020478
lea rcx, [rsp + 0x80]
call fcn.140014f10
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0x80], rdi
btr r12d, 0x13
mov dword [rsp + 0x44], r12d
btr r12d, 0x12
mov dword [rsp + 0x44], r12d
test rbx, rbx
je 0x1400204af
lea rcx, [rsp + 0x2d0]
call fcn.140014f10
nop
mov rcx, qword [rsp + 0xc8]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400204c8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp qword [rsp + 0x78], 0
je 0x1400204da
lea rcx, [rsp + 0x78]
call fcn.140014f10
mov rbx, qword [rsp + 0x98]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x670]
call fcn.140005d80
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x690]
call fcn.140005d80
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x6b0]
call fcn.140005d80
nop
lea rbx, [rsp + 0x670]
nop dword [rax]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x630]
call fcn.140005d80
nop
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea r8, [rsp + 0x630]
mov rdx, rax
lea rcx, [rsp + 0x610]
call fcn.140011620
nop
lea rcx, [rsp + 0x610]
cmp qword [rsp + 0x628], 7
cmova rcx, qword [rsp + 0x610]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x140020677
mov rdx, qword [rsp + 0x628]
cmp rdx, 7
jbe 0x1400205d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400205d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400205d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x620], r13
mov qword [rsp + 0x628], 7
mov word [rsp + 0x610], r13w
mov rdx, qword [rsp + 0x648]
cmp rdx, 7
jbe 0x140020640
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002063b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002063b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x640], r13
mov qword [rsp + 0x648], 7
mov word [rsp + 0x630], r13w
add rbx, 0x20
lea rax, [rsp + 0x6d0]
cmp rbx, rax
jne 0x140020530
jmp 0x1400207df
lea rdx, [rsp + 0x610]
cmp qword [rsp + 0x628], 7
cmova rdx, qword [rsp + 0x610]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400206a0
mov r8, rax
lea rcx, [rsp + 0x248]
call fcn.140006ca0
nop
mov rdi, qword [rsp + 0x248]
mov qword [rsp + 0x248], r13
test rsi, rsi
je 0x1400206e0
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x88], rdi
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x628]
cmp rdx, 7
jbe 0x14002075a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020755
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020755
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x620], r13
mov qword [rsp + 0x628], 7
mov word [rsp + 0x610], r13w
mov rdx, qword [rsp + 0x648]
cmp rdx, 7
jbe 0x1400207c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400207bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400207bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x640], r13
mov qword [rsp + 0x648], 7
mov word [rsp + 0x630], r13w
lea r9, [sym.DiagsCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x670]
call fcn.140069ee8
cmp qword [rsp + 0x80], 0
je 0x140020c74
mov qword [rsp + 0x250], r13
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x250]
call qword [rax + 0x40]
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400213fb
mov rbx, qword [rsp + 0x250]
mov qword [rsp + 0x2a8], rbx
mov r12d, dword [rsp + 0x40]
bts r12d, 7
mov dword [rsp + 0x40], r12d
lea rdx, [rsp + 0x50]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov ecx, dword [rsp + 0x50]
mov qword [rsp + 0x538], rax
mov qword [rsp + 0x540], rcx
lea rax, str.xmlns_
mov qword [rsp + 0x548], rax
mov qword [rsp + 0x550], 7
lea r8, [rsp + 0x538]
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0x230]
call fcn.14001cd10
bts r12d, 8
mov dword [rsp + 0x40], r12d
lea r8, [0x14009d308]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x128]
call fcn.14001ce40
nop
btr r12d, 8
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x1400208f8
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x230], r13
btr r12d, 7
mov dword [rsp + 0x40], r12d
test rbx, rbx
je 0x140020917
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x2a8], r13
mov qword [rsp + 0x258], r13
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x1f8]
call fcn.140025000
bts r12d, 0xc
mov dword [rsp + 0x40], r12d
btr r12d, 0xc
mov dword [rsp + 0x40], r12d
bts r12d, 0xb
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x258]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x140021408
btr r12d, 0xb
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x1f8], 0
je 0x140020993
lea rcx, [rsp + 0x1f8]
call fcn.140014f10
mov rbx, qword [rsp + 0x258]
mov qword [rsp + 0x138], rbx
bts r12d, 0xa
mov dword [rsp + 0x40], r12d
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x5d0]
call fcn.140005d40
nop
btr r12d, 0xa
mov dword [rsp + 0x40], r12d
test rbx, rbx
je 0x1400209e7
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x138], r13
mov rcx, qword [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov edi, eax
xor edx, edx
mov rcx, qword [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x650]
call fcn.140005d40
nop
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140020a24
mov rax, qword [rax]
lea rcx, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rcx, qword [rsp + 0x5d0]
mov qword [rsp + 0x20], rdx
mov r9, rax
mov rdx, qword [rsp + 0x5e0]
call fcn.14000daa0
mov rdx, rax
cmp qword [rsp + 0x5e0], rax
jb 0x140021415
lfence
mov rbx, qword [rsp + 0x5e0]
mov rax, rbx
sub rax, rdx
cmp rax, rdi
cmovb rdi, rax
lea rax, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rax, qword [rsp + 0x5d0]
lea rcx, [rax + rdx*2]
sub rbx, rdi
mov r8, rbx
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdi*2]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x5e0], rbx
mov rdx, qword [rsp + 0x668]
cmp rdx, 7
jbe 0x140020b07
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020b02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
movdqa xmm0, xmmword [0x1400b2980]
movdqu xmmword [rsp + 0x660], xmm0
mov word [rsp + 0x650], r13w
lea rcx, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 7
cmova rcx, qword [rsp + 0x5d0]
mov edx, dword [rsp + 0x5e0]
test edx, edx
jne 0x140020b50
mov qword [rsp + 0x650], r13
jmp 0x140020b66
lea r9, [rsp + 0x650]
lea r8, [rsp + 0x658]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x200]
call fcn.140024f00
mov r12d, dword [rsp + 0x40]
bts r12d, 0x10
mov dword [rsp + 0x40], r12d
btr r12d, 0x10
mov dword [rsp + 0x40], r12d
bts r12d, 0xf
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x200]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x650]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x14002141b
btr r12d, 0xf
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x200], 0
je 0x140020be0
lea rcx, [rsp + 0x200]
call fcn.140014f10
nop
mov rdx, qword [rsp + 0x5e8]
cmp rdx, 7
jbe 0x140020c2b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020c26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x5e0], r13
mov qword [rsp + 0x5e8], 7
mov word [rsp + 0x5d0], r13w
mov rcx, qword [rsp + 0x128]
test rcx, rcx
je 0x140020c62
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x128], r13
mov r14, qword [rsp + 0x90]
mov r15, qword [rsp + 0xa0]
jmp 0x140020ca0
cmp qword [rsp + 0x60], 0
je 0x140020c86
lea rcx, [rsp + 0x60]
call fcn.140014f10
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x140020c9b
mov rax, qword [rcx]
call qword [rax + 8]
mov r12d, dword [rsp + 0x40]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x98]
call fcn.1400216c0
nop
mov qword [rsp + 0x260], r13
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x208]
call fcn.140025000
or r12d, 8
mov dword [rsp + 0x40], r12d
and r12d, 0xfffffff7
mov dword [rsp + 0x40], r12d
or r12d, 4
mov dword [rsp + 0x40], r12d
mov rcx, qword [rsp + 0x208]
mov rax, qword [rcx]
lea rdx, [rsp + 0x260]
call qword [rax + 0x30]
mov dword [rsp + 0x50], eax
test eax, eax
js 0x140021428
and r12d, 0xfffffffb
mov dword [rsp + 0x40], r12d
cmp qword [rsp + 0x208], 0
je 0x140020d3b
lea rcx, [rsp + 0x208]
call fcn.140014f10
mov rbx, qword [rsp + 0x260]
mov qword [rsp + 0x210], rbx
or r12d, 2
mov dword [rsp + 0x40], r12d
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x558]
call fcn.140024d70
mov rdi, qword [rax]
add rdi, 0x28
mov rax, rbx
lea rcx, [rsp + 0x210]
cmp rdi, rcx
je 0x140020d9e
mov rsi, rbx
mov rbx, r13
mov qword [rsp + 0x210], rbx
mov rcx, qword [rdi]
test rcx, rcx
je 0x140020d98
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rdi], rsi
mov rax, r13
and r12d, 0xfffffffd
mov dword [rsp + 0x40], r12d
test rax, rax
je 0x140020dbc
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x210], r13
cmp qword [rsp + 0x80], 0
je 0x140020dd5
lea rcx, [rsp + 0x80]
call fcn.140014f10
nop
cmp qword [rsp + 0x60], 0
je 0x140020de8
lea rcx, [rsp + 0x60]
call fcn.140014f10
nop
cmp qword [rsp + 0x68], 0
je 0x140020dfb
lea rcx, [rsp + 0x68]
call fcn.140014f10
nop
cmp qword [rsp + 0xc0], 0
je 0x140020e14
lea rcx, [rsp + 0xc0]
call fcn.140014f10
nop
mov rdx, qword [rsp + 0x5a8]
cmp rdx, 7
jbe 0x140020e5f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020e5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020e5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x5a0], r13
mov qword [rsp + 0x5a8], 7
mov word [rsp + 0x590], r13w
mov rsi, qword [rsp + 0xd8]
cmp qword [0x1400d8378], 0
je 0x140020f6d
mov rdi, qword [0x1400d8370]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x140020ed4
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x48]
call fcn.140025620
test al, al
je 0x140020ec8
mov rbx, qword [rbx + 0x10]
jmp 0x140020ece
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140020eb0
cmp byte [rdi + 0x19], 0
jne 0x140020eec
lea r8, [rdi + 0x20]
lea rdx, [rsp + 0x48]
call fcn.140025620
test al, al
je 0x140020ef3
mov rdi, qword [0x1400d8370]
cmp rdi, qword [0x1400d8370]
je 0x140020f6d
mov rax, qword [rdi + 0x28]
test rax, rax
setne byte [rsp + 0xd0]
test rax, rax
je 0x140020f6d
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x268], r13
lea rax, [rsp + 0x98]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rdi + 0x28]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x58], eax
test eax, eax
js 0x140021435
mov rbx, qword [rsp + 0x268]
mov rcx, qword [rsi]
test rcx, rcx
je 0x140020f6a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsi], r13
mov qword [rsi], rbx
mov rbx, qword [rsp + 0xd8]
lea rcx, [0x1400d8320]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140020f9b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x140020fb5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x140020fcf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
test r15, r15
je 0x140020fe4
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x140020ff9
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
jmp 0x14002139b
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x558]
call fcn.140024d70
mov r12, qword [rax]
add r12, 0x28
xor r8d, r8d
lea rdx, [0x14009be68]
lea rcx, [rsp + 0xe8]
call fcn.140006ca0
nop
lea rax, [rsp + 0xe8]
cmp r12, rax
je 0x14002120f
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x138], rax
mov rbx, r13
mov qword [rsp + 0xe8], rbx
mov rcx, qword [r12]
test rcx, rcx
je 0x140021209
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0x138]
mov qword [r12], rax
jmp 0x140021217
mov rbx, qword [rsp + 0xe8]
test rbx, rbx
je 0x14002122c
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xe8], r13
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0xc8]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002124a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp qword [rsp + 0x78], 0
je 0x14002125d
lea rcx, [rsp + 0x78]
call fcn.140014f10
nop
cmp qword [rsp + 0x80], 0
je 0x140021276
lea rcx, [rsp + 0x80]
call fcn.140014f10
nop
cmp qword [rsp + 0x60], 0
je 0x140021289
lea rcx, [rsp + 0x60]
call fcn.140014f10
nop
cmp qword [rsp + 0x68], 0
je 0x14002129c
lea rcx, [rsp + 0x68]
call fcn.140014f10
nop
cmp qword [rsp + 0xc0], 0
je 0x1400212b5
lea rcx, [rsp + 0xc0]
call fcn.140014f10
nop
mov rdx, qword [rsp + 0x5a8]
cmp rdx, 7
jbe 0x140021300
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400212fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400212fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400688dc
mov qword [rsp + 0x5a0], r13
mov qword [rsp + 0x5a8], 7
mov word [rsp + 0x590], r13w
lea rcx, [0x1400d8320]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002133f
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x48], r13
test rsi, rsi
je 0x140021354
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test rdi, rdi
je 0x140021369
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb0], r13
test r15, r15
je 0x14002137e
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
test r14, r14
je 0x140021393
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x90], r13
mov rbx, qword [rsp + 0xd8]
mov rax, rbx
mov rcx, qword [rsp + 0x6d0]
xor rcx, rsp
call fcn.140068890
lea r11, [rsp + 0x6e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.140006ff0
nop
lfence
mov ecx, eax
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x58]
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006ff0
nop
call fcn.14000a030
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006ff0
nop
lfence
mov ecx, dword [rsp + 0x50]
call fcn.140006ff0
int3