Function at 0x14001c3b0
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7d0
mov rax, qword [0x1400c9008]
xor rax, rsp
mov qword [rsp + 0x7c0], rax
mov r15, rdx
mov qword [rsp + 0xb0], rdx
mov rbx, rcx
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0xc8], rdx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x34], r13d
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x5b0]
call sub.VCRUNTIME140.dll_memset
nop
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
mov r12d, 2
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x450]
mov rcx, rbx
call fcn.14001edc0
nop
cmp qword [rsp + 0x460], r13
je 0x14001c4f1
lea r8, [rsp + 0x450]
cmp qword [rsp + 0x468], 8
cmovae r8, qword [rsp + 0x450]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
test eax, eax
jne 0x14001c4f1
lea rax, [rsp + 0x5b0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001c4d0
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x3d0]
call fcn.140005970
nop
mov rdx, qword [rsp + 0x468]
cmp rdx, 8
jb 0x14001c53c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c537
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c537
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x460], r13
mov qword [rsp + 0x468], 7
mov word [rsp + 0x450], r13w
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rdx, qword [rsp + 0x3d0]
mov r8d, dword [rsp + 0x3e0]
lea rcx, [rsp + 0x60]
call fcn.140005e30
nop
and r12d, 0xfffffffd
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 8
jb 0x14001c5df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c5da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c5da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
lea rdx, [rsp + 0x470]
mov rcx, rbx
call fcn.14001edc0
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001c61b
mov rax, qword [rax]
mov r8d, ecx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140005e30
nop
mov rdx, qword [rsp + 0x488]
cmp rdx, 8
jb 0x14001c67a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c675
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c675
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x480], r13
mov qword [rsp + 0x488], 7
mov word [rsp + 0x470], r13w
mov rdi, r13
mov qword [rsp + 0x58], r13
mov rsi, r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov r14, qword [rsp + 0x60]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001c74e
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [r15], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001c706
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c71a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001c734
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001c746
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, r15
jmp 0x14001e43e
lea rax, [rsp + 0x268]
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x268], xmm0
mov rcx, qword [rbx + 0x118]
test rcx, rcx
je 0x14001c79a
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x118]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x110]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rcx
lea rax, [rsp + 0x278]
mov qword [rsp + 0x258], rax
movdqu xmmword [rsp + 0x278], xmm0
mov rcx, qword [rbx + 0x108]
test rcx, rcx
je 0x14001c7fa
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x108]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x100]
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rcx
lea rax, [rsp + 0x350]
mov qword [rsp + 0x248], rax
xor edx, edx
mov r15, qword [rsp + 0x88]
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.1400051a0
nop
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x278]
mov r8, rax
lea rdx, [rsp + 0x240]
call fcn.140020830
nop
lea rcx, [rsp + 0x38]
cmp rcx, rax
je 0x14001c893
mov rbx, qword [rax]
mov qword [rax], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c88e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x38], rbx
mov rcx, qword [rsp + 0x240]
test rcx, rcx
je 0x14001c8ad
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x240], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x38]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400ce360]
mov qword [rsp + 0x2a0], rax
mov byte [rsp + 0x2a8], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001c902
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rsp + 0x2a8], 1
cmp qword [0x1400ce3b8], 0
je 0x14001c999
mov rax, qword [0x1400ce3b0]
mov qword [rsp + 0xe0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001c965
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.1400224a0
test al, al
je 0x14001c951
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xe0]
jmp 0x14001c95f
mov rax, rbx
mov qword [rsp + 0xe0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001c931
cmp byte [rax + 0x19], 0
jne 0x14001c985
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.1400224a0
test al, al
mov rax, qword [rsp + 0xe0]
je 0x14001c98c
mov rax, qword [0x1400ce3b0]
cmp rax, qword [0x1400ce3b0]
jne 0x14001de63
lea rdx, [rsp + 0x390]
mov rbx, qword [rsp + 0x108]
mov rcx, rbx
call fcn.14001eed0
nop
lea r8, [0x1400868c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x180]
call fcn.14001a2c0
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.14001a1a0
nop
lea r8, [0x1400868bc]
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14001a2c0
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14001a1a0
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.14001a1a0
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001ca3c
mov rdi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x58], rdi
mov rcx, qword [rsp + 0x250]
test rcx, rcx
je 0x14001ca56
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x250], r13
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x14001ca70
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x260], r13
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001ca8a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r13
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14001caa4
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r13
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x14001cabe
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x180], r13
lea r8, [0x1400868c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1a0]
call fcn.14001a2c0
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.14001a1a0
nop
lea r8, [0x1400868bc]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.14001a2c0
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.14001a1a0
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001cb33
mov rsi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x50], rsi
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001cb4d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r13
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001cb67
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r13
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001cb81
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r13
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001cb9b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x3f0]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cbc0
mov qword [rsp + 0x3f0], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], 7
mov word [rsp + 0x3f0], r13w
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.140005970
or r12d, 8
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffff7
mov dword [rsp + 0x30], r12d
or r12d, 4
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffffb
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x3f0]
call fcn.140011670
test al, al
sete bl
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x14001cc96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cc91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cc91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
movdqa xmm0, xmmword [0x1400a9930]
movdqu xmmword [rsp + 0x400], xmm0
mov word [rsp + 0x3f0], r13w
test bl, bl
je 0x14001cf67
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov r12, qword [rsp + 0x108]
mov rdx, qword [r12 + 0x100]
test rdx, rdx
je 0x14001cf67
add rdx, 0xb8
cmp qword [rdx + 0x18], 8
jb 0x14001cd08
mov rdx, qword [rdx]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001cd10
lea rcx, [rsp + 0xe8]
call fcn.140005e30
nop
mov rbx, qword [r12 + 0x100]
lea r8, [0x1400868c0]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1c8]
call fcn.14001a2c0
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14001a1a0
nop
lea r8, [0x1400868bc]
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.14001a2c0
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14001a1a0
nop
lea r8, [r12 + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.14001a1a0
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001cdd1
mov rbx, qword [rax]
mov qword [rax], r13
test rdi, rdi
je 0x14001cdc9
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
mov rdi, rbx
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001cdeb
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r13
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14001ce05
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b0], r13
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001ce1f
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r13
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001ce39
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r13
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001ce53
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r13
mov rbx, qword [r12 + 0x100]
lea r8, [0x1400868c0]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1e8]
call fcn.14001a2c0
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.14001a1a0
nop
lea r8, [0x1400868bc]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.14001a2c0
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14001a1a0
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001cee5
mov rbx, qword [rax]
mov qword [rax], r13
test rsi, rsi
je 0x14001cedd
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov rsi, rbx
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001ceff
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r13
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001cf19
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r13
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x14001cf33
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e0], r13
mov rcx, qword [rsp + 0x1e8]
test rcx, rcx
je 0x14001cf4d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e8], r13
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x14001cf67
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xe8], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r12, rax
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rbx
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r12
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rcx, [rsp + 0x90]
call fcn.14001a800
nop
lea r9, [rsp + 0x4d0]
lea r8, [rsp + 0x4d8]
mov edx, 0x2e
lea rcx, str.__xml_version_1.0__encoding_UTF_8____a_a__a_
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x128]
call fcn.140021df0
mov r12d, dword [rsp + 0x48]
or r12d, 0x40
mov dword [rsp + 0x30], r12d
and r12d, 0xffffffbf
mov dword [rsp + 0x30], r12d
or r12d, 0x20
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x128]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4d0]
call qword [rax + 0x30]
test eax, eax
js 0x14001e46b
and r12d, 0xffffffdf
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x128], 0
je 0x14001d041
lea rcx, [rsp + 0x128]
call fcn.140013050
lea rcx, [rsp + 0x70]
call fcn.14001a800
nop
lea rcx, [rsp + 0x68]
call fcn.14001a800
nop
mov qword [rsp + 0x1f0], r13
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f0]
call qword [rax + 0x40]
test eax, eax
js 0x14001e476
mov rbx, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rbx
bts r12d, 0xb
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x4f0]
lea r8, [rsp + 0x4f8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea r8, [rsp + 0x4f0]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1f8]
call fcn.14001e500
nop
btr r12d, 0xb
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d0ef
lea rcx, [rsp + 0x1f8]
call fcn.140013050
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.140017c40
nop
mov qword [rsp + 0x80], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x410]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d133
mov qword [rsp + 0x410], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], r13w
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.140005970
bts r12d, 0xf
mov dword [rsp + 0x30], r12d
btr r12d, 0xf
mov dword [rsp + 0x30], r12d
bts r12d, 0xe
mov dword [rsp + 0x30], r12d
btr r12d, 0xe
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x410]
call fcn.140011670
movzx ebx, al
mov rdx, qword [rsp + 0x428]
cmp rdx, 8
jb 0x14001d206
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d201
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d201
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
movdqa xmm0, xmmword [0x1400a9930]
movdqu xmmword [rsp + 0x420], xmm0
mov word [rsp + 0x410], r13w
test bl, bl
je 0x14001e1e1
mov qword [rsp + 0x530], rdi
lea rax, [rsp + 0x530]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xf0]
call fcn.1400135a0
bts r12d, 0x10
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xa8]
call fcn.140017140
bts r12d, 0x14
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2c8], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
cmp qword [rsp + 0x80], 0
je 0x14001d2c6
lea rcx, [rsp + 0x80]
call fcn.140013050
mov qword [rsp + 0x2d8], r13
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x80], rax
btr r12d, 0x14
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xa8], 0
je 0x14001d318
lea rcx, [rsp + 0xa8]
call fcn.140013050
btr r12d, 0x10
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf0], 0
je 0x14001d33b
lea rcx, [rsp + 0xf0]
call fcn.140013050
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x248], rax
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x130]
call fcn.14001a9e0
bts r12d, 0x15
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xf8]
call fcn.14001e560
bts r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x70], 0
je 0x14001d39b
lea rcx, [rsp + 0x70]
call fcn.140013050
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x70], rax
btr r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf8], 0
je 0x14001d3d2
lea rcx, [rsp + 0xf8]
call fcn.140013050
btr r12d, 0x15
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x130], 0
je 0x14001d3f5
lea rcx, [rsp + 0x130]
call fcn.140013050
nop
mov qword [rsp + 0x200], r13
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x200]
call qword [rax + 0x40]
mov dword [rsp + 0x114], eax
test eax, eax
js 0x14001e481
mov rbx, qword [rsp + 0x200]
mov qword [rsp + 0x298], rbx
bts r12d, 0x1a
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x510]
lea r8, [rsp + 0x518]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov qword [rsp + 0x208], r13
mov rax, qword [rbx]
lea r8, [rsp + 0x208]
mov rdx, qword [rsp + 0x510]
mov rcx, rbx
call qword [rax + 0x50]
mov dword [rsp + 0x110], eax
test eax, eax
js 0x14001e491
mov rbx, qword [rsp + 0x208]
mov qword [rsp + 0x290], rbx
bts r12d, 0x1b
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x78], 0
je 0x14001d4b7
lea rcx, [rsp + 0x78]
call fcn.140013050
mov qword [rsp + 0x290], r13
mov qword [rsp + 0x78], rbx
btr r12d, 0x1b
mov dword [rsp + 0x30], r12d
btr r12d, 0x1a
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x298]
call fcn.140013050
nop
cmp qword [rsp + 0x80], 0
je 0x14001d504
lea rcx, [rsp + 0x80]
call fcn.140013050
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001d51d
call qword [rsp + 0x160]
mov rbx, qword [rsp + 0x108]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x550]
call fcn.1400051e0
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x570]
call fcn.1400051e0
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x590]
call fcn.1400051e0
nop
lea rbx, [rsp + 0x550]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x430]
call fcn.1400051e0
nop
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea r8, [rsp + 0x430]
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.140010020
nop
lea rcx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rcx, qword [rsp + 0x3b0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x14001d6b7
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d618
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d613
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d613
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d680
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d67b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d67b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
add rbx, 0x20
lea rax, [rsp + 0x5b0]
cmp rbx, rax
je 0x14001d819
jmp 0x14001d570
lea rdx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rdx, qword [rsp + 0x3b0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14001d6e0
mov r8, rax
lea rcx, [rsp + 0x210]
call fcn.140005e30
nop
mov rdi, qword [rsp + 0x210]
mov qword [rsp + 0x210], r13
test rsi, rsi
je 0x14001d71d
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x50], rdi
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d794
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d78f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d78f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d7fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d7f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d7f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
lea r9, [sym.DiagsCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x550]
call fcn.140063118
cmp qword [rsp + 0x78], 0
je 0x14001dc50
mov qword [rsp + 0x218], r13
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x218]
call qword [rax + 0x40]
mov dword [rsp + 0x118], eax
test eax, eax
js 0x14001e4a1
mov rbx, qword [rsp + 0x218]
mov qword [rsp + 0x228], rbx
mov r12d, dword [rsp + 0x48]
bts r12d, 0x1d
mov dword [rsp + 0x30], r12d
lea r8, [rsp + 0x228]
lea rdx, str.xmlns_
lea rcx, [rsp + 0x220]
call fcn.14001a3e0
nop
lea r8, [0x140079738]
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14001a2c0
nop
mov rcx, qword [rsp + 0x220]
test rcx, rcx
je 0x14001d8da
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x220], r13
btr r12d, 0x1d
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d8f9
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x228], r13
mov qword [rsp + 0x230], r13
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x138]
call fcn.140021ef0
mov eax, 1
mov dword [rsp + 0x34], eax
and eax, 0xfffffffe
mov dword [rsp + 0x34], eax
or r12d, 0x80000000
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x230]
call qword [rax + 0x30]
mov dword [rsp + 0x11c], eax
test eax, eax
js 0x14001e4b1
btr r12d, 0x1f
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x138], 0
je 0x14001d976
lea rcx, [rsp + 0x138]
call fcn.140013050
mov rbx, qword [rsp + 0x230]
mov qword [rsp + 0xb8], rbx
bts r12d, 0x1e
mov dword [rsp + 0x30], r12d
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x370]
call fcn.1400051a0
nop
btr r12d, 0x1e
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d9ca
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb8], r13
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov ebx, eax
xor edx, edx
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x490]
call fcn.1400051a0
nop
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001da07
mov rax, qword [rax]
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov qword [rsp + 0x20], rdx
mov r9, rax
mov rdx, qword [rsp + 0x380]
call fcn.14000cb40
mov rdx, rax
cmp qword [rsp + 0x380], rax
jb 0x14001e4c1
lfence
mov r8, qword [rsp + 0x380]
mov rax, r8
sub rax, rdx
cmp rax, rbx
cmovb rbx, rax
lea rax, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rax, qword [rsp + 0x370]
lea rcx, [rax + rdx*2]
sub r8, rbx
mov qword [rsp + 0x380], r8
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call sub.VCRUNTIME140.dll_memmove
nop
mov rdx, qword [rsp + 0x4a8]
cmp rdx, 8
jb 0x14001dae8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dae3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dae3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x4a0], r13
mov qword [rsp + 0x4a8], 7
mov word [rsp + 0x490], r13w
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov edx, dword [rsp + 0x380]
test edx, edx
jne 0x14001db34
mov qword [rsp + 0x4b0], r13
jmp 0x14001db4a
lea r9, [rsp + 0x4b0]
lea r8, [rsp + 0x4b8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x140]
call fcn.140021df0
mov edi, dword [rsp + 0x34]
or edi, 0x10
mov dword [rsp + 0x34], edi
and edi, 0xffffffef
mov dword [rsp + 0x34], edi
or edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4b0]
call qword [rax + 0x30]
mov dword [rsp + 0x120], eax
test eax, eax
js 0x14001e4c7
and edi, 0xfffffff7
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x140], 0
je 0x14001dbba
lea rcx, [rsp + 0x140]
call fcn.140013050
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 8
jb 0x14001dc05
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dc00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dc00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x380], r13
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r13w
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001dc3c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x100], r13
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x88]
mov r12d, dword [rsp + 0x30]
jmp 0x14001dc80
cmp qword [rsp + 0x68], 0
je 0x14001dc62
lea rcx, [rsp + 0x68]
call fcn.140013050
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14001dc77
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x48]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x108]
call fcn.14001e760
nop
mov qword [rsp + 0x238], r13
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x148]
call fcn.140021ef0
bts edi, 9
mov dword [rsp + 0x34], edi
btr edi, 9
mov dword [rsp + 0x34], edi
bts edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x148]
mov rax, qword [rcx]
lea rdx, [rsp + 0x238]
call qword [rax + 0x30]
mov dword [rsp + 0x150], eax
test eax, eax
js 0x14001e4d7
btr edi, 8
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x148], 0
je 0x14001dd14
lea rcx, [rsp + 0x148]
call fcn.140013050
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0xa0], rbx
bts edi, 7
mov dword [rsp + 0x34], edi
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x320]
call fcn.140021c60
mov rsi, qword [rax]
add rsi, 0x28
lea rax, [rsp + 0xa0]
cmp rsi, rax
je 0x14001dd80
mov rax, rbx
mov qword [rsp + 0xb8], rbx
mov rbx, r13
mov qword [rsp + 0xa0], rbx
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001dd7d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xb8]
mov qword [rsi], rax
btr edi, 7
mov dword [rsp + 0x34], edi
test rbx, rbx
je 0x14001dd9d
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
cmp qword [rsp + 0x78], 0
je 0x14001ddb0
lea rcx, [rsp + 0x78]
call fcn.140013050
nop
cmp qword [rsp + 0x68], 0
je 0x14001ddc3
lea rcx, [rsp + 0x68]
call fcn.140013050
nop
cmp qword [rsp + 0x70], 0
je 0x14001ddd6
lea rcx, [rsp + 0x70]
call fcn.140013050
nop
cmp qword [rsp + 0x90], 0
je 0x14001ddef
lea rcx, [rsp + 0x90]
call fcn.140013050
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001de3a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001de35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001de35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
jmp 0x14001de68
mov r12d, dword [rsp + 0x48]
cmp qword [0x1400ce3b8], 0
je 0x14001df81
mov rax, qword [0x1400ce3b0]
mov qword [rsp + 0xa0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001dec4
nop
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.1400224a0
test al, al
je 0x14001deb0
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xa0]
jmp 0x14001debe
mov rax, rbx
mov qword [rsp + 0xa0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001de90
cmp byte [rax + 0x19], 0
jne 0x14001df81
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.1400224a0
test al, al
jne 0x14001df81
mov rcx, qword [rsp + 0xa0]
cmp rcx, qword [0x1400ce3b0]
je 0x14001df81
mov rax, qword [rcx + 0x28]
test rax, rax
setne byte [rsp + 0x98]
test rax, rax
je 0x14001df81
lea rax, [rsp + 0x40]
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0xd8], r13
lea rax, [rsp + 0x154]
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0xd8]
mov rcx, qword [rcx + 0x28]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
mov dword [rsp + 0x158], eax
mov dword [rsp + 0x154], eax
mov dword [rsp + 0xe0], eax
test eax, eax
js 0x14001e4e7
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001df7c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x40], rbx
mov rbx, qword [rsp + 0xb0]
lea rcx, [0x1400ce360]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001dfc0
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001dfd4
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001dfe6
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001dff8
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001e00d
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001e01f
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
jmp 0x14001e43b
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x340]
call fcn.140021c60
mov rbx, qword [rax]
add rbx, 0x28
mov qword [rsp + 0xd8], rbx
xor r8d, r8d
lea rdx, [0x140077fc0]
lea rcx, [rsp + 0xd0]
call fcn.140005e30
nop
lea rax, [rsp + 0xd0]
cmp rbx, rax
je 0x14001e292
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb8], rax
mov rbx, r13
mov qword [rsp + 0xd0], rbx
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001e285
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
jmp 0x14001e29a
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x14001e2af
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xd0], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov rbx, qword [rsp + 0xb0]
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x80], 0
je 0x14001e2e6
lea rcx, [rsp + 0x80]
call fcn.140013050
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001e300
call qword [rsp + 0x160]
nop
cmp qword [rsp + 0x78], 0
je 0x14001e313
lea rcx, [rsp + 0x78]
call fcn.140013050
nop
cmp qword [rsp + 0x68], 0
je 0x14001e326
lea rcx, [rsp + 0x68]
call fcn.140013050
nop
cmp qword [rsp + 0x70], 0
je 0x14001e339
lea rcx, [rsp + 0x70]
call fcn.140013050
nop
cmp qword [rsp + 0x90], 0
je 0x14001e352
lea rcx, [rsp + 0x90]
call fcn.140013050
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001e39d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e398
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e398
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061af0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
lea rcx, [0x1400ce360]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001e3dc
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001e3f0
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001e402
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001e414
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001e429
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001e43b
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, rbx
mov rcx, qword [rsp + 0x7c0]
xor rcx, rsp
call fcn.140061ad0
lea r11, [rsp + 0x7d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.140006170
nop
lfence
mov ecx, eax
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x114]
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x110]
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x118]
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x11c]
call fcn.140006170
nop
call fcn.140009210
nop
lfence
mov ecx, dword [rsp + 0x120]
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x150]
call fcn.140006170
nop
lfence
mov ecx, dword [rsp + 0x158]
call fcn.140006170
int3